last executing test programs: 2.194349829s ago: executing program 1 (id=58): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee01) write$tcp_congestion(r0, 0x0, 0x0) 2.100188982s ago: executing program 1 (id=61): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252500000008000200", @ANYRES32=r3, @ANYBLOB="05002e000700000005002b000285000008002c00"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.004956215s ago: executing program 1 (id=64): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000440)=[{&(0x7f00000019c0)=""/4098, 0x1002}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) 1.921004968s ago: executing program 1 (id=66): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) 1.877553469s ago: executing program 1 (id=69): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000003c0)="fc0c352edd34a2aaa1046307290ed455c9ab852e60558fc9065ccb3dd64dbdca38", 0x21}], 0x1}, 0x200000e0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) 1.84579206s ago: executing program 1 (id=71): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)) 1.362023116s ago: executing program 4 (id=88): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f00000000c0)="7432713938830d1ae8aebd2c5514", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) 1.194870041s ago: executing program 3 (id=92): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 1.164994382s ago: executing program 3 (id=93): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x4, 0x1, '\\'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x30bb, 0x1, "ed"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x4}, 0x8) 1.126545183s ago: executing program 3 (id=94): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}], 0x1) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 920.07667ms ago: executing program 0 (id=99): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000440)}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000400)=0xc, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) futex_waitv(&(0x7f0000001ac0)=[{0xfffffffffffffffd, &(0x7f0000000000)=0x1, 0x2}, {0x5ab, &(0x7f00000000c0)=0x8000, 0x2}, {0x8000000000000001, &(0x7f0000000680)=0x3, 0x82}, {0x7ff, &(0x7f00000006c0), 0x2}, {0x3, &(0x7f0000000700)=0xb8, 0x2}, {0x1, &(0x7f0000000740)=0x2, 0x2}, {0x0, &(0x7f0000000780)=0x5, 0x82}, {0x7, &(0x7f00000007c0)=0x3, 0x2}, {0xffffffffffffffff, &(0x7f0000000800)=0xfffffffffffffff7, 0x82}, {0x7, &(0x7f0000000840)=0x6, 0x2}, {0x8, &(0x7f0000000880)=0xae1, 0x2}, {0xf, &(0x7f00000008c0)=0x4, 0x2}, {0x7fff, &(0x7f0000000980)=0x2, 0x82}, {0x5, 0x0}, {0x3, &(0x7f0000000a00)=0xee9, 0x82}, {0xff, &(0x7f0000000a40)=0x3, 0x82}, {0x3c32, &(0x7f0000000a80)=0x6, 0x82}, {0xc, &(0x7f0000000ac0)=0x8, 0x82}, {0xe800000000000000, &(0x7f0000000b00)=0x1, 0x2}, {0x6, &(0x7f0000000b40)=0x6, 0x2}, {0x7fffffffffffffff, &(0x7f0000000bc0), 0x2}, {0x8, &(0x7f0000002740)=0x1, 0x2}, {0x3, 0x0, 0x2}, {0x2, &(0x7f0000000cc0)=0x3, 0x82}, {0x8001, &(0x7f0000000d00)=0x4e5c, 0x2}, {0x0, &(0x7f0000000d40)=0x8, 0x82}, {0x2, &(0x7f0000000dc0)=0x1e, 0x82}, {0x3a, &(0x7f0000000e00)=0x4, 0x2}, {0xbbb, &(0x7f0000000e40)=0x4, 0x82}, {0x1, &(0x7f0000000e80)=0x100000001, 0x82}, {0xe5, &(0x7f0000000ec0)=0x5, 0x2}, {0x1000000000000005, &(0x7f0000000f00), 0x2}, {0x0, &(0x7f0000000f40)=0x8, 0x82}, {0x0, &(0x7f0000000f80)=0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000000fc0)=0x4, 0x2}, {0x7f, &(0x7f0000001000)=0x6, 0x82}, {0x80000000, &(0x7f0000001040)=0x5, 0x82}, {0x8, &(0x7f0000001080)=0x2, 0x2}, {0xfff, &(0x7f00000010c0)=0x5, 0x82}, {0x9, &(0x7f0000001100)=0x3, 0x2}, {0xa4, &(0x7f0000001140)=0x2, 0x2}, {0x3, &(0x7f0000001180)=0x8, 0x82}, {0x7, &(0x7f00000011c0)}, {0x2, &(0x7f0000001200)=0x4, 0x2}, {0x8, &(0x7f0000001240)=0x38, 0x2}, {0x200, &(0x7f0000001280), 0x82}, {0x2, &(0x7f00000012c0)=0x2a, 0x82}, {0x3cb, &(0x7f0000001300)=0xff, 0x2}, {0x3, &(0x7f0000001340)=0x2fa, 0x2}, {0xa, &(0x7f0000001380)=0x1, 0x2}, {0x3, &(0x7f00000013c0)=0x10000}, {0x2, &(0x7f0000001400)=0x5, 0x82}, {0x8001, &(0x7f0000001440)=0x8000, 0x82}, {0x5, &(0x7f0000001480), 0x2}, {0x2ddb2a85, &(0x7f00000014c0)=0x9, 0x82}, {0x7, &(0x7f0000001500)=0x4, 0x2}, {0x8, &(0x7f0000001580)=0x101, 0x2}, {0x1000000, 0x0}, {0xfffffffffffffff8, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x41}, {0x40, 0x0, 0x2}], 0x40, 0x0, &(0x7f00000022c0)={0x77359400}, 0x0) 869.180322ms ago: executing program 0 (id=102): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1d, 0x80802, 0x6) close(0x4) socket$key(0xf, 0x3, 0x2) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="88", 0x1}, {0x0}], 0x2) 832.001533ms ago: executing program 0 (id=103): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 739.808456ms ago: executing program 0 (id=104): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x5, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 638.98367ms ago: executing program 4 (id=105): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20002, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000019200)) 611.54413ms ago: executing program 0 (id=106): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 557.004152ms ago: executing program 4 (id=108): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b4002"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 541.267373ms ago: executing program 0 (id=109): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52) poll(&(0x7f0000000240)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) 518.403183ms ago: executing program 4 (id=110): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x2000000000007}, 0x0, 0x94a8, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x410}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r2, r0, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) 494.781194ms ago: executing program 2 (id=111): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040)=0x6, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@acl}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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") setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="99a00873e630", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @address_reply}}}}, 0x0) 447.584276ms ago: executing program 4 (id=112): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 412.445986ms ago: executing program 4 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendfile(r0, r1, 0x0, 0x10ffff) 372.245738ms ago: executing program 2 (id=114): open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 336.941789ms ago: executing program 2 (id=115): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x141d6, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121c, &(0x7f0000003680)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 287.297761ms ago: executing program 2 (id=116): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x4b0200, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x778, 0x20001000, 0x4000, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x4, 0x20000000, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) 254.889082ms ago: executing program 3 (id=117): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x300000, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d06, &(0x7f0000000000)={0x6, 0xb}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000) 238.049182ms ago: executing program 2 (id=118): r0 = epoll_create(0x2) r1 = socket(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xc0000000}) r2 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000140)={r0}) 234.076322ms ago: executing program 3 (id=119): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000423000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x0, 0x1) mlock(&(0x7f000077b000/0x2000)=nil, 0x2000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 211.171543ms ago: executing program 2 (id=120): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f7207000000002e0000ea26de004d2208fc414d630815ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34d6"], 0x25, 0x357, &(0x7f0000000e00)="$eJzs3T9sG2UUAPDnXhqnESUekCqYDBsSqpogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWKjEUKkRh84+2+fYocmQ0MLvN1RP7/vefe/Op94lSr682on1i8fj0s2bN2JurhQzy2eX41YpKnEskujbjqk+mJ2eBwDucrfSNP5I++48+6P5QeTZDwD3rt7z//WTo0T5AMVX7juMlgCAQ7bPr/+fnZq9fGhtAQCHaOL5/8jY8K5v888MfyYAALh3Pf/Sy8+srEZcqFbnIprvt2vtWjw1Gl+5FG9GI9biTCzETkT/RaH/tpD9+/T51XNnqplfKlHLKtq1iGanXeu/KawkvfpyLMZCVPL6dFifZPWLvfpqRGx3eutHs9SuHY/5fP0f52MtlmIhHpiojzi/em6pmh+g1hzUdyK6MTc4iaz/07EQ378Wl6MRFyOrHfW/tVitnk1Xx+rbV8u9eRF/Hv2HAgAAAAAAAAAAAAAAAAAAAADAf97p6lBluP9N2uy037uwe0JlbH+cWn843x+o298fKC0Pdue5kuzeH2h8f552bSaO/atnDgAAAAAAAAAAAAAAAAAAAHeP1uZs1BuNtY3W5rvrxaBTyLz97Rdfn4jB0Exe+lYyqoo8OXacwcTCkZMYLpEOy9NkbE4eJBGDydv1q9eGHRfnlIdnMVGeBeWJoVLeU73ROPnwz59Oq/orC7Z7mSQmLst4UMrXLww1788ScxGxs1fV3sHSHeZcT9N0r/KtTyarohQxEwduYx/BNzfeePDx1qknepmv8k0fHn1s4YXrH3/+23q9Ed3+lWk0ZjdaO+k+jpz1OjmUFO6fUn6dS1PuhOlBd5TpbrQ268kPv7/40Iff7ZqcTL9/0mLmnb3X+nJ3ZrYflCIqg4vwT60en3LzTw9euT28ew/+wZ36bLl+beunX/dbVfhPwkYdAAAAAAAAAAAAAAAAAABwJAq/K34ATz53eB0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNEb/f3/QtCdyOwnuN2JyaHy2kZrz8VPHOmpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/Z3AAAA//+TD3P9") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) fallocate(r0, 0x0, 0x1, 0x2000404) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 0s ago: executing program 3 (id=121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x6, 0xca, 0xfffe0000, 0x40000009, 0x11, "7f04371e6367f3a18d000100000000000038f6"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0x1) kernel console output (not intermixed with test programs): [ 19.931280][ T28] audit: type=1400 audit(1780373787.484:103): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.954119][ T28] audit: type=1400 audit(1780373787.484:104): avc: denied { search } for pid=3177 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.672311][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 20.672328][ T28] audit: type=1400 audit(1780373788.224:116): avc: denied { write } for pid=3205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.701707][ T28] audit: type=1400 audit(1780373788.234:117): avc: denied { write } for pid=3216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.742965][ T28] audit: type=1400 audit(1780373788.294:118): avc: denied { write } for pid=3219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.766453][ T28] audit: type=1400 audit(1780373788.294:119): avc: denied { write } for pid=3230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.846662][ T28] audit: type=1400 audit(1780373788.394:120): avc: denied { write } for pid=3233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.869968][ T28] audit: type=1400 audit(1780373788.394:121): avc: denied { write } for pid=3244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.566236][ T28] audit: type=1400 audit(1780373789.114:122): avc: denied { write } for pid=3247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.589476][ T28] audit: type=1400 audit(1780373789.134:123): avc: denied { write } for pid=3259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.811333][ T28] audit: type=1400 audit(1780373789.364:124): avc: denied { write } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.834456][ T28] audit: type=1400 audit(1780373789.374:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 23.945099][ T3279] cgroup: Unknown subsys name 'net' [ 24.051013][ T3279] cgroup: Unknown subsys name 'cpuset' [ 24.057405][ T3279] cgroup: Unknown subsys name 'rlimit' [ 24.213471][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.288477][ T3279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.457903][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.465082][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.472293][ T3294] bridge_slave_0: entered allmulticast mode [ 25.478785][ T3294] bridge_slave_0: entered promiscuous mode [ 25.487604][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.494757][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.501897][ T3294] bridge_slave_1: entered allmulticast mode [ 25.508325][ T3294] bridge_slave_1: entered promiscuous mode [ 25.555048][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.568983][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.624965][ T3294] team0: Port device team_slave_0 added [ 25.650621][ T3294] team0: Port device team_slave_1 added [ 25.664911][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.672073][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.679191][ T3296] bridge_slave_0: entered allmulticast mode [ 25.685717][ T3296] bridge_slave_0: entered promiscuous mode [ 25.695941][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.703047][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.710183][ T3298] bridge_slave_0: entered allmulticast mode [ 25.716562][ T3298] bridge_slave_0: entered promiscuous mode [ 25.731294][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.738500][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.745751][ T3296] bridge_slave_1: entered allmulticast mode [ 25.752286][ T3296] bridge_slave_1: entered promiscuous mode [ 25.762982][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.770067][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.777227][ T3298] bridge_slave_1: entered allmulticast mode [ 25.783852][ T3298] bridge_slave_1: entered promiscuous mode [ 25.792727][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.799685][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.825895][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.850329][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.857308][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.883386][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.914808][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.927291][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.937935][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.952475][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.973717][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.980853][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.988106][ T3302] bridge_slave_0: entered allmulticast mode [ 25.994718][ T3302] bridge_slave_0: entered promiscuous mode [ 26.009708][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.016980][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.024151][ T3303] bridge_slave_0: entered allmulticast mode [ 26.030517][ T3303] bridge_slave_0: entered promiscuous mode [ 26.042130][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.049401][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.056901][ T3302] bridge_slave_1: entered allmulticast mode [ 26.063456][ T3302] bridge_slave_1: entered promiscuous mode [ 26.078455][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.085712][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.092925][ T3303] bridge_slave_1: entered allmulticast mode [ 26.099285][ T3303] bridge_slave_1: entered promiscuous mode [ 26.106385][ T3298] team0: Port device team_slave_0 added [ 26.117334][ T3296] team0: Port device team_slave_0 added [ 26.125352][ T3294] hsr_slave_0: entered promiscuous mode [ 26.131483][ T3294] hsr_slave_1: entered promiscuous mode [ 26.142041][ T3298] team0: Port device team_slave_1 added [ 26.152914][ T3296] team0: Port device team_slave_1 added [ 26.172152][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.182739][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.196651][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.219378][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.226565][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.253319][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.264899][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.278441][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.285629][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.311671][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.330440][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.337468][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.363676][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.379326][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.386343][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.412514][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.429467][ T3302] team0: Port device team_slave_0 added [ 26.444013][ T3303] team0: Port device team_slave_0 added [ 26.451040][ T3303] team0: Port device team_slave_1 added [ 26.459795][ T3302] team0: Port device team_slave_1 added [ 26.489291][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.496306][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.522305][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.534162][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.541182][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.567564][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.595066][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.602080][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.628075][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.643263][ T3296] hsr_slave_0: entered promiscuous mode [ 26.649263][ T3296] hsr_slave_1: entered promiscuous mode [ 26.655144][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 26.660925][ T3296] Cannot create hsr debugfs directory [ 26.668599][ T3298] hsr_slave_0: entered promiscuous mode [ 26.674887][ T3298] hsr_slave_1: entered promiscuous mode [ 26.680788][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 26.686534][ T3298] Cannot create hsr debugfs directory [ 26.693588][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.700652][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.726909][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.779069][ T3302] hsr_slave_0: entered promiscuous mode [ 26.785108][ T3302] hsr_slave_1: entered promiscuous mode [ 26.791076][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 26.796987][ T3302] Cannot create hsr debugfs directory [ 26.837347][ T3303] hsr_slave_0: entered promiscuous mode [ 26.843581][ T3303] hsr_slave_1: entered promiscuous mode [ 26.849469][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 26.855252][ T3303] Cannot create hsr debugfs directory [ 26.963139][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.971765][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.990234][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.999171][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.013537][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.022517][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.041441][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.049912][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.069996][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.078391][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.086524][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.095195][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.106964][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.115649][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.123282][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.131628][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.157553][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.166133][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.173851][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.182758][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.190496][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.199111][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.206939][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.215732][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.247158][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.256815][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.264784][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.273375][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.281606][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.290427][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.307610][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.316327][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.348200][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.357189][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.364912][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.373422][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.387592][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.396272][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.403989][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.412767][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.431975][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.448927][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.478645][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.489701][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.505239][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.512338][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.521469][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.528642][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.537511][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.544596][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.555340][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.562424][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.581471][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.604921][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.623660][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.639250][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.648592][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.655752][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.668943][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.683448][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.690587][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.702838][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.709941][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.731290][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.738670][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.750719][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.777353][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.794556][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.801674][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.810746][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.817812][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.836696][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.847964][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.878445][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.031492][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.044349][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.103453][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.121067][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.173378][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.253294][ T3298] veth0_vlan: entered promiscuous mode [ 28.261707][ T3294] veth0_vlan: entered promiscuous mode [ 28.279059][ T3298] veth1_vlan: entered promiscuous mode [ 28.294952][ T3294] veth1_vlan: entered promiscuous mode [ 28.310950][ T3302] veth0_vlan: entered promiscuous mode [ 28.319133][ T3302] veth1_vlan: entered promiscuous mode [ 28.329408][ T3303] veth0_vlan: entered promiscuous mode [ 28.344199][ T3303] veth1_vlan: entered promiscuous mode [ 28.368074][ T3302] veth0_macvtap: entered promiscuous mode [ 28.376653][ T3302] veth1_macvtap: entered promiscuous mode [ 28.388244][ T3294] veth0_macvtap: entered promiscuous mode [ 28.400833][ T3298] veth0_macvtap: entered promiscuous mode [ 28.407917][ T3294] veth1_macvtap: entered promiscuous mode [ 28.415463][ T3303] veth0_macvtap: entered promiscuous mode [ 28.427245][ T3303] veth1_macvtap: entered promiscuous mode [ 28.435523][ T3298] veth1_macvtap: entered promiscuous mode [ 28.443573][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.460330][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.470663][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.483953][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.502386][ T310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.511794][ T310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.526504][ T3296] veth0_vlan: entered promiscuous mode [ 28.533991][ T310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.542834][ T310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.554066][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.563628][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.573581][ T310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.583381][ T310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.598203][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 28.598219][ T28] audit: type=1400 audit(1780373796.144:146): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.e5MEAe/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.616473][ T3296] veth1_vlan: entered promiscuous mode [ 28.635266][ T28] audit: type=1400 audit(1780373796.144:147): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.649644][ T310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.658150][ T28] audit: type=1400 audit(1780373796.164:148): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.e5MEAe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.667724][ T310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.692503][ T28] audit: type=1400 audit(1780373796.164:149): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.723674][ T28] audit: type=1400 audit(1780373796.164:150): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.e5MEAe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.751464][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.760846][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.761514][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.777075][ T28] audit: type=1400 audit(1780373796.164:151): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.e5MEAe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.813507][ T28] audit: type=1400 audit(1780373796.164:152): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.815204][ T310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.833973][ T28] audit: type=1400 audit(1780373796.184:153): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.845286][ T310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.866015][ T28] audit: type=1400 audit(1780373796.184:154): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.905415][ T28] audit: type=1400 audit(1780373796.454:155): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.912855][ T3296] veth0_macvtap: entered promiscuous mode [ 28.940741][ T310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.951562][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.977612][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.994774][ T3296] veth1_macvtap: entered promiscuous mode [ 29.006065][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.018216][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.040708][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.059680][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.069404][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.079504][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.102363][ T3510] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 29.111502][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.120364][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.136817][ T3512] loop0: detected capacity change from 0 to 1024 [ 29.145237][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.146122][ T3510] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 29.154713][ T3512] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 29.196535][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.205644][ T3516] loop7: detected capacity change from 0 to 7 [ 29.221672][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.230857][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 29.240316][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.249494][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 29.258229][ T3516] loop7: unable to read partition table [ 29.267087][ T3516] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 29.289265][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.314410][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.323643][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 29.331864][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.341053][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 29.362844][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.372064][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 29.381384][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.390583][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 29.400432][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 29.409610][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 29.431479][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.559335][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.569055][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.859524][ T3568] ======================================================= [ 29.859524][ T3568] WARNING: The mand mount option has been deprecated and [ 29.859524][ T3568] and is ignored by this kernel. Remove the mand [ 29.859524][ T3568] option from the mount to silence this warning. [ 29.859524][ T3568] ======================================================= [ 30.069410][ T3572] syz.3.29 (3572) used greatest stack depth: 9912 bytes left [ 30.390540][ T3587] loop2: detected capacity change from 0 to 128 [ 30.403409][ T3589] loop3: detected capacity change from 0 to 256 [ 30.417948][ T3589] msdos: Bad value for 'time_offset' [ 30.520924][ T3593] loop0: detected capacity change from 0 to 512 [ 30.531536][ T3593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.575979][ T3599] loop2: detected capacity change from 0 to 512 [ 30.584944][ T3593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.610113][ T3599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.610634][ T3593] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.642418][ T3599] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.744368][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.749067][ T3609] syzkaller1: entered promiscuous mode [ 30.770007][ T3609] syzkaller1: entered allmulticast mode [ 30.812158][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.959016][ T3619] Zero length message leads to an empty skb [ 31.267818][ T3651] mmap: syz.0.62 (3651) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.403962][ T3663] SELinux: failed to load policy [ 31.454747][ T328] Bluetooth: hci0: Frame reassembly failed (-84) [ 31.546938][ T3677] loop4: detected capacity change from 0 to 512 [ 31.547012][ T3680] vxcan1: tx drop: invalid da for name 0x0000000010000003 [ 31.555773][ T3677] EXT4-fs: Ignoring removed nobh option [ 31.569380][ T3677] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 31.584237][ T3677] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.75: attempt to clear invalid blocks 1 len 1 [ 31.600177][ T3677] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 31.603340][ T3677] EXT4-fs (loop4): Remounting filesystem read-only [ 31.612542][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 31.612564][ C1] EXT4-fs (loop4): initial error at time 1780373799: ext4_clear_blocks:876: inode 13 [ 31.612594][ C1] EXT4-fs (loop4): last error at time 1780373799: ext4_clear_blocks:876: inode 13 [ 31.647818][ T3677] EXT4-fs (loop4): 1 truncate cleaned up [ 31.650976][ T3686] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 31.653978][ T3677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.724519][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.815342][ T3700] netlink: 104 bytes leftover after parsing attributes in process `syz.0.84'. [ 31.901224][ T3704] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 31.943279][ T3709] loop4: detected capacity change from 0 to 128 [ 32.236917][ T3724] loop2: detected capacity change from 0 to 512 [ 32.511842][ T3709] syz.4.88: attempt to access beyond end of device [ 32.511842][ T3709] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 32.525874][ T3709] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 32.566879][ T3745] loop0: detected capacity change from 0 to 512 [ 32.573857][ T3745] EXT4-fs: Ignoring removed i_version option [ 32.601575][ T3745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.617451][ T3745] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.681517][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.713017][ T3751] netlink: 7 bytes leftover after parsing attributes in process `syz.0.106'. [ 32.808352][ T3761] EXT4-fs: Ignoring removed bh option [ 32.814027][ T3761] EXT4-fs: inline encryption not supported [ 32.820582][ T3761] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.832497][ T3761] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.111: lblock 2 mapped to illegal pblock 2 (length 1) [ 32.853902][ T3761] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 32.854277][ T3761] EXT4-fs (loop2): Remounting filesystem read-only [ 32.863391][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 32.863414][ C1] EXT4-fs (loop2): initial error at time 1780373800: ext4_map_blocks:791: inode 3: block 2 [ 32.863451][ C1] EXT4-fs (loop2): last error at time 1780373800: ext4_map_blocks:791: inode 3: block 2 [ 32.896472][ T3761] EXT4-fs (loop2): 1 orphan inode deleted [ 32.896852][ T3761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.919104][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.099095][ T3782] FAT-fs (loop2): Directory bread(block 64) failed [ 33.109288][ T3782] FAT-fs (loop2): Directory bread(block 65) failed [ 33.116271][ T3782] FAT-fs (loop2): Directory bread(block 66) failed [ 33.123605][ T3782] FAT-fs (loop2): Directory bread(block 67) failed [ 33.130816][ T3782] FAT-fs (loop2): Directory bread(block 68) failed [ 33.137500][ T3782] FAT-fs (loop2): Directory bread(block 69) failed [ 33.145230][ T3782] FAT-fs (loop2): Directory bread(block 70) failed [ 33.152263][ T3782] FAT-fs (loop2): Directory bread(block 71) failed [ 33.159026][ T3782] FAT-fs (loop2): Directory bread(block 72) failed [ 33.165648][ T3782] FAT-fs (loop2): Directory bread(block 73) failed [ 33.253641][ T3782] ================================================================== [ 33.261858][ T3782] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 33.269172][ T3782] [ 33.271528][ T3782] write to 0xffff8881221bfad6 of 2 bytes by task 3784 on cpu 1: [ 33.279177][ T3782] fat16_ent_put+0x28/0x60 [ 33.283624][ T3782] fat_ent_write+0x6c/0xe0 [ 33.288056][ T3782] fat_chain_add+0x172/0x490 [ 33.292669][ T3782] fat_add_cluster+0x77/0xe0 [ 33.297302][ T3782] fat_fallocate+0x11e/0x1c0 [ 33.301919][ T3782] vfs_fallocate+0x3b6/0x400 [ 33.306535][ T3782] file_ioctl+0x4e3/0x5c0 [ 33.310914][ T3782] do_vfs_ioctl+0x7c9/0xe70 [ 33.315450][ T3782] __se_sys_ioctl+0x82/0x140 [ 33.320059][ T3782] __x64_sys_ioctl+0x43/0x50 [ 33.324669][ T3782] x64_sys_call+0x1563/0x3020 [ 33.329362][ T3782] do_syscall_64+0x12c/0x3b0 [ 33.333969][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.339956][ T3782] [ 33.342282][ T3782] read to 0xffff8881221bf800 of 2048 bytes by task 3782 on cpu 0: [ 33.350178][ T3782] fat_mirror_bhs+0x1df/0x330 [ 33.354997][ T3782] fat_ent_write+0xd0/0xe0 [ 33.359429][ T3782] fat_chain_add+0x172/0x490 [ 33.364234][ T3782] fat_get_block+0x475/0x5f0 [ 33.368856][ T3782] __block_write_begin_int+0x400/0xf90 [ 33.374590][ T3782] cont_write_begin+0x5fe/0x970 [ 33.379449][ T3782] fat_write_begin+0x52/0xe0 [ 33.384046][ T3782] cont_write_begin+0x1b0/0x970 [ 33.388918][ T3782] fat_write_begin+0x52/0xe0 [ 33.393514][ T3782] generic_cont_expand_simple+0xb0/0x150 [ 33.399169][ T3782] fat_cont_expand+0x3e/0x170 [ 33.403852][ T3782] fat_fallocate+0x177/0x1c0 [ 33.408454][ T3782] vfs_fallocate+0x3b6/0x400 [ 33.413144][ T3782] __x64_sys_fallocate+0x7a/0xd0 [ 33.418108][ T3782] x64_sys_call+0x298e/0x3020 [ 33.422813][ T3782] do_syscall_64+0x12c/0x3b0 [ 33.427419][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.433315][ T3782] [ 33.435745][ T3782] Reported by Kernel Concurrency Sanitizer on: [ 33.441911][ T3782] CPU: 0 UID: 0 PID: 3782 Comm: syz.2.120 Not tainted syzkaller #0 PREEMPT(lazy) [ 33.451171][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 33.461321][ T3782] ================================================================== [ 33.475700][ T3640] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.482206][ T3670] Bluetooth: hci0: command 0x1003 tx timeout [ 33.571223][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.571223][ T30] loop2: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 33.585198][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.585198][ T30] loop2: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 33.605788][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.605788][ T30] loop2: rw=1, sector=1960, nr_sectors = 5000 limit=256 [ 33.624768][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.624768][ T30] loop2: rw=1, sector=6960, nr_sectors = 2048 limit=256 [ 33.642040][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.642040][ T30] loop2: rw=1, sector=9008, nr_sectors = 2080 limit=256 [ 33.657020][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.657020][ T30] loop2: rw=1, sector=11088, nr_sectors = 120 limit=256 [ 33.670895][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.670895][ T30] loop2: rw=1, sector=11336, nr_sectors = 32 limit=256 [ 33.684886][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.684886][ T30] loop2: rw=1, sector=11560, nr_sectors = 32 limit=256 [ 33.698529][ T30] kworker/u8:1: attempt to access beyond end of device [ 33.698529][ T30] loop2: rw=1, sector=11688, nr_sectors = 32 limit=256