[ 35.936220][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 46.006406][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 46.006424][ T26] audit: type=1400 audit(1670224896.893:73): avc: denied { transition } for pid=3422 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.035216][ T26] audit: type=1400 audit(1670224896.903:74): avc: denied { write } for pid=3422 comm="sh" path="pipe:[28172]" dev="pipefs" ino=28172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 76.228136][ T13] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. [ 530.372531][ T26] audit: type=1400 audit(1670225381.253:75): avc: denied { execmem } for pid=3664 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 530.394892][ T26] audit: type=1400 audit(1670225381.253:76): avc: denied { mounton } for pid=3665 comm="syz-executor189" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 530.419386][ T26] audit: type=1400 audit(1670225381.253:77): avc: denied { mount } for pid=3665 comm="syz-executor189" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 530.442210][ T26] audit: type=1400 audit(1670225381.253:78): avc: denied { mounton } for pid=3665 comm="syz-executor189" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 530.478286][ T3665] chnl_net:caif_netlink_parms(): no params data found [ 530.522711][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.529937][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.538757][ T3665] device bridge_slave_0 entered promiscuous mode [ 530.547769][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.555521][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.563518][ T3665] device bridge_slave_1 entered promiscuous mode [ 530.585441][ T3665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.596429][ T3665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.620600][ T3665] team0: Port device team_slave_0 added [ 530.629684][ T3665] team0: Port device team_slave_1 added [ 530.649954][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.657055][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.683021][ T3665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.695998][ T3665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.703045][ T3665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.729033][ T3665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.758798][ T3665] device hsr_slave_0 entered promiscuous mode [ 530.765893][ T3665] device hsr_slave_1 entered promiscuous mode [ 530.858636][ T26] audit: type=1400 audit(1670225381.743:79): avc: denied { create } for pid=3665 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.862740][ T3665] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 530.880288][ T26] audit: type=1400 audit(1670225381.743:80): avc: denied { write } for pid=3665 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.907121][ T26] audit: type=1400 audit(1670225381.743:81): avc: denied { read } for pid=3665 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 530.911470][ T3665] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.936883][ T3665] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.947159][ T3665] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.970774][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.977971][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.986005][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.993144][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.038498][ T3665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.050625][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.061494][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.070538][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.080502][ T3673] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 531.096197][ T3665] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.107197][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.115641][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.122699][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.146288][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.154922][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.161987][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.170343][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.178896][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.195904][ T3665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.206436][ T3665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.220140][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.228064][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.237099][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.246295][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 531.267207][ T3665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.276274][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.284001][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.307483][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.322741][ T3665] device veth0_vlan entered promiscuous mode [ 531.331151][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 531.339717][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 531.348265][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 531.359780][ T3665] device veth1_vlan entered promiscuous mode [ 531.378293][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 531.386371][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 531.394809][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.410257][ T3665] device veth0_macvtap entered promiscuous mode [ 531.419904][ T3665] device veth1_macvtap entered promiscuous mode [ 531.435606][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.444515][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 531.455385][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 531.465964][ T3665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.475344][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.484518][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.494865][ T3665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.506027][ T3665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.515339][ T3665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.524783][ T3665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program [ 531.561808][ T26] audit: type=1400 audit(1670225382.443:82): avc: denied { mounton } for pid=3665 comm="syz-executor189" path="/dev/binderfs" dev="devtmpfs" ino=2322 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 531.586811][ T26] audit: type=1400 audit(1670225382.443:83): avc: denied { mount } for pid=3665 comm="syz-executor189" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 531.623208][ T26] audit: type=1400 audit(1670225382.483:84): avc: denied { create } for pid=3678 comm="syz-executor189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 535.336823][ C1] hrtimer: interrupt took 3747514493 ns [ 683.792821][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz-executor189:3665] [ 683.801607][ C0] Modules linked in: [ 683.805508][ C0] irq event stamp: 202716 [ 683.809832][ C0] hardirqs last enabled at (202715): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 683.820778][ C0] hardirqs last disabled at (202716): [] sysvec_apic_timer_interrupt+0xf/0xc0 [ 683.831227][ C0] softirqs last enabled at (173766): [] __irq_exit_rcu+0x123/0x180 [ 683.840799][ C0] softirqs last disabled at (173711): [] __irq_exit_rcu+0x123/0x180 [ 683.850918][ C0] CPU: 0 PID: 3665 Comm: syz-executor189 Not tainted 6.1.0-rc7-syzkaller-00200-gc2bf05db6c78 #0 [ 683.861339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 683.871405][ C0] RIP: 0010:smp_call_function_many_cond+0x43f/0x10a0 [ 683.878099][ C0] Code: e6 e8 95 f7 0a 00 45 85 e4 74 48 48 8b 04 24 49 89 c5 83 e0 07 49 c1 ed 03 49 89 c4 4d 01 fd 41 83 c4 03 e8 c3 fa 0a 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 4e 0a 00 00 8b 43 08 31 [ 683.897718][ C0] RSP: 0018:ffffc900035177e0 EFLAGS: 00000293 [ 683.903801][ C0] RAX: 0000000000000000 RBX: ffff8880b9b3f120 RCX: 0000000000000000 [ 683.911780][ C0] RDX: ffff88807d560000 RSI: ffffffff8174421d RDI: 0000000000000005 [ 683.919763][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 683.927844][ C0] R10: 0000000000000001 R11: 0000000000092080 R12: 0000000000000003 [ 683.935823][ C0] R13: ffffed1017367e25 R14: 0000000000000001 R15: dffffc0000000000 [ 683.943804][ C0] FS: 0000555556ea9300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 683.952746][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.959350][ C0] CR2: 00007f1626c6d370 CR3: 00000000793ae000 CR4: 00000000003506f0 [ 683.967333][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.975334][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.983406][ C0] Call Trace: [ 683.986692][ C0] [ 683.989640][ C0] ? leave_mm+0x40/0x40 [ 683.993819][ C0] ? smp_call_on_cpu+0x250/0x250 [ 683.998773][ C0] ? leave_mm+0x40/0x40 [ 684.002953][ C0] on_each_cpu_cond_mask+0x5a/0xa0 [ 684.008079][ C0] flush_tlb_mm_range+0x333/0x4d0 [ 684.013123][ C0] dup_mmap+0xae1/0x10b0 [ 684.017394][ C0] ? replace_mm_exe_file+0x4b0/0x4b0 [ 684.022692][ C0] ? do_raw_spin_unlock+0x175/0x230 [ 684.027913][ C0] ? lockdep_init_map_type+0x21e/0x800 [ 684.033394][ C0] ? __init_rwsem+0x12d/0x1b0 [ 684.038087][ C0] dup_mm+0x91/0x370 [ 684.042280][ C0] copy_process+0x3bc6/0x7190 [ 684.046977][ C0] ? __cleanup_sighand+0xb0/0xb0 [ 684.051929][ C0] kernel_clone+0xeb/0x980 [ 684.056361][ C0] ? create_io_thread+0xf0/0xf0 [ 684.061222][ C0] ? kill_orphaned_pgrp+0x320/0x320 [ 684.066440][ C0] ? nanosleep_copyout+0x110/0x110 [ 684.071568][ C0] __do_sys_clone+0xba/0x100 [ 684.076178][ C0] ? kernel_clone+0x980/0x980 [ 684.081044][ C0] ? syscall_enter_from_user_mode+0x26/0xb0 [ 684.086956][ C0] do_syscall_64+0x39/0xb0 [ 684.091385][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 684.097305][ C0] RIP: 0033:0x7f1626bee90b [ 684.101740][ C0] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 684.121374][ C0] RSP: 002b:00007ffe55f753b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 684.129805][ C0] RAX: ffffffffffffffda RBX: 00007ffe55f753f0 RCX: 00007f1626bee90b [ 684.137788][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 684.145773][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556ea9300 [ 684.153753][ C0] R10: 0000555556ea95d0 R11: 0000000000000246 R12: 0000000000000000 [ 684.161744][ C0] R13: 00000000000f4240 R14: 0000000000081c66 R15: 00007ffe55f753d4 [ 684.169732][ C0] [ 684.172770][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 684.179444][ C0] CPU: 0 PID: 3665 Comm: syz-executor189 Tainted: G L 6.1.0-rc7-syzkaller-00200-gc2bf05db6c78 #0 [ 684.191343][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 684.201405][ C0] Call Trace: [ 684.204692][ C0] [ 684.207563][ C0] dump_stack_lvl+0xd1/0x138 [ 684.212226][ C0] panic+0x2cc/0x626 [ 684.216146][ C0] ? panic_print_sys_info.part.0+0x110/0x110 [ 684.222232][ C0] ? watchdog_timer_fn.cold+0x5/0x25 [ 684.227551][ C0] watchdog_timer_fn.cold+0x16/0x25 [ 684.232776][ C0] ? softlockup_fn+0xb0/0xb0 [ 684.237385][ C0] __hrtimer_run_queues+0x1c6/0xfb0 [ 684.242602][ C0] ? hrtimer_sleeper_start_expires+0x80/0x80 [ 684.248601][ C0] ? ktime_get_update_offsets_now+0x3ef/0x5c0 [ 684.254690][ C0] hrtimer_interrupt+0x320/0x790 [ 684.259643][ C0] __sysvec_apic_timer_interrupt+0x180/0x640 [ 684.265656][ C0] sysvec_apic_timer_interrupt+0x92/0xc0 [ 684.271330][ C0] [ 684.274292][ C0] [ 684.277232][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 684.283251][ C0] RIP: 0010:smp_call_function_many_cond+0x43f/0x10a0 [ 684.289945][ C0] Code: e6 e8 95 f7 0a 00 45 85 e4 74 48 48 8b 04 24 49 89 c5 83 e0 07 49 c1 ed 03 49 89 c4 4d 01 fd 41 83 c4 03 e8 c3 fa 0a 00 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 4e 0a 00 00 8b 43 08 31 [ 684.309576][ C0] RSP: 0018:ffffc900035177e0 EFLAGS: 00000293 [ 684.315673][ C0] RAX: 0000000000000000 RBX: ffff8880b9b3f120 RCX: 0000000000000000 [ 684.323658][ C0] RDX: ffff88807d560000 RSI: ffffffff8174421d RDI: 0000000000000005 [ 684.331731][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 684.339736][ C0] R10: 0000000000000001 R11: 0000000000092080 R12: 0000000000000003 [ 684.347816][ C0] R13: ffffed1017367e25 R14: 0000000000000001 R15: dffffc0000000000 [ 684.355816][ C0] ? smp_call_function_many_cond+0x43d/0x10a0 [ 684.361916][ C0] ? leave_mm+0x40/0x40 [ 684.366091][ C0] ? smp_call_on_cpu+0x250/0x250 [ 684.371045][ C0] ? leave_mm+0x40/0x40 [ 684.375218][ C0] on_each_cpu_cond_mask+0x5a/0xa0 [ 684.380351][ C0] flush_tlb_mm_range+0x333/0x4d0 [ 684.385396][ C0] dup_mmap+0xae1/0x10b0 [ 684.389652][ C0] ? replace_mm_exe_file+0x4b0/0x4b0 [ 684.394952][ C0] ? do_raw_spin_unlock+0x175/0x230 [ 684.400177][ C0] ? lockdep_init_map_type+0x21e/0x800 [ 684.405660][ C0] ? __init_rwsem+0x12d/0x1b0 [ 684.410358][ C0] dup_mm+0x91/0x370 [ 684.414305][ C0] copy_process+0x3bc6/0x7190 [ 684.419000][ C0] ? __cleanup_sighand+0xb0/0xb0 [ 684.423963][ C0] kernel_clone+0xeb/0x980 [ 684.428391][ C0] ? create_io_thread+0xf0/0xf0 [ 684.433252][ C0] ? kill_orphaned_pgrp+0x320/0x320 [ 684.438470][ C0] ? nanosleep_copyout+0x110/0x110 [ 684.443603][ C0] __do_sys_clone+0xba/0x100 [ 684.448207][ C0] ? kernel_clone+0x980/0x980 [ 684.452898][ C0] ? syscall_enter_from_user_mode+0x26/0xb0 [ 684.458822][ C0] do_syscall_64+0x39/0xb0 [ 684.463283][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 684.469233][ C0] RIP: 0033:0x7f1626bee90b [ 684.473834][ C0] Code: ed 0f 85 60 01 00 00 64 4c 8b 0c 25 10 00 00 00 45 31 c0 4d 8d 91 d0 02 00 00 31 d2 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 89 00 00 00 41 89 c5 85 c0 0f 85 90 00 00 [ 684.493471][ C0] RSP: 002b:00007ffe55f753b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 684.501912][ C0] RAX: ffffffffffffffda RBX: 00007ffe55f753f0 RCX: 00007f1626bee90b [ 684.509894][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 684.517875][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000555556ea9300 [ 684.525862][ C0] R10: 0000555556ea95d0 R11: 0000000000000246 R12: 0000000000000000 [ 684.533844][ C0] R13: 00000000000f4240 R14: 0000000000081c66 R15: 00007ffe55f753d4 [ 684.541829][ C0] [ 685.643169][ C0] Shutting down cpus with NMI [ 685.648038][ C0] Kernel Offset: disabled [ 685.652418][ C0] Rebooting in 86400 seconds..