last executing test programs: 1.113360619s ago: executing program 1 (id=2): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.105109468s ago: executing program 2 (id=3): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f00000001c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x4, 0x7fff}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x9, 0xc) splice(r6, 0x0, r9, 0x0, 0x80, 0x7) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 976.165891ms ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xe, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0x3, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10008844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 717.397446ms ago: executing program 3 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000480)={0x1, 0xffff, 0x10}) getrlimit(0xc, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0x4d15, &(0x7f0000000400)={0x0, 0x48e6, 0x400, 0x1, 0x342}) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000700)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3b) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r5, &(0x7f0000002080)=""/4108, 0x100c) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 716.410316ms ago: executing program 1 (id=7): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0x4000, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSETSW2(r7, 0x5425, 0x0) r8 = syz_io_uring_setup(0x1bd4, &(0x7f00000000c0)={0x0, 0xc439, 0x0, 0x40000002, 0xe2}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x3406}, 0x1}) io_uring_enter(r8, 0x47f6, 0x1000, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 671.645537ms ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 658.525398ms ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) write$bt_hci(r3, &(0x7f00000001c0)=ANY=[], 0x6) 519.03013ms ago: executing program 3 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x10008844) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 119.483138ms ago: executing program 1 (id=10): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r1, &(0x7f00000009c0)="3bf58d", 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) setfsgid(0x0) sendfile(r1, r0, 0x0, 0x7fffeffd) 81.718189ms ago: executing program 2 (id=11): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) epoll_create1(0x0) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) 0s ago: executing program 0 (id=1): r0 = socket(0x18, 0x4, 0x5968) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@mcast1, @dev={0xac, 0x14, 0x14, 0x17}, 0x1c, 0x12}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000100)={r1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 29.073930][ T29] audit: type=1400 audit(1756851617.309:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.075024][ T3292] cgroup: Unknown subsys name 'net' [ 29.096696][ T29] audit: type=1400 audit(1756851617.309:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.124078][ T29] audit: type=1400 audit(1756851617.339:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.244575][ T3292] cgroup: Unknown subsys name 'cpuset' [ 29.250924][ T3292] cgroup: Unknown subsys name 'rlimit' [ 29.361719][ T29] audit: type=1400 audit(1756851617.589:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.385046][ T29] audit: type=1400 audit(1756851617.589:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.405532][ T29] audit: type=1400 audit(1756851617.589:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.426105][ T29] audit: type=1400 audit(1756851617.589:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.447096][ T29] audit: type=1400 audit(1756851617.589:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.456709][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.472064][ T29] audit: type=1400 audit(1756851617.589:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.503856][ T29] audit: type=1400 audit(1756851617.719:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.546618][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.407431][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 31.483869][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 31.492866][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 31.532599][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 31.549113][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.556242][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.563357][ T3303] bridge_slave_0: entered allmulticast mode [ 31.569912][ T3303] bridge_slave_0: entered promiscuous mode [ 31.591396][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.598626][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.606054][ T3303] bridge_slave_1: entered allmulticast mode [ 31.612520][ T3303] bridge_slave_1: entered promiscuous mode [ 31.641565][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 31.668325][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.681733][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.688862][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.695996][ T3304] bridge_slave_0: entered allmulticast mode [ 31.702363][ T3304] bridge_slave_0: entered promiscuous mode [ 31.711619][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.718795][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.726094][ T3304] bridge_slave_1: entered allmulticast mode [ 31.732596][ T3304] bridge_slave_1: entered promiscuous mode [ 31.739711][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.786681][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.808612][ T3303] team0: Port device team_slave_0 added [ 31.817828][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.826982][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.834092][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.841274][ T3310] bridge_slave_0: entered allmulticast mode [ 31.847801][ T3310] bridge_slave_0: entered promiscuous mode [ 31.854259][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.861327][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.869747][ T3308] bridge_slave_0: entered allmulticast mode [ 31.876239][ T3308] bridge_slave_0: entered promiscuous mode [ 31.883010][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.890126][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.897329][ T3308] bridge_slave_1: entered allmulticast mode [ 31.903695][ T3308] bridge_slave_1: entered promiscuous mode [ 31.910492][ T3303] team0: Port device team_slave_1 added [ 31.926079][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.933146][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.940520][ T3310] bridge_slave_1: entered allmulticast mode [ 31.947133][ T3310] bridge_slave_1: entered promiscuous mode [ 31.988463][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.002652][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.009669][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.035673][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.046659][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.053772][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.060953][ T3302] bridge_slave_0: entered allmulticast mode [ 32.067290][ T3302] bridge_slave_0: entered promiscuous mode [ 32.074364][ T3304] team0: Port device team_slave_0 added [ 32.081318][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.091415][ T3304] team0: Port device team_slave_1 added [ 32.098143][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.107561][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.114528][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.140455][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.153716][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.160816][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.167980][ T3302] bridge_slave_1: entered allmulticast mode [ 32.174499][ T3302] bridge_slave_1: entered promiscuous mode [ 32.181626][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.222241][ T3308] team0: Port device team_slave_0 added [ 32.229161][ T3308] team0: Port device team_slave_1 added [ 32.245232][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.252206][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.278213][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.299692][ T3310] team0: Port device team_slave_0 added [ 32.306519][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.316200][ T3310] team0: Port device team_slave_1 added [ 32.322172][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.329174][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.355124][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.381465][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.395320][ T3303] hsr_slave_0: entered promiscuous mode [ 32.401439][ T3303] hsr_slave_1: entered promiscuous mode [ 32.408182][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.415261][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.441188][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.457180][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.464204][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.490129][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.512165][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.519200][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.545226][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.565671][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.572632][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.598654][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.628908][ T3302] team0: Port device team_slave_0 added [ 32.635490][ T3302] team0: Port device team_slave_1 added [ 32.648428][ T3304] hsr_slave_0: entered promiscuous mode [ 32.654518][ T3304] hsr_slave_1: entered promiscuous mode [ 32.660285][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.666054][ T3304] Cannot create hsr debugfs directory [ 32.708709][ T3310] hsr_slave_0: entered promiscuous mode [ 32.714805][ T3310] hsr_slave_1: entered promiscuous mode [ 32.720762][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 32.726642][ T3310] Cannot create hsr debugfs directory [ 32.741586][ T3308] hsr_slave_0: entered promiscuous mode [ 32.747725][ T3308] hsr_slave_1: entered promiscuous mode [ 32.753592][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 32.759371][ T3308] Cannot create hsr debugfs directory [ 32.765172][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.772154][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.798143][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.822497][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.829636][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.855600][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.943252][ T3302] hsr_slave_0: entered promiscuous mode [ 32.949359][ T3302] hsr_slave_1: entered promiscuous mode [ 32.955443][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 32.961168][ T3302] Cannot create hsr debugfs directory [ 33.081495][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.090643][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.099703][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.111690][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.132608][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.149773][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.159042][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.168484][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.193184][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.203243][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.216342][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.225456][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.268713][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.282505][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.291851][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.302583][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.324487][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.342634][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.374461][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.384752][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.396899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.404060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.416828][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.424460][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.442941][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.453504][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.474101][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.482818][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.495851][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.502921][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.517903][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.525017][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.536449][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.549977][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.557188][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.585792][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.599319][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.611007][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.618151][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.633909][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.641028][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.707443][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.741205][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.766902][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.774048][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.782685][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.789771][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.800280][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.837177][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.849889][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.859726][ T3303] veth0_vlan: entered promiscuous mode [ 33.868636][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.875735][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.894028][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.901200][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.911023][ T3303] veth1_vlan: entered promiscuous mode [ 33.928187][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.944484][ T3303] veth0_macvtap: entered promiscuous mode [ 33.972754][ T3303] veth1_macvtap: entered promiscuous mode [ 33.993977][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.029651][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.055349][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.071299][ T3304] veth0_vlan: entered promiscuous mode [ 34.093011][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.110312][ T3304] veth1_vlan: entered promiscuous mode [ 34.120259][ T145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.141366][ T3304] veth0_macvtap: entered promiscuous mode [ 34.164274][ T3304] veth1_macvtap: entered promiscuous mode [ 34.176714][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 34.176730][ T29] audit: type=1400 audit(1756851622.409:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.7MFM1G/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.178635][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.199117][ T29] audit: type=1400 audit(1756851622.429:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.209168][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.215768][ T29] audit: type=1400 audit(1756851622.429:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.7MFM1G/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.246455][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.248102][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.271588][ T29] audit: type=1400 audit(1756851622.429:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.271620][ T29] audit: type=1400 audit(1756851622.429:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.7MFM1G/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.334515][ T29] audit: type=1400 audit(1756851622.429:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.7MFM1G/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.361844][ T29] audit: type=1400 audit(1756851622.429:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.389880][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.396971][ T29] audit: type=1400 audit(1756851622.619:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.408876][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.419804][ T29] audit: type=1400 audit(1756851622.619:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=4694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.436496][ T3308] veth0_vlan: entered promiscuous mode [ 34.468653][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.483346][ T3308] veth1_vlan: entered promiscuous mode [ 34.490314][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.502858][ T3308] veth0_macvtap: entered promiscuous mode [ 34.514905][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.524664][ T3308] veth1_macvtap: entered promiscuous mode [ 34.538965][ T3310] veth0_vlan: entered promiscuous mode [ 34.545246][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.559404][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.569653][ T3310] veth1_vlan: entered promiscuous mode [ 34.590711][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.594093][ T29] audit: type=1400 audit(1756851622.819:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.640295][ T3310] veth0_macvtap: entered promiscuous mode [ 34.650143][ T164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.665286][ T164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.687437][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.703057][ T3310] veth1_macvtap: entered promiscuous mode [ 34.742299][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.750274][ T164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.772454][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.796229][ T3460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.807531][ T3478] tipc: Started in network mode [ 34.812445][ T3478] tipc: Node identity e6a18de4e0b2, cluster identity 4711 [ 34.819766][ T3478] tipc: Enabled bearer , priority 0 [ 34.828102][ T3460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.842185][ T3460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.853237][ T3478] syzkaller0: entered promiscuous mode [ 34.858879][ T3478] syzkaller0: entered allmulticast mode [ 34.869005][ T3460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.889039][ T3302] veth0_vlan: entered promiscuous mode [ 34.903857][ T3478] tipc: Resetting bearer [ 34.911468][ T3476] tipc: Resetting bearer [ 34.920216][ T3476] tipc: Disabling bearer [ 34.939311][ T3302] veth1_vlan: entered promiscuous mode [ 34.966973][ T3302] veth0_macvtap: entered promiscuous mode [ 34.988131][ T3484] netlink: 'syz.3.6': attribute type 21 has an invalid length. [ 34.996365][ T3484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6'. [ 35.006334][ T3302] veth1_macvtap: entered promiscuous mode [ 35.048319][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.071441][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.083067][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.114417][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.179376][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.197931][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.281771][ T3497] loop4: detected capacity change from 0 to 512 [ 35.427816][ T3496] syzkaller0: entered promiscuous mode [ 35.433416][ T3496] syzkaller0: entered allmulticast mode [ 35.451680][ T3497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.647206][ T3506] loop1: detected capacity change from 0 to 512 [ 35.668395][ T3506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.681553][ T3506] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.727736][ T3506] EXT4-fs (loop1): 1 truncate cleaned up [ 35.754366][ T3506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.828347][ T3511] kernel profiling enabled (shift: 17) [ 35.853135][ T3512] ================================================================== [ 35.861267][ T3512] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 35.869534][ T3512] [ 35.871858][ T3512] write to 0xffff8881007929a4 of 4 bytes by task 3506 on cpu 0: [ 35.879659][ T3512] xas_set_mark+0x12b/0x140 [ 35.884190][ T3512] __folio_start_writeback+0x1dd/0x440 [ 35.889676][ T3512] ext4_bio_write_folio+0x5ad/0x9f0 [ 35.894889][ T3512] mpage_process_page_bufs+0x4a1/0x620 [ 35.900380][ T3512] mpage_prepare_extent_to_map+0x786/0xc00 [ 35.906203][ T3512] ext4_do_writepages+0xa05/0x2750 [ 35.911328][ T3512] ext4_writepages+0x176/0x300 [ 35.916112][ T3512] do_writepages+0x1c3/0x310 [ 35.920715][ T3512] file_write_and_wait_range+0x156/0x2c0 [ 35.926361][ T3512] generic_buffers_fsync_noflush+0x45/0x120 [ 35.932264][ T3512] ext4_sync_file+0x1ab/0x690 [ 35.937031][ T3512] vfs_fsync_range+0x10a/0x130 [ 35.941807][ T3512] ext4_buffered_write_iter+0x34f/0x3c0 [ 35.947373][ T3512] ext4_file_write_iter+0xdbf/0xf00 [ 35.952601][ T3512] iter_file_splice_write+0x666/0xa60 [ 35.958001][ T3512] direct_splice_actor+0x156/0x2a0 [ 35.963144][ T3512] splice_direct_to_actor+0x312/0x680 [ 35.968538][ T3512] do_splice_direct+0xda/0x150 [ 35.973323][ T3512] do_sendfile+0x380/0x650 [ 35.977750][ T3512] __x64_sys_sendfile64+0x105/0x150 [ 35.982977][ T3512] x64_sys_call+0x2bb0/0x2ff0 [ 35.987704][ T3512] do_syscall_64+0xd2/0x200 [ 35.992227][ T3512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.998123][ T3512] [ 36.000446][ T3512] read to 0xffff8881007929a4 of 4 bytes by task 3512 on cpu 1: [ 36.008099][ T3512] filemap_write_and_wait_range+0xfc/0x340 [ 36.013929][ T3512] filemap_invalidate_pages+0xa4/0x1a0 [ 36.019408][ T3512] kiocb_invalidate_pages+0x6e/0x80 [ 36.024635][ T3512] __iomap_dio_rw+0x5d4/0x1250 [ 36.029416][ T3512] iomap_dio_rw+0x40/0x90 [ 36.033750][ T3512] ext4_file_write_iter+0xad9/0xf00 [ 36.038961][ T3512] iter_file_splice_write+0x666/0xa60 [ 36.044345][ T3512] direct_splice_actor+0x156/0x2a0 [ 36.049472][ T3512] splice_direct_to_actor+0x312/0x680 [ 36.054851][ T3512] do_splice_direct+0xda/0x150 [ 36.059632][ T3512] do_sendfile+0x380/0x650 [ 36.064088][ T3512] __x64_sys_sendfile64+0x105/0x150 [ 36.069305][ T3512] x64_sys_call+0x2bb0/0x2ff0 [ 36.074011][ T3512] do_syscall_64+0xd2/0x200 [ 36.078538][ T3512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.084437][ T3512] [ 36.086770][ T3512] value changed: 0x0a000021 -> 0x04000021 [ 36.092480][ T3512] [ 36.094809][ T3512] Reported by Kernel Concurrency Sanitizer on: [ 36.100988][ T3512] CPU: 1 UID: 0 PID: 3512 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.110529][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.120607][ T3512] ================================================================== [ 36.206906][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.306237][ T3506] ================================================================== [ 36.314477][ T3506] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 36.322507][ T3506] [ 36.324851][ T3506] write to 0xffff8881007929a4 of 4 bytes by task 3512 on cpu 1: [ 36.332502][ T3506] xas_set_mark+0x12b/0x140 [ 36.337046][ T3506] tag_pages_for_writeback+0xc2/0x290 [ 36.342460][ T3506] ext4_do_writepages+0x6b2/0x2750 [ 36.347612][ T3506] ext4_writepages+0x176/0x300 [ 36.352405][ T3506] do_writepages+0x1c3/0x310 [ 36.357035][ T3506] filemap_write_and_wait_range+0x144/0x340 [ 36.362976][ T3506] ext4_file_write_iter+0xe04/0xf00 [ 36.368212][ T3506] iter_file_splice_write+0x666/0xa60 [ 36.373884][ T3506] direct_splice_actor+0x156/0x2a0 [ 36.379025][ T3506] splice_direct_to_actor+0x312/0x680 [ 36.384431][ T3506] do_splice_direct+0xda/0x150 [ 36.389223][ T3506] do_sendfile+0x380/0x650 [ 36.393665][ T3506] __x64_sys_sendfile64+0x105/0x150 [ 36.398899][ T3506] x64_sys_call+0x2bb0/0x2ff0 [ 36.403607][ T3506] do_syscall_64+0xd2/0x200 [ 36.408145][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.414071][ T3506] [ 36.416408][ T3506] read to 0xffff8881007929a4 of 4 bytes by task 3506 on cpu 0: [ 36.423977][ T3506] file_write_and_wait_range+0x10e/0x2c0 [ 36.429656][ T3506] generic_buffers_fsync_noflush+0x45/0x120 [ 36.435963][ T3506] ext4_sync_file+0x1ab/0x690 [ 36.440672][ T3506] vfs_fsync_range+0x10a/0x130 [ 36.445461][ T3506] ext4_buffered_write_iter+0x34f/0x3c0 [ 36.451140][ T3506] ext4_file_write_iter+0xdbf/0xf00 [ 36.456391][ T3506] iter_file_splice_write+0x666/0xa60 [ 36.461793][ T3506] direct_splice_actor+0x156/0x2a0 [ 36.466928][ T3506] splice_direct_to_actor+0x312/0x680 [ 36.472330][ T3506] do_splice_direct+0xda/0x150 [ 36.477128][ T3506] do_sendfile+0x380/0x650 [ 36.481580][ T3506] __x64_sys_sendfile64+0x105/0x150 [ 36.486799][ T3506] x64_sys_call+0x2bb0/0x2ff0 [ 36.491486][ T3506] do_syscall_64+0xd2/0x200 [ 36.496006][ T3506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.501910][ T3506] [ 36.504234][ T3506] value changed: 0x02000021 -> 0x04000021 [ 36.509952][ T3506] [ 36.512274][ T3506] Reported by Kernel Concurrency Sanitizer on: [ 36.518425][ T3506] CPU: 0 UID: 0 PID: 3506 Comm: syz.1.10 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.527976][ T3506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 36.538555][ T3506] ================================================================== [ 36.640645][ T3512] syz.1.10 (3512) used greatest stack depth: 10520 bytes left [ 36.659028][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.