Warning: Permanently added '[localhost]:16103' (ED25519) to the list of known hosts. [ 43.288938][ T41] kauditd_printk_skb: 17 callbacks suppressed [ 43.288952][ T41] audit: type=1400 audit(1785716233.319:138): avc: denied { execute } for pid=5734 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 43.298362][ T41] audit: type=1400 audit(1785716233.329:139): avc: denied { execute_no_trans } for pid=5734 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/03 00:17:14 parsed 1 programs 2026/08/03 00:17:14 serving rpc on tcp://34469 [ 44.311004][ T41] audit: type=1400 audit(1785716234.339:140): avc: denied { node_bind } for pid=5734 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 44.317740][ T41] audit: type=1400 audit(1785716234.339:141): avc: denied { node_bind } for pid=5734 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 46.538510][ T41] audit: type=1400 audit(1785716236.569:142): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.546050][ T41] audit: type=1400 audit(1785716236.569:143): avc: denied { mount } for pid=5742 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.548016][ T5742] cgroup: Unknown subsys name 'net' [ 46.555355][ T41] audit: type=1400 audit(1785716236.579:144): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.721934][ T5742] cgroup: Unknown subsys name 'cpuset' [ 46.725893][ T5742] cgroup: Unknown subsys name 'rlimit' [ 46.904557][ T41] audit: type=1400 audit(1785716236.929:145): avc: denied { setattr } for pid=5742 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.911781][ T41] audit: type=1400 audit(1785716236.929:146): avc: denied { create } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.918551][ T41] audit: type=1400 audit(1785716236.929:147): avc: denied { write } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.949656][ T5747] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 47.630177][ T5742] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.292660][ T41] kauditd_printk_skb: 11 callbacks suppressed [ 49.292674][ T41] audit: type=1400 audit(1785716239.319:159): avc: denied { execmem } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.300402][ T41] audit: type=1400 audit(1785716239.329:160): avc: denied { read } for pid=5752 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.306696][ T41] audit: type=1400 audit(1785716239.329:161): avc: denied { open } for pid=5752 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.313594][ T41] audit: type=1400 audit(1785716239.329:162): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.339347][ T41] audit: type=1400 audit(1785716239.369:163): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.345856][ T41] audit: type=1400 audit(1785716239.369:164): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.wv1WD6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.353464][ T41] audit: type=1400 audit(1785716239.369:165): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 49.359922][ T41] audit: type=1400 audit(1785716239.369:166): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.wv1WD6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.367558][ T41] audit: type=1400 audit(1785716239.369:167): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.wv1WD6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 49.375549][ T41] audit: type=1400 audit(1785716239.379:168): avc: denied { unmount } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.385493][ T5752] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.432384][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.435406][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.458472][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.460980][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.312132][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.315091][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.319315][ T5816] bridge_slave_0: entered allmulticast mode [ 51.322179][ T5816] bridge_slave_0: entered promiscuous mode [ 51.334562][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.337292][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.339467][ T5816] bridge_slave_1: entered allmulticast mode [ 51.342057][ T5816] bridge_slave_1: entered promiscuous mode [ 51.359363][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.363635][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.380000][ T5816] team0: Port device team_slave_0 added [ 51.382953][ T5816] team0: Port device team_slave_1 added [ 51.400635][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.402822][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.411629][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.416574][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.418901][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.426443][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.450091][ T5816] hsr_slave_0: entered promiscuous mode [ 51.452577][ T5816] hsr_slave_1: entered promiscuous mode [ 51.555128][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.562269][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.566330][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.570936][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.573728][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.577932][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.581194][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.585055][ T5816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.631092][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.643370][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.650889][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.653386][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.661700][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.663890][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.866871][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.892955][ T5816] veth0_vlan: entered promiscuous mode [ 51.899396][ T5816] veth1_vlan: entered promiscuous mode [ 51.916190][ T5816] veth0_macvtap: entered promiscuous mode [ 51.920417][ T5816] veth1_macvtap: entered promiscuous mode [ 51.932184][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.939075][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.969282][ T5607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.972634][ T5607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.986852][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.989938][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.028329][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.039371][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.041008][ T5607] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.042307][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.048124][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.051499][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.145626][ T5607] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.221882][ T5607] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.301730][ T5607] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/03 00:17:22 executed programs: 0 [ 52.492374][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.495040][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.498394][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.501592][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.504098][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.784906][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.787230][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.789427][ T5864] bridge_slave_0: entered allmulticast mode [ 52.791941][ T5864] bridge_slave_0: entered promiscuous mode [ 52.795679][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.798004][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.800195][ T5864] bridge_slave_1: entered allmulticast mode [ 52.802822][ T5864] bridge_slave_1: entered promiscuous mode [ 52.817193][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.821401][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.838294][ T5864] team0: Port device team_slave_0 added [ 52.841459][ T5864] team0: Port device team_slave_1 added [ 52.855376][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.857630][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.865306][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.869456][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.871533][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.879107][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.902083][ T5864] hsr_slave_0: entered promiscuous mode [ 52.904222][ T5864] hsr_slave_1: entered promiscuous mode [ 52.906334][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 52.908439][ T5864] Cannot create hsr debugfs directory [ 54.577655][ T5096] Bluetooth: hci0: command tx timeout [ 55.351571][ T5607] bridge_slave_1: left allmulticast mode [ 55.353597][ T5607] bridge_slave_1: left promiscuous mode [ 55.356366][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.362102][ T5607] bridge_slave_0: left allmulticast mode [ 55.364194][ T5607] bridge_slave_0: left promiscuous mode [ 55.366050][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.444092][ T5607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.448613][ T5607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.452849][ T5607] bond0 (unregistering): Released all slaves [ 55.533283][ T41] kauditd_printk_skb: 20 callbacks suppressed [ 55.533299][ T41] audit: type=1400 audit(1785716245.559:189): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.544303][ T41] audit: type=1400 audit(1785716245.569:190): avc: denied { create } for pid=5884 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.552117][ T41] audit: type=1400 audit(1785716245.569:191): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.561275][ T41] audit: type=1400 audit(1785716245.569:192): avc: denied { append } for pid=5884 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.571080][ T5607] hsr_slave_0: left promiscuous mode [ 55.573235][ T5607] hsr_slave_1: left promiscuous mode [ 55.575215][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.576863][ T41] audit: type=1400 audit(1785716245.599:193): avc: denied { write } for pid=5887 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.577711][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.584325][ T41] audit: type=1400 audit(1785716245.599:194): avc: denied { unlink } for pid=5887 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2030 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.594543][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.597611][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.606210][ T5607] veth1_macvtap: left promiscuous mode [ 55.608413][ T5607] veth0_macvtap: left promiscuous mode [ 55.610192][ T5607] veth1_vlan: left promiscuous mode [ 55.611884][ T5607] veth0_vlan: left promiscuous mode [ 55.716537][ T5607] team0 (unregistering): Port device team_slave_1 removed [ 55.727492][ T5607] team0 (unregistering): Port device team_slave_0 removed [ 55.790672][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 55.863333][ T41] audit: type=1400 audit(1785716245.889:195): avc: denied { write } for pid=5891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.902601][ T41] audit: type=1400 audit(1785716245.929:196): avc: denied { write } for pid=5894 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.986104][ T41] audit: type=1400 audit(1785716246.009:197): avc: denied { write } for pid=5897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.023170][ T41] audit: type=1400 audit(1785716246.049:198): avc: denied { write } for pid=5900 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.229131][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.233260][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.236067][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.240699][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.243643][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.248333][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.250928][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.255924][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.300837][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.311553][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.317964][ T168] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.320867][ T168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.330526][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.332914][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.595033][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.624860][ T5864] veth0_vlan: entered promiscuous mode [ 56.633220][ T5864] veth1_vlan: entered promiscuous mode [ 56.648088][ T5864] veth0_macvtap: entered promiscuous mode [ 56.652170][ T5864] veth1_macvtap: entered promiscuous mode [ 56.657823][ T5096] Bluetooth: hci0: command tx timeout [ 56.661749][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.667301][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.687023][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.691210][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.694377][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.710244][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.712824][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.729222][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.731630][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.736824][ T5607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.791403][ T5932] [ 56.792299][ T5932] ============================= [ 56.793847][ T5932] WARNING: suspicious RCU usage [ 56.795350][ T5932] syzkaller #0 Not tainted [ 56.796994][ T5932] ----------------------------- [ 56.798517][ T5932] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 56.800919][ T5932] [ 56.800919][ T5932] other info that might help us debug this: [ 56.800919][ T5932] [ 56.804028][ T5932] [ 56.804028][ T5932] rcu_scheduler_active = 2, debug_locks = 1 [ 56.806339][ T5932] 1 lock held by syz.0.17/5932: [ 56.808660][ T5932] #0: ffff88802d941c50 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 56.811739][ T5932] [ 56.811739][ T5932] stack backtrace: [ 56.813769][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 56.813790][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.813801][ T5932] Call Trace: [ 56.813818][ T5932] [ 56.813825][ T5932] dump_stack_lvl+0x100/0x190 [ 56.813853][ T5932] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 56.813884][ T5932] xfrm_do_migrate_state+0x2463/0x2f10 [ 56.813925][ T5932] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 56.813946][ T5932] ? __asan_memset+0x23/0x50 [ 56.813964][ T5932] ? __nla_validate_parse+0x1e7/0x28b0 [ 56.814001][ T5932] ? __nla_parse+0x40/0x60 [ 56.814018][ T5932] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 56.814041][ T5932] ? xfrm_user_rcv_msg+0x483/0xd80 [ 56.814059][ T5932] xfrm_user_rcv_msg+0x483/0xd80 [ 56.814081][ T5932] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 56.814101][ T5932] ? kfree_skbmem+0x19f/0x210 [ 56.814118][ T5932] ? consume_skb+0xd6/0x110 [ 56.814167][ T5932] ? rcu_is_watching+0x12/0xc0 [ 56.814195][ T5932] ? trace_contention_end+0x126/0x160 [ 56.814216][ T5932] ? __mutex_lock+0x26d/0x1bd0 [ 56.814239][ T5932] netlink_rcv_skb+0x159/0x420 [ 56.814258][ T5932] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 56.814276][ T5932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 56.814306][ T5932] xfrm_netlink_rcv+0x71/0x90 [ 56.814319][ T5932] netlink_unicast+0x585/0x850 [ 56.814332][ T5932] ? __pfx_netlink_unicast+0x10/0x10 [ 56.814343][ T5932] ? __pfx_sock_has_perm+0x10/0x10 [ 56.814361][ T5932] netlink_sendmsg+0x8b0/0xda0 [ 56.814374][ T5932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.814387][ T5932] ? selinux_socket_sendmsg+0x198/0x2f0 [ 56.814404][ T5932] ____sys_sendmsg+0xa4d/0xbe0 [ 56.814421][ T5932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.814433][ T5932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 56.814449][ T5932] ? futex_hash+0x311/0x400 [ 56.814465][ T5932] ? futex_hash+0x31b/0x400 [ 56.814477][ T5932] ? futex_hash+0x79/0x400 [ 56.814489][ T5932] ? __pfx_get_futex_key+0x10/0x10 [ 56.814504][ T5932] ___sys_sendmsg+0x190/0x1e0 [ 56.814516][ T5932] ? __pfx____sys_sendmsg+0x10/0x10 [ 56.814526][ T5932] ? futex_wake+0x220/0x5e0 [ 56.814541][ T5932] ? __pfx___handle_mm_fault+0x10/0x10 [ 56.814562][ T5932] ? __pfx_do_futex+0x10/0x10 [ 56.814576][ T5932] ? find_held_lock+0x2b/0x80 [ 56.814585][ T5932] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 56.814600][ T5932] __sys_sendmsg+0x160/0x210 [ 56.814614][ T5932] ? __pfx___sys_sendmsg+0x10/0x10 [ 56.814634][ T5932] do_syscall_64+0x115/0x870 [ 56.814647][ T5932] ? clear_bhb_loop+0x40/0x90 [ 56.814659][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.814671][ T5932] RIP: 0033:0x7f6acbd9e019 [ 56.814682][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.814692][ T5932] RSP: 002b:00007fff064e9a08 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.814703][ T5932] RAX: ffffffffffffffda RBX: 00007f6acc025fa0 RCX: 00007f6acbd9e019 [ 56.814710][ T5932] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 56.814716][ T5932] RBP: 00007f6acbe3500c R08: 0000000000000000 R09: 0000000000000000 [ 56.814722][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.814728][ T5932] R13: 00007f6acc025fac R14: 00007f6acc025fa0 R15: 00007f6acc025fa0 [ 56.814740][ T5932] [ 58.742508][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.326395][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.407562][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.468130][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.577025][ T12] bridge_slave_1: left allmulticast mode [ 60.579413][ T12] bridge_slave_1: left promiscuous mode [ 60.582232][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.587888][ T12] bridge_slave_0: left allmulticast mode [ 60.590225][ T12] bridge_slave_0: left promiscuous mode [ 60.592664][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.662445][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.666800][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.670315][ T12] bond0 (unregistering): Released all slaves [ 60.727292][ T41] kauditd_printk_skb: 7 callbacks suppressed [ 60.727304][ T41] audit: type=1400 audit(1785716250.759:206): avc: denied { write } for pid=5942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.770377][ T41] audit: type=1400 audit(1785716250.799:207): avc: denied { write } for pid=5945 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.800934][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 60.882164][ T41] audit: type=1400 audit(1785716250.909:208): avc: denied { write } for pid=5948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.920639][ T41] audit: type=1400 audit(1785716250.949:209): avc: denied { write } for pid=5951 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.957644][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 60.988818][ T12] hsr_slave_0: left promiscuous mode [ 60.990998][ T12] hsr_slave_1: left promiscuous mode [ 60.993217][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.996201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.000347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.002788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.009501][ T12] veth1_macvtap: left promiscuous mode [ 61.011224][ T41] audit: type=1400 audit(1785716251.039:210): avc: denied { write } for pid=5954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.011898][ T12] veth0_macvtap: left promiscuous mode [ 61.020421][ T12] veth1_vlan: left promiscuous mode [ 61.022103][ T12] veth0_vlan: left promiscuous mode [ 61.047157][ T41] audit: type=1400 audit(1785716251.069:211): avc: denied { write } for pid=5957 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.127351][ T12] team0 (unregistering): Port device team_slave_1 removed [ 61.135511][ T12] team0 (unregistering): Port device team_slave_0 removed [ 61.189912][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.268637][ T41] audit: type=1400 audit(1785716251.299:212): avc: denied { write } for pid=5961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.305820][ T41] audit: type=1400 audit(1785716251.329:213): avc: denied { write } for pid=5964 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.341914][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5