last executing test programs: 86.905919ms ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioprio_set$uid(0x3, 0x0, 0x4004) 231.984µs ago: executing program 2 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): [ 44.107416][ T40] audit: type=1400 audit(1764170634.820:61): avc: denied { siginh } for pid=5839 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:28767' (ED25519) to the list of known hosts. [ 46.639893][ T40] audit: type=1400 audit(1764170637.370:62): avc: denied { name_bind } for pid=5883 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.667389][ T40] audit: type=1400 audit(1764170637.400:63): avc: denied { write } for pid=5885 comm="sh" path="pipe:[6710]" dev="pipefs" ino=6710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 46.697562][ T40] audit: type=1400 audit(1764170637.430:64): avc: denied { execute } for pid=5885 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.707753][ T40] audit: type=1400 audit(1764170637.430:65): avc: denied { execute_no_trans } for pid=5885 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 49.128880][ T40] audit: type=1400 audit(1764170639.860:66): avc: denied { mounton } for pid=5885 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 49.137116][ T40] audit: type=1400 audit(1764170639.870:67): avc: denied { mount } for pid=5885 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.139715][ T5885] cgroup: Unknown subsys name 'net' [ 49.147923][ T40] audit: type=1400 audit(1764170639.880:68): avc: denied { unmount } for pid=5885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 49.294710][ T5885] cgroup: Unknown subsys name 'cpuset' [ 49.298887][ T5885] cgroup: Unknown subsys name 'rlimit' [ 49.507921][ T40] audit: type=1400 audit(1764170640.240:69): avc: denied { setattr } for pid=5885 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.515355][ T40] audit: type=1400 audit(1764170640.240:70): avc: denied { create } for pid=5885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.523648][ T40] audit: type=1400 audit(1764170640.240:71): avc: denied { write } for pid=5885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.532118][ T40] audit: type=1400 audit(1764170640.240:72): avc: denied { read } for pid=5885 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.541462][ T40] audit: type=1400 audit(1764170640.250:73): avc: denied { mounton } for pid=5885 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.550520][ T40] audit: type=1400 audit(1764170640.250:74): avc: denied { mount } for pid=5885 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.558645][ T40] audit: type=1400 audit(1764170640.260:75): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.569152][ T5923] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.281595][ T5885] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.164799][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 54.164811][ T40] audit: type=1400 audit(1764170644.900:81): avc: denied { create } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.173362][ T40] audit: type=1400 audit(1764170644.900:82): avc: denied { read write } for pid=5933 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.182692][ T40] audit: type=1400 audit(1764170644.900:83): avc: denied { open } for pid=5933 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.192527][ T40] audit: type=1400 audit(1764170644.920:84): avc: denied { ioctl } for pid=5933 comm="syz-executor" path="socket:[2733]" dev="sockfs" ino=2733 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.227055][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.231652][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.235770][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.240444][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.242653][ T5942] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.243963][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.246810][ T5942] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.251161][ T5942] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.252065][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.252217][ T5936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.252872][ T5936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.254301][ T5942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.256351][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.258820][ T5942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.259738][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.260740][ T5936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.261556][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.262764][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.266897][ T40] audit: type=1400 audit(1764170645.000:85): avc: denied { read } for pid=5940 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.275002][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.275090][ T40] audit: type=1400 audit(1764170645.000:86): avc: denied { open } for pid=5940 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.285470][ T5298] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.289393][ T40] audit: type=1400 audit(1764170645.000:87): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.532913][ T40] audit: type=1400 audit(1764170645.270:88): avc: denied { module_request } for pid=5940 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.589218][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 54.630774][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 54.677786][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 54.748928][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.751755][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.755168][ T5940] bridge_slave_0: entered allmulticast mode [ 54.758022][ T5940] bridge_slave_0: entered promiscuous mode [ 54.778287][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.781323][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.785423][ T5940] bridge_slave_1: entered allmulticast mode [ 54.789410][ T5940] bridge_slave_1: entered promiscuous mode [ 54.794098][ T5933] chnl_net:caif_netlink_parms(): no params data found [ 54.893663][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.896140][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.898428][ T5937] bridge_slave_0: entered allmulticast mode [ 54.901018][ T5937] bridge_slave_0: entered promiscuous mode [ 54.912933][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.915210][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.917466][ T5937] bridge_slave_1: entered allmulticast mode [ 54.920152][ T5937] bridge_slave_1: entered promiscuous mode [ 54.924502][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.965667][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.033891][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.036223][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.038782][ T5945] bridge_slave_0: entered allmulticast mode [ 55.043819][ T5945] bridge_slave_0: entered promiscuous mode [ 55.098282][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.119907][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.122815][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.125128][ T5945] bridge_slave_1: entered allmulticast mode [ 55.127822][ T5945] bridge_slave_1: entered promiscuous mode [ 55.130289][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.132817][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.135109][ T5933] bridge_slave_0: entered allmulticast mode [ 55.137699][ T5933] bridge_slave_0: entered promiscuous mode [ 55.141553][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.146119][ T5940] team0: Port device team_slave_0 added [ 55.162995][ T5933] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.165662][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.168110][ T5933] bridge_slave_1: entered allmulticast mode [ 55.170830][ T5933] bridge_slave_1: entered promiscuous mode [ 55.207375][ T5940] team0: Port device team_slave_1 added [ 55.284839][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.289479][ T5933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.294078][ T5937] team0: Port device team_slave_0 added [ 55.316757][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.319005][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.327418][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.333753][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.338569][ T5933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.343887][ T5937] team0: Port device team_slave_1 added [ 55.346953][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.349512][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.360051][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.456138][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.458366][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.466779][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.473553][ T5945] team0: Port device team_slave_0 added [ 55.477399][ T5933] team0: Port device team_slave_0 added [ 55.501286][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.504323][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.513414][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.521509][ T5945] team0: Port device team_slave_1 added [ 55.525423][ T5933] team0: Port device team_slave_1 added [ 55.588348][ T5940] hsr_slave_0: entered promiscuous mode [ 55.590872][ T5940] hsr_slave_1: entered promiscuous mode [ 55.669959][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.674182][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.682289][ T5933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.688975][ T5937] hsr_slave_0: entered promiscuous mode [ 55.692229][ T5937] hsr_slave_1: entered promiscuous mode [ 55.695265][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 55.697818][ T5937] Cannot create hsr debugfs directory [ 55.700735][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.703685][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.714232][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.719873][ T5933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.722412][ T5933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.730437][ T5933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.752356][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.755201][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.765509][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.942645][ T5945] hsr_slave_0: entered promiscuous mode [ 55.944831][ T5945] hsr_slave_1: entered promiscuous mode [ 55.946992][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 55.948774][ T5945] Cannot create hsr debugfs directory [ 55.954755][ T5933] hsr_slave_0: entered promiscuous mode [ 55.958489][ T5933] hsr_slave_1: entered promiscuous mode [ 55.961293][ T5933] debugfs: 'hsr0' already exists in 'hsr' [ 55.964681][ T5933] Cannot create hsr debugfs directory [ 56.272639][ T5298] Bluetooth: hci2: command tx timeout [ 56.285541][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.293664][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.300129][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.311709][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.353413][ T5298] Bluetooth: hci3: command tx timeout [ 56.353798][ T5944] Bluetooth: hci1: command tx timeout [ 56.355988][ T5298] Bluetooth: hci0: command tx timeout [ 56.361303][ T5937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.366915][ T5937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.371204][ T5937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.376412][ T5937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.448871][ T5933] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.459689][ T5933] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.466746][ T5933] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.472655][ T5933] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.513701][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.560747][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.569711][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.589724][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.598975][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.605986][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.608800][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.629792][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.632980][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.639184][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.642991][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.676710][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.696449][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.699135][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.709283][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.712302][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.743154][ T5933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.755927][ T5940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.794699][ T40] audit: type=1400 audit(1764170647.530:89): avc: denied { sys_module } for pid=5940 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.801348][ T5933] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.818099][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.821177][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.826467][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.829511][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.841681][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.865203][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.881218][ T5933] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.887494][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.889773][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.898878][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.901302][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.932021][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.962407][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.004527][ T5940] veth0_vlan: entered promiscuous mode [ 57.022173][ T5940] veth1_vlan: entered promiscuous mode [ 57.026579][ T5937] veth0_vlan: entered promiscuous mode [ 57.031956][ T5933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.038377][ T5937] veth1_vlan: entered promiscuous mode [ 57.069624][ T5940] veth0_macvtap: entered promiscuous mode [ 57.078797][ T5940] veth1_macvtap: entered promiscuous mode [ 57.095252][ T5933] veth0_vlan: entered promiscuous mode [ 57.101395][ T5937] veth0_macvtap: entered promiscuous mode [ 57.111790][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.117118][ T5937] veth1_macvtap: entered promiscuous mode [ 57.130849][ T5933] veth1_vlan: entered promiscuous mode [ 57.136225][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.153299][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.163133][ T1146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.166074][ T1146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.172908][ T1146] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.176556][ T1146] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.183258][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.195561][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.219703][ T5933] veth0_macvtap: entered promiscuous mode [ 57.225314][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.228211][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.241461][ T5933] veth1_macvtap: entered promiscuous mode [ 57.245861][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.263493][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.296630][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.300094][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.318653][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.331216][ T5945] veth0_vlan: entered promiscuous mode [ 57.355122][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.357107][ T5933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.358388][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.364155][ T5945] veth1_vlan: entered promiscuous mode [ 57.364584][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.369313][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.377976][ T1146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.385293][ T40] audit: type=1400 audit(1764170648.120:90): avc: denied { mount } for pid=5940 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.402172][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.419633][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.419737][ T1146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.430222][ T1146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.452039][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.455172][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.466008][ T5945] veth0_macvtap: entered promiscuous mode [ 57.488567][ T5945] veth1_macvtap: entered promiscuous mode [ 57.517326][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.523046][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.526222][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.531159][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.548120][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.551013][ T1147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.567392][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.571051][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.581767][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.585775][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.587518][ T6030] [ 57.589803][ T6030] ============================= [ 57.591439][ T6030] WARNING: suspicious RCU usage [ 57.593249][ T6030] syzkaller #0 Not tainted [ 57.594871][ T6030] ----------------------------- [ 57.596799][ T6030] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 57.599501][ T6030] [ 57.599501][ T6030] other info that might help us debug this: [ 57.599501][ T6030] [ 57.602881][ T6030] [ 57.602881][ T6030] rcu_scheduler_active = 2, debug_locks = 1 [ 57.605429][ T6030] 1 lock held by syz.3.6/6030: [ 57.607081][ T6030] #0: ffffffff8e3c3de0 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x357/0xae0 [ 57.611413][ T6030] [ 57.611413][ T6030] stack backtrace: [ 57.613961][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT(full) [ 57.613984][ T6030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.613996][ T6030] Call Trace: [ 57.614002][ T6030] [ 57.614011][ T6030] dump_stack_lvl+0x16c/0x1f0 [ 57.614032][ T6030] lockdep_rcu_suspicious+0x166/0x260 [ 57.614081][ T6030] get_callchain_entry+0x278/0x3f0 [ 57.614110][ T6030] get_perf_callchain+0x2d6/0x810 [ 57.614139][ T6030] ? __pfx_get_perf_callchain+0x10/0x10 [ 57.614173][ T6030] ? __lock_acquire+0x622/0x1c90 [ 57.614226][ T6030] __bpf_get_stack+0x4f4/0xa10 [ 57.614262][ T6030] ? __pfx___bpf_get_stack+0x10/0x10 [ 57.614295][ T6030] bpf_get_stack+0x32/0x40 [ 57.614321][ T6030] bpf_get_stack_raw_tp+0x1dd/0x280 [ 57.614366][ T6030] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 57.614384][ T6030] bpf_prog_test_run_syscall+0x461/0xae0 [ 57.614413][ T6030] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 57.614439][ T6030] ? fput+0x9b/0xd0 [ 57.614461][ T6030] ? __bpf_prog_get+0x97/0x2a0 [ 57.614479][ T6030] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 57.614500][ T6030] __sys_bpf+0x1035/0x4980 [ 57.614524][ T6030] ? futex_private_hash_put+0xd5/0x190 [ 57.614552][ T6030] ? __pfx___sys_bpf+0x10/0x10 [ 57.614576][ T6030] ? __pfx_futex_wait+0x10/0x10 [ 57.614610][ T6030] ? do_futex+0x122/0x350 [ 57.614637][ T6030] ? exc_page_fault+0x64/0xc0 [ 57.614653][ T6030] ? xfd_validate_state+0x61/0x180 [ 57.614684][ T6030] __x64_sys_bpf+0x78/0xc0 [ 57.614699][ T6030] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.614713][ T6030] do_syscall_64+0xcd/0xfa0 [ 57.614731][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.614747][ T6030] RIP: 0033:0x7f430a78f749 [ 57.614762][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.614779][ T6030] RSP: 002b:00007f430b657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.614796][ T6030] RAX: ffffffffffffffda RBX: 00007f430a9e5fa0 RCX: 00007f430a78f749 [ 57.614808][ T6030] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 000000000000000a [ 57.614819][ T6030] RBP: 00007f430a813f91 R08: 0000000000000000 R09: 0000000000000000 [ 57.614830][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.614841][ T6030] R13: 00007f430a9e6038 R14: 00007f430a9e5fa0 R15: 00007ffc698b8f28 [ 57.614867][ T6030] [ 57.724504][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.727571][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.745633][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.748143][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.351973][ T5298] Bluetooth: hci2: command tx timeout [ 58.432284][ T5298] Bluetooth: hci0: command tx timeout [ 58.432302][ T5944] Bluetooth: hci1: command tx timeout [ 58.434119][ T5298] Bluetooth: hci3: command tx timeout [ 60.432039][ T5298] Bluetooth: hci2: command tx timeout [ 60.512222][ T5298] Bluetooth: hci3: command tx timeout [ 60.512309][ T5938] Bluetooth: hci1: command tx timeout [ 60.514212][ T5944] Bluetooth: hci0: command tx timeout [ 62.513400][ T5944] Bluetooth: hci2: command tx timeout [ 62.592086][ T5944] Bluetooth: hci3: command tx timeout [ 62.592147][ T5938] Bluetooth: hci0: command tx timeout [ 62.602189][ T5938] Bluetooth: hci1: command tx timeout