Warning: Permanently added '[localhost]:28571' (ED25519) to the list of known hosts. 2024/05/23 01:29:58 ignoring optional flag "sandboxArg"="0" 2024/05/23 01:29:58 parsed 1 programs [ 83.563833][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 83.563845][ T39] audit: type=1400 audit(1716427798.449:207): avc: denied { getattr } for pid=5420 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 83.610846][ T39] audit: type=1400 audit(1716427798.499:208): avc: denied { mounton } for pid=5429 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 83.622349][ T39] audit: type=1400 audit(1716427798.499:209): avc: denied { mount } for pid=5429 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 83.632682][ T39] audit: type=1400 audit(1716427798.509:210): avc: denied { read write } for pid=5429 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.643799][ T39] audit: type=1400 audit(1716427798.509:211): avc: denied { open } for pid=5429 comm="syz-executor" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 83.678570][ T39] audit: type=1400 audit(1716427798.569:212): avc: denied { unlink } for pid=5429 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 84.210868][ T39] audit: type=1400 audit(1716427799.099:213): avc: denied { relabelto } for pid=5432 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 85.277097][ T5429] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/05/23 01:30:00 executed programs: 0 [ 85.285784][ T39] audit: type=1400 audit(1716427800.179:214): avc: denied { search } for pid=4679 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.345176][ T5217] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.351796][ T5452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.352400][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.356676][ T5451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.360374][ T5217] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.362223][ T5451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.364989][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.368730][ T5451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.368991][ T5455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.369209][ T5456] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.372616][ T5456] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.373763][ T5217] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.375201][ T5451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.375891][ T5451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.376913][ T5451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.376958][ T5456] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.378822][ T5455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.379445][ T5455] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.379798][ T5455] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.380949][ T5217] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.382610][ T5451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.386415][ T5217] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.389578][ T5451] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.389842][ T39] audit: type=1400 audit(1716427800.279:215): avc: denied { mounton } for pid=5445 comm="syz-executor.3" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 85.427181][ T5451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.763949][ T5445] chnl_net:caif_netlink_parms(): no params data found [ 85.774176][ T5444] chnl_net:caif_netlink_parms(): no params data found [ 85.902749][ T5443] chnl_net:caif_netlink_parms(): no params data found [ 85.946717][ T5448] chnl_net:caif_netlink_parms(): no params data found [ 86.180118][ T5444] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.183223][ T5444] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.188274][ T5444] bridge_slave_0: entered allmulticast mode [ 86.192113][ T5444] bridge_slave_0: entered promiscuous mode [ 86.196402][ T5445] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.199617][ T5445] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.202714][ T5445] bridge_slave_0: entered allmulticast mode [ 86.210477][ T5445] bridge_slave_0: entered promiscuous mode [ 86.288663][ T5444] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.291544][ T5444] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.294058][ T5444] bridge_slave_1: entered allmulticast mode [ 86.298757][ T5444] bridge_slave_1: entered promiscuous mode [ 86.326329][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.329518][ T5445] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.332309][ T5445] bridge_slave_1: entered allmulticast mode [ 86.336108][ T5445] bridge_slave_1: entered promiscuous mode [ 86.339795][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.342855][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.345757][ T5443] bridge_slave_0: entered allmulticast mode [ 86.349722][ T5443] bridge_slave_0: entered promiscuous mode [ 86.440229][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.443496][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.447899][ T5443] bridge_slave_1: entered allmulticast mode [ 86.450844][ T5443] bridge_slave_1: entered promiscuous mode [ 86.477359][ T5444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.482419][ T5445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.563443][ T5444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.592250][ T5445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.598838][ T5443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.603041][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.605649][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.608805][ T5448] bridge_slave_0: entered allmulticast mode [ 86.612796][ T5448] bridge_slave_0: entered promiscuous mode [ 86.669759][ T5443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.700354][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.703643][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.708007][ T5448] bridge_slave_1: entered allmulticast mode [ 86.711912][ T5448] bridge_slave_1: entered promiscuous mode [ 86.718784][ T5444] team0: Port device team_slave_0 added [ 86.751429][ T5445] team0: Port device team_slave_0 added [ 86.796464][ T5444] team0: Port device team_slave_1 added [ 86.815755][ T5445] team0: Port device team_slave_1 added [ 86.822978][ T5443] team0: Port device team_slave_0 added [ 86.905939][ T5443] team0: Port device team_slave_1 added [ 86.911170][ T5448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.996404][ T5448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.000533][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.003082][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.012685][ T5444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.018054][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.021097][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.034486][ T5445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.117997][ T5444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.120994][ T5444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.131661][ T5444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.139103][ T5445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.141755][ T5445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.151707][ T5445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.163496][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.168591][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.179819][ T5443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.189319][ T5448] team0: Port device team_slave_0 added [ 87.195708][ T5448] team0: Port device team_slave_1 added [ 87.228540][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.231543][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.243595][ T5443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.283470][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.286603][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.297738][ T5448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.305307][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.308195][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.318989][ T5448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.396623][ T5452] Bluetooth: hci2: command tx timeout [ 87.400151][ T10] cfg80211: failed to load regulatory.db [ 87.465985][ T5452] Bluetooth: hci3: command tx timeout [ 87.473779][ T5444] hsr_slave_0: entered promiscuous mode [ 87.475620][ T5452] Bluetooth: hci1: command tx timeout [ 87.476809][ T5451] Bluetooth: hci0: command tx timeout [ 87.481957][ T5444] hsr_slave_1: entered promiscuous mode [ 87.572753][ T5445] hsr_slave_0: entered promiscuous mode [ 87.577311][ T5445] hsr_slave_1: entered promiscuous mode [ 87.582870][ T5445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.586826][ T5445] Cannot create hsr debugfs directory [ 87.595007][ T5448] hsr_slave_0: entered promiscuous mode [ 87.599837][ T5448] hsr_slave_1: entered promiscuous mode [ 87.602801][ T5448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.606066][ T5448] Cannot create hsr debugfs directory [ 87.613178][ T5443] hsr_slave_0: entered promiscuous mode [ 87.617039][ T5443] hsr_slave_1: entered promiscuous mode [ 87.619866][ T5443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.622891][ T5443] Cannot create hsr debugfs directory [ 88.190714][ T5444] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.195802][ T5444] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.204563][ T5444] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.212691][ T5444] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.267881][ T5445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.278937][ T5445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.284181][ T5445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.293094][ T5445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.357003][ T5448] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.364516][ T5448] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.426500][ T5448] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.434012][ T5448] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.524005][ T5444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.561190][ T5444] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.647387][ T831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.650615][ T831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.656051][ T831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.659292][ T831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.716556][ T5445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.747100][ T5445] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.811505][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.814759][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.833653][ T831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.837542][ T831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.872582][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.893969][ T5448] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.894960][ T39] audit: type=1400 audit(1716427803.769:216): avc: denied { sys_module } for pid=5444 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 88.941982][ T5445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.950844][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.953703][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.970897][ T1397] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.973452][ T1397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.037883][ T5443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.046459][ T5443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.063639][ T5444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.068073][ T5443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.084526][ T5443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.206552][ T5444] veth0_vlan: entered promiscuous mode [ 89.215063][ T5445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.236571][ T5444] veth1_vlan: entered promiscuous mode [ 89.321554][ T5445] veth0_vlan: entered promiscuous mode [ 89.331780][ T5444] veth0_macvtap: entered promiscuous mode [ 89.344988][ T5444] veth1_macvtap: entered promiscuous mode [ 89.352262][ T5443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.389142][ T5448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.398026][ T5445] veth1_vlan: entered promiscuous mode [ 89.413137][ T5443] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.425519][ T5444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.448846][ T5444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.459311][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.462280][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.475470][ T5451] Bluetooth: hci2: command tx timeout [ 89.480446][ T5445] veth0_macvtap: entered promiscuous mode [ 89.490222][ T5444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.493854][ T5444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.497976][ T5444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.501587][ T5444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.519576][ T5445] veth1_macvtap: entered promiscuous mode [ 89.526385][ T818] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.529274][ T818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.548445][ T5451] Bluetooth: hci0: command tx timeout [ 89.555301][ T5451] Bluetooth: hci1: command tx timeout [ 89.555353][ T5452] Bluetooth: hci3: command tx timeout [ 89.589004][ T5448] veth0_vlan: entered promiscuous mode [ 89.619917][ T5448] veth1_vlan: entered promiscuous mode [ 89.651305][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.656873][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.661339][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.683530][ T5445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.684152][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.687946][ T5445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.689458][ T5445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.691343][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.698286][ T5445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.704851][ T5445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.708634][ T5445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.711743][ T5445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.773848][ T5448] veth0_macvtap: entered promiscuous mode [ 89.784594][ T5448] veth1_macvtap: entered promiscuous mode [ 89.791891][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.795556][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.839704][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.843147][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.853241][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.858092][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.862200][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.868293][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.876247][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.890066][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.894493][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.900163][ T5448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.904819][ T5448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.911420][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.911744][ T5548] loop1: detected capacity change from 0 to 1024 [ 89.921271][ T39] audit: type=1400 audit(1716427804.809:217): avc: denied { mounton } for pid=5547 comm="syz-executor.1" path="/syzkaller-testdir2986816806/syzkaller.Cunn8Z/0/file0" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 89.942106][ T39] audit: type=1400 audit(1716427804.829:218): avc: denied { mount } for pid=5547 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 89.958081][ T5448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.961773][ T39] audit: type=1400 audit(1716427804.839:219): avc: denied { unmount } for pid=5444 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 89.964598][ T5448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974461][ T5448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.978391][ T5448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.009825][ T5553] loop1: detected capacity change from 0 to 1024 [ 90.020826][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.024481][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.043389][ T5443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.089662][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.092724][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.108685][ T5558] loop1: detected capacity change from 0 to 1024 [ 90.141987][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.150420][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.162342][ T5443] veth0_vlan: entered promiscuous mode [ 90.163555][ T5561] loop3: detected capacity change from 0 to 1024 [ 90.183891][ T5443] veth1_vlan: entered promiscuous mode [ 90.238002][ T5565] loop1: detected capacity change from 0 to 1024 [ 90.240455][ T5443] veth0_macvtap: entered promiscuous mode [ 90.246830][ T5443] veth1_macvtap: entered promiscuous mode [ 90.255961][ T5568] loop2: detected capacity change from 0 to 1024 [ 90.282796][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.289889][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.294043][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.298938][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.299089][ T5570] loop3: detected capacity change from 0 to 1024 [ 90.303803][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.310637][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 2024/05/23 01:30:05 executed programs: 10 [ 90.318675][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.335842][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.340257][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.344420][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.351806][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.356633][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.360963][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.369099][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.385358][ T5443] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.388793][ T5443] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392163][ T5443] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.397732][ T5443] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.422817][ T5575] loop2: detected capacity change from 0 to 1024 [ 90.457903][ T5577] loop1: detected capacity change from 0 to 1024 [ 90.480364][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.487614][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.551372][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.554393][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.601797][ T5584] loop0: detected capacity change from 0 to 1024 [ 90.689181][ T5588] loop3: detected capacity change from 0 to 1024 [ 90.705650][ T5593] loop1: detected capacity change from 0 to 1024 [ 90.727367][ T5591] loop2: detected capacity change from 0 to 1024 [ 90.795839][ T5599] loop0: detected capacity change from 0 to 1024 [ 90.816600][ T5601] loop1: detected capacity change from 0 to 1024 [ 90.821558][ T5599] ================================================================== [ 90.824423][ T5599] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0xf86/0x1070 [ 90.827918][ T5599] Read of size 2 at addr ffff88802aa26c00 by task syz-executor.0/5599 [ 90.832930][ T5599] [ 90.833998][ T5599] CPU: 3 PID: 5599 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-11924-gde7e71ef8bed #0 [ 90.838338][ T5599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 90.842432][ T5599] Call Trace: [ 90.843769][ T5599] [ 90.844968][ T5599] dump_stack_lvl+0x116/0x1f0 [ 90.847083][ T5599] print_report+0xc3/0x620 [ 90.849086][ T5599] ? __virt_addr_valid+0x5e/0x580 [ 90.851489][ T5599] ? __phys_addr+0xc6/0x150 [ 90.853521][ T5599] kasan_report+0xd9/0x110 [ 90.855558][ T5599] ? hfsplus_read_wrapper+0xf86/0x1070 [ 90.857998][ T5599] ? hfsplus_read_wrapper+0xf86/0x1070 [ 90.860448][ T5599] hfsplus_read_wrapper+0xf86/0x1070 [ 90.862820][ T5599] ? __pfx_hfsplus_read_wrapper+0x10/0x10 [ 90.865368][ T5599] ? do_raw_spin_lock+0x12d/0x2c0 [ 90.867383][ T5599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.869501][ T5599] ? do_raw_spin_unlock+0x172/0x230 [ 90.871832][ T5599] ? _raw_spin_unlock+0x28/0x50 [ 90.872394][ T5608] loop3: detected capacity change from 0 to 1024 [ 90.874007][ T5599] ? find_nls+0x125/0x170 [ 90.874034][ T5599] hfsplus_fill_super+0x352/0x1bc0 [ 90.874056][ T5599] ? __pfx___lock_acquire+0x10/0x10 [ 90.883027][ T5599] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 90.885449][ T5599] ? bdev_name.constprop.0+0xa5/0x350 [ 90.887697][ T5599] ? do_raw_spin_lock+0x12d/0x2c0 [ 90.890286][ T5599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.892687][ T5599] ? set_blocksize+0x2c1/0x370 [ 90.894660][ T5599] ? sb_set_blocksize+0xf6/0x120 [ 90.896610][ T5599] ? setup_bdev_super+0x320/0x6e0 [ 90.898632][ T5599] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 90.900827][ T5599] mount_bdev+0x1e3/0x2d0 [ 90.902789][ T5599] ? __pfx_mount_bdev+0x10/0x10 [ 90.905142][ T5599] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 90.907674][ T5599] ? cap_capable+0x1cf/0x240 [ 90.909758][ T5599] ? __pfx_hfsplus_mount+0x10/0x10 [ 90.912088][ T5599] legacy_get_tree+0x109/0x220 [ 90.914231][ T5599] vfs_get_tree+0x8f/0x380 [ 90.916283][ T5599] path_mount+0x14e6/0x1f20 [ 90.918327][ T5599] ? kmem_cache_free+0x12f/0x3a0 [ 90.920493][ T5599] ? __pfx_path_mount+0x10/0x10 [ 90.922620][ T5599] ? putname+0x12e/0x170 [ 90.924426][ T5599] __x64_sys_mount+0x297/0x320 [ 90.926692][ T5599] ? __pfx___x64_sys_mount+0x10/0x10 [ 90.928997][ T5599] do_syscall_64+0xcd/0x250 [ 90.930900][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.933343][ T5599] RIP: 0033:0x7f8ee3c7f5aa [ 90.935248][ T5599] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.942552][ T5599] RSP: 002b:00007f8ee4ad0ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 90.946104][ T5599] RAX: ffffffffffffffda RBX: 00007f8ee4ad0f80 RCX: 00007f8ee3c7f5aa [ 90.949559][ T5599] RDX: 0000000020000600 RSI: 0000000020000640 RDI: 00007f8ee4ad0f40 [ 90.952859][ T5599] RBP: 0000000020000600 R08: 00007f8ee4ad0f80 R09: 0000000000000000 [ 90.956334][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000640 [ 90.959861][ T5599] R13: 00007f8ee4ad0f40 R14: 00000000000005d3 R15: 0000000020000680 [ 90.963283][ T5599] [ 90.964674][ T5599] [ 90.965729][ T5599] The buggy address belongs to the object at ffff88802aa26c00 [ 90.965729][ T5599] which belongs to the cache kmalloc-512 of size 512 [ 90.971690][ T5599] The buggy address is located 0 bytes inside of [ 90.971690][ T5599] freed 512-byte region [ffff88802aa26c00, ffff88802aa26e00) [ 90.977514][ T5599] [ 90.978530][ T5599] The buggy address belongs to the physical page: [ 90.981194][ T5599] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802aa27c00 pfn:0x2aa24 [ 90.985487][ T5599] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.989153][ T5599] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 90.992747][ T5599] page_type: 0xffffefff(slab) [ 90.994782][ T5599] raw: 00fff00000000240 ffff888015442c80 ffffea0000962410 ffffea00009d3a10 [ 90.998464][ T5599] raw: ffff88802aa27c00 000000000010000e 00000001ffffefff 0000000000000000 [ 91.002167][ T5599] head: 00fff00000000240 ffff888015442c80 ffffea0000962410 ffffea00009d3a10 [ 91.005898][ T5599] head: ffff88802aa27c00 000000000010000e 00000001ffffefff 0000000000000000 [ 91.009615][ T5599] head: 00fff00000000002 ffffea0000aa8901 ffffffffffffffff 0000000000000000 [ 91.013364][ T5599] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 91.017083][ T5599] page dumped because: kasan: bad access detected [ 91.019840][ T5599] page_owner tracks the page as allocated [ 91.022302][ T5599] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5240, tgid 5240 (kworker/u32:5), ts 66241364702, free_ts 65958354716 [ 91.031565][ T5599] post_alloc_hook+0x2d1/0x350 [ 91.033681][ T5599] get_page_from_freelist+0x136a/0x2df0 [ 91.036089][ T5599] __alloc_pages_noprof+0x22b/0x2460 [ 91.038399][ T5599] alloc_slab_page+0x56/0x110 [ 91.040422][ T5599] new_slab+0x84/0x260 [ 91.042137][ T5599] ___slab_alloc+0xdac/0x1870 [ 91.043038][ T5605] loop2: detected capacity change from 0 to 1024 [ 91.044212][ T5599] __slab_alloc.constprop.0+0x56/0xb0 [ 91.049363][ T5599] kmalloc_trace_noprof+0x2c5/0x310 [ 91.051669][ T5599] tomoyo_find_next_domain+0x102/0x2020 [ 91.054115][ T5599] tomoyo_bprm_check_security+0x12e/0x1d0 [ 91.056604][ T5599] security_bprm_check+0x65/0xb0 [ 91.058789][ T5599] bprm_execve+0x642/0x19b0 [ 91.060813][ T5599] kernel_execve+0x3cf/0x4e0 [ 91.062828][ T5599] call_usermodehelper_exec_async+0x255/0x4c0 [ 91.065527][ T5599] ret_from_fork+0x45/0x80 [ 91.067513][ T5599] ret_from_fork_asm+0x1a/0x30 [ 91.069595][ T5599] page last free pid 5203 tgid 5200 stack trace: [ 91.072272][ T5599] free_unref_page+0x64a/0xe40 [ 91.074383][ T5599] vfree+0x181/0x7a0 [ 91.075951][ T5599] snd_dma_free_pages+0x51/0x70 [ 91.078090][ T5599] snd_pcm_lib_free_pages+0x172/0x390 [ 91.080468][ T5599] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 91.083245][ T5599] snd_pcm_release_substream+0x5b/0x70 [ 91.085709][ T5599] snd_pcm_oss_release+0x175/0x320 [ 91.087952][ T5599] __fput+0x408/0xbb0 [ 91.089611][ T5599] __fput_sync+0x47/0x50 [ 91.091466][ T5599] __x64_sys_close+0x86/0x100 [ 91.093569][ T5599] do_syscall_64+0xcd/0x250 [ 91.095563][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.098149][ T5599] [ 91.099253][ T5599] Memory state around the buggy address: [ 91.101682][ T5599] ffff88802aa26b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.105120][ T5599] ffff88802aa26b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 91.108133][ T5599] >ffff88802aa26c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.110958][ T5599] ^ [ 91.112332][ T5599] ffff88802aa26c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.115077][ T5599] ffff88802aa26d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.117860][ T5599] ================================================================== [ 91.128262][ T5599] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.130774][ T5599] CPU: 3 PID: 5599 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-11924-gde7e71ef8bed #0 [ 91.134370][ T5599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 91.138742][ T5599] Call Trace: [ 91.140209][ T5599] [ 91.141473][ T5599] dump_stack_lvl+0x3d/0x1f0 [ 91.143294][ T5599] panic+0x6f5/0x7a0 [ 91.144839][ T5599] ? __pfx_panic+0x10/0x10 [ 91.146632][ T5599] ? preempt_schedule_thunk+0x1a/0x30 [ 91.148688][ T5599] ? preempt_schedule_common+0x44/0xc0 [ 91.150618][ T5599] ? check_panic_on_warn+0x1f/0xb0 [ 91.152397][ T5599] check_panic_on_warn+0xab/0xb0 [ 91.154509][ T5599] end_report+0x117/0x180 [ 91.156044][ T5599] kasan_report+0xe9/0x110 [ 91.157701][ T5599] ? hfsplus_read_wrapper+0xf86/0x1070 [ 91.159992][ T5599] ? hfsplus_read_wrapper+0xf86/0x1070 [ 91.162292][ T5599] hfsplus_read_wrapper+0xf86/0x1070 [ 91.164465][ T5599] ? __pfx_hfsplus_read_wrapper+0x10/0x10 [ 91.167018][ T5599] ? do_raw_spin_lock+0x12d/0x2c0 [ 91.169108][ T5599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.170882][ T5599] ? do_raw_spin_unlock+0x172/0x230 [ 91.172875][ T5599] ? _raw_spin_unlock+0x28/0x50 [ 91.175022][ T5599] ? find_nls+0x125/0x170 [ 91.176855][ T5599] hfsplus_fill_super+0x352/0x1bc0 [ 91.179026][ T5599] ? __pfx___lock_acquire+0x10/0x10 [ 91.181312][ T5599] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 91.183737][ T5599] ? bdev_name.constprop.0+0xa5/0x350 [ 91.186070][ T5599] ? do_raw_spin_lock+0x12d/0x2c0 [ 91.188048][ T5599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 91.189834][ T5599] ? set_blocksize+0x2c1/0x370 [ 91.191440][ T5599] ? sb_set_blocksize+0xf6/0x120 [ 91.193111][ T5599] ? setup_bdev_super+0x320/0x6e0 [ 91.194878][ T5599] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 91.196786][ T5599] mount_bdev+0x1e3/0x2d0 [ 91.198271][ T5599] ? __pfx_mount_bdev+0x10/0x10 [ 91.200218][ T5599] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 91.202142][ T5599] ? cap_capable+0x1cf/0x240 [ 91.203795][ T5599] ? __pfx_hfsplus_mount+0x10/0x10 [ 91.205662][ T5599] legacy_get_tree+0x109/0x220 [ 91.207548][ T5599] vfs_get_tree+0x8f/0x380 [ 91.209200][ T5599] path_mount+0x14e6/0x1f20 [ 91.211092][ T5599] ? kmem_cache_free+0x12f/0x3a0 [ 91.213204][ T5599] ? __pfx_path_mount+0x10/0x10 [ 91.215276][ T5599] ? putname+0x12e/0x170 [ 91.217103][ T5599] __x64_sys_mount+0x297/0x320 [ 91.219093][ T5599] ? __pfx___x64_sys_mount+0x10/0x10 [ 91.221327][ T5599] do_syscall_64+0xcd/0x250 [ 91.223267][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.225810][ T5599] RIP: 0033:0x7f8ee3c7f5aa [ 91.227468][ T5599] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 91.233855][ T5599] RSP: 002b:00007f8ee4ad0ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.236756][ T5599] RAX: ffffffffffffffda RBX: 00007f8ee4ad0f80 RCX: 00007f8ee3c7f5aa [ 91.240243][ T5599] RDX: 0000000020000600 RSI: 0000000020000640 RDI: 00007f8ee4ad0f40 [ 91.243560][ T5599] RBP: 0000000020000600 R08: 00007f8ee4ad0f80 R09: 0000000000000000 [ 91.246611][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000640 [ 91.249541][ T5599] R13: 00007f8ee4ad0f40 R14: 00000000000005d3 R15: 0000000020000680 [ 91.252982][ T5599] [ 91.254930][ T5599] Kernel Offset: disabled [ 91.256835][ T5599] Rebooting in 86400 seconds..