last executing test programs: 898.717193ms ago: executing program 0 (id=30): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x90) 825.573864ms ago: executing program 1 (id=35): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xa) 825.364805ms ago: executing program 4 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 825.181534ms ago: executing program 2 (id=37): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1a, 0x0, &(0x7f0000000180)="868b51c3af3eaeec38070dbbf0560b8aebd0e561ec5306f18060"}) r2 = socket$pptp(0x18, 0x1, 0x2) dup3(r2, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 772.047346ms ago: executing program 0 (id=38): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x40) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001280)=""/79, 0x45}], 0x2}, 0xc8b}], 0x1, 0x120, 0x0) 759.160196ms ago: executing program 1 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x39e}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 755.100976ms ago: executing program 2 (id=40): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 694.490457ms ago: executing program 0 (id=41): unshare(0x22020600) r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)) 693.946937ms ago: executing program 1 (id=42): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 644.810138ms ago: executing program 2 (id=44): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x8040, &(0x7f0000000000)=ANY=[], 0x1, 0x2cf, &(0x7f0000000580)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8800, &(0x7f0000000200)={0x5, 0x84, 0x100000}, 0x20) 594.684429ms ago: executing program 4 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 594.543149ms ago: executing program 0 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 585.159739ms ago: executing program 2 (id=47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x4305}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 502.9213ms ago: executing program 1 (id=48): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x90) 451.168352ms ago: executing program 1 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b000000000600147379"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 430.827222ms ago: executing program 0 (id=51): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000}, 0x8fa}], 0x1, 0x40000000, 0x0) 373.229073ms ago: executing program 1 (id=52): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x10}) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x3d9f, @loopback, 0x1000023}, 0x1c) 372.889593ms ago: executing program 3 (id=53): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket(0x2, 0x80805, 0x0) timerfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = syz_io_uring_setup(0x24f6, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 372.608582ms ago: executing program 4 (id=54): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000a00)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xffa0, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c610faca20180c2000002810012000800453841bd"], 0x0) 371.585483ms ago: executing program 0 (id=55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r0, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) 337.148313ms ago: executing program 2 (id=56): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 336.712864ms ago: executing program 3 (id=57): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x8040, &(0x7f0000000000)=ANY=[], 0x1, 0x2cf, &(0x7f0000000580)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x8800, 0x0, 0x0) 327.904064ms ago: executing program 2 (id=58): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x27) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) 317.382214ms ago: executing program 4 (id=59): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 238.411475ms ago: executing program 3 (id=60): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r0, 0x0, 0xfffffffffffffff4}, 0x18) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 238.225825ms ago: executing program 3 (id=61): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x2000c8c0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x40) recvmmsg(r0, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000001280)=""/79, 0x45}], 0x2}, 0xc8b}], 0x1, 0x120, 0x0) 235.821815ms ago: executing program 3 (id=62): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @local, @rand_addr=0x64010102, {[@generic={0x86, 0x2}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x4}}}}}}, 0x0) 197.212756ms ago: executing program 3 (id=63): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)='I', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 91.326198ms ago: executing program 4 (id=64): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@val={0x0, 0x800}, @val={0x3, 0x83, 0x0, 0x40, 0x14, 0x7}, @ipv4=@igmp={{0x5, 0x4, 0x2, 0x7, 0x1e, 0x67, 0x0, 0x72, 0x2, 0x0, @empty, @broadcast}, {0x14, 0x4, 0x0, @local, "5503"}}}, 0x2c) 0s ago: executing program 4 (id=65): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.069526][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 19.069544][ T29] audit: type=1400 audit(1759648720.884:57): avc: denied { transition } for pid=3174 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.098653][ T29] audit: type=1400 audit(1759648720.884:58): avc: denied { noatsecure } for pid=3174 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.118446][ T29] audit: type=1400 audit(1759648720.884:59): avc: denied { write } for pid=3174 comm="sh" path="pipe:[2443]" dev="pipefs" ino=2443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.140751][ T29] audit: type=1400 audit(1759648720.884:60): avc: denied { rlimitinh } for pid=3174 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.160633][ T29] audit: type=1400 audit(1759648720.884:61): avc: denied { siginh } for pid=3174 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts. [ 27.594169][ T29] audit: type=1400 audit(1759648729.404:62): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.617290][ T29] audit: type=1400 audit(1759648729.434:63): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.618325][ T3285] cgroup: Unknown subsys name 'net' [ 27.645096][ T29] audit: type=1400 audit(1759648729.454:64): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.797882][ T3285] cgroup: Unknown subsys name 'cpuset' [ 27.804218][ T3285] cgroup: Unknown subsys name 'rlimit' [ 27.955332][ T29] audit: type=1400 audit(1759648729.764:65): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.980172][ T29] audit: type=1400 audit(1759648729.764:66): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.000774][ T29] audit: type=1400 audit(1759648729.764:67): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.021218][ T29] audit: type=1400 audit(1759648729.774:68): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.041690][ T29] audit: type=1400 audit(1759648729.774:69): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.066506][ T29] audit: type=1400 audit(1759648729.774:70): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.075408][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.098685][ T29] audit: type=1400 audit(1759648729.914:71): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.132367][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.018096][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 30.136648][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.143768][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.150961][ T3299] bridge_slave_0: entered allmulticast mode [ 30.157404][ T3299] bridge_slave_0: entered promiscuous mode [ 30.164270][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.171491][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.178712][ T3299] bridge_slave_1: entered allmulticast mode [ 30.185245][ T3299] bridge_slave_1: entered promiscuous mode [ 30.201472][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 30.225388][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.245809][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 30.257806][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.289891][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 30.299780][ T3299] team0: Port device team_slave_0 added [ 30.324612][ T3299] team0: Port device team_slave_1 added [ 30.340171][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.347382][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.354518][ T3309] bridge_slave_0: entered allmulticast mode [ 30.361108][ T3309] bridge_slave_0: entered promiscuous mode [ 30.371560][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.378666][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.386127][ T3309] bridge_slave_1: entered allmulticast mode [ 30.392779][ T3309] bridge_slave_1: entered promiscuous mode [ 30.440466][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.449978][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.456950][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.482986][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.499472][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.511402][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.518469][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.544474][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.583699][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.592343][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.599483][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.606657][ T3307] bridge_slave_0: entered allmulticast mode [ 30.613120][ T3307] bridge_slave_0: entered promiscuous mode [ 30.625711][ T3309] team0: Port device team_slave_0 added [ 30.631562][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.638738][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.645870][ T3297] bridge_slave_0: entered allmulticast mode [ 30.652460][ T3297] bridge_slave_0: entered promiscuous mode [ 30.662008][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.669145][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.676403][ T3307] bridge_slave_1: entered allmulticast mode [ 30.682852][ T3307] bridge_slave_1: entered promiscuous mode [ 30.700226][ T3309] team0: Port device team_slave_1 added [ 30.710654][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.717834][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.725178][ T3297] bridge_slave_1: entered allmulticast mode [ 30.731712][ T3297] bridge_slave_1: entered promiscuous mode [ 30.758780][ T3299] hsr_slave_0: entered promiscuous mode [ 30.764910][ T3299] hsr_slave_1: entered promiscuous mode [ 30.782135][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.797469][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.804427][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.830413][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.844796][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.855044][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.865253][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.875071][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.882161][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.908117][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.954153][ T3307] team0: Port device team_slave_0 added [ 30.970952][ T3297] team0: Port device team_slave_0 added [ 30.980399][ T3307] team0: Port device team_slave_1 added [ 30.996898][ T3297] team0: Port device team_slave_1 added [ 31.020695][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.028082][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.035297][ T3305] bridge_slave_0: entered allmulticast mode [ 31.042182][ T3305] bridge_slave_0: entered promiscuous mode [ 31.050828][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.058030][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.065296][ T3305] bridge_slave_1: entered allmulticast mode [ 31.071900][ T3305] bridge_slave_1: entered promiscuous mode [ 31.090522][ T3309] hsr_slave_0: entered promiscuous mode [ 31.096572][ T3309] hsr_slave_1: entered promiscuous mode [ 31.102701][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 31.108481][ T3309] Cannot create hsr debugfs directory [ 31.129067][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.136127][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.162064][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.173360][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.180430][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.206482][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.217767][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.224727][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.250685][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.269157][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.276174][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.302287][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.327148][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.337968][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.386674][ T3305] team0: Port device team_slave_0 added [ 31.395425][ T3305] team0: Port device team_slave_1 added [ 31.405426][ T3297] hsr_slave_0: entered promiscuous mode [ 31.411608][ T3297] hsr_slave_1: entered promiscuous mode [ 31.417510][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.423242][ T3297] Cannot create hsr debugfs directory [ 31.437941][ T3307] hsr_slave_0: entered promiscuous mode [ 31.443994][ T3307] hsr_slave_1: entered promiscuous mode [ 31.450035][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 31.455809][ T3307] Cannot create hsr debugfs directory [ 31.494389][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.501523][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.527480][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.540929][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.547960][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.573958][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.659339][ T3305] hsr_slave_0: entered promiscuous mode [ 31.665422][ T3305] hsr_slave_1: entered promiscuous mode [ 31.671479][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 31.677255][ T3305] Cannot create hsr debugfs directory [ 31.682869][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.704018][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.715519][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.726698][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.799987][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.824013][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.832854][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.844044][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.879973][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.890499][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.899982][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.909321][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.945508][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.964074][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.972917][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.982116][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.003793][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.028372][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.037574][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.046479][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.063935][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.071312][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.086284][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.100292][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.107444][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.116594][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.123689][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.143741][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.162978][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.173433][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.194802][ T2345] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.202007][ T2345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.227862][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.234973][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.262099][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.284510][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.300293][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.317781][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.331840][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.338941][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.353711][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.360826][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.370895][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.384128][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.394016][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.408726][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.430721][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.441295][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.456704][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.463828][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.472596][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.479702][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.497310][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.504621][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.533375][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.540680][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.565953][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.576477][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.592724][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.603172][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.626024][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.655406][ T3299] veth0_vlan: entered promiscuous mode [ 32.689162][ T3299] veth1_vlan: entered promiscuous mode [ 32.721914][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.748572][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.759777][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.780240][ T3299] veth0_macvtap: entered promiscuous mode [ 32.798494][ T3299] veth1_macvtap: entered promiscuous mode [ 32.829648][ T3309] veth0_vlan: entered promiscuous mode [ 32.859022][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.867764][ T3309] veth1_vlan: entered promiscuous mode [ 32.884355][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.912193][ T3309] veth0_macvtap: entered promiscuous mode [ 32.927672][ T3434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.936541][ T3434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.946911][ T3309] veth1_macvtap: entered promiscuous mode [ 32.962975][ T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.980548][ T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.991790][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.004872][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.004888][ T29] audit: type=1400 audit(1759648734.814:81): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.EJYVcc/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.009459][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.027114][ T29] audit: type=1400 audit(1759648734.824:82): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.044537][ T3297] veth0_vlan: entered promiscuous mode [ 33.064620][ T29] audit: type=1400 audit(1759648734.824:83): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.EJYVcc/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.086432][ T3305] veth0_vlan: entered promiscuous mode [ 33.095126][ T29] audit: type=1400 audit(1759648734.824:84): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.103672][ T2345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.122333][ T29] audit: type=1400 audit(1759648734.824:85): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.EJYVcc/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.122370][ T29] audit: type=1400 audit(1759648734.824:86): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.EJYVcc/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.138493][ T3297] veth1_vlan: entered promiscuous mode [ 33.157614][ T29] audit: type=1400 audit(1759648734.824:87): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.212463][ T3307] veth0_vlan: entered promiscuous mode [ 33.213133][ T29] audit: type=1400 audit(1759648735.024:88): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.238306][ T3305] veth1_vlan: entered promiscuous mode [ 33.240889][ T29] audit: type=1400 audit(1759648735.024:89): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="gadgetfs" ino=3646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.247512][ T2345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.288889][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.295807][ T3307] veth1_vlan: entered promiscuous mode [ 33.320042][ T2345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.331388][ T3297] veth0_macvtap: entered promiscuous mode [ 33.331832][ T29] audit: type=1400 audit(1759648735.134:90): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.350542][ T3305] veth0_macvtap: entered promiscuous mode [ 33.369242][ T2345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.384399][ T3307] veth0_macvtap: entered promiscuous mode [ 33.396030][ T3297] veth1_macvtap: entered promiscuous mode [ 33.409211][ T3307] veth1_macvtap: entered promiscuous mode [ 33.435469][ T3305] veth1_macvtap: entered promiscuous mode [ 33.446459][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.470314][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.481799][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.491718][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.500515][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.513383][ T168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.530659][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.541135][ T168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.571987][ T168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.586020][ T168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.607062][ T168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.630282][ T168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.653498][ T3483] loop2: detected capacity change from 0 to 1024 [ 33.661478][ T168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.676725][ T168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.700286][ T168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.714654][ T3483] ======================================================= [ 33.714654][ T3483] WARNING: The mand mount option has been deprecated and [ 33.714654][ T3483] and is ignored by this kernel. Remove the mand [ 33.714654][ T3483] option from the mount to silence this warning. [ 33.714654][ T3483] ======================================================= [ 33.750505][ T2345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.769263][ T2345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.787153][ T3483] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 33.787600][ T2345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.821041][ T3493] loop0: detected capacity change from 0 to 512 [ 33.829171][ T3493] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 33.844160][ T3493] EXT4-fs (loop0): invalid journal inode [ 33.853513][ T3493] EXT4-fs (loop0): can't get journal size [ 33.858229][ T3483] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.10: lblock 1 mapped to illegal pblock 1 (length 1) [ 33.878415][ T3493] EXT4-fs (loop0): 1 truncate cleaned up [ 33.888178][ T3483] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.10: Failed to acquire dquot type 0 [ 33.907474][ T3498] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13'. [ 33.925286][ T3493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.939175][ T3483] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.10: Freeing blocks not in datazone - block = 0, count = 4096 [ 33.960082][ T3502] syz_tun: entered allmulticast mode [ 33.974425][ T3501] syz_tun: left allmulticast mode [ 33.989444][ T3483] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.10: Invalid inode bitmap blk 0 in block_group 0 [ 34.005458][ T3483] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 34.014368][ T168] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 34.029318][ T3483] EXT4-fs (loop2): 1 orphan inode deleted [ 34.035471][ T3483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.051580][ T168] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 34.063872][ T3508] loop4: detected capacity change from 0 to 1024 [ 34.066846][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.113556][ T3508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.140785][ T3483] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.175207][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.222327][ T9] kernel write not supported for file 11/net/vlan/vlan1 (pid: 9 comm: kworker/0:0) [ 34.236287][ T3521] netlink: 10 bytes leftover after parsing attributes in process `syz.2.24'. [ 34.288739][ T3530] loop4: detected capacity change from 0 to 1024 [ 34.323561][ T3530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.412892][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.434790][ T3547] loop3: detected capacity change from 0 to 2048 [ 34.495166][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.567156][ T3309] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 34.582153][ T3309] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 34.600779][ T3569] loop2: detected capacity change from 0 to 256 [ 34.604081][ T3567] netlink: 10 bytes leftover after parsing attributes in process `syz.1.42'. [ 34.632825][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.669506][ T3576] loop3: detected capacity change from 0 to 512 [ 34.676977][ T3576] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.685674][ T3576] EXT4-fs (loop3): invalid journal inode [ 34.691586][ T3576] EXT4-fs (loop3): can't get journal size [ 34.698309][ T3576] EXT4-fs (loop3): 1 truncate cleaned up [ 34.704571][ T3576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.726888][ T3579] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 34.744623][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.911472][ T3604] loop3: detected capacity change from 0 to 256 [ 34.935976][ T3609] Zero length message leads to an empty skb [ 34.959455][ T3608] loop4: detected capacity change from 0 to 1024 [ 34.980884][ T3614] 9pnet_fd: Insufficient options for proto=fd [ 34.987859][ T3608] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.002691][ T3608] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.59: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.017541][ T3608] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.59: Failed to acquire dquot type 0 [ 35.029511][ T3608] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.59: Freeing blocks not in datazone - block = 0, count = 4096 [ 35.044497][ T3608] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.59: Invalid inode bitmap blk 0 in block_group 0 [ 35.048857][ T3619] loop3: detected capacity change from 0 to 128 [ 35.059460][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 35.077221][ T3608] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 35.081037][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 35.086299][ T3608] EXT4-fs (loop4): 1 orphan inode deleted [ 35.105791][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.123187][ T3608] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.259036][ T3620] ================================================================== [ 35.267192][ T3620] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 35.274342][ T3620] [ 35.276675][ T3620] write to 0xffff88811a0fcb14 of 4 bytes by task 3619 on cpu 1: [ 35.284307][ T3620] xas_set_mark+0x12b/0x140 [ 35.288823][ T3620] __folio_start_writeback+0x155/0x390 [ 35.294314][ T3620] __block_write_full_folio+0x53a/0x8f0 [ 35.299878][ T3620] block_write_full_folio+0x2c2/0x2e0 [ 35.305287][ T3620] mpage_writepages+0x6cf/0x1250 [ 35.310244][ T3620] fat_writepages+0x24/0x30 [ 35.314767][ T3620] do_writepages+0x1c6/0x310 [ 35.319364][ T3620] file_write_and_wait_range+0x156/0x2c0 [ 35.325007][ T3620] __generic_file_fsync+0x46/0x140 [ 35.330133][ T3620] fat_file_fsync+0x49/0x100 [ 35.334732][ T3620] vfs_fsync_range+0x10d/0x130 [ 35.339512][ T3620] generic_file_write_iter+0x1b8/0x2f0 [ 35.344993][ T3620] iter_file_splice_write+0x663/0xa60 [ 35.350374][ T3620] direct_splice_actor+0x156/0x2a0 [ 35.355498][ T3620] splice_direct_to_actor+0x312/0x680 [ 35.360884][ T3620] do_splice_direct+0xda/0x150 [ 35.365660][ T3620] do_sendfile+0x380/0x650 [ 35.370094][ T3620] __x64_sys_sendfile64+0x105/0x150 [ 35.375307][ T3620] x64_sys_call+0x2bb4/0x3000 [ 35.379996][ T3620] do_syscall_64+0xd2/0x200 [ 35.384518][ T3620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.390444][ T3620] [ 35.392775][ T3620] read to 0xffff88811a0fcb14 of 4 bytes by task 3620 on cpu 0: [ 35.400316][ T3620] xas_find_marked+0x5dc/0x620 [ 35.405119][ T3620] find_get_entry+0x5d/0x380 [ 35.409797][ T3620] filemap_get_folios_tag+0x92/0x210 [ 35.415210][ T3620] writeback_iter+0x4bb/0x820 [ 35.419897][ T3620] mpage_writepages+0x87/0x1250 [ 35.424767][ T3620] fat_writepages+0x24/0x30 [ 35.429283][ T3620] do_writepages+0x1c6/0x310 [ 35.433882][ T3620] file_write_and_wait_range+0x156/0x2c0 [ 35.439552][ T3620] __generic_file_fsync+0x46/0x140 [ 35.444676][ T3620] fat_file_fsync+0x49/0x100 [ 35.449278][ T3620] vfs_fsync_range+0x10d/0x130 [ 35.454056][ T3620] generic_file_write_iter+0x1b8/0x2f0 [ 35.459636][ T3620] iter_file_splice_write+0x663/0xa60 [ 35.465026][ T3620] direct_splice_actor+0x156/0x2a0 [ 35.470146][ T3620] splice_direct_to_actor+0x312/0x680 [ 35.475537][ T3620] do_splice_direct+0xda/0x150 [ 35.480318][ T3620] do_sendfile+0x380/0x650 [ 35.484933][ T3620] __x64_sys_sendfile64+0x105/0x150 [ 35.490147][ T3620] x64_sys_call+0x2bb4/0x3000 [ 35.494865][ T3620] do_syscall_64+0xd2/0x200 [ 35.499384][ T3620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.505292][ T3620] [ 35.507623][ T3620] value changed: 0x0a000021 -> 0x04000021 [ 35.513345][ T3620] [ 35.515669][ T3620] Reported by Kernel Concurrency Sanitizer on: [ 35.521924][ T3620] CPU: 0 UID: 0 PID: 3620 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.531500][ T3620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 35.541568][ T3620] ================================================================== [ 35.896800][ T3620] syz.3.63 (3620) used greatest stack depth: 9736 bytes left