last executing test programs: 224.960989ms ago: executing program 1 (id=188): get_robust_list(0x0, &(0x7f0000000000), &(0x7f0000000000)) 206.696759ms ago: executing program 1 (id=191): socket$l2tp(0x2, 0x2, 0x73) 181.771939ms ago: executing program 1 (id=197): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/xen/evtchn', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/xen/evtchn', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/xen/evtchn', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/xen/evtchn', 0x800, 0x0) 181.111439ms ago: executing program 1 (id=204): modify_ldt$auto(0x0, &(0x7f0000000000), 0x0) 161.603519ms ago: executing program 1 (id=208): linkat(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000000), 0x0) 161.151009ms ago: executing program 1 (id=211): sync() 109.2445ms ago: executing program 3 (id=217): iopl(0x0) 104.30454ms ago: executing program 0 (id=218): setreuid(0x0, 0x0) 104.202369ms ago: executing program 4 (id=219): sysfs$1(0x1, &(0x7f0000000000)) 71.27951ms ago: executing program 3 (id=221): kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) 71.1775ms ago: executing program 4 (id=222): signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x0) 70.90855ms ago: executing program 3 (id=223): shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)) 70.78311ms ago: executing program 0 (id=224): stat(&(0x7f0000000000), &(0x7f0000000000)) 70.73685ms ago: executing program 4 (id=225): socket$caif_stream(0x25, 0x1, 0x0) 70.58605ms ago: executing program 0 (id=226): futimesat(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000000)) 70.44756ms ago: executing program 3 (id=228): map_shadow_stack(0x0, 0x0, 0x0) 51.15134ms ago: executing program 0 (id=229): timer_gettime(0x0, &(0x7f0000000000)) 50.89389ms ago: executing program 4 (id=231): timer_settime(0x0, 0x0, &(0x7f0000000000), 0x0) 50.7828ms ago: executing program 0 (id=232): lsm_list_modules(&(0x7f0000000000), &(0x7f0000000000), 0x0) 50.733359ms ago: executing program 3 (id=233): socket$inet6_mptcp(0xa, 0x1, 0x106) 50.59546ms ago: executing program 4 (id=235): openat(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls', 0x0, 0x0) 50.509ms ago: executing program 0 (id=236): timer_delete(0x0) 22.26553ms ago: executing program 3 (id=237): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng', 0x800, 0x0) 21.68616ms ago: executing program 4 (id=239): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$sg(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$sg(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$sg(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$sg(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$sg(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$sg(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$sg(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$sg(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$sg(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$sg(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$sg(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$sg(&(0x7f0000000500), 0x4, 0x800) 21.63391ms ago: executing program 2 (id=240): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/trusty-ipc-dev0', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/trusty-ipc-dev0', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/trusty-ipc-dev0', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/trusty-ipc-dev0', 0x800, 0x0) 21.54779ms ago: executing program 2 (id=241): syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x1) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x2) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x800) syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x1) syz_open_dev$I2C(&(0x7f00000001c0), 0x1, 0x2) syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x800) syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x0) syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x1) syz_open_dev$I2C(&(0x7f00000002c0), 0x2, 0x2) syz_open_dev$I2C(&(0x7f0000000300), 0x2, 0x800) syz_open_dev$I2C(&(0x7f0000000340), 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x1) syz_open_dev$I2C(&(0x7f00000003c0), 0x3, 0x2) syz_open_dev$I2C(&(0x7f0000000400), 0x3, 0x800) syz_open_dev$I2C(&(0x7f0000000440), 0x4, 0x0) syz_open_dev$I2C(&(0x7f0000000480), 0x4, 0x1) syz_open_dev$I2C(&(0x7f00000004c0), 0x4, 0x2) syz_open_dev$I2C(&(0x7f0000000500), 0x4, 0x800) 391.74µs ago: executing program 2 (id=242): setns(0xffffffffffffffff, 0x0) 311.51µs ago: executing program 2 (id=243): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem', 0x1, 0x0) 123.24µs ago: executing program 2 (id=244): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/iommu', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/iommu', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/iommu', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/iommu', 0x800, 0x0) 0s ago: executing program 2 (id=245): getegid() kernel console output (not intermixed with test programs): [ 21.250153][ T29] audit: type=1400 audit(1732365207.217:81): avc: denied { read } for pid=3002 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 27.040314][ T29] audit: type=1400 audit(1732365212.997:82): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.041608][ T3308] cgroup: Unknown subsys name 'net' [ 27.063061][ T29] audit: type=1400 audit(1732365212.997:83): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.090569][ T29] audit: type=1400 audit(1732365213.027:84): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.222407][ T3308] cgroup: Unknown subsys name 'cpuset' [ 27.228614][ T3308] cgroup: Unknown subsys name 'rlimit' [ 27.339095][ T29] audit: type=1400 audit(1732365213.297:85): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.362519][ T29] audit: type=1400 audit(1732365213.297:86): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.383301][ T29] audit: type=1400 audit(1732365213.297:87): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.403697][ T29] audit: type=1400 audit(1732365213.297:88): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.424121][ T29] audit: type=1400 audit(1732365213.317:89): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.432561][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.448988][ T29] audit: type=1400 audit(1732365213.317:90): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.480889][ T29] audit: type=1400 audit(1732365213.427:91): avc: denied { relabelto } for pid=3312 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.546791][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.592748][ T3384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.689953][ T3421] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.116678][ T3542] ================================================================== [ 29.124815][ T3542] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 29.132241][ T3542] [ 29.134582][ T3542] read-write to 0xffff888106840d98 of 8 bytes by task 51 on cpu 0: [ 29.142501][ T3542] __xa_clear_mark+0xf8/0x1f0 [ 29.147217][ T3542] __folio_end_writeback+0x18f/0x4a0 [ 29.152544][ T3542] folio_end_writeback+0x74/0x1f0 [ 29.157611][ T3542] ext4_finish_bio+0x476/0x8e0 [ 29.162413][ T3542] ext4_release_io_end+0x8c/0x1f0 [ 29.167483][ T3542] ext4_end_io_rsv_work+0x2cd/0x360 [ 29.172789][ T3542] process_scheduled_works+0x483/0x9a0 [ 29.178286][ T3542] worker_thread+0x51d/0x6f0 [ 29.182915][ T3542] kthread+0x1d1/0x210 [ 29.187074][ T3542] ret_from_fork+0x4b/0x60 [ 29.191531][ T3542] ret_from_fork_asm+0x1a/0x30 [ 29.196333][ T3542] [ 29.198668][ T3542] read to 0xffff888106840d98 of 8 bytes by task 3542 on cpu 1: [ 29.206232][ T3542] xas_find_marked+0x216/0x660 [ 29.211049][ T3542] find_get_entry+0x54/0x390 [ 29.215682][ T3542] filemap_get_folios_tag+0x136/0x210 [ 29.221094][ T3542] filemap_fdatawait_keep_errors+0x6d/0x180 [ 29.227112][ T3542] sync_inodes_sb+0x3ba/0x460 [ 29.231823][ T3542] sync_inodes_one_sb+0x3d/0x50 [ 29.236713][ T3542] iterate_supers+0xa3/0x140 [ 29.241353][ T3542] ksys_sync+0x5d/0xe0 [ 29.245466][ T3542] __do_sys_sync+0xe/0x20 [ 29.249857][ T3542] x64_sys_call+0x1818/0x2dc0 [ 29.254581][ T3542] do_syscall_64+0xc9/0x1c0 [ 29.259117][ T3542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.265049][ T3542] SYZFAIL: failed to send rpc fd=3 want=216 sent=0 n=-1 (errno 32: Broken pipe) [ 29.267392][ T3542] value changed: 0xfffffff800000000 -> 0xfff8000000000000 [ 29.274515][ T3542] [ 29.276853][ T3542] Reported by Kernel Concurrency Sanitizer on: [ 29.283063][ T3542] CPU: 1 UID: 0 PID: 3542 Comm: syz.1.211 Not tainted 6.12.0-syzkaller-08446-g228a1157fb9f #0 [ 29.293335][ T3542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 29.303416][ T3542] ==================================================================