syzkaller login: [ 10.657034][ T2793] udevd (2793) used greatest stack depth: 11864 bytes left [ 13.861330][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 13.861339][ T28] audit: type=1400 audit(1715444168.991:76): avc: denied { transition } for pid=2962 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.865154][ T28] audit: type=1400 audit(1715444168.991:77): avc: denied { noatsecure } for pid=2962 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.868874][ T28] audit: type=1400 audit(1715444169.001:78): avc: denied { write } for pid=2962 comm="sh" path="pipe:[659]" dev="pipefs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 13.871934][ T28] audit: type=1400 audit(1715444169.001:79): avc: denied { rlimitinh } for pid=2962 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 13.874582][ T28] audit: type=1400 audit(1715444169.001:80): avc: denied { siginh } for pid=2962 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.888976][ T2966] sftp-server (2966) used greatest stack depth: 11616 bytes left [ 14.899018][ T2963] sshd (2963) used greatest stack depth: 11576 bytes left [ 17.886611][ T28] audit: type=1400 audit(1715444173.021:81): avc: denied { read } for pid=2767 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. 2024/05/11 16:16:15 fuzzer started 2024/05/11 16:16:16 dialing manager at 10.128.0.163:30015 [ 20.934396][ T28] audit: type=1400 audit(1715444176.061:82): avc: denied { node_bind } for pid=3076 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.954941][ T28] audit: type=1400 audit(1715444176.061:83): avc: denied { name_bind } for pid=3076 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 20.967519][ T3084] cgroup: Unknown subsys name 'net' [ 20.976503][ T28] audit: type=1400 audit(1715444176.101:84): avc: denied { mounton } for pid=3084 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.004332][ T28] audit: type=1400 audit(1715444176.101:85): avc: denied { mount } for pid=3084 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.026536][ T28] audit: type=1400 audit(1715444176.111:86): avc: denied { unmount } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.177418][ T3084] cgroup: Unknown subsys name 'rlimit' [ 21.297811][ T28] audit: type=1400 audit(1715444176.431:87): avc: denied { mounton } for pid=3084 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.322631][ T28] audit: type=1400 audit(1715444176.431:88): avc: denied { mount } for pid=3084 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.345850][ T28] audit: type=1400 audit(1715444176.431:89): avc: denied { create } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.366421][ T28] audit: type=1400 audit(1715444176.431:90): avc: denied { write } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.374102][ T3085] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). 2024/05/11 16:16:16 code coverage: enabled 2024/05/11 16:16:16 comparison tracing: enabled 2024/05/11 16:16:16 extra coverage: enabled 2024/05/11 16:16:16 delay kcov mmap: enabled 2024/05/11 16:16:16 setuid sandbox: enabled 2024/05/11 16:16:16 namespace sandbox: enabled 2024/05/11 16:16:16 Android sandbox: enabled 2024/05/11 16:16:16 fault injection: enabled 2024/05/11 16:16:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/05/11 16:16:16 net packet injection: enabled 2024/05/11 16:16:16 net device setup: enabled 2024/05/11 16:16:16 concurrency sanitizer: enabled 2024/05/11 16:16:16 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/05/11 16:16:16 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/05/11 16:16:16 USB emulation: /dev/raw-gadget does not exist 2024/05/11 16:16:16 hci packet injection: /dev/vhci does not exist 2024/05/11 16:16:16 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 2024/05/11 16:16:16 802.15.4 emulation: enabled 2024/05/11 16:16:16 swap file: enabled 2024/05/11 16:16:16 suppressing KCSAN reports in functions: 'pcpu_alloc' '__find_get_block' '__xa_clear_mark' 'jbd2_journal_dirty_metadata' 'ext4_fill_raw_inode' 'do_select' '__mod_memcg_state' 'jbd2_journal_stop' 'alloc_pid' 'call_rcu' 'mem_cgroup_flush_stats_ratelimited' 'do_sys_poll' 'mas_replace_node' 'n_tty_receive_char_flow_ctrl' 'virtqueue_disable_cb' 'xas_find_marked' '__count_memcg_events' '__run_timer_base' 'xas_clear_mark' 'exit_mm' 'ext4_free_inodes_count' '_prb_read_valid' 'ondemand_readahead' 'io_wq_activate_free_worker' 'kick_pool' 'vmalloc_info_show' '__mod_memcg_lruvec_state' '__tmigr_cpu_activate' 'process_scheduled_works' 2024/05/11 16:16:16 starting 5 executor processes [ 21.386779][ T28] audit: type=1400 audit(1715444176.431:91): avc: denied { read } for pid=3084 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.423212][ T3084] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.132698][ T3095] chnl_net:caif_netlink_parms(): no params data found [ 22.172244][ T3112] chnl_net:caif_netlink_parms(): no params data found [ 22.183169][ T3099] chnl_net:caif_netlink_parms(): no params data found [ 22.258650][ T3095] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.265720][ T3095] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.273368][ T3095] bridge_slave_0: entered allmulticast mode [ 22.279859][ T3095] bridge_slave_0: entered promiscuous mode [ 22.286610][ T3095] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.293649][ T3095] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.300823][ T3095] bridge_slave_1: entered allmulticast mode [ 22.307101][ T3095] bridge_slave_1: entered promiscuous mode [ 22.348543][ T3105] chnl_net:caif_netlink_parms(): no params data found [ 22.357656][ T3099] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.364703][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.371937][ T3099] bridge_slave_0: entered allmulticast mode [ 22.378805][ T3099] bridge_slave_0: entered promiscuous mode [ 22.386457][ T3095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.396619][ T3095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.405687][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.412808][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.419926][ T3112] bridge_slave_0: entered allmulticast mode [ 22.426322][ T3112] bridge_slave_0: entered promiscuous mode [ 22.437075][ T3099] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.444172][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.451923][ T3099] bridge_slave_1: entered allmulticast mode [ 22.458441][ T3099] bridge_slave_1: entered promiscuous mode [ 22.477267][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.484358][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.491501][ T3112] bridge_slave_1: entered allmulticast mode [ 22.497787][ T3112] bridge_slave_1: entered promiscuous mode [ 22.517663][ T3099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.527269][ T3095] team0: Port device team_slave_0 added [ 22.549656][ T3099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.559284][ T3095] team0: Port device team_slave_1 added [ 22.570010][ T3112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.581648][ T3112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.626619][ T3099] team0: Port device team_slave_0 added [ 22.632444][ T3095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.639411][ T3095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.665314][ T3095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.676524][ T3095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.683504][ T3095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.709449][ T3095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.722891][ T3112] team0: Port device team_slave_0 added [ 22.729088][ T3112] team0: Port device team_slave_1 added [ 22.739575][ T3105] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.746688][ T3105] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.753829][ T3105] bridge_slave_0: entered allmulticast mode [ 22.760239][ T3105] bridge_slave_0: entered promiscuous mode [ 22.766707][ T3105] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.773789][ T3105] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.780941][ T3105] bridge_slave_1: entered allmulticast mode [ 22.787223][ T3105] bridge_slave_1: entered promiscuous mode [ 22.794019][ T3099] team0: Port device team_slave_1 added [ 22.806088][ T3125] chnl_net:caif_netlink_parms(): no params data found [ 22.829797][ T3099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.836768][ T3099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.862689][ T3099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.874097][ T3099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.881084][ T3099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.906976][ T3099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.922490][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.929558][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.955500][ T3112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.966515][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.973439][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 22.999320][ T3112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.015069][ T3105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.038148][ T3105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.075935][ T3095] hsr_slave_0: entered promiscuous mode [ 23.081806][ T3095] hsr_slave_1: entered promiscuous mode [ 23.093891][ T3099] hsr_slave_0: entered promiscuous mode [ 23.100091][ T3099] hsr_slave_1: entered promiscuous mode [ 23.105812][ T3099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.113381][ T3099] Cannot create hsr debugfs directory [ 23.128390][ T3105] team0: Port device team_slave_0 added [ 23.147647][ T3125] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.154806][ T3125] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.162096][ T3125] bridge_slave_0: entered allmulticast mode [ 23.168443][ T3125] bridge_slave_0: entered promiscuous mode [ 23.175379][ T3105] team0: Port device team_slave_1 added [ 23.191227][ T3112] hsr_slave_0: entered promiscuous mode [ 23.197267][ T3112] hsr_slave_1: entered promiscuous mode [ 23.202987][ T3112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.210559][ T3112] Cannot create hsr debugfs directory [ 23.216091][ T3125] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.223180][ T3125] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.230336][ T3125] bridge_slave_1: entered allmulticast mode [ 23.236809][ T3125] bridge_slave_1: entered promiscuous mode [ 23.247603][ T3105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.254612][ T3105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.280548][ T3105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.304690][ T3105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.311664][ T3105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.337647][ T3105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.357775][ T3125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.368647][ T3125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.417904][ T3125] team0: Port device team_slave_0 added [ 23.430241][ T3105] hsr_slave_0: entered promiscuous mode [ 23.436534][ T3105] hsr_slave_1: entered promiscuous mode [ 23.442333][ T3105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.449917][ T3105] Cannot create hsr debugfs directory [ 23.458986][ T3125] team0: Port device team_slave_1 added [ 23.482389][ T3125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.489436][ T3125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.515321][ T3125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.526467][ T3125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.533401][ T3125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.559371][ T3125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.605470][ T3125] hsr_slave_0: entered promiscuous mode [ 23.611523][ T3125] hsr_slave_1: entered promiscuous mode [ 23.617390][ T3125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 23.624934][ T3125] Cannot create hsr debugfs directory [ 23.640850][ T3095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.650418][ T3095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.666488][ T3095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.679791][ T3095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.702486][ T3099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 23.711542][ T3099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 23.723351][ T3099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 23.732649][ T3099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.759418][ T3112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.768051][ T3112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.776783][ T3112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.785060][ T3112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.823960][ T3105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.836914][ T3105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.867999][ T3105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.876531][ T3105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.888404][ T3095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.895291][ T3125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 23.904636][ T3125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 23.922244][ T3125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 23.930895][ T3125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 23.952318][ T3095] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.969728][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.982628][ T3112] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.999309][ T3173] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.006411][ T3173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.014862][ T3173] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.021921][ T3173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.032471][ T3099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.049628][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.056737][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.075788][ T3099] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.088021][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.095056][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.118723][ T3175] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.125797][ T3175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.134193][ T3175] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.141316][ T3175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.197283][ T3105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.230780][ T3105] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.240412][ T3112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.254929][ T3125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.265837][ T3176] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.272910][ T3176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.289234][ T3099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.304914][ T3095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.314760][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.321848][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.346605][ T3125] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.366028][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.373109][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.401658][ T3112] veth0_vlan: entered promiscuous mode [ 24.414830][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.421928][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.452052][ T3112] veth1_vlan: entered promiscuous mode [ 24.463199][ T3099] veth0_vlan: entered promiscuous mode [ 24.498340][ T3099] veth1_vlan: entered promiscuous mode [ 24.511446][ T3112] veth0_macvtap: entered promiscuous mode [ 24.529487][ T3095] veth0_vlan: entered promiscuous mode [ 24.542442][ T3105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.550086][ T3112] veth1_macvtap: entered promiscuous mode [ 24.565749][ T3099] veth0_macvtap: entered promiscuous mode [ 24.575608][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.584324][ T3095] veth1_vlan: entered promiscuous mode [ 24.604618][ T3125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.613611][ T3099] veth1_macvtap: entered promiscuous mode [ 24.621331][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.634250][ T3112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.643103][ T3112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.651847][ T3112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.660566][ T3112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.670920][ T3095] veth0_macvtap: entered promiscuous mode [ 24.679342][ T3095] veth1_macvtap: entered promiscuous mode [ 24.688011][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.698474][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.709152][ T3099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.723829][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.734387][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.744988][ T3099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.757071][ T3099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.766052][ T3099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.774832][ T3099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.783752][ T3099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.820999][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.831590][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.841447][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 24.851886][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.865184][ T3095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.873845][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.884320][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 24.894173][ T3095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 24.904664][ T3095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf9ab}]}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0x110}}, 0x0) [ 24.915391][ T3095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.925466][ T3095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.934239][ T3095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.943028][ T3095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.951760][ T3095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@shortname_winnt}, {@utf8no}, {@shortname_win95}, {@fat=@discard}, {@utf8}, {@utf8}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}]}, 0xfd, 0x299, &(0x7f0000000280)="$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") r1 = io_uring_setup(0x1612, &(0x7f0000000200)) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4096, 0x1000}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007f, 0x0) pread64(r3, &(0x7f0000001600)=""/4104, 0x1008, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) read$msr(0xffffffffffffffff, &(0x7f00000002c0)=""/7, 0x7) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r4, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r5, 0x81fd) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xc003, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r7, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x17) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000001300)) syz_open_dev$MSR(0x0, 0x0, 0x0) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r10, &(0x7f0000001380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001280)={&(0x7f00000001c0)=@getaddr={0x14, 0x16, 0x200, 0x70b92d, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000280)={[{@noquota}, {@noblock_validity}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x3, 0x0, 0x0, 0x0) [ 25.011791][ T3105] veth0_vlan: entered promiscuous mode [ 25.033167][ T3105] veth1_vlan: entered promiscuous mode [ 25.050216][ T3244] loop1: detected capacity change from 0 to 128 [ 25.050527][ T3125] veth0_vlan: entered promiscuous mode executing program 2: syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000040)='./file2\x00', 0x4002, &(0x7f0000000140)=ANY=[], 0x2, 0xa30, &(0x7f0000001580)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000040)='./file2\x00', 0x4002, &(0x7f0000000140)=ANY=[], 0x2, 0xa30, &(0x7f0000001580)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x108, 0x3, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1006}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4ceb}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x800}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x882}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x51}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xfffffffe, 0xea7, 0x1]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x8001}, 0x20008000) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x41, 0x300, 0x70bd2a, 0x25dfdbfc, {0x14}, [@typed={0x4, 0xb4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x4004800) getdents(r0, &(0x7f0000001fc0)=""/178, 0x18) [ 25.071845][ T3105] veth0_macvtap: entered promiscuous mode [ 25.091964][ T3125] veth1_vlan: entered promiscuous mode [ 25.100187][ T3246] loop3: detected capacity change from 0 to 512 [ 25.109521][ T3105] veth1_macvtap: entered promiscuous mode [ 25.127044][ T3246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01d, mo2=0002] [ 25.127580][ T3125] veth0_macvtap: entered promiscuous mode [ 25.135668][ T3246] EXT4-fs (loop3): orphan cleanup on readonly fs [ 25.142407][ T3249] loop2: detected capacity change from 0 to 1764 [ 25.158213][ T3105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.163717][ T3246] EXT4-fs warning (device loop3): ext4_enable_quotas:7104: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 25.168685][ T3105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.187250][ T3246] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 25.193144][ T3105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.210132][ T3105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.210148][ T3105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.220958][ T3246] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 25.230345][ T3105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.251192][ T3246] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 25.262832][ T3105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.271949][ T3246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 25.278976][ T3105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.300761][ T3105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.310628][ T3105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f0000000440)=@framed={{}, [@jmp={0x3, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xf6, &(0x7f0000000180)=""/246}, 0x90) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x866, @loopback, 0x101}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0) read$nci(r1, &(0x7f0000000240)=""/4096, 0x1000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000016c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x2000000) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001d00010000a31b4ee84060bf16a38583", @ANYRES32, @ANYBLOB="0000000b14"], 0x30}}, 0x0) [ 25.321185][ T3105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.331026][ T3105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.341434][ T3105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.351325][ T3246] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 25.352763][ T3105] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b40000000003c000480240001800b0001007470726f787900001400028008000140000000000800034000000016140001800a00010072616e6765000000040002800900010073797a3000000000140000001100010000000000000000000000000a3c9d84614183d6eba0338d1f9f9be4bd532a3014c8f822be21251c5159919764fb0537f1d81492cf87226c169d741f4bdc0be30db1ceba4ac105c6267c8e260e02bafdb94f47b1530a42182c70d5a9800ed9b24e34b979f183e1034651cbd7c0297df2dea70ad75abb504394486d5344228c23f3bad861277013e6d10bdd4fcc17b6efcab773d74907feb41855850586722d309d9c91946ce33105f66a9a2071ec92f0b7bc811b079367062d70b8bf9b23994e4d56bfb5e91de5cabe73308794633fe5eb4c4af8943284d81e9a798e6868c4b5b97d10443be79e060dae42cb44b7e748c11ca6ec84f51c6afaf6d876cff3001782ac44921e8acd9da6cf8cd2a0ee27d0b015c0ad95003f8a5c705c42835c00b6136c7596aa550b598240c981e847cf0e3e2308966637279fc130004d829271599a142fe21d78107b0d46f032208968a33960aff345a6fe4aaf888ec137719a8a20b2d51906f4e28ef8b1e1d87eb793f3b554ca289d91e09811d52f7ae391374fc2ec5b4b895759ee6e45f244a72c147b57496e85edf7d3687f9727d243a17beb69422f934c32f743372517b783c643bc8bb82f2095e01d7092a210de00"], 0xd8}}, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/43, 0x2b}], 0x1, 0x0, 0x2}}], 0x1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000840)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) epoll_create(0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@gettaction={0x14}, 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/87, 0x57}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/7, 0x7}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000540)='dlm_unlock_end\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) shutdown(r4, 0x0) connect$unix(r4, &(0x7f0000fce000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0bdd7000000", 0x5b}, {&(0x7f0000000280)="e1", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = accept(r5, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000a00)="28326d23d6c1e38773e00b9ef7c3a835653d7e65c142fd53c418565f4de5f8e4c22e407a2ed0b27089d0be8ea453eb3fa495d9e309635fd47f54749a3ae8727d816be508b747f5c7a2e3ae864c0cef03bb48852a540f95027c1ee26b3995e1228a5340f5b9a1d9a0e223e2f6a077d95215db701c822e0422db775110d865eb3c3f34294593170c2152f82406d7e45872e8fd76a4cb7a28fff6754fd67d64068189a23df0595662f34581ef6684615704c3e27f358f365c00c71ac2d8904d6dafa68713832e5ba1cef0b9d1bccb6df0acf093ea3aadeedaaa366a25639cbbfb545aafe7a59e6a1c9a335cbe776ece5672486d3a7b842c5f2b6deb1fba8fa9fc2a9b5ad1c7992a919ce02c844be666b3c6cfdb84c796047446ec5626411d7628ed2d71", 0x122, 0x20004841, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f0000000380)=@caif=@dgm={0x25, 0x3}}) io_uring_enter(0xffffffffffffffff, 0x2920, 0x0, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) [ 25.374279][ T3099] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.376340][ T3105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.392257][ T3105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.401012][ T3105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.409749][ T3105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.418652][ T3175] ================================================================== [ 25.422904][ T3125] veth1_macvtap: entered promiscuous mode [ 25.426723][ T3175] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 25.440728][ T3175] [ 25.443045][ T3175] write to 0xffffea000432e798 of 8 bytes by task 3095 on cpu 1: [ 25.450737][ T3175] delete_from_page_cache_batch+0x309/0x710 [ 25.456614][ T3175] truncate_inode_pages_range+0x1c5/0x6b0 [ 25.462316][ T3175] truncate_inode_pages+0x24/0x30 [ 25.467331][ T3175] blkdev_flush_mapping+0xc2/0x1c0 [ 25.472422][ T3175] bdev_release+0x2f4/0x410 [ 25.476903][ T3175] blkdev_release+0x15/0x20 [ 25.481382][ T3175] __fput+0x2c1/0x660 [ 25.485345][ T3175] ____fput+0x15/0x20 [ 25.489306][ T3175] task_work_run+0x13a/0x1a0 [ 25.493881][ T3175] syscall_exit_to_user_mode+0xbe/0x130 [ 25.499409][ T3175] do_syscall_64+0xda/0x1d0 [ 25.503896][ T3175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 25.509770][ T3175] [ 25.512083][ T3175] read to 0xffffea000432e798 of 8 bytes by task 3175 on cpu 0: [ 25.519608][ T3175] folio_mapping+0x96/0x110 [ 25.524117][ T3175] lru_add_fn+0x8d/0x430 [ 25.528390][ T3175] folio_batch_move_lru+0x20c/0x2c0 [ 25.533575][ T3175] lru_add_drain_cpu+0x77/0x260 [ 25.538406][ T3175] lru_add_drain_per_cpu+0x26/0x80 [ 25.543498][ T3175] process_scheduled_works+0x465/0x990 [ 25.548954][ T3175] worker_thread+0x526/0x730 [ 25.553527][ T3175] kthread+0x1d1/0x210 [ 25.557590][ T3175] ret_from_fork+0x4b/0x60 [ 25.561985][ T3175] ret_from_fork_asm+0x1a/0x30 [ 25.566824][ T3175] [ 25.569137][ T3175] value changed: 0xffff8881004c11a0 -> 0x0000000000000000 [ 25.576220][ T3175] [ 25.578545][ T3175] Reported by Kernel Concurrency Sanitizer on: [ 25.584670][ T3175] CPU: 0 PID: 3175 Comm: kworker/0:4 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 [ 25.594727][ T3175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 25.604781][ T3175] Workqueue: mm_percpu_wq lru_add_drain_per_cpu [ 25.611011][ T3175] ================================================================== [ 25.632212][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.642756][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.652719][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.663127][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.672934][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.683386][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.693183][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 25.703603][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.714620][ T3125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.723605][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.734245][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.744082][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.754606][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.764422][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.774914][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.784765][ T3125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 25.795257][ T3125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 25.807303][ T3125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.816528][ T3125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.825241][ T3125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.833983][ T3125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.842747][ T3125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.918351][ T3262] sit0: entered promiscuous mode [ 25.938861][ T3262] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 25.946991][ T3262] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 25.966483][ T3268] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 25.988533][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 25.988548][ T28] audit: type=1400 audit(1715444181.121:160): avc: denied { read } for pid=3270 comm="syz-executor.1" name="rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.063983][ T28] audit: type=1400 audit(1715444181.151:161): avc: denied { open } for pid=3270 comm="syz-executor.1" path="/dev/rtc0" dev="devtmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.072728][ T3277] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 26.087800][ T28] audit: type=1400 audit(1715444181.151:162): avc: denied { ioctl } for pid=3270 comm="syz-executor.1" path="/dev/rtc0" dev="devtmpfs" ino=219 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 26.101873][ T3276] loop0: detected capacity change from 0 to 512 [ 26.120952][ T28] audit: type=1400 audit(1715444181.151:163): avc: denied { read } for pid=3267 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.147252][ T28] audit: type=1400 audit(1715444181.181:164): avc: denied { create } for pid=3272 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.165000][ T3279] loop1: detected capacity change from 0 to 2048 [ 26.184169][ T3276] ext3: Unknown parameter 'noacl' [ 26.190949][ T3276] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 26.191967][ T28] audit: type=1400 audit(1715444181.281:165): avc: denied { create } for pid=3272 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.200329][ T3276] IPv6: NLM_F_CREATE should be specified when creating new route [ 26.228012][ T28] audit: type=1400 audit(1715444181.321:166): avc: denied { write } for pid=3267 comm="syz-executor.4" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 26.258495][ T28] audit: type=1400 audit(1715444181.331:167): avc: denied { map } for pid=3264 comm="syz-executor.3" path="/sys/class/memstick_host" dev="sysfs" ino=18903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 26.296378][ T3279] loop1: p1 < > p4 [ 26.300922][ T3279] loop1: p4 size 8388608 extends beyond EOD, truncated [ 26.302702][ T28] audit: type=1400 audit(1715444181.421:168): avc: denied { getopt } for pid=3273 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 26.327923][ T28] audit: type=1400 audit(1715444181.431:169): avc: denied { ioctl } for pid=3281 comm="syz-executor.3" path="socket:[2990]" dev="sockfs" ino=2990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.330308][ T3276] syz-executor.0 (3276) used greatest stack depth: 11328 bytes left [ 26.338530][ T2785] loop1: p1 < > p4 [ 26.376277][ T2785] loop1: p4 size 8388608 extends beyond EOD, truncated [ 26.416909][ T3075] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 26.437743][ T3075] udevd[3075]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 26.450543][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 26.460949][ T3295] loop0: detected capacity change from 0 to 512 [ 26.477098][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 26.477882][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 26.517319][ T3086] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 26.552344][ T3307] 9pnet_fd: Insufficient options for proto=fd [ 26.590232][ T3262] syz-executor.2 (3262) used greatest stack depth: 11056 bytes left [ 26.809057][ T3277] syz-executor.4 (3277) used greatest stack depth: 10464 bytes left