[ 38.132600][ T42] audit: type=1400 audit(1785731072.402:120): avc: denied { write } for pid=5656 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:15133' (ED25519) to the list of known hosts. [ 47.127884][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 47.127901][ T42] audit: type=1400 audit(1785731081.402:138): avc: denied { execute } for pid=5734 comm="sh" name="syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 47.139869][ T42] audit: type=1400 audit(1785731081.402:139): avc: denied { execute_no_trans } for pid=5734 comm="sh" path="/syz-execprog" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2026/08/03 04:24:42 parsed 1 programs 2026/08/03 04:24:42 serving rpc on tcp://38107 [ 48.227656][ T42] audit: type=1400 audit(1785731082.502:140): avc: denied { node_bind } for pid=5734 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 48.236962][ T42] audit: type=1400 audit(1785731082.502:141): avc: denied { node_bind } for pid=5734 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 50.506349][ T42] audit: type=1400 audit(1785731084.782:142): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 50.515792][ T42] audit: type=1400 audit(1785731084.792:143): avc: denied { mount } for pid=5742 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.517678][ T5742] cgroup: Unknown subsys name 'net' [ 50.529155][ T42] audit: type=1400 audit(1785731084.802:144): avc: denied { unmount } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 50.678284][ T5742] cgroup: Unknown subsys name 'cpuset' [ 50.682312][ T5742] cgroup: Unknown subsys name 'rlimit' [ 50.878919][ T42] audit: type=1400 audit(1785731085.152:145): avc: denied { setattr } for pid=5742 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.886639][ T42] audit: type=1400 audit(1785731085.152:146): avc: denied { create } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.893173][ T42] audit: type=1400 audit(1785731085.152:147): avc: denied { write } for pid=5742 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.929060][ T5746] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 51.673989][ T5742] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.268330][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 53.268346][ T42] audit: type=1400 audit(1785731087.542:159): avc: denied { execmem } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.330039][ T42] audit: type=1400 audit(1785731087.602:160): avc: denied { read } for pid=5752 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.339107][ T42] audit: type=1400 audit(1785731087.602:161): avc: denied { open } for pid=5752 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.346926][ T42] audit: type=1400 audit(1785731087.602:162): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.381140][ T42] audit: type=1400 audit(1785731087.652:163): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.387884][ T42] audit: type=1400 audit(1785731087.652:164): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.rKnViR/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.395334][ T42] audit: type=1400 audit(1785731087.652:165): avc: denied { mount } for pid=5752 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 53.402119][ T42] audit: type=1400 audit(1785731087.662:166): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.rKnViR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 53.410516][ T42] audit: type=1400 audit(1785731087.662:167): avc: denied { mounton } for pid=5752 comm="syz-executor" path="/syzkaller.rKnViR/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=6777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.419636][ T42] audit: type=1400 audit(1785731087.662:168): avc: denied { unmount } for pid=5752 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.430077][ T5752] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 54.145267][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.148922][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.151880][ T5768] bridge_slave_0: entered allmulticast mode [ 54.155884][ T5768] bridge_slave_0: entered promiscuous mode [ 54.160487][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.162893][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.165128][ T5768] bridge_slave_1: entered allmulticast mode [ 54.168547][ T5768] bridge_slave_1: entered promiscuous mode [ 54.197124][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.203535][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.227089][ T5768] team0: Port device team_slave_0 added [ 54.230048][ T5768] team0: Port device team_slave_1 added [ 54.244546][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.246808][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.255668][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.260421][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.262520][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.270220][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.301465][ T5768] hsr_slave_0: entered promiscuous mode [ 54.303872][ T5768] hsr_slave_1: entered promiscuous mode [ 54.411916][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.422675][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.427047][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.434263][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.437387][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.441268][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.444345][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.448571][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.467719][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.470362][ T5768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.472940][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.475720][ T5768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.511360][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.524261][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.529098][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.539456][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.548419][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.551318][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.558047][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.560973][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.771195][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.802990][ T5768] veth0_vlan: entered promiscuous mode [ 54.811436][ T5768] veth1_vlan: entered promiscuous mode [ 54.830023][ T5768] veth0_macvtap: entered promiscuous mode [ 54.835374][ T5768] veth1_macvtap: entered promiscuous mode [ 54.844527][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.853415][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.876769][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.883202][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.886957][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.935691][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.959779][ T5758] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.039154][ T5758] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.055030][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.058176][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.081591][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.085093][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.127713][ T5758] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.159676][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.163524][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.167655][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.171244][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.174545][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.211846][ T5758] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/03 04:24:50 executed programs: 0 [ 56.619123][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.622094][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.625571][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.628578][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.631482][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.929639][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.932009][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.934908][ T5870] bridge_slave_0: entered allmulticast mode [ 56.937973][ T5870] bridge_slave_0: entered promiscuous mode [ 56.941810][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.944198][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.946810][ T5870] bridge_slave_1: entered allmulticast mode [ 56.950050][ T5870] bridge_slave_1: entered promiscuous mode [ 56.966323][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.970759][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.987271][ T5870] team0: Port device team_slave_0 added [ 56.991768][ T5870] team0: Port device team_slave_1 added [ 57.014274][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.016736][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.024794][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.029670][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.031904][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 57.039993][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.066783][ T5870] hsr_slave_0: entered promiscuous mode [ 57.069842][ T5870] hsr_slave_1: entered promiscuous mode [ 57.072149][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 57.073974][ T5870] Cannot create hsr debugfs directory [ 58.265966][ T5758] bridge_slave_1: left allmulticast mode [ 58.268141][ T5758] bridge_slave_1: left promiscuous mode [ 58.270922][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.276961][ T5758] bridge_slave_0: left allmulticast mode [ 58.278802][ T5758] bridge_slave_0: left promiscuous mode [ 58.280701][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.365282][ T5758] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.370381][ T5758] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.374061][ T5758] bond0 (unregistering): Released all slaves [ 58.462253][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 58.462265][ T42] audit: type=1400 audit(1785731092.732:189): avc: denied { write } for pid=5889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.471614][ T42] audit: type=1400 audit(1785731092.732:190): avc: denied { create } for pid=5889 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.479181][ T42] audit: type=1400 audit(1785731092.732:191): avc: denied { write } for pid=5889 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=2019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.487929][ T42] audit: type=1400 audit(1785731092.732:192): avc: denied { append } for pid=5889 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" dev="tmpfs" ino=2019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.511275][ T5758] hsr_slave_0: left promiscuous mode [ 58.514073][ T5758] hsr_slave_1: left promiscuous mode [ 58.515234][ T42] audit: type=1400 audit(1785731092.782:193): avc: denied { write } for pid=5892 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.517143][ T5758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.524300][ T42] audit: type=1400 audit(1785731092.782:194): avc: denied { unlink } for pid=5892 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=2019 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 58.530158][ T5758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.540088][ T5758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.543022][ T5758] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.555101][ T5758] veth1_macvtap: left promiscuous mode [ 58.557908][ T5758] veth0_macvtap: left promiscuous mode [ 58.560158][ T5758] veth1_vlan: left promiscuous mode [ 58.562239][ T5758] veth0_vlan: left promiscuous mode [ 58.690552][ T5758] team0 (unregistering): Port device team_slave_1 removed [ 58.697733][ T5758] team0 (unregistering): Port device team_slave_0 removed [ 58.707079][ T64] Bluetooth: hci0: command tx timeout [ 58.770574][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 58.926426][ T42] audit: type=1400 audit(1785731093.202:195): avc: denied { write } for pid=5895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.981490][ T42] audit: type=1400 audit(1785731093.252:196): avc: denied { write } for pid=5898 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.044959][ T42] audit: type=1400 audit(1785731093.312:197): avc: denied { write } for pid=5900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.060070][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.069285][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.073013][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.077996][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.080700][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.084481][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.087389][ T42] audit: type=1400 audit(1785731093.362:198): avc: denied { write } for pid=5904 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.087555][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.101617][ T5870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.154980][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.163771][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.168635][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.170881][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.179192][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.181404][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.651586][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.704143][ T5870] veth0_vlan: entered promiscuous mode [ 59.715142][ T5870] veth1_vlan: entered promiscuous mode [ 59.736138][ T5870] veth0_macvtap: entered promiscuous mode [ 59.741670][ T5870] veth1_macvtap: entered promiscuous mode [ 59.751632][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.758706][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.846222][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.848798][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.872398][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.874885][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.945684][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.949454][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.953049][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.954098][ T5923] [ 59.957961][ T5923] ============================= [ 59.958776][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.959681][ T5923] WARNING: suspicious RCU usage [ 59.959688][ T5923] syzkaller #0 Not tainted [ 59.959695][ T5923] ----------------------------- [ 59.959698][ T5923] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 59.959706][ T5923] [ 59.959706][ T5923] other info that might help us debug this: [ 59.959706][ T5923] [ 59.959710][ T5923] [ 59.959710][ T5923] rcu_scheduler_active = 2, debug_locks = 1 [ 59.959717][ T5923] 1 lock held by syz.0.17/5923: [ 59.959723][ T5923] #0: ffff888034e94390 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x62/0x90 [ 59.959758][ T5923] [ 59.959758][ T5923] stack backtrace: [ 59.959766][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 59.959778][ T5923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.959785][ T5923] Call Trace: [ 59.959796][ T5923] [ 59.959800][ T5923] dump_stack_lvl+0x100/0x190 [ 59.959814][ T5923] lockdep_rcu_suspicious.cold+0x4f/0xb1 [ 59.959833][ T5923] xfrm_do_migrate_state+0x2463/0x2f10 [ 59.959850][ T5923] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 59.959863][ T5923] ? __asan_memset+0x23/0x50 [ 59.959873][ T5923] ? __nla_validate_parse+0x1e7/0x28b0 [ 59.959893][ T5923] ? __nla_parse+0x40/0x60 [ 59.959902][ T5923] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 59.959917][ T5923] ? xfrm_user_rcv_msg+0x483/0xd80 [ 59.959927][ T5923] xfrm_user_rcv_msg+0x483/0xd80 [ 59.959940][ T5923] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 59.959951][ T5923] ? kfree_skbmem+0x19f/0x210 [ 59.959961][ T5923] ? consume_skb+0xd6/0x110 [ 59.959987][ T5923] ? rcu_is_watching+0x12/0xc0 [ 59.960003][ T5923] ? trace_contention_end+0x126/0x160 [ 59.960018][ T5923] ? __mutex_lock+0x26d/0x1bd0 [ 59.960032][ T5923] netlink_rcv_skb+0x159/0x420 [ 59.960044][ T5923] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 59.960056][ T5923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 59.960074][ T5923] xfrm_netlink_rcv+0x71/0x90 [ 59.960084][ T5923] netlink_unicast+0x585/0x850 [ 59.960096][ T5923] ? __pfx_netlink_unicast+0x10/0x10 [ 59.960107][ T5923] ? __pfx_sock_has_perm+0x10/0x10 [ 59.960124][ T5923] netlink_sendmsg+0x8b0/0xda0 [ 59.960136][ T5923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.960148][ T5923] ? selinux_socket_sendmsg+0x198/0x2f0 [ 59.960166][ T5923] ____sys_sendmsg+0xa4d/0xbe0 [ 59.960181][ T5923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.960193][ T5923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 59.960209][ T5923] ? futex_hash+0x311/0x400 [ 59.960224][ T5923] ? futex_hash+0x31b/0x400 [ 59.960237][ T5923] ? futex_hash+0x79/0x400 [ 59.960249][ T5923] ? __pfx_get_futex_key+0x10/0x10 [ 59.960264][ T5923] ___sys_sendmsg+0x190/0x1e0 [ 59.960275][ T5923] ? __pfx____sys_sendmsg+0x10/0x10 [ 59.960286][ T5923] ? futex_wake+0x220/0x5e0 [ 59.960300][ T5923] ? __pfx___handle_mm_fault+0x10/0x10 [ 59.960322][ T5923] ? __pfx_do_futex+0x10/0x10 [ 59.960336][ T5923] ? find_held_lock+0x2b/0x80 [ 59.960345][ T5923] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 59.960360][ T5923] __sys_sendmsg+0x160/0x210 [ 59.960374][ T5923] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.960393][ T5923] do_syscall_64+0x115/0x870 [ 59.960405][ T5923] ? clear_bhb_loop+0x40/0x90 [ 59.960418][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.960428][ T5923] RIP: 0033:0x7f84e8b9e019 [ 59.960438][ T5923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.960448][ T5923] RSP: 002b:00007ffe6f717f08 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.960464][ T5923] RAX: ffffffffffffffda RBX: 00007f84e8e25fa0 RCX: 00007f84e8b9e019 [ 59.960471][ T5923] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 59.960477][ T5923] RBP: 00007f84e8c3500c R08: 0000000000000000 R09: 0000000000000000 [ 59.960483][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.960489][ T5923] R13: 00007f84e8e25fac R14: 00007f84e8e25fa0 R15: 00007f84e8e25fa0 [ 59.960501][ T5923] [ 61.716094][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.177921][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.247879][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.358576][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.477623][ T12] bridge_slave_1: left allmulticast mode [ 63.480842][ T12] bridge_slave_1: left promiscuous mode [ 63.483439][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.489090][ T12] bridge_slave_0: left allmulticast mode [ 63.491484][ T12] bridge_slave_0: left promiscuous mode [ 63.494243][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.613349][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.617880][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.621739][ T12] bond0 (unregistering): Released all slaves [ 63.692705][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 63.692717][ T42] audit: type=1400 audit(1785731097.962:202): avc: denied { write } for pid=5932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.748496][ T42] audit: type=1400 audit(1785731098.022:203): avc: denied { write } for pid=5935 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.792993][ T5450] 8021q: adding VLAN 0 to HW filter on device eth2 [ 63.857383][ T42] audit: type=1400 audit(1785731098.132:204): avc: denied { write } for pid=5938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.919655][ T42] audit: type=1400 audit(1785731098.192:205): avc: denied { write } for pid=5941 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.942681][ T12] hsr_slave_0: left promiscuous mode [ 63.945016][ T12] hsr_slave_1: left promiscuous mode [ 63.947909][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.951041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.954801][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.957935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.969232][ T12] veth1_macvtap: left promiscuous mode [ 63.971522][ T12] veth0_macvtap: left promiscuous mode [ 63.973920][ T12] veth1_vlan: left promiscuous mode [ 63.980391][ T12] veth0_vlan: left promiscuous mode [ 64.122601][ T12] team0 (unregistering): Port device team_slave_1 removed [ 64.133170][ T12] team0 (unregistering): Port device team_slave_0 removed [ 64.203212][ T5450] 8021q: adding VLAN 0 to HW filter on device eth3 [ 64.268719][ T42] audit: type=1400 audit(1785731098.542:206): avc: denied { write } for pid=5944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.324251][ T42] audit: type=1400 audit(1785731098.592:207): avc: denied { write } for pid=5947 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.360420][ T5450] 8021q: adding VLAN 0 to HW filter on device eth4 [ 64.457771][ T42] audit: type=1400 audit(1785731098.732:208): avc: denied { write } for pid=5951 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.518966][ T42] audit: type=1400 audit(1785731098.792:209): avc: denied { write } for pid=5954 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.556474][ T5450] 8021q: adding VLAN 0 to HW filter on device eth5