Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 2024/12/15 10:04:51 ignoring optional flag "sandboxArg"="0" 2024/12/15 10:04:51 parsed 1 programs [ 105.695452][ T29] audit: type=1400 audit(1734257091.797:88): avc: denied { node_bind } for pid=5822 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 107.684040][ T29] audit: type=1400 audit(1734257093.787:89): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 107.688656][ T5828] cgroup: Unknown subsys name 'net' [ 107.707008][ T29] audit: type=1400 audit(1734257093.787:90): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.734484][ T29] audit: type=1400 audit(1734257093.817:91): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 107.906129][ T5828] cgroup: Unknown subsys name 'cpuset' [ 107.916696][ T5828] cgroup: Unknown subsys name 'rlimit' [ 108.040741][ T29] audit: type=1400 audit(1734257094.137:92): avc: denied { setattr } for pid=5828 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 108.083124][ T29] audit: type=1400 audit(1734257094.137:93): avc: denied { create } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.104429][ T29] audit: type=1400 audit(1734257094.137:94): avc: denied { write } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.125595][ T29] audit: type=1400 audit(1734257094.137:95): avc: denied { read } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.133489][ T5833] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 108.146372][ T29] audit: type=1400 audit(1734257094.147:96): avc: denied { mounton } for pid=5828 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 108.179471][ T29] audit: type=1400 audit(1734257094.147:97): avc: denied { mount } for pid=5828 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 109.077399][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 110.703511][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 110.703527][ T29] audit: type=1400 audit(1734257096.807:103): avc: denied { execmem } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.744066][ T29] audit: type=1400 audit(1734257096.807:104): avc: denied { read } for pid=5836 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.765659][ T29] audit: type=1400 audit(1734257096.807:105): avc: denied { open } for pid=5836 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.789620][ T29] audit: type=1400 audit(1734257096.807:106): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 110.818990][ T29] audit: type=1400 audit(1734257096.867:107): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 110.858022][ T29] audit: type=1400 audit(1734257096.867:108): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.858747][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.882466][ T29] audit: type=1400 audit(1734257096.867:109): avc: denied { mounton } for pid=5836 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 110.913777][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.920781][ T29] audit: type=1400 audit(1734257096.867:110): avc: denied { mount } for pid=5836 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.921443][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.943549][ T29] audit: type=1400 audit(1734257096.947:111): avc: denied { create } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 110.951232][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.970465][ T29] audit: type=1400 audit(1734257096.947:112): avc: denied { read write } for pid=5841 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 110.984937][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 111.010963][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.087098][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.239374][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.255897][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.286366][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.294350][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.162241][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 112.205841][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.215606][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.222764][ T5877] bridge_slave_0: entered allmulticast mode [ 112.241937][ T5877] bridge_slave_0: entered promiscuous mode [ 112.261343][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.268808][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.276037][ T5877] bridge_slave_1: entered allmulticast mode [ 112.282442][ T5877] bridge_slave_1: entered promiscuous mode [ 112.304771][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.316762][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.344090][ T5877] team0: Port device team_slave_0 added [ 112.351541][ T5877] team0: Port device team_slave_1 added [ 112.370420][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.378230][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.404522][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.416910][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.423926][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.449857][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.476975][ T5877] hsr_slave_0: entered promiscuous mode [ 112.483496][ T5877] hsr_slave_1: entered promiscuous mode [ 112.557686][ T5877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.567106][ T5877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.576694][ T5877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.586095][ T5877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 112.629206][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.650754][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.663709][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.671055][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.686123][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.693236][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.721666][ T5877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 112.732532][ T5877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.817847][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.847162][ T5877] veth0_vlan: entered promiscuous mode [ 112.859127][ T5877] veth1_vlan: entered promiscuous mode [ 112.879020][ T5877] veth0_macvtap: entered promiscuous mode [ 112.886773][ T5877] veth1_macvtap: entered promiscuous mode [ 112.901206][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.914759][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.925381][ T5877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.934263][ T5877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.942923][ T5877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.951743][ T5877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.048218][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.095454][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.180627][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.247699][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2024/12/15 10:05:00 executed programs: 0 [ 114.221231][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.229583][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.237750][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.245936][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.259258][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 114.266777][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.355044][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 114.394429][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.401719][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.409278][ T5918] bridge_slave_0: entered allmulticast mode [ 114.416207][ T5918] bridge_slave_0: entered promiscuous mode [ 114.423913][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.430969][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.438205][ T5918] bridge_slave_1: entered allmulticast mode [ 114.444790][ T5918] bridge_slave_1: entered promiscuous mode [ 114.463839][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.475876][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.499336][ T5918] team0: Port device team_slave_0 added [ 114.506832][ T5918] team0: Port device team_slave_1 added [ 114.523889][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.530851][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.557254][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.570547][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.579663][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.605979][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.634525][ T5918] hsr_slave_0: entered promiscuous mode [ 114.640669][ T5918] hsr_slave_1: entered promiscuous mode [ 114.646831][ T5918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.655287][ T5918] Cannot create hsr debugfs directory [ 116.333748][ T5844] Bluetooth: hci0: command tx timeout [ 116.612729][ T11] bridge_slave_1: left allmulticast mode [ 116.625559][ T11] bridge_slave_1: left promiscuous mode [ 116.632189][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.645009][ T11] bridge_slave_0: left allmulticast mode [ 116.650649][ T11] bridge_slave_0: left promiscuous mode [ 116.658012][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.841618][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.853073][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.862658][ T11] bond0 (unregistering): Released all slaves [ 116.890164][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 116.890180][ T29] audit: type=1400 audit(1734257102.987:134): avc: denied { search } for pid=5483 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.967068][ T11] hsr_slave_0: left promiscuous mode [ 116.976968][ T29] audit: type=1400 audit(1734257103.077:135): avc: denied { read } for pid=5929 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.001762][ T11] hsr_slave_1: left promiscuous mode [ 117.008656][ T29] audit: type=1400 audit(1734257103.077:136): avc: denied { open } for pid=5929 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.034001][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.035841][ T29] audit: type=1400 audit(1734257103.077:137): avc: denied { getattr } for pid=5929 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1706 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.041428][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.077331][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.085278][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.102692][ T11] veth1_macvtap: left promiscuous mode [ 117.108693][ T11] veth0_macvtap: left promiscuous mode [ 117.115356][ T11] veth1_vlan: left promiscuous mode [ 117.123392][ T11] veth0_vlan: left promiscuous mode [ 117.186560][ T29] audit: type=1400 audit(1734257103.287:138): avc: denied { write } for pid=5928 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.226720][ T29] audit: type=1400 audit(1734257103.287:139): avc: denied { add_name } for pid=5928 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.264088][ T29] audit: type=1400 audit(1734257103.357:140): avc: denied { remove_name } for pid=5939 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1897 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.450881][ T11] team0 (unregistering): Port device team_slave_1 removed [ 117.476936][ T11] team0 (unregistering): Port device team_slave_0 removed [ 117.985142][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.998221][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.007362][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.016601][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.077484][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.187532][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.201503][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.208637][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.222548][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.229680][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.420046][ T5844] Bluetooth: hci0: command tx timeout [ 118.524596][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.558011][ T5918] veth0_vlan: entered promiscuous mode [ 118.567777][ T5918] veth1_vlan: entered promiscuous mode [ 118.592799][ T5918] veth0_macvtap: entered promiscuous mode [ 118.601351][ T5918] veth1_macvtap: entered promiscuous mode [ 118.616162][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.630142][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.646030][ T5918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.655038][ T5918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.664160][ T5918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.672887][ T5918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.730024][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.747090][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.774968][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.783752][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.812468][ T29] audit: type=1400 audit(1734257104.907:141): avc: denied { mount } for pid=5918 comm="syz-executor" name="/" dev="gadgetfs" ino=6884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 118.856443][ T5979] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 118.882858][ T5979] team0: Port device wlan1 added [ 118.923898][ T5983] netlink: 'syz.0.17': attribute type 10 has an invalid length. [ 118.967470][ T5986] netlink: 'syz.0.18': attribute type 10 has an invalid length. [ 118.996879][ T5987] netlink: 'syz.0.19': attribute type 10 has an invalid length. [ 119.022403][ T5989] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 119.056430][ T5990] netlink: 'syz.0.21': attribute type 10 has an invalid length. [ 119.089514][ T5992] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 119.124115][ T5993] netlink: 'syz.0.23': attribute type 10 has an invalid length. 2024/12/15 10:05:05 executed programs: 10 [ 119.157048][ T5995] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 119.191293][ T5999] netlink: 'syz.0.25': attribute type 10 has an invalid length. [ 120.493223][ T5844] Bluetooth: hci0: command tx timeout [ 122.580263][ T5844] Bluetooth: hci0: command tx timeout [ 123.869360][ T6253] validate_nla: 244 callbacks suppressed [ 123.869372][ T6253] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 123.895169][ T6254] netlink: 'syz.0.271': attribute type 10 has an invalid length. [ 123.924024][ T6255] netlink: 'syz.0.272': attribute type 10 has an invalid length. [ 123.949114][ T6256] netlink: 'syz.0.273': attribute type 10 has an invalid length. [ 123.971227][ T6257] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 123.990360][ T6258] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 124.012367][ T6259] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 124.036102][ T6260] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 124.062100][ T6261] netlink: 'syz.0.278': attribute type 10 has an invalid length. [ 124.084602][ T6262] netlink: 'syz.0.279': attribute type 10 has an invalid length. 2024/12/15 10:05:10 executed programs: 271 [ 128.878162][ T6528] validate_nla: 265 callbacks suppressed [ 128.878175][ T6528] netlink: 'syz.0.545': attribute type 10 has an invalid length. [ 128.901889][ T6529] netlink: 'syz.0.546': attribute type 10 has an invalid length. [ 128.919589][ T6530] netlink: 'syz.0.547': attribute type 10 has an invalid length. [ 128.957975][ T6531] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 128.976342][ T6532] netlink: 'syz.0.549': attribute type 10 has an invalid length. [ 128.992440][ T6533] netlink: 'syz.0.550': attribute type 10 has an invalid length. [ 129.018095][ T6534] netlink: 'syz.0.551': attribute type 10 has an invalid length. [ 129.035590][ T6535] netlink: 'syz.0.552': attribute type 10 has an invalid length. [ 129.051484][ T6536] netlink: 'syz.0.553': attribute type 10 has an invalid length. [ 129.078032][ T6537] netlink: 'syz.0.554': attribute type 10 has an invalid length. 2024/12/15 10:05:15 executed programs: 547 [ 130.139754][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 130.152011][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 130.161683][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 130.170078][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 130.177595][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 130.185589][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 130.272895][ T6601] chnl_net:caif_netlink_parms(): no params data found [ 130.306320][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.337159][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.344893][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.352029][ T6601] bridge_slave_0: entered allmulticast mode [ 130.358865][ T6601] bridge_slave_0: entered promiscuous mode [ 130.372042][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.385767][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.392838][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.400152][ T6601] bridge_slave_1: entered allmulticast mode [ 130.407205][ T6601] bridge_slave_1: entered promiscuous mode [ 130.425986][ T6601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.443247][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.457970][ T6601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.477992][ T6601] team0: Port device team_slave_0 added [ 130.485916][ T6601] team0: Port device team_slave_1 added [ 130.507008][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.525165][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.532112][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.558457][ T6601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.571188][ T6601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.578768][ T6601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.604808][ T6601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.638762][ T6601] hsr_slave_0: entered promiscuous mode [ 130.646072][ T6601] hsr_slave_1: entered promiscuous mode [ 130.721754][ T52] bridge_slave_1: left allmulticast mode [ 130.728553][ T52] bridge_slave_1: left promiscuous mode [ 130.734402][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.742602][ T52] bridge_slave_0: left allmulticast mode [ 130.748924][ T52] bridge_slave_0: left promiscuous mode [ 130.754807][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.953926][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.965624][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.975649][ T52] bond0 (unregistering): Released all slaves [ 131.091250][ T52] [ 131.093622][ T52] ====================================================== [ 131.100628][ T52] WARNING: possible circular locking dependency detected [ 131.107653][ T52] 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 Not tainted [ 131.114755][ T52] ------------------------------------------------------ [ 131.121771][ T52] kworker/u8:3/52 is trying to acquire lock: [ 131.127744][ T52] ffff888066d5ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x31/0x1b0 [ 131.137347][ T52] [ 131.137347][ T52] but task is already holding lock: [ 131.144708][ T52] ffff888029d70768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xfe/0x760 [ 131.154988][ T52] [ 131.154988][ T52] which lock already depends on the new lock. [ 131.154988][ T52] [ 131.165388][ T52] [ 131.165388][ T52] the existing dependency chain (in reverse order) is: [ 131.174401][ T52] [ 131.174401][ T52] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 131.182141][ T52] __mutex_lock+0x19b/0xa60 [ 131.187178][ T52] ieee80211_open+0x12f/0x260 [ 131.192391][ T52] __dev_open+0x2d4/0x4e0 [ 131.197261][ T52] dev_open+0xf4/0x160 [ 131.201863][ T52] team_add_slave+0xacd/0x20e0 [ 131.207162][ T52] do_set_master+0x1bc/0x230 [ 131.212283][ T52] do_setlink.constprop.0+0xb60/0x3f70 [ 131.218280][ T52] rtnl_newlink+0x1303/0x1d60 [ 131.223500][ T52] rtnetlink_rcv_msg+0x95b/0xea0 [ 131.228972][ T52] netlink_rcv_skb+0x16b/0x440 [ 131.234271][ T52] netlink_unicast+0x53c/0x7f0 [ 131.239568][ T52] netlink_sendmsg+0x8b8/0xd70 [ 131.244873][ T52] ____sys_sendmsg+0xaaf/0xc90 [ 131.250167][ T52] ___sys_sendmsg+0x135/0x1e0 [ 131.255368][ T52] __sys_sendmsg+0x16e/0x220 [ 131.260545][ T52] do_syscall_64+0xcd/0x250 [ 131.265547][ T52] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.271941][ T52] [ 131.271941][ T52] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 131.280087][ T52] __lock_acquire+0x249e/0x3c40 [ 131.285440][ T52] lock_acquire.part.0+0x11b/0x380 [ 131.291051][ T52] __mutex_lock+0x19b/0xa60 [ 131.296053][ T52] team_del_slave+0x31/0x1b0 [ 131.301142][ T52] team_device_event+0xd0/0x770 [ 131.306491][ T52] notifier_call_chain+0xb7/0x410 [ 131.312016][ T52] call_netdevice_notifiers_info+0xbe/0x140 [ 131.318406][ T52] unregister_netdevice_many_notify+0x8d5/0x1e60 [ 131.325244][ T52] unregister_netdevice_queue+0x307/0x3f0 [ 131.331469][ T52] _cfg80211_unregister_wdev+0x64b/0x830 [ 131.337604][ T52] ieee80211_remove_interfaces+0x36d/0x760 [ 131.343913][ T52] ieee80211_unregister_hw+0x55/0x3a0 [ 131.349808][ T52] hwsim_exit_net+0x3ad/0x7d0 [ 131.354988][ T52] ops_exit_list+0xb0/0x180 [ 131.359991][ T52] cleanup_net+0x5b7/0xbd0 [ 131.364904][ T52] process_one_work+0x9c5/0x1ba0 [ 131.370337][ T52] worker_thread+0x6c8/0xf00 [ 131.375425][ T52] kthread+0x2c1/0x3a0 [ 131.379996][ T52] ret_from_fork+0x45/0x80 [ 131.384908][ T52] ret_from_fork_asm+0x1a/0x30 [ 131.390185][ T52] [ 131.390185][ T52] other info that might help us debug this: [ 131.390185][ T52] [ 131.400391][ T52] Possible unsafe locking scenario: [ 131.400391][ T52] [ 131.407819][ T52] CPU0 CPU1 [ 131.413159][ T52] ---- ---- [ 131.418499][ T52] lock(&rdev->wiphy.mtx); [ 131.422981][ T52] lock(team->team_lock_key#2); [ 131.430426][ T52] lock(&rdev->wiphy.mtx); [ 131.437421][ T52] lock(team->team_lock_key#2); [ 131.442337][ T52] [ 131.442337][ T52] *** DEADLOCK *** [ 131.442337][ T52] [ 131.450454][ T52] 5 locks held by kworker/u8:3/52: [ 131.455537][ T52] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 131.465862][ T52] #1: ffffc90000bd7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 131.475748][ T52] #2: ffffffff8fec5050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0 [ 131.485026][ T52] #3: ffffffff8fedadc8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x4d/0x3a0 [ 131.494830][ T52] #4: ffff888029d70768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xfe/0x760 [ 131.505504][ T52] [ 131.505504][ T52] stack backtrace: [ 131.511377][ T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc2-syzkaller-00333-ga0e3919a2df2 #0 [ 131.522022][ T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 131.532055][ T52] Workqueue: netns cleanup_net [ 131.536814][ T52] Call Trace: [ 131.540068][ T52] [ 131.542978][ T52] dump_stack_lvl+0x116/0x1f0 [ 131.547658][ T52] print_circular_bug+0x419/0x5d0 [ 131.552660][ T52] check_noncircular+0x31a/0x400 [ 131.557575][ T52] ? __pfx_check_noncircular+0x10/0x10 [ 131.563014][ T52] ? mark_lock+0xb5/0xc60 [ 131.567329][ T52] ? __pfx___lock_acquire+0x10/0x10 [ 131.572502][ T52] ? lockdep_lock+0xc6/0x200 [ 131.577088][ T52] ? __pfx_lockdep_lock+0x10/0x10 [ 131.582101][ T52] ? lock_acquire.part.0+0x11b/0x380 [ 131.587387][ T52] __lock_acquire+0x249e/0x3c40 [ 131.592312][ T52] ? __pfx___lock_acquire+0x10/0x10 [ 131.597499][ T52] ? __pfx___lock_acquire+0x10/0x10 [ 131.602679][ T52] ? skb_dequeue+0x126/0x180 [ 131.607249][ T52] lock_acquire.part.0+0x11b/0x380 [ 131.612352][ T52] ? team_del_slave+0x31/0x1b0 [ 131.617114][ T52] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 131.622730][ T52] ? rcu_is_watching+0x12/0xc0 [ 131.627489][ T52] ? trace_lock_acquire+0x14e/0x1f0 [ 131.632677][ T52] ? team_del_slave+0x31/0x1b0 [ 131.637424][ T52] ? lock_acquire+0x2f/0xb0 [ 131.641905][ T52] ? team_del_slave+0x31/0x1b0 [ 131.646651][ T52] __mutex_lock+0x19b/0xa60 [ 131.651136][ T52] ? team_del_slave+0x31/0x1b0 [ 131.655896][ T52] ? __mutex_lock+0x1cc/0xa60 [ 131.660552][ T52] ? lockdep_hardirqs_on+0x7c/0x110 [ 131.665728][ T52] ? team_del_slave+0x31/0x1b0 [ 131.670469][ T52] ? __pfx___mutex_lock+0x10/0x10 [ 131.675471][ T52] ? __mutex_unlock_slowpath+0x164/0x690 [ 131.681081][ T52] ? __timer_delete_sync+0x108/0x1b0 [ 131.686341][ T52] ? team_del_slave+0x31/0x1b0 [ 131.691081][ T52] team_del_slave+0x31/0x1b0 [ 131.695658][ T52] team_device_event+0xd0/0x770 [ 131.700490][ T52] notifier_call_chain+0xb7/0x410 [ 131.705505][ T52] ? __pfx_team_device_event+0x10/0x10 [ 131.710944][ T52] call_netdevice_notifiers_info+0xbe/0x140 [ 131.716827][ T52] unregister_netdevice_many_notify+0x8d5/0x1e60 [ 131.723131][ T52] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 131.729867][ T52] ? find_held_lock+0x2d/0x110 [ 131.734616][ T52] ? kernfs_remove_by_name_ns+0xc4/0x130 [ 131.740238][ T52] ? __pfx_lock_release+0x10/0x10 [ 131.745240][ T52] ? __call_rcu_common.constprop.0+0x36e/0x7a0 [ 131.751370][ T52] unregister_netdevice_queue+0x307/0x3f0 [ 131.757064][ T52] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 131.763285][ T52] _cfg80211_unregister_wdev+0x64b/0x830 [ 131.768892][ T52] ieee80211_remove_interfaces+0x36d/0x760 [ 131.774676][ T52] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 131.781066][ T52] ieee80211_unregister_hw+0x55/0x3a0 [ 131.786501][ T52] hwsim_exit_net+0x3ad/0x7d0 [ 131.791164][ T52] ? __pfx_hwsim_exit_net+0x10/0x10 [ 131.796338][ T52] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 131.801684][ T52] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 131.807377][ T52] ? __pfx_hwsim_exit_net+0x10/0x10 [ 131.812548][ T52] ops_exit_list+0xb0/0x180 [ 131.817023][ T52] cleanup_net+0x5b7/0xbd0 [ 131.821413][ T52] ? __pfx_cleanup_net+0x10/0x10 [ 131.826332][ T52] ? lock_acquire+0x2f/0xb0 [ 131.830808][ T52] ? process_one_work+0x921/0x1ba0 [ 131.835913][ T52] process_one_work+0x9c5/0x1ba0 [ 131.840826][ T52] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 131.846434][ T52] ? __pfx_process_one_work+0x10/0x10 [ 131.851775][ T52] ? rcu_is_watching+0x12/0xc0 [ 131.856519][ T52] ? assign_work+0x1a0/0x250 [ 131.861080][ T52] worker_thread+0x6c8/0xf00 [ 131.865643][ T52] ? __kthread_parkme+0x148/0x220 [ 131.870645][ T52] ? __pfx_worker_thread+0x10/0x10 [ 131.875729][ T52] kthread+0x2c1/0x3a0 [ 131.879776][ T52] ? _raw_spin_unlock_irq+0x23/0x50 [ 131.884946][ T52] ? __pfx_kthread+0x10/0x10 [ 131.889516][ T52] ret_from_fork+0x45/0x80 [ 131.893904][ T52] ? __pfx_kthread+0x10/0x10 [ 131.898495][ T52] ret_from_fork_asm+0x1a/0x30 [ 131.903242][ T52] [ 131.907969][ T52] team0: Port device wlan1 removed [ 132.028365][ T52] hsr_slave_0: left promiscuous mode [ 132.044388][ T52] hsr_slave_1: left promiscuous mode [ 132.051854][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.062063][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.069906][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.078611][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.087328][ T52] veth1_macvtap: left promiscuous mode [ 132.092831][ T52] veth0_macvtap: left promiscuous mode [ 132.098445][ T52] veth1_vlan: left promiscuous mode [ 132.103788][ T52] veth0_vlan: left promiscuous mode [ 132.200331][ T52] team0 (unregistering): Port device team_slave_1 removed [ 132.217372][ T52] team0 (unregistering): Port device team_slave_0 removed [ 132.255125][ T5844] Bluetooth: hci0: command tx timeout [ 132.378017][ T6601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.394878][ T6601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.403941][ T6601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.417165][ T6601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.489548][ T6601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.506953][ T6601] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.517024][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.524139][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.553636][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.560696][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.594130][ T6601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.703835][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.727925][ T6601] veth0_vlan: entered promiscuous mode [ 132.738774][ T6601] veth1_vlan: entered promiscuous mode [ 132.756640][ T6601] veth0_macvtap: entered promiscuous mode [ 132.764933][ T6601] veth1_macvtap: entered promiscuous mode [ 132.776958][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.789646][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.800734][ T6601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.811150][ T6601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.820422][ T6601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.829446][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835819][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.843296][ T6601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.869502][ T6601] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 132.889930][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.891030][ T6601] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 132.906669][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.929448][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.937939][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.972389][ T6682] team0: Port device wlan1 added [ 133.886909][ T6738] validate_nla: 115 callbacks suppressed [ 133.886921][ T6738] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 133.906569][ T6739] netlink: 'syz.0.671': attribute type 10 has an invalid length. [ 133.919594][ T6740] netlink: 'syz.0.672': attribute type 10 has an invalid length. [ 133.946105][ T6741] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 133.959738][ T6742] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 133.974223][ T6743] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 134.006388][ T6744] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 134.021211][ T6745] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 134.035922][ T6746] netlink: 'syz.0.678': attribute type 10 has an invalid length. [ 134.066590][ T6747] netlink: 'syz.0.679': attribute type 10 has an invalid length. 2024/12/15 10:05:20 executed programs: 675 [ 134.343106][ T5844] Bluetooth: hci0: command tx timeout [ 136.413296][ T5844] Bluetooth: hci0: command tx timeout [ 138.493333][ T5844] Bluetooth: hci0: command tx timeout [ 138.927038][ T7038] validate_nla: 290 callbacks suppressed [ 138.927050][ T7038] netlink: 'syz.0.970': attribute type 10 has an invalid length. [ 138.946103][ T7039] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 138.959084][ T7040] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 138.986159][ T7041] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 138.999972][ T7042] netlink: 'syz.0.974': attribute type 10 has an invalid length. [ 139.013789][ T7043] netlink: 'syz.0.975': attribute type 10 has an invalid length. [ 139.046716][ T7044] netlink: 'syz.0.976': attribute type 10 has an invalid length. [ 139.060136][ T7045] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 139.073308][ T7046] netlink: 'syz.0.978': attribute type 10 has an invalid length. [ 139.106349][ T7047] netlink: 'syz.0.979': attribute type 10 has an invalid length. 2024/12/15 10:05:25 executed programs: 975