last executing test programs: 202.661579ms ago: executing program 4 (id=5): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) pipe2(0x0, 0x800) 0s ago: executing program 4 (id=6): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 166.196161][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 166.196177][ T29] audit: type=1400 audit(1763371122.917:57): avc: denied { transition } for pid=3311 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 166.200101][ T29] audit: type=1400 audit(1763371122.917:58): avc: denied { noatsecure } for pid=3311 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 166.202755][ T29] audit: type=1400 audit(1763371122.917:59): avc: denied { write } for pid=3311 comm="sh" path="pipe:[1515]" dev="pipefs" ino=1515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 166.205764][ T29] audit: type=1400 audit(1763371122.917:60): avc: denied { rlimitinh } for pid=3311 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 166.208339][ T29] audit: type=1400 audit(1763371122.917:61): avc: denied { siginh } for pid=3311 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 166.212710][ T3308] sshd-session (3308) used greatest stack depth: 10648 bytes left Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 174.485512][ T29] audit: type=1400 audit(1763371131.207:62): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 174.508439][ T29] audit: type=1400 audit(1763371131.227:63): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.509125][ T3319] cgroup: Unknown subsys name 'net' [ 174.536022][ T29] audit: type=1400 audit(1763371131.257:64): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.649423][ T3319] cgroup: Unknown subsys name 'cpuset' [ 174.655470][ T3319] cgroup: Unknown subsys name 'rlimit' [ 174.824406][ T29] audit: type=1400 audit(1763371131.547:65): avc: denied { setattr } for pid=3319 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.849388][ T29] audit: type=1400 audit(1763371131.547:66): avc: denied { create } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.869844][ T29] audit: type=1400 audit(1763371131.547:67): avc: denied { write } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.890210][ T29] audit: type=1400 audit(1763371131.547:68): avc: denied { read } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 174.910442][ T29] audit: type=1400 audit(1763371131.557:69): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 174.916500][ T3322] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 174.935210][ T29] audit: type=1400 audit(1763371131.557:70): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 174.967051][ T29] audit: type=1400 audit(1763371131.687:71): avc: denied { relabelto } for pid=3322 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 175.082461][ T3319] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 176.581374][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 176.642957][ T3333] chnl_net:caif_netlink_parms(): no params data found [ 176.677943][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.685155][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.692301][ T3331] bridge_slave_0: entered allmulticast mode [ 176.698702][ T3331] bridge_slave_0: entered promiscuous mode [ 176.706016][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.713195][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.720367][ T3331] bridge_slave_1: entered allmulticast mode [ 176.726779][ T3331] bridge_slave_1: entered promiscuous mode [ 176.778352][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.787548][ T3336] chnl_net:caif_netlink_parms(): no params data found [ 176.807106][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.831195][ T3333] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.838326][ T3333] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.845612][ T3333] bridge_slave_0: entered allmulticast mode [ 176.852106][ T3333] bridge_slave_0: entered promiscuous mode [ 176.858595][ T3333] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.865653][ T3333] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.872738][ T3333] bridge_slave_1: entered allmulticast mode [ 176.879244][ T3333] bridge_slave_1: entered promiscuous mode [ 176.898912][ T3331] team0: Port device team_slave_0 added [ 176.912134][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 176.927166][ T3333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.936908][ T3331] team0: Port device team_slave_1 added [ 176.949797][ T3333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.977125][ T3341] chnl_net:caif_netlink_parms(): no params data found [ 176.986057][ T3336] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.993130][ T3336] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.000381][ T3336] bridge_slave_0: entered allmulticast mode [ 177.006577][ T3336] bridge_slave_0: entered promiscuous mode [ 177.028423][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.035497][ T3336] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.042735][ T3336] bridge_slave_1: entered allmulticast mode [ 177.049038][ T3336] bridge_slave_1: entered promiscuous mode [ 177.062906][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.069858][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.095739][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.119608][ T3333] team0: Port device team_slave_0 added [ 177.127209][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.134211][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.160121][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.176906][ T3333] team0: Port device team_slave_1 added [ 177.190409][ T3336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.212567][ T3336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.248908][ T3333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.255837][ T3333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.281779][ T3333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.292444][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.299543][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.306792][ T3329] bridge_slave_0: entered allmulticast mode [ 177.313175][ T3329] bridge_slave_0: entered promiscuous mode [ 177.323984][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.331045][ T3341] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.338158][ T3341] bridge_slave_0: entered allmulticast mode [ 177.344464][ T3341] bridge_slave_0: entered promiscuous mode [ 177.356289][ T3333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.363295][ T3333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.389176][ T3333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.401899][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.408976][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.416201][ T3329] bridge_slave_1: entered allmulticast mode [ 177.422512][ T3329] bridge_slave_1: entered promiscuous mode [ 177.430465][ T3331] hsr_slave_0: entered promiscuous mode [ 177.436383][ T3331] hsr_slave_1: entered promiscuous mode [ 177.442427][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.449556][ T3341] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.456637][ T3341] bridge_slave_1: entered allmulticast mode [ 177.463010][ T3341] bridge_slave_1: entered promiscuous mode [ 177.469549][ T3336] team0: Port device team_slave_0 added [ 177.490059][ T3336] team0: Port device team_slave_1 added [ 177.505827][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.525182][ T3341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.535200][ T3341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.554143][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.579688][ T3333] hsr_slave_0: entered promiscuous mode [ 177.585533][ T3333] hsr_slave_1: entered promiscuous mode [ 177.591357][ T3333] debugfs: 'hsr0' already exists in 'hsr' [ 177.597099][ T3333] Cannot create hsr debugfs directory [ 177.607709][ T3336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.614669][ T3336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.640591][ T3336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.653777][ T3336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.660727][ T3336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.686634][ T3336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.697829][ T3341] team0: Port device team_slave_0 added [ 177.704443][ T3341] team0: Port device team_slave_1 added [ 177.735973][ T3329] team0: Port device team_slave_0 added [ 177.742640][ T3329] team0: Port device team_slave_1 added [ 177.769426][ T3341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.776362][ T3341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.802274][ T3341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.828185][ T3341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.835140][ T3341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.861062][ T3341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.871889][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.878835][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.904804][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.917839][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.924797][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.950713][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.979528][ T3336] hsr_slave_0: entered promiscuous mode [ 177.985461][ T3336] hsr_slave_1: entered promiscuous mode [ 177.991314][ T3336] debugfs: 'hsr0' already exists in 'hsr' [ 177.997014][ T3336] Cannot create hsr debugfs directory [ 178.047474][ T3329] hsr_slave_0: entered promiscuous mode [ 178.053472][ T3329] hsr_slave_1: entered promiscuous mode [ 178.059404][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 178.065100][ T3329] Cannot create hsr debugfs directory [ 178.072750][ T3341] hsr_slave_0: entered promiscuous mode [ 178.078610][ T3341] hsr_slave_1: entered promiscuous mode [ 178.084372][ T3341] debugfs: 'hsr0' already exists in 'hsr' [ 178.090108][ T3341] Cannot create hsr debugfs directory [ 178.170570][ T3331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.193743][ T3331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.219382][ T3331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 178.239249][ T3331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 178.267896][ T3333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.276537][ T3333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.289187][ T3333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.300703][ T3333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.314555][ T3329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 178.324977][ T3329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 178.334585][ T3329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 178.345515][ T3329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 178.371130][ T3341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.380980][ T3341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.400446][ T3341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.414756][ T3336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.424025][ T3336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.432743][ T3341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.446435][ T3336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.460491][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.469423][ T3336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.505422][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.519789][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.526906][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.535351][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.542504][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.586424][ T3331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.612203][ T3333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.624382][ T3336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.633725][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.644393][ T3341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.663538][ T3341] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.675574][ T3333] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.685931][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.693101][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.701969][ T3336] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.709991][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.720246][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.727337][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.750569][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.759456][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.766497][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.776065][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.783170][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.791842][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.798905][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.807310][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.814348][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.834495][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.841555][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.861383][ T1452] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.868431][ T1452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.895935][ T3341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.906392][ T3341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.993298][ T3333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.028395][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.037173][ T3341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.069600][ T3336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.117002][ T3331] veth0_vlan: entered promiscuous mode [ 179.146509][ T3333] veth0_vlan: entered promiscuous mode [ 179.180452][ T3333] veth1_vlan: entered promiscuous mode [ 179.187363][ T3329] veth0_vlan: entered promiscuous mode [ 179.197181][ T3331] veth1_vlan: entered promiscuous mode [ 179.210142][ T3329] veth1_vlan: entered promiscuous mode [ 179.218637][ T3331] veth0_macvtap: entered promiscuous mode [ 179.230573][ T3341] veth0_vlan: entered promiscuous mode [ 179.237842][ T3336] veth0_vlan: entered promiscuous mode [ 179.245149][ T3331] veth1_macvtap: entered promiscuous mode [ 179.257634][ T3336] veth1_vlan: entered promiscuous mode [ 179.264091][ T3341] veth1_vlan: entered promiscuous mode [ 179.276103][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.285362][ T3333] veth0_macvtap: entered promiscuous mode [ 179.298394][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.306783][ T3329] veth0_macvtap: entered promiscuous mode [ 179.313270][ T3333] veth1_macvtap: entered promiscuous mode [ 179.327071][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.336519][ T3329] veth1_macvtap: entered promiscuous mode [ 179.345735][ T42] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.362638][ T42] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.373007][ T3333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.381276][ T3458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.391495][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.399618][ T3336] veth0_macvtap: entered promiscuous mode [ 179.411602][ T3336] veth1_macvtap: entered promiscuous mode [ 179.421295][ T3333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.431604][ T3341] veth0_macvtap: entered promiscuous mode [ 179.439138][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.447373][ T3336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.457384][ T3336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.467736][ T3341] veth1_macvtap: entered promiscuous mode [ 179.479298][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.493083][ T3331] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 179.510923][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.526386][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 179.526398][ T29] audit: type=1400 audit(1763371136.247:90): avc: denied { read write } for pid=3331 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.556656][ T29] audit: type=1400 audit(1763371136.247:91): avc: denied { open } for pid=3331 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.582068][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.584481][ T29] audit: type=1400 audit(1763371136.247:92): avc: denied { ioctl } for pid=3331 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.616329][ T29] audit: type=1326 audit(1763371136.277:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ff43f6c9 code=0x7ffc0000 [ 179.639306][ T29] audit: type=1326 audit(1763371136.277:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ff43f6c9 code=0x7ffc0000 [ 179.662330][ T29] audit: type=1326 audit(1763371136.277:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0ff43f6c9 code=0x7ffc0000 [ 179.685294][ T29] audit: type=1326 audit(1763371136.277:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3499 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0ff43f6c9 code=0x7ffc0000 [ 179.708354][ T29] audit: type=1400 audit(1763371136.277:97): avc: denied { prog_load } for pid=3499 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.726993][ T29] audit: type=1400 audit(1763371136.277:98): avc: denied { bpf } for pid=3499 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.747229][ T29] audit: type=1400 audit(1763371136.277:99): avc: denied { perfmon } for pid=3499 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.769430][ T3341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.778726][ C1] ================================================================== [ 179.786826][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 179.787088][ T3502] hub 8-0:1.0: USB hub found [ 179.794023][ C1] [ 179.794029][ C1] read-write to 0xffff888108ea6ab8 of 8 bytes by interrupt on cpu 0: [ 179.794045][ C1] wq_worker_tick+0x60/0x230 [ 179.794068][ C1] sched_tick+0x11a/0x270 [ 179.799199][ T3502] hub 8-0:1.0: 8 ports detected [ 179.800939][ C1] update_process_times+0x15f/0x190 [ 179.800960][ C1] tick_nohz_handler+0x249/0x2d0 [ 179.832738][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 179.837925][ C1] hrtimer_interrupt+0x21a/0x460 [ 179.842850][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 179.848733][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 179.854359][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.860325][ C1] curve25519+0x22bb/0x5000 [ 179.864813][ C1] wg_noise_handshake_create_initiation+0x17c/0x520 [ 179.871389][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 179.877445][ C1] process_scheduled_works+0x4ce/0x9d0 [ 179.882893][ C1] worker_thread+0x582/0x770 [ 179.887462][ C1] kthread+0x489/0x510 [ 179.891513][ C1] ret_from_fork+0x122/0x1b0 [ 179.896085][ C1] ret_from_fork_asm+0x1a/0x30 [ 179.900833][ C1] [ 179.903133][ C1] read-write to 0xffff888108ea6ab8 of 8 bytes by interrupt on cpu 1: [ 179.911174][ C1] wq_worker_tick+0x60/0x230 [ 179.915746][ C1] sched_tick+0x11a/0x270 [ 179.920063][ C1] update_process_times+0x15f/0x190 [ 179.925247][ C1] tick_nohz_handler+0x249/0x2d0 [ 179.930170][ C1] __hrtimer_run_queues+0x20f/0x5a0 [ 179.935352][ C1] hrtimer_interrupt+0x21a/0x460 [ 179.940272][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 179.946167][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 179.951806][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 179.957778][ C1] __tsan_unaligned_write4+0x11e/0x190 [ 179.963232][ C1] blake2s_final+0x1f/0xa0 [ 179.967639][ C1] wg_noise_handshake_create_initiation+0x2af/0x520 [ 179.974216][ C1] wg_packet_handshake_send_worker+0xb2/0x160 [ 179.980271][ C1] process_scheduled_works+0x4ce/0x9d0 [ 179.985726][ C1] worker_thread+0x582/0x770 [ 179.990294][ C1] kthread+0x489/0x510 [ 179.994347][ C1] ret_from_fork+0x122/0x1b0 [ 179.998918][ C1] ret_from_fork_asm+0x1a/0x30 [ 180.003665][ C1] [ 180.005968][ C1] value changed: 0x0000000000000000 -> 0x0000000000002710 [ 180.013050][ C1] [ 180.015350][ C1] Reported by Kernel Concurrency Sanitizer on: [ 180.021493][ C1] CPU: 1 UID: 0 PID: 3458 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.031367][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.041406][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 180.048340][ C1] ================================================================== [ 180.078142][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.088270][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.097158][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.118751][ T3341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.126871][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.144284][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.153183][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.169936][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.178836][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.187698][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.201104][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.210044][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.219200][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.227913][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0