last executing test programs: 1.50401139s ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRESHEX, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000010000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x141601) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r5 = eventfd2(0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) io_pgetevents(r4, 0x1, 0x0, &(0x7f00000001c0), 0x0, 0x0) io_setup(0x800083, &(0x7f0000000040)) shutdown(r3, 0x0) ioctl$BLKFINISHZONE(0xffffffffffffffff, 0x40101288, &(0x7f00000000c0)={0xbc08, 0x2}) socketpair(0x18, 0xa, 0x2, &(0x7f00000003c0)) getgid() 1.431110976s ago: executing program 3 (id=4): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timerfd_create(0x0, 0x0) clock_adjtime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000100"/20, @ANYRES32=0x0, @ANYBLOB="2008010000040000140003006d6163766c616e3000"], 0x34}}, 0x4084) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) 1.284433507s ago: executing program 4 (id=5): setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.274199039s ago: executing program 2 (id=3): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000003880)='sched_switch\x00'}, 0x18) r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r0, 0x2f, 0x4608, @void}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.182289986s ago: executing program 0 (id=1): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x72, 0x88, 0xde, 0x8, 0xbb4, 0xa89, 0x26be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa2, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x1, 0x4, 0x0, 0x18, 0x99, 0xcc, 0x5d}}]}}]}}, 0x0) 1.042809407s ago: executing program 2 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0xfe}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) 1.037965547s ago: executing program 2 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.0031804s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) tkill(r2, 0xb) 866.707441ms ago: executing program 2 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) 452.302054ms ago: executing program 1 (id=10): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d050005000200000005000100"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffff32ab}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 438.859165ms ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000", @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x5, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 378.79875ms ago: executing program 4 (id=12): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227}) 378.47269ms ago: executing program 1 (id=13): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000340), 0x4) 315.597165ms ago: executing program 4 (id=14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x77e, 0x3, "ff0a8691548204000000ddff1c00"}) 0s ago: executing program 2 (id=15): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 26.488921][ T29] audit: type=1400 audit(1755580978.300:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.489801][ T3291] cgroup: Unknown subsys name 'net' [ 26.511840][ T29] audit: type=1400 audit(1755580978.300:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.539333][ T29] audit: type=1400 audit(1755580978.330:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.700027][ T3291] cgroup: Unknown subsys name 'cpuset' [ 26.706138][ T3291] cgroup: Unknown subsys name 'rlimit' [ 26.875391][ T29] audit: type=1400 audit(1755580978.690:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.903215][ T29] audit: type=1400 audit(1755580978.690:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.924028][ T29] audit: type=1400 audit(1755580978.690:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.944505][ T29] audit: type=1400 audit(1755580978.690:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.964938][ T29] audit: type=1400 audit(1755580978.720:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.989755][ T29] audit: type=1400 audit(1755580978.720:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.996512][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.022149][ T29] audit: type=1400 audit(1755580978.840:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 27.089950][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.939961][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.989509][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 29.049017][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 29.065577][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.072723][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.080035][ T3300] bridge_slave_0: entered allmulticast mode [ 29.086406][ T3300] bridge_slave_0: entered promiscuous mode [ 29.098225][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.105356][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.112524][ T3300] bridge_slave_1: entered allmulticast mode [ 29.118944][ T3300] bridge_slave_1: entered promiscuous mode [ 29.125252][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.157303][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 29.179344][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.192941][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.200016][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.207272][ T3302] bridge_slave_0: entered allmulticast mode [ 29.214110][ T3302] bridge_slave_0: entered promiscuous mode [ 29.221516][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.241307][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.248441][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.255646][ T3302] bridge_slave_1: entered allmulticast mode [ 29.262334][ T3302] bridge_slave_1: entered promiscuous mode [ 29.304810][ T3300] team0: Port device team_slave_0 added [ 29.311371][ T3300] team0: Port device team_slave_1 added [ 29.319089][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.326228][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.333368][ T3310] bridge_slave_0: entered allmulticast mode [ 29.339807][ T3310] bridge_slave_0: entered promiscuous mode [ 29.349134][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.372950][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.380107][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.387228][ T3310] bridge_slave_1: entered allmulticast mode [ 29.393921][ T3310] bridge_slave_1: entered promiscuous mode [ 29.406050][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.424386][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.431482][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.438635][ T3308] bridge_slave_0: entered allmulticast mode [ 29.445099][ T3308] bridge_slave_0: entered promiscuous mode [ 29.464514][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.471606][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.497870][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.508615][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.515829][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.523153][ T3308] bridge_slave_1: entered allmulticast mode [ 29.529731][ T3308] bridge_slave_1: entered promiscuous mode [ 29.541165][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.548246][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.555374][ T3301] bridge_slave_0: entered allmulticast mode [ 29.562049][ T3301] bridge_slave_0: entered promiscuous mode [ 29.568905][ T3302] team0: Port device team_slave_0 added [ 29.574925][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.581871][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.607868][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.627297][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.636585][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.643812][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.651021][ T3301] bridge_slave_1: entered allmulticast mode [ 29.657439][ T3301] bridge_slave_1: entered promiscuous mode [ 29.664094][ T3302] team0: Port device team_slave_1 added [ 29.685040][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.698977][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.705957][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.732061][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.743769][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.750734][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.776955][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.793424][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.824771][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.835824][ T3300] hsr_slave_0: entered promiscuous mode [ 29.842179][ T3300] hsr_slave_1: entered promiscuous mode [ 29.848559][ T3310] team0: Port device team_slave_0 added [ 29.855375][ T3310] team0: Port device team_slave_1 added [ 29.861977][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.872651][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.911232][ T3308] team0: Port device team_slave_0 added [ 29.921673][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.928616][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.954529][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.971333][ T3301] team0: Port device team_slave_0 added [ 29.978009][ T3308] team0: Port device team_slave_1 added [ 29.993511][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.000498][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.026428][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.045240][ T3301] team0: Port device team_slave_1 added [ 30.053068][ T3302] hsr_slave_0: entered promiscuous mode [ 30.059115][ T3302] hsr_slave_1: entered promiscuous mode [ 30.065064][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 30.070918][ T3302] Cannot create hsr debugfs directory [ 30.096558][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.103550][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.130035][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.161858][ T3310] hsr_slave_0: entered promiscuous mode [ 30.168097][ T3310] hsr_slave_1: entered promiscuous mode [ 30.173892][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 30.179848][ T3310] Cannot create hsr debugfs directory [ 30.185725][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.192794][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.218859][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.246334][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.253424][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.279519][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.292307][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.299367][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.325449][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.384425][ T3308] hsr_slave_0: entered promiscuous mode [ 30.390354][ T3308] hsr_slave_1: entered promiscuous mode [ 30.396256][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.401998][ T3308] Cannot create hsr debugfs directory [ 30.430600][ T3301] hsr_slave_0: entered promiscuous mode [ 30.436707][ T3301] hsr_slave_1: entered promiscuous mode [ 30.442568][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 30.448288][ T3301] Cannot create hsr debugfs directory [ 30.516442][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.534747][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.545363][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.556478][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.621632][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.636885][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.645980][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.654625][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.675409][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.689866][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.698280][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.707575][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.739337][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.754441][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.763150][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.772189][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.782976][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.816103][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.824508][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.840503][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.847590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.856362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.863419][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.878572][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.890998][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.904849][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.917383][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.931522][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.956415][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.968908][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.976152][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.001094][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.008322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.038468][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.056634][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.073286][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.086913][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.103460][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.112463][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.119545][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.132448][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.143313][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.150378][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.159157][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.166244][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.184037][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.191199][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.224007][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.234475][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.248340][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.271690][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.297434][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.304534][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.320738][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.327873][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.360943][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.371445][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.402529][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.415732][ T3300] veth0_vlan: entered promiscuous mode [ 31.433108][ T3300] veth1_vlan: entered promiscuous mode [ 31.441815][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.458617][ T3300] veth0_macvtap: entered promiscuous mode [ 31.466872][ T3300] veth1_macvtap: entered promiscuous mode [ 31.497906][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.542744][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.572862][ T3310] veth0_vlan: entered promiscuous mode [ 31.586736][ T3310] veth1_vlan: entered promiscuous mode [ 31.597164][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.615622][ T3310] veth0_macvtap: entered promiscuous mode [ 31.627942][ T2070] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.642574][ T3310] veth1_macvtap: entered promiscuous mode [ 31.654374][ T111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.671036][ T3301] veth0_vlan: entered promiscuous mode [ 31.681422][ T111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.691293][ T3308] veth0_vlan: entered promiscuous mode [ 31.699183][ T3302] veth0_vlan: entered promiscuous mode [ 31.705384][ T111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.724351][ T3308] veth1_vlan: entered promiscuous mode [ 31.732354][ T3301] veth1_vlan: entered promiscuous mode [ 31.739036][ T3302] veth1_vlan: entered promiscuous mode [ 31.748517][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.748530][ T29] audit: type=1400 audit(1755580983.560:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.uSNB8Y/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.751491][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.775356][ T29] audit: type=1400 audit(1755580983.590:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.790788][ T3302] veth0_macvtap: entered promiscuous mode [ 31.808776][ T29] audit: type=1400 audit(1755580983.590:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.uSNB8Y/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.824354][ T3308] veth0_macvtap: entered promiscuous mode [ 31.839598][ T29] audit: type=1400 audit(1755580983.590:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.865645][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.867039][ T29] audit: type=1400 audit(1755580983.590:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.uSNB8Y/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.875132][ T3302] veth1_macvtap: entered promiscuous mode [ 31.900723][ T29] audit: type=1400 audit(1755580983.590:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.uSNB8Y/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.912845][ T3301] veth0_macvtap: entered promiscuous mode [ 31.933748][ T29] audit: type=1400 audit(1755580983.590:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.961234][ T29] audit: type=1400 audit(1755580983.630:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.962964][ T3308] veth1_macvtap: entered promiscuous mode [ 31.984149][ T29] audit: type=1400 audit(1755580983.630:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.997724][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.019509][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.031058][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041234][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.048681][ T3301] veth1_macvtap: entered promiscuous mode [ 32.055745][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.077174][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.085743][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.095170][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.109997][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.121901][ T2070] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.135850][ T29] audit: type=1400 audit(1755580983.930:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.143752][ T2070] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191606][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.213231][ T2070] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.225729][ T2070] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.237260][ T2070] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.246994][ T2070] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.257468][ T2070] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.267019][ T2070] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.281411][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.312761][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.339837][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.350980][ T3476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.359572][ T3476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.393162][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.418938][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473208][ T3488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.531861][ T3488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.884847][ T3500] program syz.2.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.894279][ T3500] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 33.232331][ T3506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.659253][ T3517] loop2: detected capacity change from 0 to 1024 [ 33.677255][ T3517] ======================================================= [ 33.677255][ T3517] WARNING: The mand mount option has been deprecated and [ 33.677255][ T3517] and is ignored by this kernel. Remove the mand [ 33.677255][ T3517] option from the mount to silence this warning. [ 33.677255][ T3517] ======================================================= [ 33.713937][ T3517] EXT4-fs: Ignoring removed oldalloc option [ 33.720410][ T3517] EXT4-fs: Ignoring removed bh option [ 33.735422][ T3517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.873781][ T3521] ================================================================== [ 33.881878][ T3521] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 33.889949][ T3521] [ 33.892265][ T3521] write to 0xffff8881073369a4 of 4 bytes by task 3517 on cpu 0: [ 33.900222][ T3521] xas_set_mark+0x12b/0x140 [ 33.904734][ T3521] __folio_start_writeback+0x1dd/0x440 [ 33.910272][ T3521] ext4_bio_write_folio+0x5ad/0x9f0 [ 33.915469][ T3521] mpage_process_page_bufs+0x4a1/0x620 [ 33.920906][ T3521] mpage_prepare_extent_to_map+0x786/0xc00 [ 33.926787][ T3521] ext4_do_writepages+0xa05/0x2750 [ 33.931882][ T3521] ext4_writepages+0x176/0x300 [ 33.936627][ T3521] do_writepages+0x1c3/0x310 [ 33.941211][ T3521] file_write_and_wait_range+0x156/0x2c0 [ 33.946827][ T3521] generic_buffers_fsync_noflush+0x45/0x120 [ 33.952702][ T3521] ext4_sync_file+0x1ab/0x690 [ 33.957366][ T3521] vfs_fsync_range+0x10d/0x130 [ 33.962113][ T3521] ext4_buffered_write_iter+0x34f/0x3c0 [ 33.967677][ T3521] ext4_file_write_iter+0x383/0xf00 [ 33.972973][ T3521] iter_file_splice_write+0x666/0x9e0 [ 33.978353][ T3521] direct_splice_actor+0x153/0x2a0 [ 33.983468][ T3521] splice_direct_to_actor+0x30f/0x680 [ 33.988847][ T3521] do_splice_direct+0xda/0x150 [ 33.993620][ T3521] do_sendfile+0x380/0x650 [ 33.998143][ T3521] __x64_sys_sendfile64+0x105/0x150 [ 34.003356][ T3521] x64_sys_call+0x2bb0/0x2ff0 [ 34.008032][ T3521] do_syscall_64+0xd2/0x200 [ 34.012542][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.018439][ T3521] [ 34.020772][ T3521] read to 0xffff8881073369a4 of 4 bytes by task 3521 on cpu 1: [ 34.028317][ T3521] file_write_and_wait_range+0x10e/0x2c0 [ 34.033960][ T3521] generic_buffers_fsync_noflush+0x45/0x120 [ 34.039858][ T3521] ext4_sync_file+0x1ab/0x690 [ 34.044544][ T3521] vfs_fsync_range+0x10d/0x130 [ 34.049397][ T3521] ext4_buffered_write_iter+0x34f/0x3c0 [ 34.054955][ T3521] ext4_file_write_iter+0x383/0xf00 [ 34.060259][ T3521] iter_file_splice_write+0x666/0x9e0 [ 34.065641][ T3521] direct_splice_actor+0x153/0x2a0 [ 34.070855][ T3521] splice_direct_to_actor+0x30f/0x680 [ 34.076229][ T3521] do_splice_direct+0xda/0x150 [ 34.080992][ T3521] do_sendfile+0x380/0x650 [ 34.085412][ T3521] __x64_sys_sendfile64+0x105/0x150 [ 34.090609][ T3521] x64_sys_call+0x2bb0/0x2ff0 [ 34.095291][ T3521] do_syscall_64+0xd2/0x200 [ 34.099838][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.105729][ T3521] [ 34.108045][ T3521] value changed: 0x0a000021 -> 0x04000021 [ 34.113750][ T3521] [ 34.116067][ T3521] Reported by Kernel Concurrency Sanitizer on: [ 34.122319][ T3521] CPU: 1 UID: 0 PID: 3521 Comm: syz.2.15 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 34.134563][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.144626][ T3521] ================================================================== [ 34.550254][ T3517] syz.2.15 (3517) used greatest stack depth: 10376 bytes left [ 34.558441][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.