40.864157][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.865365][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.866059][ T42] bond0 (unregistering): Released all slaves [ 40.899228][ T42] hsr_slave_0: left promiscuous mode [ 40.899571][ T42] hsr_slave_1: left promiscuous mode [ 40.901064][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.901090][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.905715][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.905730][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.919087][ T42] veth1_macvtap: left promiscuous mode [ 40.919113][ T42] veth0_macvtap: left promiscuous mode [ 40.919225][ T42] veth1_vlan: left promiscuous mode [ 40.919257][ T42] veth0_vlan: left promiscuous mode [ 41.002776][ T42] team0 (unregistering): Port device team_slave_1 removed [ 41.004892][ T42] team0 (unregistering): Port device team_slave_0 removed [ 41.028353][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 41.115389][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 41.196882][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 41.278381][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [*] Starting reproducer... [+] Image file created. [+] Got free loop device: 0 [ 46.069440][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 46.069454][ T29] audit: type=1400 audit(1791077644.870:183): avc: denied { read write } for pid=3641 comm="syz-executor247" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [+] Loop device configured. [+] Mounted vfat successfully. [+] Opened test file with O_SYNC. [+] Source file created and written. [+] Threads started. Waiting for KCSAN to catch the race... [ 46.069655][ T29] audit: type=1400 audit(1791077644.870:184): avc: denied { open } for pid=3641 comm="syz-executor247" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.070374][ T29] audit: type=1400 audit(1791077644.880:185): avc: denied { ioctl } for pid=3641 comm="syz-executor247" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 46.070605][ T29] audit: type=1400 audit(1791077644.880:186): avc: denied { write } for pid=3641 comm="syz-executor247" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.130470][ T3641] loop0: detected capacity change from 0 to 8192 [ 46.133780][ T29] audit: type=1400 audit(1791077644.940:187): avc: denied { mount } for pid=3641 comm="syz-executor247" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.597281][ T31] ================================================================== [ 46.597323][ T31] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 46.597365][ T31] [ 46.597369][ T31] write to 0xffff888110431000 of 4096 bytes by task 3642 on cpu 1: [ 46.597379][ T31] copy_folio_from_iter_atomic+0x728/0x10a0 [ 46.597394][ T31] generic_perform_write+0x2c4/0x490 [ 46.597409][ T31] __generic_file_write_iter+0x9e/0x120 [ 46.597424][ T31] generic_file_write_iter+0x77/0x1f0 [ 46.597439][ T31] iter_file_splice_write+0x6a0/0xa60 [ 46.597450][ T31] direct_splice_actor+0x158/0x280 [ 46.597461][ T31] splice_direct_to_actor+0x2f9/0x680 [ 46.597473][ T31] do_splice_direct+0x119/0x1a0 [ 46.597483][ T31] do_sendfile+0x37d/0x640 [ 46.597495][ T31] __x64_sys_sendfile64+0xb8/0x150 [ 46.597506][ T31] x64_sys_call+0x1015/0x2550 [ 46.597519][ T31] do_syscall_64+0x112/0x360 [ 46.597531][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.597543][ T31] [ 46.597546][ T31] read to 0xffff888110431000 of 3072 bytes by task 31 on cpu 0: [ 46.597555][ T31] copy_folio_from_iter_atomic+0x728/0x10a0 [ 46.597570][ T31] generic_perform_write+0x2c4/0x490 [ 46.597584][ T31] ext4_buffered_write_iter+0x2e3/0x480 [ 46.597600][ T31] ext4_file_write_iter+0x36e/0x1020 [ 46.597614][ T31] lo_rw_aio+0x6ab/0x760 [ 46.597625][ T31] loop_process_work+0x569/0xad0 [ 46.597636][ T31] loop_rootcg_workfn+0x22/0x30 [ 46.597647][ T31] process_scheduled_works+0x56a/0xa50 [ 46.597663][ T31] worker_thread+0x569/0x750 [ 46.597679][ T31] kthread+0x223/0x270 [ 46.597717][ T31] ret_from_fork+0x146/0x330 [ 46.597732][ T31] ret_from_fork_asm+0x1a/0x30 [ 46.597745][ T31] [ 46.597747][ T31] Reported by Kernel Concurrency Sanitizer on: [ 46.597761][ T31] CPU: 0 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.597775][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 46.597782][ T31] Workqueue: loop0 loop_rootcg_workfn [ 46.597796][ T31] ================================================================== [ 50.755584][ T29] audit: type=1400 audit(1791077649.560:188): avc: denied { write } for pid=3654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.789122][ T29] audit: type=1400 audit(1791077649.590:189): avc: denied { write } for pid=3665 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.201861][ T29] audit: type=1400 audit(1791077650.010:190): avc: denied { write } for pid=3668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.233856][ T29] audit: type=1400 audit(1791077650.020:191): avc: denied { write } for pid=3679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.330702][ T29] audit: type=1400 audit(1791077650.140:192): avc: denied { write } for pid=3682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.370564][ T29] audit: type=1400 audit(1791077650.180:193): avc: denied { write } for pid=3693 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.454238][ T29] audit: type=1400 audit(1791077650.260:194): avc: denied { write } for pid=3696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.490301][ T29] audit: type=1400 audit(1791077650.300:195): avc: denied { write } for pid=3707 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.074346][ T29] audit: type=1400 audit(1791077650.880:196): avc: denied { write } for pid=3710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.109055][ T29] audit: type=1400 audit(1791077650.910:197): avc: denied { write } for pid=3721 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.193834][ T29] audit: type=1400 audit(1791077651.000:198): avc: denied { write } for pid=3724 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.230591][ T29] audit: type=1400 audit(1791077651.040:199): avc: denied { write } for pid=3735 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.155809][ T3643] ================================================================== [ 53.155844][ T3643] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 53.155866][ T3643] [ 53.155870][ T3643] read to 0xffff888110431000 of 3072 bytes by task 71 on cpu 1: [ 53.155879][ T3643] copy_folio_from_iter_atomic+0x728/0x10a0 [ 53.155895][ T3643] generic_perform_write+0x2c4/0x490 [ 53.155910][ T3643] ext4_buffered_write_iter+0x2e3/0x480 [ 53.155926][ T3643] ext4_file_write_iter+0x36e/0x1020 [ 53.155940][ T3643] lo_rw_aio+0x6ab/0x760 [ 53.155951][ T3643] loop_process_work+0x569/0xad0 [ 53.155963][ T3643] loop_rootcg_workfn+0x22/0x30 [ 53.155974][ T3643] process_scheduled_works+0x56a/0xa50 [ 53.155993][ T3643] worker_thread+0x569/0x750 [ 53.156009][ T3643] kthread+0x223/0x270 [ 53.156041][ T3643] ret_from_fork+0x146/0x330 [ 53.156056][ T3643] ret_from_fork_asm+0x1a/0x30 [ 53.156070][ T3643] [ 53.156073][ T3643] write to 0xffff888110431000 of 4096 bytes by task 3643 on cpu 0: [ 53.156082][ T3643] copy_folio_from_iter_atomic+0x728/0x10a0 [ 53.156097][ T3643] generic_perform_write+0x2c4/0x490 [ 53.156112][ T3643] __generic_file_write_iter+0x9e/0x120 [ 53.156127][ T3643] generic_file_write_iter+0x77/0x1f0 [ 53.156141][ T3643] iter_file_splice_write+0x6a0/0xa60 [ 53.156154][ T3643] direct_splice_actor+0x158/0x280 [ 53.156172][ T3643] splice_direct_to_actor+0x2f9/0x680 [ 53.156189][ T3643] do_splice_direct+0x119/0x1a0 [ 53.156206][ T3643] do_sendfile+0x37d/0x640 [ 53.156219][ T3643] __x64_sys_sendfile64+0xb8/0x150 [ 53.156230][ T3643] x64_sys_call+0x1015/0x2550 [ 53.156242][ T3643] do_syscall_64+0x112/0x360 [ 53.156255][ T3643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.156266][ T3643] [ 53.156269][ T3643] Reported by Kernel Concurrency Sanitizer on: [ 53.156275][ T3643] CPU: 0 UID: 0 PID: 3643 Comm: syz-executor247 Not tainted syzkaller #0 PREEMPT(lazy) [ 53.156289][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 53.156296][ T3643] ================================================================== [ 54.248079][ T3645] ================================================================== [ 54.248109][ T3645] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 54.248133][ T3645] [ 54.248138][ T3645] write to 0xffff8881071287f4 of 4 bytes by task 3643 on cpu 0: [ 54.248152][ T3645] xas_set_mark+0x12b/0x140 [ 54.248171][ T3645] __folio_start_writeback+0x16b/0x370 [ 54.248199][ T3645] __mpage_writepages+0xd92/0x1370 [ 54.248227][ T3645] fat_writepages+0x26/0x30 [ 54.248245][ T3645] do_writepages+0x1b9/0x300 [ 54.248270][ T3645] file_write_and_wait_range+0x178/0x2f0 [ 54.248289][ T3645] simple_fsync_noflush+0x42/0x120 [ 54.248308][ T3645] fat_file_fsync+0x7e/0x100 [ 54.248323][ T3645] vfs_fsync_range+0xc5/0xe0 [ 54.248344][ T3645] generic_file_write_iter+0x1a3/0x1f0 [ 54.248368][ T3645] iter_file_splice_write+0x6a0/0xa60 [ 54.248386][ T3645] direct_splice_actor+0x158/0x280 [ 54.248403][ T3645] splice_direct_to_actor+0x2f9/0x680 [ 54.248421][ T3645] do_splice_direct+0x119/0x1a0 [ 54.248439][ T3645] do_sendfile+0x37d/0x640 [ 54.248456][ T3645] __x64_sys_sendfile64+0xb8/0x150 [ 54.248474][ T3645] x64_sys_call+0x1015/0x2550 [ 54.248495][ T3645] do_syscall_64+0x112/0x360 [ 54.248513][ T3645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.248552][ T3645] [ 54.248557][ T3645] read to 0xffff8881071287f4 of 4 bytes by task 3645 on cpu 1: [ 54.248571][ T3645] __writeback_single_inode+0x208/0x790 [ 54.248587][ T3645] writeback_single_inode+0x16d/0x410 [ 54.248612][ T3645] sync_inode_metadata+0x6e/0xa0 [ 54.248637][ T3645] simple_fsync_noflush+0xdb/0x120 [ 54.248656][ T3645] fat_file_fsync+0x7e/0x100 [ 54.248670][ T3645] vfs_fsync_range+0xc5/0xe0 [ 54.248690][ T3645] generic_file_write_iter+0x1a3/0x1f0 [ 54.248715][ T3645] iter_file_splice_write+0x6a0/0xa60 [ 54.248733][ T3645] direct_splice_actor+0x158/0x280 [ 54.248750][ T3645] splice_direct_to_actor+0x2f9/0x680 [ 54.248769][ T3645] do_splice_direct+0x119/0x1a0 [ 54.248786][ T3645] do_sendfile+0x37d/0x640 [ 54.248803][ T3645] __x64_sys_sendfile64+0xb8/0x150 [ 54.248820][ T3645] x64_sys_call+0x1015/0x2550 [ 54.248841][ T3645] do_syscall_64+0x112/0x360 [ 54.248859][ T3645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.248877][ T3645] [ 54.248881][ T3645] value changed: 0x05000021 -> 0x02000021 [ 54.248890][ T3645] [ 54.248893][ T3645] Reported by Kernel Concurrency Sanitizer on: [ 54.248903][ T3645] CPU: 1 UID: 0 PID: 3645 Comm: syz-executor247 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.248925][ T3645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 54.248936][ T3645] ================================================================== [+] Threads joined. [+] Unmounted successfully. [+] Loop device cleared. [+] Reproducer finished.