[ 97.555713][ T785] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2024/05/26 00:22:48 fuzzer started 2024/05/26 00:22:49 dialing manager at 10.128.0.169:30006 [ 102.055094][ T29] audit: type=1400 audit(1716682969.031:87): avc: denied { node_bind } for pid=5078 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 102.077082][ T29] audit: type=1400 audit(1716682969.041:88): avc: denied { name_bind } for pid=5078 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 102.502317][ T29] audit: type=1400 audit(1716682969.481:89): avc: denied { mounton } for pid=5088 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 102.565631][ T29] audit: type=1400 audit(1716682969.511:90): avc: denied { mount } for pid=5088 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 102.624728][ T5089] cgroup: Unknown subsys name 'net' [ 102.632296][ T29] audit: type=1400 audit(1716682969.511:91): avc: denied { setattr } for pid=5090 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.683296][ T29] audit: type=1400 audit(1716682969.571:92): avc: denied { create } for pid=5094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.727121][ T29] audit: type=1400 audit(1716682969.571:93): avc: denied { write } for pid=5094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.749307][ T29] audit: type=1400 audit(1716682969.581:94): avc: denied { read } for pid=5094 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 102.770991][ T29] audit: type=1400 audit(1716682969.591:95): avc: denied { mounton } for pid=5089 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 102.794911][ T29] audit: type=1400 audit(1716682969.601:96): avc: denied { mount } for pid=5089 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.845771][ T5098] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 102.978937][ T5089] cgroup: Unknown subsys name 'rlimit' 2024/05/26 00:22:51 starting 5 executor processes [ 104.787010][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.738393][ T5108] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.747311][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.775479][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.783889][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.793098][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.805868][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.814740][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.823893][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.848570][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.848985][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.856874][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.864550][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.878164][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.879362][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.888748][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.893309][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.901048][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.907228][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.924215][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.932956][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.940196][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.940587][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.947365][ T5121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.962886][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.966416][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.974534][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 106.977869][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.986572][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.998833][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 107.018151][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.718219][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 107.718249][ T29] audit: type=1400 audit(1716682974.701:114): avc: denied { module_request } for pid=5106 comm="syz-executor.0" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 107.927054][ T5106] chnl_net:caif_netlink_parms(): no params data found [ 108.140280][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 108.198203][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 108.462184][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 108.641790][ T5106] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.649275][ T5106] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.657636][ T5106] bridge_slave_0: entered allmulticast mode [ 108.667209][ T5106] bridge_slave_0: entered promiscuous mode [ 108.719494][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 108.751929][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.759831][ T5106] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.767295][ T5106] bridge_slave_1: entered allmulticast mode [ 108.775687][ T5106] bridge_slave_1: entered promiscuous mode [ 108.784395][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.791637][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.799099][ T5107] bridge_slave_0: entered allmulticast mode [ 108.807309][ T5107] bridge_slave_0: entered promiscuous mode [ 108.819176][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.826480][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.834742][ T5113] bridge_slave_0: entered allmulticast mode [ 108.843588][ T5113] bridge_slave_0: entered promiscuous mode [ 108.939032][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.946647][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.954966][ T5107] bridge_slave_1: entered allmulticast mode [ 108.963101][ T5107] bridge_slave_1: entered promiscuous mode [ 108.970860][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.978221][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.985645][ T5113] bridge_slave_1: entered allmulticast mode [ 108.993903][ T5113] bridge_slave_1: entered promiscuous mode [ 109.025149][ T5106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.073757][ T5115] Bluetooth: hci1: command tx timeout [ 109.073756][ T5123] Bluetooth: hci3: command tx timeout [ 109.079920][ T53] Bluetooth: hci0: command tx timeout [ 109.091540][ T5111] Bluetooth: hci2: command tx timeout [ 109.153962][ T53] Bluetooth: hci4: command tx timeout [ 109.167807][ T5106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.200798][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.224552][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.231988][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.240269][ T5112] bridge_slave_0: entered allmulticast mode [ 109.250013][ T5112] bridge_slave_0: entered promiscuous mode [ 109.284181][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.298238][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.373649][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.380951][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.393701][ T5112] bridge_slave_1: entered allmulticast mode [ 109.403242][ T5112] bridge_slave_1: entered promiscuous mode [ 109.459240][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.521439][ T5113] team0: Port device team_slave_0 added [ 109.528325][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.537234][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.544812][ T5116] bridge_slave_0: entered allmulticast mode [ 109.553556][ T5116] bridge_slave_0: entered promiscuous mode [ 109.591872][ T5106] team0: Port device team_slave_0 added [ 109.605890][ T5106] team0: Port device team_slave_1 added [ 109.638485][ T5113] team0: Port device team_slave_1 added [ 109.667338][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.674795][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.682265][ T5116] bridge_slave_1: entered allmulticast mode [ 109.690712][ T5116] bridge_slave_1: entered promiscuous mode [ 109.720931][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.755909][ T5107] team0: Port device team_slave_0 added [ 109.771343][ T5107] team0: Port device team_slave_1 added [ 109.822829][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.875605][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.883062][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.909291][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.926583][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.939020][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.946851][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.972874][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.028701][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.035810][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.062026][ T5106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.079116][ T5106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.086219][ T5106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.112416][ T5106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.153101][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.244991][ T5112] team0: Port device team_slave_0 added [ 110.298491][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.306189][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.334588][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.377608][ T5112] team0: Port device team_slave_1 added [ 110.391083][ T5113] hsr_slave_0: entered promiscuous mode [ 110.398910][ T5113] hsr_slave_1: entered promiscuous mode [ 110.411160][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.419336][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.446114][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.577794][ T5116] team0: Port device team_slave_0 added [ 110.630498][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.638803][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.667049][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.715928][ T5116] team0: Port device team_slave_1 added [ 110.754725][ T5106] hsr_slave_0: entered promiscuous mode [ 110.761827][ T5106] hsr_slave_1: entered promiscuous mode [ 110.768759][ T5106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.777549][ T5106] Cannot create hsr debugfs directory [ 110.786203][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.793861][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.820562][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.944981][ T5107] hsr_slave_0: entered promiscuous mode [ 110.954041][ T5107] hsr_slave_1: entered promiscuous mode [ 110.961291][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.969949][ T5107] Cannot create hsr debugfs directory [ 110.976814][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.983848][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.010000][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.099707][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.106783][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.133532][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.152609][ T53] Bluetooth: hci0: command tx timeout [ 111.152628][ T5111] Bluetooth: hci1: command tx timeout [ 111.152682][ T5111] Bluetooth: hci2: command tx timeout [ 111.158052][ T53] Bluetooth: hci3: command tx timeout [ 111.233175][ T53] Bluetooth: hci4: command tx timeout [ 111.325442][ T5112] hsr_slave_0: entered promiscuous mode [ 111.333872][ T5112] hsr_slave_1: entered promiscuous mode [ 111.340543][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.349061][ T5112] Cannot create hsr debugfs directory [ 111.547674][ T5116] hsr_slave_0: entered promiscuous mode [ 111.555381][ T5116] hsr_slave_1: entered promiscuous mode [ 111.562706][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.570661][ T5116] Cannot create hsr debugfs directory [ 112.044982][ T5113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.116229][ T5113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.164509][ T5113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.214769][ T5113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 112.265769][ T5106] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.286380][ T5106] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.302945][ T5106] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.323197][ T5106] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.500929][ T5107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.529056][ T5107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.544724][ T5107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.576491][ T5107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.756748][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.770293][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.787157][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.801925][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.025326][ T5106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.035683][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.087379][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.094734][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.113753][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.151255][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.211665][ T5106] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.233633][ T5123] Bluetooth: hci0: command tx timeout [ 113.239123][ T5123] Bluetooth: hci1: command tx timeout [ 113.245266][ T5111] Bluetooth: hci3: command tx timeout [ 113.250820][ T53] Bluetooth: hci2: command tx timeout [ 113.314533][ T53] Bluetooth: hci4: command tx timeout [ 113.337913][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.366237][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.374203][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.391883][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.399650][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.508722][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.516118][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.533722][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.541029][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.606089][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.675899][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.737105][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.744410][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.806263][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.813528][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.912292][ T5106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.981307][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.059935][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.093639][ T29] audit: type=1400 audit(1716682981.071:115): avc: denied { sys_module } for pid=5106 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 114.141566][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.228711][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.245395][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.311397][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.318725][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.365704][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.373026][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.488979][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.496340][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.547971][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.555344][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.820868][ T5106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.894785][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.940818][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.214907][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.235058][ T5106] veth0_vlan: entered promiscuous mode [ 115.316170][ T53] Bluetooth: hci2: command tx timeout [ 115.316190][ T5123] Bluetooth: hci3: command tx timeout [ 115.316247][ T5123] Bluetooth: hci1: command tx timeout [ 115.322963][ T5111] Bluetooth: hci0: command tx timeout [ 115.377654][ T5106] veth1_vlan: entered promiscuous mode [ 115.394726][ T5111] Bluetooth: hci4: command tx timeout [ 115.508625][ T5113] veth0_vlan: entered promiscuous mode [ 115.582006][ T5113] veth1_vlan: entered promiscuous mode [ 115.620787][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.666167][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.712729][ T5106] veth0_macvtap: entered promiscuous mode [ 115.729593][ T5107] veth0_vlan: entered promiscuous mode [ 115.782112][ T5106] veth1_macvtap: entered promiscuous mode [ 115.841358][ T5107] veth1_vlan: entered promiscuous mode [ 115.885881][ T5113] veth0_macvtap: entered promiscuous mode [ 115.906744][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.929032][ T5113] veth1_macvtap: entered promiscuous mode [ 115.998809][ T5106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.047738][ T5106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.057796][ T5106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.068631][ T5106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.091842][ T5106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.176300][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.188903][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.209440][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.252613][ T5112] veth0_vlan: entered promiscuous mode [ 116.286536][ T5112] veth1_vlan: entered promiscuous mode [ 116.315301][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.326169][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.345470][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.386490][ T5113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.396416][ T5113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.406211][ T5113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.417814][ T5113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.435433][ T5107] veth0_macvtap: entered promiscuous mode [ 116.496698][ T5107] veth1_macvtap: entered promiscuous mode [ 116.691488][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.707662][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.718469][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.731505][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.743338][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.754644][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.767983][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.780163][ T5116] veth0_vlan: entered promiscuous mode [ 116.791483][ T5112] veth0_macvtap: entered promiscuous mode [ 116.820732][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.831686][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.843724][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.854685][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.868147][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.886086][ T5107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.895237][ T5107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.904400][ T5107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.913209][ T5107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.931326][ T5112] veth1_macvtap: entered promiscuous mode [ 117.021874][ T5116] veth1_vlan: entered promiscuous mode [ 117.057378][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.071077][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.109009][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.130128][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.169833][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.187655][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.199574][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.210893][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.221915][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.233557][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.245611][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.303431][ T29] audit: type=1400 audit(1716682984.291:116): avc: denied { mounton } for pid=5106 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 117.340602][ T29] audit: type=1400 audit(1716682984.291:117): avc: denied { mount } for pid=5106 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 117.362451][ T5151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.384841][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.399011][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.399856][ T5151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.413075][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.428975][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.439025][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.450301][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.472585][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.487137][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.497409][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.506283][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.515905][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 3: socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0x6}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x7, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 117.702220][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.710157][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) mlockall(0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_INO_PATHS(r1, 0x8915, &(0x7f0000000040)={0x0, 0x0, [], 0x0}) msgctl$MSG_INFO(r0, 0xc, 0x0) [ 117.743038][ T5116] veth0_macvtap: entered promiscuous mode [ 117.759153][ T29] audit: type=1400 audit(1716682984.741:118): avc: denied { read write } for pid=5113 comm="syz-executor.3" name="loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.845722][ T5116] veth1_macvtap: entered promiscuous mode [ 117.862324][ T29] audit: type=1400 audit(1716682984.741:119): avc: denied { open } for pid=5113 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.952640][ T29] audit: type=1400 audit(1716682984.741:120): avc: denied { ioctl } for pid=5113 comm="syz-executor.3" path="/dev/loop3" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.057426][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.112869][ T29] audit: type=1400 audit(1716682984.911:121): avc: denied { create } for pid=5191 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.162374][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.258480][ T29] audit: type=1400 audit(1716682984.921:122): avc: denied { map_create } for pid=5191 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.348164][ T29] audit: type=1400 audit(1716682984.921:123): avc: denied { map_read map_write } for pid=5191 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.410344][ T29] audit: type=1400 audit(1716682984.931:124): avc: denied { prog_load } for pid=5191 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.452689][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.472878][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.502140][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.532176][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.552167][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.567486][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.577856][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.591691][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.606574][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.631239][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.660926][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.686729][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 1: ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000180)={0x6d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 118.725414][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.752508][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.772771][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.795952][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 1: r0 = eventfd(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x5450, 0x0) [ 118.816580][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.840335][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.860241][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.901976][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x6e6bbd, 0x0, 0x1}}, 0xb8}}, 0x0) [ 119.076014][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x103042, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9000, 0x0, 0x0) pwritev2(r0, &(0x7f0000000880)=[{&(0x7f00000002c0)='u', 0x1}], 0x1, 0x7fff, 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x6000, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0xfffd) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000b00)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 119.137388][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.152142][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.160968][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.382179][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 119.382201][ T29] audit: type=1400 audit(1716682986.361:131): avc: denied { create } for pid=5206 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.420035][ T5151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.478508][ T5151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) [ 119.545078][ T29] audit: type=1400 audit(1716682986.371:132): avc: denied { write } for pid=5206 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.671580][ T29] audit: type=1400 audit(1716682986.371:133): avc: denied { nlmsg_write } for pid=5206 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.862424][ T5209] syz-executor.3[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) [ 119.862689][ T5209] syz-executor.3[5209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.031003][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) mlockall(0x1) getpeername(0xffffffffffffffff, &(0x7f0000000040)=@alg, 0x0) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/7) [ 120.123560][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.229255][ T29] audit: type=1400 audit(1716682987.181:134): avc: denied { ioctl } for pid=5211 comm="syz-executor.2" path="socket:[7243]" dev="sockfs" ino=7243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) [ 120.451136][ T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.482500][ T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) [ 120.973487][ T29] audit: type=1400 audit(1716682987.961:135): avc: denied { create } for pid=5218 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.069891][ T29] audit: type=1400 audit(1716682987.961:136): avc: denied { bind } for pid=5218 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 executing program 4: syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 121.153716][ T29] audit: type=1400 audit(1716682987.961:137): avc: denied { accept } for pid=5218 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 121.186092][ T45] [ 121.188467][ T45] ====================================================== [ 121.195485][ T45] WARNING: possible circular locking dependency detected [ 121.202585][ T45] 6.9.0-syzkaller-12277-g56fb6f92854f #0 Not tainted [ 121.209255][ T45] ------------------------------------------------------ [ 121.216354][ T45] kworker/1:1/45 is trying to acquire lock: [ 121.222259][ T45] ffff8880b9329558 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0xda/0xbe0 [ 121.230841][ T45] [ 121.230841][ T45] but task is already holding lock: [ 121.238212][ T45] ffff8880b932a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 121.247017][ T45] [ 121.247017][ T45] which lock already depends on the new lock. [ 121.247017][ T45] [ 121.257428][ T45] [ 121.257428][ T45] the existing dependency chain (in reverse order) is: [ 121.266449][ T45] [ 121.266449][ T45] -> #1 (&base->lock){-.-.}-{2:2}: [ 121.273759][ T45] _raw_spin_lock_irqsave+0x3a/0x60 [ 121.279519][ T45] lock_timer_base+0x5d/0x220 [ 121.284748][ T45] __mod_timer+0x426/0xdc0 [ 121.289729][ T45] add_timer_global+0x8a/0xc0 [ 121.294934][ T45] __queue_delayed_work+0x1ba/0x2e0 [ 121.300767][ T45] queue_delayed_work_on+0x12a/0x150 [ 121.306584][ T45] kvfree_call_rcu+0x749/0xbe0 [ 121.311903][ T45] rtnl_register_internal+0x343/0x670 [ 121.317820][ T45] rtnl_register+0x34/0x80 [ 121.322758][ T45] ip_rt_init+0x34a/0x450 [ 121.327618][ T45] ip_init+0xe/0x20 [ 121.332050][ T45] inet_init+0x3f0/0x6f0 [ 121.336832][ T45] do_one_initcall+0x128/0x700 [ 121.342136][ T45] kernel_init_freeable+0x69d/0xca0 [ 121.347861][ T45] kernel_init+0x1c/0x2b0 [ 121.352723][ T45] ret_from_fork+0x45/0x80 [ 121.357677][ T45] ret_from_fork_asm+0x1a/0x30 [ 121.363069][ T45] [ 121.363069][ T45] -> #0 (krc.lock){..-.}-{2:2}: [ 121.370113][ T45] __lock_acquire+0x2478/0x3b30 [ 121.375516][ T45] lock_acquire+0x1b1/0x560 [ 121.380553][ T45] _raw_spin_lock+0x2e/0x40 [ 121.385587][ T45] kvfree_call_rcu+0xda/0xbe0 [ 121.390826][ T45] trie_delete_elem+0x5c5/0x820 [ 121.396232][ T45] ___bpf_prog_run+0x3e51/0xabd0 [ 121.401700][ T45] __bpf_prog_run32+0xc1/0x100 [ 121.407018][ T45] bpf_trace_run2+0x231/0x590 [ 121.412233][ T45] __bpf_trace_timer_start+0xc7/0x100 [ 121.418143][ T45] enqueue_timer+0x2b4/0x550 [ 121.423273][ T45] __mod_timer+0x8d7/0xdc0 [ 121.428229][ T45] schedule_timeout+0x131/0x2a0 [ 121.433697][ T45] msleep+0x9c/0xd0 [ 121.438029][ T45] nsim_fib_event_work+0x1e8c/0x26e0 [ 121.443843][ T45] process_one_work+0x9fb/0x1b60 [ 121.449349][ T45] worker_thread+0x6c8/0xf70 [ 121.454467][ T45] kthread+0x2c1/0x3a0 [ 121.459075][ T45] ret_from_fork+0x45/0x80 [ 121.464037][ T45] ret_from_fork_asm+0x1a/0x30 [ 121.469343][ T45] [ 121.469343][ T45] other info that might help us debug this: [ 121.469343][ T45] [ 121.479566][ T45] Possible unsafe locking scenario: [ 121.479566][ T45] [ 121.487012][ T45] CPU0 CPU1 [ 121.492371][ T45] ---- ---- [ 121.497751][ T45] lock(&base->lock); [ 121.501823][ T45] lock(krc.lock); [ 121.508150][ T45] lock(&base->lock); [ 121.514741][ T45] lock(krc.lock); [ 121.518725][ T45] [ 121.518725][ T45] *** DEADLOCK *** [ 121.518725][ T45] [ 121.527241][ T45] 5 locks held by kworker/1:1/45: [ 121.532281][ T45] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12bf/0x1b60 [ 121.543223][ T45] #1: ffffc90000b57d80 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x957/0x1b60 [ 121.555720][ T45] #2: ffff88805b7f7240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x1bb/0x26e0 [ 121.566060][ T45] #3: ffff8880b932a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 121.575342][ T45] #4: ffffffff8dbb17e0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 121.585349][ T45] [ 121.585349][ T45] stack backtrace: [ 121.591269][ T45] CPU: 1 PID: 45 Comm: kworker/1:1 Not tainted 6.9.0-syzkaller-12277-g56fb6f92854f #0 [ 121.600847][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 121.611670][ T45] Workqueue: events nsim_fib_event_work [ 121.617791][ T45] Call Trace: [ 121.621103][ T45] [ 121.624047][ T45] dump_stack_lvl+0x116/0x1f0 [ 121.628765][ T45] check_noncircular+0x31a/0x400 [ 121.633836][ T45] ? __pfx_check_noncircular+0x10/0x10 [ 121.639384][ T45] ? lockdep_lock+0xc6/0x200 [ 121.644004][ T45] ? __pfx_lockdep_lock+0x10/0x10 [ 121.649061][ T45] ? stack_depot_save_flags+0x31b/0x8f0 [ 121.654645][ T45] __lock_acquire+0x2478/0x3b30 [ 121.659541][ T45] ? __pfx___lock_acquire+0x10/0x10 [ 121.664956][ T45] lock_acquire+0x1b1/0x560 [ 121.669680][ T45] ? kvfree_call_rcu+0xda/0xbe0 [ 121.674563][ T45] ? __pfx_lock_acquire+0x10/0x10 [ 121.679620][ T45] _raw_spin_lock+0x2e/0x40 [ 121.684156][ T45] ? kvfree_call_rcu+0xda/0xbe0 [ 121.689551][ T45] kvfree_call_rcu+0xda/0xbe0 [ 121.694259][ T45] ? hlock_class+0x4e/0x130 [ 121.698784][ T45] ? do_raw_spin_unlock+0x172/0x230 [ 121.704007][ T45] trie_delete_elem+0x5c5/0x820 [ 121.708987][ T45] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 121.714651][ T45] ___bpf_prog_run+0x3e51/0xabd0 [ 121.719614][ T45] __bpf_prog_run32+0xc1/0x100 [ 121.724400][ T45] ? __pfx___bpf_prog_run32+0x10/0x10 [ 121.729822][ T45] ? __pfx_lock_acquire+0x10/0x10 [ 121.734893][ T45] ? __pfx___cant_migrate+0x10/0x10 [ 121.740143][ T45] bpf_trace_run2+0x231/0x590 [ 121.744868][ T45] ? __pfx_bpf_trace_run2+0x10/0x10 [ 121.750106][ T45] ? do_raw_spin_unlock+0x172/0x230 [ 121.755343][ T45] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 121.761169][ T45] __bpf_trace_timer_start+0xc7/0x100 [ 121.766565][ T45] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 121.772581][ T45] ? _raw_spin_lock_irqsave+0x42/0x60 [ 121.777973][ T45] ? lock_timer_base+0x5d/0x220 [ 121.782884][ T45] enqueue_timer+0x2b4/0x550 [ 121.787603][ T45] __mod_timer+0x8d7/0xdc0 [ 121.792051][ T45] ? __pfx___mod_timer+0x10/0x10 [ 121.797128][ T45] ? find_held_lock+0x2d/0x110 [ 121.801921][ T45] ? lockdep_init_map_type+0x16d/0x7d0 [ 121.807408][ T45] ? msleep+0x5e/0xd0 [ 121.811394][ T45] ? msleep+0x5e/0xd0 [ 121.815379][ T45] schedule_timeout+0x131/0x2a0 [ 121.820243][ T45] ? __pfx_schedule_timeout+0x10/0x10 [ 121.825661][ T45] ? __pfx_process_timeout+0x10/0x10 [ 121.831330][ T45] ? __rhashtable_insert_fast.constprop.0.isra.0+0x979/0x1170 [ 121.838811][ T45] msleep+0x9c/0xd0 [ 121.842638][ T45] nsim_fib_event_work+0x1e8c/0x26e0 [ 121.847937][ T45] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 121.853579][ T45] process_one_work+0x9fb/0x1b60 [ 121.858631][ T45] ? __pfx_nsim_fib_event_work+0x10/0x10 [ 121.864324][ T45] ? __pfx_process_one_work+0x10/0x10 [ 121.869815][ T45] ? assign_work+0x1a0/0x250 [ 121.874655][ T45] worker_thread+0x6c8/0xf70 [ 121.879286][ T45] ? __kthread_parkme+0x148/0x220 [ 121.884330][ T45] ? __pfx_worker_thread+0x10/0x10 [ 121.889453][ T45] kthread+0x2c1/0x3a0 [ 121.893532][ T45] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.898745][ T45] ? __pfx_kthread+0x10/0x10 [ 121.903406][ T45] ret_from_fork+0x45/0x80 [ 121.907840][ T45] ? __pfx_kthread+0x10/0x10 [ 121.912441][ T45] ret_from_fork_asm+0x1a/0x30 [ 121.917247][ T45] 2024/05/26 00:23:09 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 122.338578][ T5223] loop4: detected capacity change from 0 to 47