[ 71.668833][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.671101][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:54971' (ED25519) to the list of known hosts. 2025/02/24 07:58:16 ignoring optional flag "sandboxArg"="0" 2025/02/24 07:58:17 parsed 1 programs [ 76.900361][ T39] audit: type=1400 audit(1740383899.672:144): avc: denied { unlink } for pid=6233 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.898703][ T6233] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.827879][ T39] audit: type=1401 audit(1740383902.592:145): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 79.870823][ T5972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.874616][ T5972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.877949][ T5972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.881171][ T5972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.884479][ T5972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.886979][ T5972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.987221][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.990558][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.027516][ T1193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.029873][ T1193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.273630][ T6399] chnl_net:caif_netlink_parms(): no params data found [ 80.414088][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.416772][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.419170][ T6399] bridge_slave_0: entered allmulticast mode [ 80.421554][ T6399] bridge_slave_0: entered promiscuous mode [ 80.426079][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.429311][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.431809][ T6399] bridge_slave_1: entered allmulticast mode [ 80.434058][ T6399] bridge_slave_1: entered promiscuous mode [ 80.463836][ T6399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.469640][ T6399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.528338][ T6399] team0: Port device team_slave_0 added [ 80.533478][ T6399] team0: Port device team_slave_1 added [ 80.588811][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.591849][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.599566][ T6399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.605021][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.607926][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.618864][ T6399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.655852][ T6399] hsr_slave_0: entered promiscuous mode [ 80.657985][ T6399] hsr_slave_1: entered promiscuous mode [ 81.299059][ T6399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.304671][ T6399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.309679][ T6399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.314669][ T6399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.362138][ T6399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.372643][ T6399] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.379957][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.383010][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.390518][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.393175][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.497786][ T6399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.525902][ T6399] veth0_vlan: entered promiscuous mode [ 81.533087][ T6399] veth1_vlan: entered promiscuous mode [ 81.551904][ T6399] veth0_macvtap: entered promiscuous mode [ 81.558092][ T6399] veth1_macvtap: entered promiscuous mode [ 81.566800][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.573982][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.579581][ T6399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.583197][ T6399] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.587869][ T6399] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.591395][ T6399] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/02/24 07:58:24 executed programs: 0 [ 81.688206][ T5289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.694911][ T5289] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.699261][ T5289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.706227][ T5289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.710935][ T5289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.715721][ T5289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.720923][ T6493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.725637][ T6493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.728915][ T66] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.736963][ T102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.745859][ T5972] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.749976][ T5972] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.755671][ T6500] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.758277][ T5972] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.761015][ T5972] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.761750][ T6500] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.764950][ T5972] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.768289][ T6500] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.769406][ T6494] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.770731][ T5972] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.771744][ T5972] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.773270][ T5972] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.773895][ T6500] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.774114][ T6500] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.774221][ T6500] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.828953][ T102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.910762][ T102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.925364][ T35] cfg80211: failed to load regulatory.db [ 82.016672][ T102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.031850][ T6484] chnl_net:caif_netlink_parms(): no params data found [ 82.123546][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 82.169501][ T6495] chnl_net:caif_netlink_parms(): no params data found [ 82.178613][ T6484] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.181246][ T6484] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.183413][ T6484] bridge_slave_0: entered allmulticast mode [ 82.186100][ T6484] bridge_slave_0: entered promiscuous mode [ 82.194094][ T6484] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.196808][ T6484] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.198959][ T6484] bridge_slave_1: entered allmulticast mode [ 82.201842][ T6484] bridge_slave_1: entered promiscuous mode [ 82.283789][ T6490] chnl_net:caif_netlink_parms(): no params data found [ 82.310215][ T6484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.350102][ T6484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.363708][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.366700][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.369924][ T6495] bridge_slave_0: entered allmulticast mode [ 82.373296][ T6495] bridge_slave_0: entered promiscuous mode [ 82.415253][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.418110][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.420433][ T6491] bridge_slave_0: entered allmulticast mode [ 82.423422][ T6491] bridge_slave_0: entered promiscuous mode [ 82.438686][ T6495] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.441013][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.443810][ T6495] bridge_slave_1: entered allmulticast mode [ 82.447244][ T6495] bridge_slave_1: entered promiscuous mode [ 82.471238][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.474576][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.476761][ T6491] bridge_slave_1: entered allmulticast mode [ 82.482025][ T6491] bridge_slave_1: entered promiscuous mode [ 82.506386][ T6484] team0: Port device team_slave_0 added [ 82.525876][ T6495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.558653][ T6484] team0: Port device team_slave_1 added [ 82.562673][ T6495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.609367][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.633811][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.637322][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.640397][ T6490] bridge_slave_0: entered allmulticast mode [ 82.643709][ T6490] bridge_slave_0: entered promiscuous mode [ 82.650788][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.665556][ T6495] team0: Port device team_slave_0 added [ 82.667684][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.669957][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.672249][ T6490] bridge_slave_1: entered allmulticast mode [ 82.674779][ T6490] bridge_slave_1: entered promiscuous mode [ 82.712273][ T6491] team0: Port device team_slave_0 added [ 82.715766][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.718571][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.729585][ T6484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.735853][ T6495] team0: Port device team_slave_1 added [ 82.758116][ T6490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.762706][ T6491] team0: Port device team_slave_1 added [ 82.778136][ T6484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.780174][ T6484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.788117][ T6484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.803786][ T6490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.836028][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.837894][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.845971][ T6495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.863987][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.866159][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.876588][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.882393][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.885599][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.894970][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.900994][ T6495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.904098][ T6495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.915204][ T6495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.922958][ T6490] team0: Port device team_slave_0 added [ 82.991846][ T6490] team0: Port device team_slave_1 added [ 83.055385][ T6491] hsr_slave_0: entered promiscuous mode [ 83.058239][ T6491] hsr_slave_1: entered promiscuous mode [ 83.060925][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.064012][ T6491] Cannot create hsr debugfs directory [ 83.068285][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.070373][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.079456][ T6490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.086771][ T6490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.089877][ T6490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.100377][ T6490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.108526][ T6484] hsr_slave_0: entered promiscuous mode [ 83.111738][ T6484] hsr_slave_1: entered promiscuous mode [ 83.113655][ T6484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.116364][ T6484] Cannot create hsr debugfs directory [ 83.142305][ T6495] hsr_slave_0: entered promiscuous mode [ 83.146153][ T6495] hsr_slave_1: entered promiscuous mode [ 83.148072][ T6495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.150269][ T6495] Cannot create hsr debugfs directory [ 83.237320][ T6490] hsr_slave_0: entered promiscuous mode [ 83.239400][ T6490] hsr_slave_1: entered promiscuous mode [ 83.241275][ T6490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.243477][ T6490] Cannot create hsr debugfs directory [ 83.460585][ T6491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.464580][ T6491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.503328][ T6491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.507435][ T6491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.548634][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.598951][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.604000][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.606234][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.614915][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.617874][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.755063][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.773195][ T6491] veth0_vlan: entered promiscuous mode [ 83.778193][ T6491] veth1_vlan: entered promiscuous mode [ 83.792047][ T6491] veth0_macvtap: entered promiscuous mode [ 83.795710][ T6491] veth1_macvtap: entered promiscuous mode [ 83.804973][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.808260][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.812910][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.819585][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.823097][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.825610][ T6493] Bluetooth: hci2: command tx timeout [ 83.826223][ T5972] Bluetooth: hci3: command tx timeout [ 83.832104][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.834563][ T5972] Bluetooth: hci1: command tx timeout [ 83.835331][ T6493] Bluetooth: hci0: command tx timeout [ 83.841071][ T6491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.844757][ T6491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.847338][ T6491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.849846][ T6491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.886430][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.889628][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.897481][ T39] audit: type=1400 audit(1740383906.662:146): avc: denied { rename } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.907005][ T39] audit: type=1400 audit(1740383906.662:147): avc: denied { unlink } for pid=5333 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.911534][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.915656][ T39] audit: type=1400 audit(1740383906.662:148): avc: denied { create } for pid=5333 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.917471][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.982129][ T39] audit: type=1400 audit(1740383906.742:149): avc: denied { mount } for pid=6621 comm="syz.2.18" name="/" dev="9p" ino=27656491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 83.991705][ T39] audit: type=1400 audit(1740383906.742:150): avc: denied { write } for pid=6621 comm="syz.2.18" name="/" dev="9p" ino=27656491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.995626][ T6622] netfs: Couldn't get user pages (rc=-14) [ 84.000296][ T39] audit: type=1400 audit(1740383906.742:151): avc: denied { add_name } for pid=6621 comm="syz.2.18" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.010693][ T39] audit: type=1400 audit(1740383906.742:152): avc: denied { create } for pid=6621 comm="syz.2.18" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 84.018642][ T39] audit: type=1400 audit(1740383906.742:153): avc: denied { associate } for pid=6621 comm="syz.2.18" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.027613][ T39] audit: type=1400 audit(1740383906.742:154): avc: denied { read write } for pid=6621 comm="syz.2.18" name="file0" dev="9p" ino=27656494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.036842][ T39] audit: type=1400 audit(1740383906.742:155): avc: denied { open } for pid=6621 comm="syz.2.18" path="/0/bus/file0" dev="9p" ino=27656494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.234950][ T6637] netfs: Couldn't get user pages (rc=-14) [ 84.430534][ T6648] netfs: Couldn't get user pages (rc=-14) [ 84.606314][ T6657] netfs: Couldn't get user pages (rc=-14) [ 84.774059][ T6669] netfs: Couldn't get user pages (rc=-14) [ 85.055155][ T6685] netfs: Couldn't get user pages (rc=-14) [ 85.226740][ T6698] netfs: Couldn't get user pages (rc=-14) [ 85.428556][ T6712] netfs: Couldn't get user pages (rc=-14) [ 85.620708][ T6723] netfs: Couldn't get user pages (rc=-14) [ 85.685592][ T102] bridge_slave_1: left allmulticast mode [ 85.687338][ T102] bridge_slave_1: left promiscuous mode [ 85.689124][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.693134][ T102] bridge_slave_0: left allmulticast mode [ 85.695391][ T102] bridge_slave_0: left promiscuous mode [ 85.697083][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.815039][ T6735] netfs: Couldn't get user pages (rc=-14) [ 85.886886][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.890725][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.894198][ T102] bond0 (unregistering): Released all slaves [ 85.905073][ T6493] Bluetooth: hci0: command tx timeout [ 85.905401][ T5972] Bluetooth: hci2: command tx timeout [ 85.914646][ T6493] Bluetooth: hci3: command tx timeout [ 85.915430][ T5972] Bluetooth: hci1: command tx timeout [ 86.019485][ T102] hsr_slave_0: left promiscuous mode [ 86.022241][ T102] hsr_slave_1: left promiscuous mode [ 86.025182][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.027666][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.030658][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.032757][ T6746] netfs: Couldn't get user pages (rc=-14) [ 86.033879][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.055158][ T102] veth1_macvtap: left promiscuous mode [ 86.057300][ T102] veth0_macvtap: left promiscuous mode [ 86.059473][ T102] veth1_vlan: left promiscuous mode [ 86.061725][ T102] veth0_vlan: left promiscuous mode [ 86.230971][ T6757] netfs: Couldn't get user pages (rc=-14) [ 86.456940][ T6759] netfs: Couldn't get user pages (rc=-14) [ 86.556142][ T102] team0 (unregistering): Port device team_slave_1 removed [ 86.611123][ T102] team0 (unregistering): Port device team_slave_0 removed [ 86.635558][ T6761] netfs: Couldn't get user pages (rc=-14) 2025/02/24 07:58:29 executed programs: 22 [ 86.875372][ T6763] netfs: Couldn't get user pages (rc=-14) [ 87.080605][ T6765] netfs: Couldn't get user pages (rc=-14) [ 87.305450][ T6776] netfs: Couldn't get user pages (rc=-14) [ 87.314545][ T6484] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.319735][ T6484] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.334314][ T6484] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.343325][ T6484] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.369962][ T6490] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.375433][ T6490] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.386384][ T6490] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.390741][ T6490] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.418777][ T6495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.422241][ T6495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.426530][ T6495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.431102][ T6495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.482383][ T6484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.510526][ T6484] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.510545][ T6780] netfs: Couldn't get user pages (rc=-14) [ 87.515503][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.525395][ T6495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.528220][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.530278][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.533345][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.536219][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.544756][ T6490] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.557615][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.560627][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.574001][ T6495] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.587230][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.590323][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.604171][ T1193] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.606529][ T1193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.617829][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.620542][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.707082][ T6789] netfs: Couldn't get user pages (rc=-14) [ 87.710136][ T6789] ================================================================== [ 87.713587][ T6789] BUG: KASAN: slab-use-after-free in io_submit_one+0x4e5/0x1da0 [ 87.716833][ T6789] Write of size 4 at addr ffff8880123ee208 by task syz.2.37/6789 [ 87.721957][ T6789] [ 87.722988][ T6789] CPU: 2 UID: 0 PID: 6789 Comm: syz.2.37 Not tainted 6.14.0-rc4-syzkaller-gd082ecbc71e9 #0 [ 87.723007][ T6789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.723017][ T6789] Call Trace: [ 87.723043][ T6789] [ 87.723050][ T6789] dump_stack_lvl+0x116/0x1f0 [ 87.723077][ T6789] print_report+0xc3/0x670 [ 87.723098][ T6789] ? __virt_addr_valid+0x5e/0x590 [ 87.723116][ T6789] ? __phys_addr+0xc6/0x150 [ 87.723133][ T6789] kasan_report+0xd9/0x110 [ 87.723150][ T6789] ? io_submit_one+0x4e5/0x1da0 [ 87.723176][ T6789] ? io_submit_one+0x4e5/0x1da0 [ 87.723201][ T6789] kasan_check_range+0xef/0x1a0 [ 87.723223][ T6789] io_submit_one+0x4e5/0x1da0 [ 87.723249][ T6789] ? __pfx_io_submit_one+0x10/0x10 [ 87.723272][ T6789] ? __might_fault+0x13b/0x190 [ 87.723295][ T6789] ? lock_acquire+0x2f/0xb0 [ 87.723315][ T6789] ? __might_fault+0xe3/0x190 [ 87.723332][ T6789] ? __x64_sys_io_submit+0x1b2/0x340 [ 87.723351][ T6789] __x64_sys_io_submit+0x1b2/0x340 [ 87.723373][ T6789] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 87.723397][ T6789] do_syscall_64+0xcd/0x250 [ 87.723416][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.723436][ T6789] RIP: 0033:0x7f651c78cde9 [ 87.723448][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.723463][ T6789] RSP: 002b:00007f651d65a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 87.723478][ T6789] RAX: ffffffffffffffda RBX: 00007f651c9a5fa0 RCX: 00007f651c78cde9 [ 87.723487][ T6789] RDX: 00004000000002c0 RSI: 0000000000000001 RDI: 00007f651d639000 [ 87.723512][ T6789] RBP: 00007f651c80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 87.723520][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.723529][ T6789] R13: 0000000000000000 R14: 00007f651c9a5fa0 R15: 00007ffee89438c8 [ 87.723542][ T6789] [ 87.723547][ T6789] [ 87.724312][ T6484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.727137][ T6789] Allocated by task 6789: [ 87.727147][ T6789] kasan_save_stack+0x33/0x60 [ 87.727162][ T6789] kasan_save_track+0x14/0x30 [ 87.727171][ T6789] __kasan_slab_alloc+0x89/0x90 [ 87.727182][ T6789] kmem_cache_alloc_noprof+0x226/0x3d0 [ 87.727194][ T6789] io_submit_one+0x123/0x1da0 [ 87.727209][ T6789] __x64_sys_io_submit+0x1b2/0x340 [ 87.727224][ T6789] do_syscall_64+0xcd/0x250 [ 87.727237][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.727253][ T6789] [ 87.727256][ T6789] Freed by task 6789: [ 87.727261][ T6789] kasan_save_stack+0x33/0x60 [ 87.727269][ T6789] kasan_save_track+0x14/0x30 [ 87.727278][ T6789] kasan_save_free_info+0x3b/0x60 [ 87.727292][ T6789] __kasan_slab_free+0x51/0x70 [ 87.727302][ T6789] kmem_cache_free+0x2e2/0x4d0 [ 87.727311][ T6789] aio_complete_rw+0x3ec/0x7b0 [ 87.727325][ T6789] netfs_read_collection+0x30ae/0x3cb0 [ 87.727341][ T6789] netfs_wait_for_pause+0x31c/0x3e0 [ 87.727356][ T6789] netfs_unbuffered_read_iter_locked+0xb50/0x1610 [ 87.727372][ T6789] netfs_unbuffered_read_iter+0xc5/0x100 [ 87.727386][ T6789] v9fs_file_read_iter+0xbf/0x100 [ 87.727401][ T6789] aio_read+0x313/0x4e0 [ 87.727413][ T6789] io_submit_one+0x1580/0x1da0 [ 87.727428][ T6789] __x64_sys_io_submit+0x1b2/0x340 [ 87.727443][ T6789] do_syscall_64+0xcd/0x250 [ 87.727454][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.727468][ T6789] [ 87.727470][ T6789] The buggy address belongs to the object at ffff8880123ee140 [ 87.727470][ T6789] which belongs to the cache aio_kiocb of size 216 [ 87.727479][ T6789] The buggy address is located 200 bytes inside of [ 87.727479][ T6789] freed 216-byte region [ffff8880123ee140, ffff8880123ee218) [ 87.727489][ T6789] [ 87.727492][ T6789] The buggy address belongs to the physical page: [ 87.727496][ T6789] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880123ee000 pfn:0x123ee [ 87.761997][ T6484] veth0_vlan: entered promiscuous mode [ 87.763157][ T6789] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.771688][ T6484] veth1_vlan: entered promiscuous mode [ 87.771753][ T6789] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 87.790538][ T6484] veth0_macvtap: entered promiscuous mode [ 87.791396][ T6789] page_type: f5(slab) [ 87.799633][ T6484] veth1_macvtap: entered promiscuous mode [ 87.800213][ T6789] raw: 00fff00000000040 ffff888104fe9180 dead000000000122 0000000000000000 [ 87.809097][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.810626][ T6789] raw: ffff8880123ee000 0000000080190018 00000000f5000000 0000000000000000 [ 87.825231][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.826169][ T6789] head: 00fff00000000040 ffff888104fe9180 dead000000000122 0000000000000000 [ 87.828024][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.830043][ T6789] head: ffff8880123ee000 0000000080190018 00000000f5000000 0000000000000000 [ 87.830062][ T6789] head: 00fff00000000001 ffffea000048fb81 ffffffffffffffff 0000000000000000 [ 87.830077][ T6789] head: ffff888000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 87.830087][ T6789] page dumped because: kasan: bad access detected [ 87.830095][ T6789] page_owner tracks the page as allocated [ 87.830101][ T6789] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6669, tgid 6668 (syz.2.23), ts 84778657498, free_ts 84778268983 [ 87.830131][ T6789] post_alloc_hook+0x181/0x1b0 [ 87.830167][ T6789] get_page_from_freelist+0xfce/0x2f80 [ 87.830183][ T6789] __alloc_frozen_pages_noprof+0x221/0x2470 [ 87.830199][ T6789] alloc_pages_mpol+0x1fc/0x540 [ 87.830217][ T6789] new_slab+0x23d/0x330 [ 87.830240][ T6789] ___slab_alloc+0xc5d/0x1720 [ 87.830261][ T6789] __slab_alloc.constprop.0+0x56/0xb0 [ 87.830284][ T6789] kmem_cache_alloc_noprof+0xfa/0x3d0 [ 87.830299][ T6789] io_submit_one+0x123/0x1da0 [ 87.830323][ T6789] __x64_sys_io_submit+0x1b2/0x340 [ 87.830346][ T6789] do_syscall_64+0xcd/0x250 [ 87.833469][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.834508][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.834540][ T6789] page last free pid 6669 tgid 6668 stack trace: [ 87.834549][ T6789] free_frozen_pages+0x6db/0xfb0 [ 87.834565][ T6789] __mmdrop+0xd5/0x460 [ 87.838056][ T6484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.838269][ T6789] finish_task_switch.isra.0+0x7af/0xcc0 [ 87.840331][ T6484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.841019][ T6484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.842460][ T6789] __schedule+0xf4b/0x5890 [ 87.847342][ T6484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.848888][ T6789] schedule+0xe7/0x350 [ 87.850149][ T6484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.852127][ T6789] bit_wait+0x15/0xe0 [ 87.853743][ T6484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.855775][ T6789] __wait_on_bit+0x62/0x180 [ 87.855796][ T6789] out_of_line_wait_on_bit+0xda/0x110 [ 87.855814][ T6789] netfs_unbuffered_write_iter_locked+0xaa1/0xd30 [ 87.855841][ T6789] netfs_unbuffered_write_iter+0x413/0x6d0 [ 87.855864][ T6789] v9fs_file_write_iter+0xbf/0x100 [ 87.855884][ T6789] vfs_write+0x5ae/0x1150 [ 87.855910][ T6789] ksys_write+0x12b/0x250 [ 87.855934][ T6789] do_syscall_64+0xcd/0x250 [ 87.855953][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.855976][ T6789] [ 87.855981][ T6789] Memory state around the buggy address: [ 87.855991][ T6789] ffff8880123ee100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 87.856003][ T6789] ffff8880123ee180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.856015][ T6789] >ffff8880123ee200: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.856025][ T6789] ^ [ 87.856033][ T6789] ffff8880123ee280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.856045][ T6789] ffff8880123ee300: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 87.856054][ T6789] ================================================================== [ 87.858146][ T6789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.858159][ T6789] CPU: 2 UID: 0 PID: 6789 Comm: syz.2.37 Not tainted 6.14.0-rc4-syzkaller-gd082ecbc71e9 #0 [ 87.858178][ T6789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.858189][ T6789] Call Trace: [ 87.858195][ T6789] [ 87.858202][ T6789] dump_stack_lvl+0x3d/0x1f0 [ 87.858226][ T6789] panic+0x71d/0x800 [ 87.858247][ T6789] ? __pfx_panic+0x10/0x10 [ 87.858265][ T6789] ? irqentry_exit+0x3b/0x90 [ 87.858285][ T6789] ? lockdep_hardirqs_on+0x7c/0x110 [ 87.858304][ T6789] ? preempt_schedule_thunk+0x1a/0x30 [ 87.858328][ T6789] ? preempt_schedule_common+0x44/0xc0 [ 87.858346][ T6789] ? check_panic_on_warn+0x1f/0xb0 [ 87.858367][ T6789] check_panic_on_warn+0xab/0xb0 [ 87.858386][ T6789] end_report+0x117/0x180 [ 87.858429][ T6789] kasan_report+0xe9/0x110 [ 87.858446][ T6789] ? io_submit_one+0x4e5/0x1da0 [ 87.858471][ T6789] ? io_submit_one+0x4e5/0x1da0 [ 87.858497][ T6789] kasan_check_range+0xef/0x1a0 [ 87.858519][ T6789] io_submit_one+0x4e5/0x1da0 [ 87.858545][ T6789] ? __pfx_io_submit_one+0x10/0x10 [ 87.858571][ T6789] ? __might_fault+0x13b/0x190 [ 87.858594][ T6789] ? lock_acquire+0x2f/0xb0 [ 87.858617][ T6789] ? __might_fault+0xe3/0x190 [ 87.858638][ T6789] ? __x64_sys_io_submit+0x1b2/0x340 [ 88.088597][ T6789] __x64_sys_io_submit+0x1b2/0x340 [ 88.090735][ T6789] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 88.093162][ T6789] do_syscall_64+0xcd/0x250 [ 88.095028][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.097558][ T6789] RIP: 0033:0x7f651c78cde9 [ 88.099473][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.107350][ T6789] RSP: 002b:00007f651d65a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 88.110749][ T6789] RAX: ffffffffffffffda RBX: 00007f651c9a5fa0 RCX: 00007f651c78cde9 [ 88.113948][ T6789] RDX: 00004000000002c0 RSI: 0000000000000001 RDI: 00007f651d639000 [ 88.117152][ T6789] RBP: 00007f651c80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.120423][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.123916][ T6789] R13: 0000000000000000 R14: 00007f651c9a5fa0 R15: 00007ffee89438c8 [ 88.127185][ T6789] [ 88.129045][ T6789] Kernel Offset: disabled [ 88.130853][ T6789] Rebooting in 86400 seconds..