Warning: Permanently added '[localhost]:13104' (ED25519) to the list of known hosts. 2024/08/07 04:55:41 ignoring optional flag "sandboxArg"="0" 2024/08/07 04:55:42 parsed 1 programs [ 88.109636][ T39] audit: type=1400 audit(1723006542.199:132): avc: denied { getattr } for pid=5450 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.118403][ T39] audit: type=1400 audit(1723006542.219:133): avc: denied { read } for pid=5450 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.129540][ T39] audit: type=1400 audit(1723006542.219:134): avc: denied { open } for pid=5450 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 88.274210][ T39] audit: type=1400 audit(1723006542.359:135): avc: denied { unlink } for pid=5457 comm="syz-executor" name="swap-file" dev="sda1" ino=1931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 90.094227][ T5457] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/08/07 04:55:44 executed programs: 0 [ 90.284449][ T5476] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.289304][ T5476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.300295][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.304244][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.308017][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.310516][ T5480] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.311967][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.325840][ T5481] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.334735][ T5484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.336738][ T5485] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.337251][ T5485] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.338521][ T5485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.339144][ T5485] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.340300][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.340901][ T67] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 90.341211][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.345229][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.356529][ T39] audit: type=1400 audit(1723006544.439:136): avc: denied { mounton } for pid=5472 comm="syz-executor.2" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.360427][ T5484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.362799][ T5485] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.364990][ T5485] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.365891][ T5485] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.421652][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.427860][ T67] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.431862][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.832282][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 90.958923][ T5472] chnl_net:caif_netlink_parms(): no params data found [ 91.099083][ T5482] chnl_net:caif_netlink_parms(): no params data found [ 91.207019][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.210524][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.213498][ T5471] bridge_slave_0: entered allmulticast mode [ 91.218283][ T5471] bridge_slave_0: entered promiscuous mode [ 91.229389][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.233899][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.238530][ T5471] bridge_slave_1: entered allmulticast mode [ 91.243470][ T5471] bridge_slave_1: entered promiscuous mode [ 91.439947][ T5472] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.443613][ T5472] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.447011][ T5472] bridge_slave_0: entered allmulticast mode [ 91.451869][ T5472] bridge_slave_0: entered promiscuous mode [ 91.459371][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.467253][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.576112][ T5472] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.579291][ T5472] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.584706][ T5472] bridge_slave_1: entered allmulticast mode [ 91.588793][ T5472] bridge_slave_1: entered promiscuous mode [ 91.713017][ T5482] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.715839][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.718511][ T5482] bridge_slave_0: entered allmulticast mode [ 91.722549][ T5482] bridge_slave_0: entered promiscuous mode [ 91.786652][ T5472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.794119][ T5471] team0: Port device team_slave_0 added [ 91.798122][ T5482] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.805867][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.808802][ T5482] bridge_slave_1: entered allmulticast mode [ 91.812912][ T5482] bridge_slave_1: entered promiscuous mode [ 91.816954][ T5478] chnl_net:caif_netlink_parms(): no params data found [ 91.828035][ T5472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.835498][ T5471] team0: Port device team_slave_1 added [ 91.986606][ T5482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.038906][ T5472] team0: Port device team_slave_0 added [ 92.055959][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.058686][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.069528][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.108029][ T5482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.114821][ T5472] team0: Port device team_slave_1 added [ 92.119299][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.122703][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.135412][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.244664][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.247717][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.258218][ T5472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.337933][ T5482] team0: Port device team_slave_0 added [ 92.364807][ T5472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.368544][ T5472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.383406][ T5472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.390211][ T67] Bluetooth: hci1: command tx timeout [ 92.395683][ T5476] Bluetooth: hci3: command tx timeout [ 92.409204][ T5482] team0: Port device team_slave_1 added [ 92.449625][ T5476] Bluetooth: hci2: command tx timeout [ 92.450162][ T67] Bluetooth: hci0: command tx timeout [ 92.560783][ T5471] hsr_slave_0: entered promiscuous mode [ 92.590707][ T5471] hsr_slave_1: entered promiscuous mode [ 92.644299][ T5472] hsr_slave_0: entered promiscuous mode [ 92.655803][ T5472] hsr_slave_1: entered promiscuous mode [ 92.662194][ T5472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.666310][ T5472] Cannot create hsr debugfs directory [ 92.701639][ T831] cfg80211: failed to load regulatory.db [ 92.724231][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.727205][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.738568][ T5482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.747233][ T5482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.751921][ T5482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.766769][ T5482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.775934][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.778891][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.782546][ T5478] bridge_slave_0: entered allmulticast mode [ 92.786545][ T5478] bridge_slave_0: entered promiscuous mode [ 92.793130][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.797444][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.801753][ T5478] bridge_slave_1: entered allmulticast mode [ 92.806995][ T5478] bridge_slave_1: entered promiscuous mode [ 92.882718][ T5478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.972281][ T5478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.197121][ T5482] hsr_slave_0: entered promiscuous mode [ 93.202083][ T5482] hsr_slave_1: entered promiscuous mode [ 93.206104][ T5482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.210574][ T5482] Cannot create hsr debugfs directory [ 93.299628][ T5478] team0: Port device team_slave_0 added [ 93.396081][ T5478] team0: Port device team_slave_1 added [ 93.533233][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.536440][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.549230][ T5478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.575894][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.578951][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.591756][ T5478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.888197][ T5478] hsr_slave_0: entered promiscuous mode [ 93.894925][ T5478] hsr_slave_1: entered promiscuous mode [ 93.908811][ T5478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.912423][ T5478] Cannot create hsr debugfs directory [ 94.129004][ T5471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.219658][ T5471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.232529][ T5471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.268445][ T5471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.321145][ T5472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.334589][ T5472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.346786][ T5472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.353669][ T5472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.449926][ T67] Bluetooth: hci3: command tx timeout [ 94.451720][ T5482] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.461117][ T67] Bluetooth: hci1: command tx timeout [ 94.530418][ T67] Bluetooth: hci2: command tx timeout [ 94.537519][ T5482] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.539648][ T67] Bluetooth: hci0: command tx timeout [ 94.565802][ T5482] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.572866][ T5482] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.775314][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.886546][ T5472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.901834][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.956442][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.959666][ T5370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.967798][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.971013][ T5370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.084814][ T5472] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.102637][ T5562] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.105467][ T5562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.151378][ T5482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.157961][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.160844][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.167585][ T5478] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.176410][ T5478] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.205426][ T5471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.218221][ T5478] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.229198][ T5478] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.301511][ T5482] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.356660][ T832] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.360720][ T832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.457022][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.459927][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.504122][ T5472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.538913][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.728599][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.747814][ T5471] veth0_vlan: entered promiscuous mode [ 95.768247][ T5472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.813640][ T5478] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.820549][ T5471] veth1_vlan: entered promiscuous mode [ 95.843461][ T5482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.856884][ T5357] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.860566][ T5357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.875648][ T5472] veth0_vlan: entered promiscuous mode [ 95.960708][ T832] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.964857][ T832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.977959][ T5472] veth1_vlan: entered promiscuous mode [ 96.029254][ T5471] veth0_macvtap: entered promiscuous mode [ 96.048329][ T5471] veth1_macvtap: entered promiscuous mode [ 96.066749][ T5482] veth0_vlan: entered promiscuous mode [ 96.076134][ T5472] veth0_macvtap: entered promiscuous mode [ 96.136256][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.142610][ T5482] veth1_vlan: entered promiscuous mode [ 96.151480][ T5472] veth1_macvtap: entered promiscuous mode [ 96.166060][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.207355][ T5482] veth0_macvtap: entered promiscuous mode [ 96.215030][ T5472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.220380][ T5472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.239012][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.246353][ T5471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.251141][ T5471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.254625][ T5471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.257924][ T5471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.279352][ T5472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.283662][ T5472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.288662][ T5472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.292946][ T5482] veth1_macvtap: entered promiscuous mode [ 96.303043][ T5472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.306638][ T5472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.310626][ T5472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.314286][ T5472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.405911][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.419559][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.424431][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.428966][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.436432][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.442915][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.447489][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.454122][ T5482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.459877][ T5482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.471221][ T5482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.483123][ T5482] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483581][ T3165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.486904][ T5482] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.491697][ T3165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.495095][ T5482] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.502830][ T5482] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.542336][ T67] Bluetooth: hci3: command tx timeout [ 96.543276][ T5476] Bluetooth: hci1: command tx timeout [ 96.579533][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.583013][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.610171][ T5476] Bluetooth: hci0: command tx timeout [ 96.612090][ T67] Bluetooth: hci2: command tx timeout [ 96.616492][ T5478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.637374][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.645307][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.685440][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.688936][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.691362][ T5478] veth0_vlan: entered promiscuous mode [ 96.714242][ T5625] loop0: detected capacity change from 0 to 1024 [ 96.727279][ T39] audit: type=1400 audit(1723006550.809:137): avc: denied { mounton } for pid=5623 comm="syz-executor.0" path="/syzkaller-testdir3335300156/syzkaller.8ev9V6/0/file0" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 96.741997][ T624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.745810][ T624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.747553][ T5478] veth1_vlan: entered promiscuous mode [ 96.765367][ T39] audit: type=1400 audit(1723006550.859:138): avc: denied { mount } for pid=5623 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 96.796436][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.802954][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.837299][ T5629] loop2: detected capacity change from 0 to 1024 2024/08/07 04:55:50 executed programs: 4 [ 96.845670][ T5478] veth0_macvtap: entered promiscuous mode [ 96.851464][ T3165] ================================================================== [ 96.855007][ T3165] BUG: KASAN: slab-out-of-bounds in copy_page_from_iter_atomic+0x8bc/0x1170 [ 96.858849][ T3165] Read of size 2048 at addr ffff88803074b000 by task kworker/u32:10/3165 [ 96.865395][ T3165] [ 96.866607][ T3165] CPU: 1 UID: 0 PID: 3165 Comm: kworker/u32:10 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 96.872295][ T3165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.876246][ T5478] veth1_macvtap: entered promiscuous mode [ 96.877482][ T3165] Workqueue: loop0 loop_workfn [ 96.883122][ T3165] Call Trace: [ 96.884696][ T3165] [ 96.886071][ T3165] dump_stack_lvl+0x116/0x1f0 [ 96.888261][ T3165] print_report+0xc3/0x620 [ 96.890381][ T3165] ? __virt_addr_valid+0x5e/0x590 [ 96.892965][ T3165] ? __phys_addr+0xc6/0x150 [ 96.895794][ T3165] kasan_report+0xd9/0x110 [ 96.897887][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.898040][ T3165] ? copy_page_from_iter_atomic+0x8bc/0x1170 [ 96.903334][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.906097][ T3165] ? copy_page_from_iter_atomic+0x8bc/0x1170 [ 96.910792][ T39] audit: type=1400 audit(1723006550.939:139): avc: denied { unmount } for pid=5471 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 96.913395][ T3165] kasan_check_range+0xef/0x1a0 [ 96.924802][ T3165] __asan_memcpy+0x23/0x60 [ 96.925317][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.927296][ T3165] copy_page_from_iter_atomic+0x8bc/0x1170 [ 96.932343][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.935511][ T3165] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 96.943804][ T3165] ? shmem_write_begin+0x16f/0x360 [ 96.946115][ T3165] ? __pfx_shmem_write_begin+0x10/0x10 [ 96.948839][ T3165] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.951387][ T3165] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 96.952004][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.954506][ T3165] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 96.959063][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.961356][ T3165] generic_perform_write+0x53d/0xaa0 [ 96.961380][ T3165] ? __pfx_generic_perform_write+0x10/0x10 [ 96.961391][ T3165] ? __mark_inode_dirty+0x2a6/0xe70 [ 96.961401][ T3165] ? preempt_count_add+0x76/0x150 [ 96.961412][ T3165] ? mnt_put_write_access_file+0xc1/0xf0 [ 96.961425][ T3165] shmem_file_write_iter+0x114/0x140 [ 96.961438][ T3165] do_iter_readv_writev+0x531/0x800 [ 96.961452][ T3165] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 96.961550][ T3165] vfs_iter_write+0x1eb/0x9c0 [ 96.967195][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.967549][ T3165] loop_process_work+0x14dd/0x2000 [ 96.990736][ T3165] ? __pfx_loop_process_work+0x10/0x10 [ 96.993191][ T3165] ? __pfx_lock_release+0x10/0x10 [ 96.995554][ T3165] process_one_work+0x9c5/0x1b40 [ 96.997849][ T3165] ? __pfx_batadv_nc_worker+0x10/0x10 [ 97.000659][ T3165] ? __pfx_process_one_work+0x10/0x10 [ 97.003342][ T3165] ? assign_work+0x1a0/0x250 [ 97.005555][ T3165] worker_thread+0x6c8/0xf20 [ 97.007769][ T3165] ? __kthread_parkme+0x148/0x220 [ 97.010194][ T3165] ? __pfx_worker_thread+0x10/0x10 [ 97.012298][ T5635] loop3: detected capacity change from 0 to 1024 [ 97.012479][ T3165] kthread+0x2c1/0x3a0 [ 97.012498][ T3165] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.012516][ T3165] ? __pfx_kthread+0x10/0x10 [ 97.037306][ T3165] ret_from_fork+0x45/0x80 [ 97.039452][ T3165] ? __pfx_kthread+0x10/0x10 [ 97.041522][ T3165] ret_from_fork_asm+0x1a/0x30 [ 97.043778][ T3165] [ 97.045257][ T3165] [ 97.046313][ T3165] Allocated by task 5625: [ 97.047874][ T3165] kasan_save_stack+0x33/0x60 [ 97.050007][ T3165] kasan_save_track+0x14/0x30 [ 97.051124][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.052287][ T3165] __kasan_kmalloc+0xaa/0xb0 [ 97.056521][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.058806][ T3165] __kmalloc_noprof+0x1e8/0x400 [ 97.066033][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.066144][ T3165] hfsplus_read_wrapper+0x34c/0xff0 [ 97.071130][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.073071][ T3165] hfsplus_fill_super+0x352/0x1bc0 [ 97.078470][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.080708][ T3165] mount_bdev+0x1e3/0x2d0 [ 97.080734][ T3165] legacy_get_tree+0x109/0x220 [ 97.080753][ T3165] vfs_get_tree+0x8f/0x380 [ 97.080765][ T3165] path_mount+0x14e6/0x1f20 [ 97.080777][ T3165] __x64_sys_mount+0x294/0x320 [ 97.080789][ T3165] do_syscall_64+0xcd/0x250 [ 97.080809][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.080830][ T3165] [ 97.086580][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.088812][ T3165] The buggy address belongs to the object at ffff88803074b000 [ 97.088812][ T3165] which belongs to the cache kmalloc-512 of size 512 [ 97.094500][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.095340][ T3165] The buggy address is located 0 bytes inside of [ 97.095340][ T3165] allocated 512-byte region [ffff88803074b000, ffff88803074b200) [ 97.095356][ T3165] [ 97.095360][ T3165] The buggy address belongs to the physical page: [ 97.095365][ T3165] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30748 [ 97.123046][ T5478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.124712][ T3165] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 97.125836][ T5478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.128846][ T3165] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 97.134807][ T5478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.136303][ T3165] page_type: 0xfdffffff(slab) [ 97.136319][ T3165] raw: 00fff00000000040 ffff888015842c80 dead000000000100 dead000000000122 [ 97.141106][ T5478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.144730][ T3165] raw: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 97.144748][ T3165] head: 00fff00000000040 ffff888015842c80 dead000000000100 dead000000000122 [ 97.144763][ T3165] head: 0000000000000000 0000000000100010 00000001fdffffff 0000000000000000 [ 97.144778][ T3165] head: 00fff00000000002 ffffea0000c1d201 ffffffffffffffff 0000000000000000 [ 97.144898][ T3165] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 97.144908][ T3165] page dumped because: kasan: bad access detected [ 97.144916][ T3165] page_owner tracks the page as allocated [ 97.144921][ T3165] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5472, tgid 5472 (syz-executor.2), ts 94431341647, free_ts 94325770056 [ 97.144953][ T3165] post_alloc_hook+0x2d1/0x350 [ 97.144975][ T3165] get_page_from_freelist+0x1351/0x2e50 [ 97.144996][ T3165] __alloc_pages_noprof+0x22b/0x2460 [ 97.145016][ T3165] alloc_slab_page+0x4e/0xf0 [ 97.145039][ T3165] new_slab+0x84/0x260 [ 97.145055][ T3165] ___slab_alloc+0xdac/0x1870 [ 97.145071][ T3165] __slab_alloc.constprop.0+0x56/0xb0 [ 97.145089][ T3165] __kmalloc_noprof+0x367/0x400 [ 97.145107][ T3165] fib6_info_alloc+0x40/0x160 [ 97.145122][ T3165] ip6_route_info_create+0x337/0x1940 [ 97.145144][ T3165] ip6_route_add+0x26/0x190 [ 97.145164][ T3165] addrconf_prefix_route+0x2fe/0x510 [ 97.145188][ T3165] add_v4_addrs+0x6ce/0x9f0 [ 97.145203][ T3165] addrconf_init_auto_addrs+0x18a/0x820 [ 97.145221][ T3165] addrconf_notify+0xe9e/0x19e0 [ 97.145239][ T3165] notifier_call_chain+0xb9/0x410 [ 97.145261][ T3165] page last free pid 5544 tgid 5544 stack trace: [ 97.145269][ T3165] free_unref_page+0x64a/0xe40 [ 97.145285][ T3165] __put_partials+0x14c/0x170 [ 97.145299][ T3165] qlist_free_all+0x4e/0x140 [ 97.145312][ T3165] kasan_quarantine_reduce+0x192/0x1e0 [ 97.145346][ T3165] __kasan_slab_alloc+0x69/0x90 [ 97.145364][ T3165] kmem_cache_alloc_noprof+0x121/0x2f0 [ 97.145381][ T3165] vm_area_alloc+0x1f/0x230 [ 97.145401][ T3165] mmap_region+0x3a5/0x2760 [ 97.145419][ T3165] do_mmap+0xbfb/0xfb0 [ 97.145437][ T3165] vm_mmap_pgoff+0x1ba/0x360 [ 97.145454][ T3165] ksys_mmap_pgoff+0x7d/0x5d0 [ 97.145470][ T3165] __x64_sys_mmap+0x125/0x190 [ 97.145482][ T3165] do_syscall_64+0xcd/0x250 [ 97.145498][ T3165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.145518][ T3165] [ 97.145522][ T3165] Memory state around the buggy address: [ 97.145529][ T3165] ffff88803074b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.145539][ T3165] ffff88803074b180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.145549][ T3165] >ffff88803074b200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.145557][ T3165] ^ [ 97.145564][ T3165] ffff88803074b280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.145574][ T3165] ffff88803074b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 97.145583][ T3165] ================================================================== [ 97.147186][ T3165] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.147197][ T3165] CPU: 1 UID: 0 PID: 3165 Comm: kworker/u32:10 Not tainted 6.11.0-rc2-syzkaller-00013-gd4560686726f #0 [ 97.147211][ T3165] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.147219][ T3165] Workqueue: loop0 loop_workfn [ 97.147240][ T3165] Call Trace: [ 97.147246][ T3165] [ 97.147252][ T3165] dump_stack_lvl+0x3d/0x1f0 [ 97.147277][ T3165] panic+0x6f5/0x7a0 [ 97.147294][ T3165] ? __pfx_panic+0x10/0x10 [ 97.147307][ T3165] ? check_panic_on_warn+0x1f/0xb0 [ 97.147323][ T3165] check_panic_on_warn+0xab/0xb0 [ 97.147341][ T3165] end_report+0x117/0x180 [ 97.147360][ T3165] kasan_report+0xe9/0x110 [ 97.147377][ T3165] ? copy_page_from_iter_atomic+0x8bc/0x1170 [ 97.147401][ T3165] ? copy_page_from_iter_atomic+0x8bc/0x1170 [ 97.147419][ T3165] kasan_check_range+0xef/0x1a0 [ 97.147438][ T3165] __asan_memcpy+0x23/0x60 [ 97.147452][ T3165] copy_page_from_iter_atomic+0x8bc/0x1170 [ 97.147476][ T3165] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 97.147499][ T3165] ? shmem_write_begin+0x16f/0x360 [ 97.147514][ T3165] ? __pfx_shmem_write_begin+0x10/0x10 [ 97.147526][ T3165] ? lockdep_hardirqs_on+0x7c/0x110 [ 97.147543][ T3165] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 97.147672][ T3165] ? ktime_get_coarse_real_ts64+0x147/0x200 [ 97.147691][ T3165] generic_perform_write+0x53d/0xaa0 [ 97.147710][ T3165] ? __pfx_generic_perform_write+0x10/0x10 [ 97.147725][ T3165] ? __mark_inode_dirty+0x2a6/0xe70 [ 97.147737][ T3165] ? preempt_count_add+0x76/0x150 [ 97.147753][ T3165] ? mnt_put_write_access_file+0xc1/0xf0 [ 97.147775][ T3165] shmem_file_write_iter+0x114/0x140 [ 97.147796][ T3165] do_iter_readv_writev+0x531/0x800 [ 97.147817][ T3165] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 97.147841][ T3165] vfs_iter_write+0x1eb/0x9c0 [ 97.147863][ T3165] loop_process_work+0x14dd/0x2000 [ 97.147882][ T3165] ? __pfx_loop_process_work+0x10/0x10 [ 97.147898][ T3165] ? __pfx_lock_release+0x10/0x10 [ 97.147917][ T3165] process_one_work+0x9c5/0x1b40 [ 97.147938][ T3165] ? __pfx_batadv_nc_worker+0x10/0x10 [ 97.147957][ T3165] ? __pfx_process_one_work+0x10/0x10 [ 97.147975][ T3165] ? assign_work+0x1a0/0x250 [ 97.147988][ T3165] worker_thread+0x6c8/0xf20 [ 97.148008][ T3165] ? __kthread_parkme+0x148/0x220 [ 97.148031][ T3165] ? __pfx_worker_thread+0x10/0x10 [ 97.148050][ T3165] kthread+0x2c1/0x3a0 [ 97.148060][ T3165] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.148072][ T3165] ? __pfx_kthread+0x10/0x10 [ 97.148085][ T3165] ret_from_fork+0x45/0x80 [ 97.148107][ T3165] ? __pfx_kthread+0x10/0x10 [ 97.148119][ T3165] ret_from_fork_asm+0x1a/0x30 [ 97.148141][ T3165] [ 97.150585][ T3165] Kernel Offset: disabled