last executing test programs: 2.638032153s ago: executing program 3 (id=4): capset(&(0x7f0000000040)={0x19980330}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xae, 0x0, &(0x7f0000000680)="b461802305624431ed33730100010446b20aed0200000000010000d5fe00c6fc6ef8ee261713c11bee936390009c5b58259a71b07ec6ba7cb67b84a895bd000000003632b69f0eb2062818f298ed60abbc5f6322cbfac4973cf2be3f656d8f630632395fd3377dc1ee6daeeae21d79df2cb07600dbf28eda3f94de97f6296b9bc0a0aa770b5588c5b3ca96e7e20df71b37ba8bb62cd98e8a769e328b576d95a704d70ed5c912892bf266449c11e0", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x202}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 2.495203087s ago: executing program 3 (id=7): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x2000012, 0x4, 0x0, &(0x7f0000000c40)="63eced8e", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xcf47, 0x19, 0x7, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bfac0000000003000018bfff4000"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 2.133268246s ago: executing program 1 (id=12): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000040)={0x2b, 0x6, 0xffffff96}) 2.068108058s ago: executing program 1 (id=13): socket(0x8, 0x5, 0x7) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.98155917s ago: executing program 1 (id=14): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1.833967604s ago: executing program 1 (id=15): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, 0x0) 1.57060151s ago: executing program 3 (id=16): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339be3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x700) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) 1.353185506s ago: executing program 0 (id=20): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.266561398s ago: executing program 0 (id=22): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.216530299s ago: executing program 0 (id=25): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100039042bbd70003be5f092acf2d2f2", @ANYRES32=r1, @ANYBLOB="45110400000000002000128008000100677265001400028008000700ac141412050008"], 0x40}, 0x1, 0x0, 0x0, 0x20008043}, 0x4) 1.17499515s ago: executing program 2 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0) 1.020761394s ago: executing program 2 (id=28): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 1.014627715s ago: executing program 0 (id=29): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x5b7b, 0x32000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) connect$inet6(r0, 0x0, 0x0) 923.924687ms ago: executing program 2 (id=32): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 843.424879ms ago: executing program 2 (id=35): rt_tgsigqueueinfo(0x0, 0x0, 0x1f, &(0x7f0000000040)={0x2b, 0x6, 0xffffff96}) 570.368356ms ago: executing program 2 (id=37): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0x9}, {0x10}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x42, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0xfc, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x20006, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xea, 0x8, 0x8001, 0x7, 0xb, 0x4, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x9, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x5, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x7fff, 0x7, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0xfffffffe, 0x80000000, 0x400, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xa, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x2, 0x1, 0x9, 0x8000, 0x7, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x4, 0x80000001, 0x400, 0x7, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x40000, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x7fffffff, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbefffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x1, 0x7, 0x2, 0x7, 0x15, 0x10005, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x20000001, 0x7, 0x40, 0x7, 0x12, 0x1, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0xfffffffe, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x1, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x5, 0x8, 0x7f, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x10, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x995, 0x469, 0x6, 0x0, 0x200, 0x8, 0x7, 0x2, 0x8, 0x42bd, 0x4, 0x8009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x4, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x7, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x4, 0x8, 0x0, 0xd, 0xfffffffe, 0x4, 0x10, 0x901, 0x5, 0x9, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xa, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x80, 0x80000001, 0x8001, 0x9fd, 0x1000, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 512.913067ms ago: executing program 1 (id=38): r0 = epoll_create1(0x80000) r1 = getpid() r2 = syz_clone(0x2511, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000200)={r0, 0xffffffffffffffff, 0x4}) 400.73565ms ago: executing program 3 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x138, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, '\x00\x00 \x00'}]}}]}, 0x138}}, 0x0) 342.666511ms ago: executing program 1 (id=40): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 342.353551ms ago: executing program 4 (id=41): unshare(0x2a020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) lseek(r0, 0xa1, 0x0) 342.166051ms ago: executing program 4 (id=42): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000000300)=""/4092, 0xffc, 0x37a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmsg(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x18) syz_emit_ethernet(0x76, &(0x7f0000001300)=ANY=[], 0x0) 341.322841ms ago: executing program 2 (id=43): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xe7, '\x00', "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"}}, 0xfffffea3) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) 309.830082ms ago: executing program 3 (id=44): pipe2$9p(0x0, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffe, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) 248.308504ms ago: executing program 4 (id=45): r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 185.660365ms ago: executing program 4 (id=46): r0 = socket$inet6(0xa, 0x80803, 0x19) connect$inet6(r0, 0x0, 0x0) 185.269336ms ago: executing program 4 (id=47): unshare(0x6020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 105.534587ms ago: executing program 0 (id=48): sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 50.626489ms ago: executing program 4 (id=49): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x28}) 0s ago: executing program 0 (id=50): prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='*', 0x1}], 0x1, 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 29.063079][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 29.063093][ T28] audit: type=1400 audit(1786104995.822:117): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.092105][ T28] audit: type=1400 audit(1786104995.852:118): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.092778][ T3284] cgroup: Unknown subsys name 'net' [ 29.119769][ T28] audit: type=1400 audit(1786104995.872:119): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.270177][ T3284] cgroup: Unknown subsys name 'cpuset' [ 29.276140][ T3284] cgroup: Unknown subsys name 'rlimit' [ 29.394814][ T28] audit: type=1400 audit(1786104996.152:120): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.418230][ T28] audit: type=1400 audit(1786104996.152:121): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.438914][ T28] audit: type=1400 audit(1786104996.152:122): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.444431][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.459479][ T28] audit: type=1400 audit(1786104996.152:123): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.488207][ T28] audit: type=1400 audit(1786104996.152:124): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.498528][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.513048][ T28] audit: type=1400 audit(1786104996.152:125): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.544998][ T28] audit: type=1400 audit(1786104996.152:126): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.488177][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.495282][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.502477][ T3302] bridge_slave_0: entered allmulticast mode [ 31.508801][ T3302] bridge_slave_0: entered promiscuous mode [ 31.532557][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.539635][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.546786][ T3302] bridge_slave_1: entered allmulticast mode [ 31.553024][ T3302] bridge_slave_1: entered promiscuous mode [ 31.582030][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.589113][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.596283][ T3296] bridge_slave_0: entered allmulticast mode [ 31.602634][ T3296] bridge_slave_0: entered promiscuous mode [ 31.621675][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.639083][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.646160][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.653333][ T3296] bridge_slave_1: entered allmulticast mode [ 31.659812][ T3296] bridge_slave_1: entered promiscuous mode [ 31.672784][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.689704][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.696836][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.703978][ T3303] bridge_slave_0: entered allmulticast mode [ 31.710263][ T3303] bridge_slave_0: entered promiscuous mode [ 31.727306][ T3302] team0: Port device team_slave_0 added [ 31.732982][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.740072][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.747223][ T3303] bridge_slave_1: entered allmulticast mode [ 31.753522][ T3303] bridge_slave_1: entered promiscuous mode [ 31.772025][ T3302] team0: Port device team_slave_1 added [ 31.782347][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.808439][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.821157][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.828301][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.835386][ T3295] bridge_slave_0: entered allmulticast mode [ 31.841795][ T3295] bridge_slave_0: entered promiscuous mode [ 31.852847][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.865920][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.873041][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.880131][ T3301] bridge_slave_0: entered allmulticast mode [ 31.886452][ T3301] bridge_slave_0: entered promiscuous mode [ 31.893113][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.900196][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.907236][ T3295] bridge_slave_1: entered allmulticast mode [ 31.913468][ T3295] bridge_slave_1: entered promiscuous mode [ 31.920189][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.927122][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.952993][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.964559][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.977327][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.984419][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.991579][ T3301] bridge_slave_1: entered allmulticast mode [ 31.998066][ T3301] bridge_slave_1: entered promiscuous mode [ 32.012309][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.019294][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.045208][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.060196][ T3296] team0: Port device team_slave_0 added [ 32.071141][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.086919][ T3296] team0: Port device team_slave_1 added [ 32.101936][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.116266][ T3303] team0: Port device team_slave_0 added [ 32.126889][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.137241][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.151239][ T3303] team0: Port device team_slave_1 added [ 32.157133][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.164159][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.190022][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.209057][ T3295] team0: Port device team_slave_0 added [ 32.219154][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.226122][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.252005][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.270719][ T3295] team0: Port device team_slave_1 added [ 32.284656][ T3302] hsr_slave_0: entered promiscuous mode [ 32.290552][ T3302] hsr_slave_1: entered promiscuous mode [ 32.297142][ T3301] team0: Port device team_slave_0 added [ 32.306741][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.313704][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.339662][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.351321][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.358330][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.384279][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.398112][ T3301] team0: Port device team_slave_1 added [ 32.408133][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.415102][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.441113][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.452301][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.459335][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.485301][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.545055][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.552019][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.577979][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.590575][ T3296] hsr_slave_0: entered promiscuous mode [ 32.596437][ T3296] hsr_slave_1: entered promiscuous mode [ 32.602210][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 32.607912][ T3296] Cannot create hsr debugfs directory [ 32.618925][ T3303] hsr_slave_0: entered promiscuous mode [ 32.624800][ T3303] hsr_slave_1: entered promiscuous mode [ 32.630557][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 32.636337][ T3303] Cannot create hsr debugfs directory [ 32.644338][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.651374][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.677252][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.693086][ T3295] hsr_slave_0: entered promiscuous mode [ 32.698983][ T3295] hsr_slave_1: entered promiscuous mode [ 32.704747][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 32.710490][ T3295] Cannot create hsr debugfs directory [ 32.764402][ T3301] hsr_slave_0: entered promiscuous mode [ 32.770533][ T3301] hsr_slave_1: entered promiscuous mode [ 32.776303][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.782020][ T3301] Cannot create hsr debugfs directory [ 32.929423][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.937885][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.945345][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.953538][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.961108][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.969153][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.978738][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.986928][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.006982][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.015099][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.022818][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.031122][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.038634][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.046974][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.054530][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.063027][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.091176][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.099355][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.109975][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.118170][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.132922][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.142001][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.149536][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.157817][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.179770][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.188457][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.196208][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.205004][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.212542][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.221075][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.236081][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.244173][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.265923][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.274127][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.282231][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.290554][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.305032][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.313367][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.320867][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.328850][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.343980][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.356815][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.373709][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.380763][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.390660][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.408303][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.415355][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.436137][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.446629][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.453707][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.468628][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.478139][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.485170][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.520347][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.536630][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.545443][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.555615][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.562677][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.582738][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.590956][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.601846][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.608894][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.621776][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.628848][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.639501][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.656543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.663590][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.671801][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.678829][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.694590][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.705019][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.718834][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.725914][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.798340][ T3424] modprobe (3424) used greatest stack depth: 11256 bytes left [ 33.899036][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.910712][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.964606][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.989051][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.015205][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.058347][ T3302] veth0_vlan: entered promiscuous mode [ 34.076701][ T3302] veth1_vlan: entered promiscuous mode [ 34.107922][ T3303] veth0_vlan: entered promiscuous mode [ 34.120283][ T3302] veth0_macvtap: entered promiscuous mode [ 34.131418][ T3303] veth1_vlan: entered promiscuous mode [ 34.141736][ T3302] veth1_macvtap: entered promiscuous mode [ 34.164716][ T3295] veth0_vlan: entered promiscuous mode [ 34.172609][ T3295] veth1_vlan: entered promiscuous mode [ 34.180023][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.199516][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.210063][ T3303] veth0_macvtap: entered promiscuous mode [ 34.217599][ T3303] veth1_macvtap: entered promiscuous mode [ 34.234124][ T3301] veth0_vlan: entered promiscuous mode [ 34.250928][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.260406][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.275531][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.283404][ T3295] veth0_macvtap: entered promiscuous mode [ 34.284963][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 34.285049][ T28] audit: type=1400 audit(1786105001.032:140): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.gXD4S0/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.291570][ T2152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.306069][ T28] audit: type=1400 audit(1786105001.032:141): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.322783][ T3301] veth1_vlan: entered promiscuous mode [ 34.328588][ T28] audit: type=1400 audit(1786105001.032:142): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.gXD4S0/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 34.381644][ T28] audit: type=1400 audit(1786105001.032:143): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.384187][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.405881][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.421162][ T28] audit: type=1400 audit(1786105001.032:144): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.gXD4S0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 34.434717][ T3295] veth1_macvtap: entered promiscuous mode [ 34.455035][ T28] audit: type=1400 audit(1786105001.032:145): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.gXD4S0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 34.475231][ T3301] veth0_macvtap: entered promiscuous mode [ 34.488480][ T28] audit: type=1400 audit(1786105001.042:146): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.511993][ T28] audit: type=1400 audit(1786105001.042:147): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.524606][ T3296] veth0_vlan: entered promiscuous mode [ 34.535554][ T28] audit: type=1400 audit(1786105001.042:148): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 34.563795][ T3301] veth1_macvtap: entered promiscuous mode [ 34.578519][ T28] audit: type=1400 audit(1786105001.332:149): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.579228][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.622179][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.625712][ T3501] capability: warning: `syz.3.4' uses 32-bit capabilities (legacy support in use) [ 34.630506][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.650636][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.661989][ T3296] veth1_vlan: entered promiscuous mode [ 34.665405][ T3501] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.681286][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.702908][ T3296] veth0_macvtap: entered promiscuous mode [ 34.720618][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.738011][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.746322][ T3296] veth1_macvtap: entered promiscuous mode [ 34.778179][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.823435][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.859833][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.869220][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.887098][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.904144][ T3519] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 34.922197][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.939212][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.960466][ T2152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.972391][ T2152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.000790][ T2152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.022853][ T2152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.291264][ T3538] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 35.452482][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.463590][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.539996][ T2152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.548911][ T2152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.570121][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.737888][ T3555] device-mapper: ioctl: name not supplied when creating device [ 35.753125][ T3557] loop0: detected capacity change from 0 to 512 [ 35.760502][ T3557] ======================================================= [ 35.760502][ T3557] WARNING: The mand mount option has been deprecated and [ 35.760502][ T3557] and is ignored by this kernel. Remove the mand [ 35.760502][ T3557] option from the mount to silence this warning. [ 35.760502][ T3557] ======================================================= [ 36.021336][ T3577] gre1: entered promiscuous mode [ 36.199230][ T3577] syz.0.25 (3577) used greatest stack depth: 10664 bytes left [ 36.302800][ T3594] program syz.2.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.411415][ T3599] netlink: 136 bytes leftover after parsing attributes in process `syz.4.34'. [ 36.967474][ T3627] 9p: Bad value for 'rfdno' [ 37.257583][ T3636] ================================================================== [ 37.265681][ T3636] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 37.273067][ T3636] [ 37.275382][ T3636] read-write to 0xffff8881007d86c0 of 8 bytes by task 49 on cpu 1: [ 37.283271][ T3636] __xa_clear_mark+0xf5/0x1e0 [ 37.287954][ T3636] __folio_end_writeback+0xf4/0x360 [ 37.293151][ T3636] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 37.299402][ T3636] folio_end_writeback+0x1c/0x70 [ 37.304346][ T3636] ext4_finish_bio+0x454/0x770 [ 37.309110][ T3636] ext4_release_io_end+0x9f/0x1f0 [ 37.314133][ T3636] ext4_end_io_end+0x18d/0x240 [ 37.318893][ T3636] ext4_end_io_rsv_work+0x15b/0x1f0 [ 37.324086][ T3636] process_scheduled_works+0x4d4/0x9a0 [ 37.329535][ T3636] worker_thread+0x569/0x750 [ 37.334114][ T3636] kthread+0x221/0x270 [ 37.338176][ T3636] ret_from_fork+0x146/0x330 [ 37.342777][ T3636] ret_from_fork_asm+0x1a/0x30 [ 37.347539][ T3636] [ 37.349853][ T3636] read to 0xffff8881007d86c0 of 8 bytes by task 3636 on cpu 0: [ 37.357387][ T3636] xas_find_marked+0x211/0x650 [ 37.362158][ T3636] filemap_get_folios_tag+0xf7/0x400 [ 37.367457][ T3636] filemap_fdatawait_keep_errors+0x6c/0x190 [ 37.373356][ T3636] sync_inodes_sb+0x41e/0x4d0 [ 37.378028][ T3636] sync_inodes_one_sb+0x3d/0x50 [ 37.382879][ T3636] __iterate_supers+0x110/0x1f0 [ 37.387726][ T3636] iterate_supers+0x1f/0x30 [ 37.392223][ T3636] __ia32_sys_sync+0x5c/0xb0 [ 37.396808][ T3636] x64_sys_call+0x2f3a/0x3020 [ 37.401490][ T3636] do_syscall_64+0x136/0x3c0 [ 37.406080][ T3636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.411968][ T3636] [ 37.414274][ T3636] value changed: 0xfffffffffffffc00 -> 0xfffffffffc000000 [ 37.421365][ T3636] [ 37.423672][ T3636] Reported by Kernel Concurrency Sanitizer on: [ 37.429828][ T3636] CPU: 0 UID: 0 PID: 3636 Comm: syz.4.49 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.438937][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.448982][ T3636] ==================================================================