[ 29.433935][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.454888][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 40.239671][ T27] kauditd_printk_skb: 37 callbacks suppressed [ 40.239687][ T27] audit: type=1400 audit(1659135163.774:73): avc: denied { transition } for pid=3422 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.273849][ T27] audit: type=1400 audit(1659135163.804:74): avc: denied { write } for pid=3422 comm="sh" path="pipe:[28036]" dev="pipefs" ino=28036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.1.45' (ECDSA) to the list of known hosts. [ 50.434212][ T27] audit: type=1400 audit(1659135173.964:75): avc: denied { execmem } for pid=3602 comm="syz-executor166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.460595][ T27] audit: type=1400 audit(1659135173.994:76): avc: denied { mounton } for pid=3602 comm="syz-executor166" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 50.485774][ T27] audit: type=1400 audit(1659135174.004:77): avc: denied { mount } for pid=3602 comm="syz-executor166" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 50.517891][ T27] audit: type=1400 audit(1659135174.004:78): avc: denied { create } for pid=3602 comm="syz-executor166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.538678][ T27] audit: type=1400 audit(1659135174.004:79): avc: denied { write } for pid=3602 comm="syz-executor166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.559344][ T27] audit: type=1400 audit(1659135174.004:80): avc: denied { read } for pid=3602 comm="syz-executor166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.580227][ T27] audit: type=1400 audit(1659135174.044:81): avc: denied { mounton } for pid=3605 comm="syz-executor166" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 50.604266][ T27] audit: type=1400 audit(1659135174.044:82): avc: denied { mount } for pid=3605 comm="syz-executor166" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 50.626796][ T27] audit: type=1400 audit(1659135174.044:83): avc: denied { create } for pid=3605 comm="syz-executor166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.647029][ T27] audit: type=1400 audit(1659135174.044:84): avc: denied { read write } for pid=3605 comm="syz-executor166" name="vhci" dev="devtmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.578179][ T3608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.585922][ T3608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.593815][ T3608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.601587][ T3608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.609124][ T3608] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.616334][ T3608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.699621][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.707574][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.726968][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.736655][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 51.744990][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.753628][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.899859][ C0] [ 51.902198][ C0] ================================ [ 51.907283][ C0] WARNING: inconsistent lock state [ 51.912367][ C0] 5.19.0-rc8-syzkaller-00105-g6e2c0490769e #0 Not tainted [ 51.919451][ C0] -------------------------------- [ 51.924532][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 51.931351][ C0] syz-executor166/3611 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 51.938090][ C0] ffffffff8c94abd8 (sync_timeline_list_lock){?.+.}-{2:2}, at: sync_timeline_debug_remove+0x25/0x190 [ 51.948864][ C0] {HARDIRQ-ON-W} state was registered at: [ 51.954557][ C0] lockdep_hardirqs_on_prepare+0x135/0x400 [ 51.960431][ C0] trace_hardirqs_on+0x2d/0x120 [ 51.965350][ C0] _raw_spin_unlock_irq+0x1f/0x40 [ 51.970442][ C0] sync_info_debugfs_show+0xeb/0x200 [ 51.975791][ C0] seq_read_iter+0x4f5/0x1280 [ 51.980534][ C0] seq_read+0x337/0x4b0 [ 51.984755][ C0] vfs_read+0x1ef/0x5d0 [ 51.988981][ C0] ksys_read+0x127/0x250 [ 51.993287][ C0] do_syscall_64+0x35/0xb0 [ 51.997768][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.003729][ C0] irq event stamp: 5194 [ 52.007855][ C0] hardirqs last enabled at (5193): [] _raw_spin_unlock_irq+0x1f/0x40 [ 52.017550][ C0] hardirqs last disabled at (5194): [] sysvec_irq_work+0xb/0xc0 [ 52.026724][ C0] softirqs last enabled at (5098): [] __tun_set_ebpf+0xf6/0x1c0 [ 52.035987][ C0] softirqs last disabled at (5096): [] __tun_set_ebpf+0xa3/0x1c0 [ 52.045249][ C0] [ 52.045249][ C0] other info that might help us debug this: [ 52.053283][ C0] Possible unsafe locking scenario: [ 52.053283][ C0] [ 52.060709][ C0] CPU0 [ 52.063966][ C0] ---- [ 52.067223][ C0] lock(sync_timeline_list_lock); [ 52.072312][ C0] [ 52.075742][ C0] lock(sync_timeline_list_lock); [ 52.081006][ C0] [ 52.081006][ C0] *** DEADLOCK *** [ 52.081006][ C0] [ 52.089127][ C0] no locks held by syz-executor166/3611. [ 52.094732][ C0] [ 52.094732][ C0] stack backtrace: [ 52.100597][ C0] CPU: 0 PID: 3611 Comm: syz-executor166 Not tainted 5.19.0-rc8-syzkaller-00105-g6e2c0490769e #0 [ 52.111086][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 52.121119][ C0] Call Trace: [ 52.124383][ C0] [ 52.127209][ C0] dump_stack_lvl+0xcd/0x134 [ 52.131785][ C0] mark_lock.part.0.cold+0x18/0xd8 [ 52.136880][ C0] ? mark_lock.part.0+0xee/0x1910 [ 52.141894][ C0] ? lock_chain_count+0x20/0x20 [ 52.146726][ C0] ? lock_chain_count+0x20/0x20 [ 52.151562][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 52.156396][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 52.161573][ C0] __lock_acquire+0x14ad/0x5660 [ 52.166407][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 52.172369][ C0] ? irq_work_run+0x54/0xd0 [ 52.176852][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 52.182813][ C0] ? __fput+0x277/0x9d0 [ 52.186952][ C0] lock_acquire+0x1ab/0x570 [ 52.191438][ C0] ? sync_timeline_debug_remove+0x25/0x190 [ 52.197247][ C0] ? lock_release+0x780/0x780 [ 52.201908][ C0] ? timeline_fence_release+0x1f2/0x340 [ 52.207436][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 52.212268][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 52.217447][ C0] ? sync_timeline_debug_remove+0x25/0x190 [ 52.223233][ C0] sync_timeline_debug_remove+0x25/0x190 [ 52.228847][ C0] timeline_fence_release+0x263/0x340 [ 52.234199][ C0] ? sw_sync_debugfs_release+0x240/0x240 [ 52.239812][ C0] dma_fence_release+0x2ee/0x590 [ 52.244734][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 52.249568][ C0] dma_fence_array_release+0x1f6/0x2d0 [ 52.255008][ C0] ? dma_fence_array_cb_func+0x190/0x190 [ 52.260626][ C0] dma_fence_release+0x2ee/0x590 [ 52.265546][ C0] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 52.271335][ C0] irq_dma_fence_array_work+0xa5/0xd0 [ 52.276687][ C0] irq_work_single+0x120/0x250 [ 52.281431][ C0] irq_work_run_list+0x91/0xc0 [ 52.286174][ C0] irq_work_run+0x54/0xd0 [ 52.290482][ C0] __sysvec_irq_work+0x95/0x3d0 [ 52.295315][ C0] sysvec_irq_work+0x8e/0xc0 [ 52.299907][ C0] [ 52.302821][ C0] [ 52.305825][ C0] asm_sysvec_irq_work+0x16/0x20 [ 52.310744][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 52.316538][ C0] Code: 0f 1f 44 00 00 55 48 8b 74 24 08 48 89 fd 48 83 c7 18 e8 9e 4b e3 f7 48 89 ef e8 a6 cc e3 f7 e8 11 b7 05 f8 fb bf 01 00 00 00 26 d5 d6 f7 65 8b 05 cf 3b 88 76 85 c0 74 02 5d c3 e8 1b 12 86 [ 52.336125][ C0] RSP: 0018:ffffc90003087e18 EFLAGS: 00000202 [ 52.342170][ C0] RAX: 0000000000001449 RBX: 00000000ffffffff RCX: 1ffffffff1b75cf9 [ 52.350136][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 52.358091][ C0] RBP: ffff888016ffdd50 R08: 0000000000000001 R09: 0000000000000001 [ 52.366054][ C0] R10: ffffed1002dffbaa R11: 0000000000000001 R12: ffff888016ffdd00 [ 52.374016][ C0] R13: dffffc0000000000 R14: ffff888016ffdd00 R15: ffff888016ffdd50 [ 52.382011][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.387206][ C0] sw_sync_debugfs_release+0x160/0x240 [ 52.392660][ C0] __fput+0x277/0x9d0 [ 52.396627][ C0] ? sw_sync_debugfs_open+0x330/0x330 [ 52.401996][ C0] task_work_run+0xdd/0x1a0 [ 52.406509][ C0] exit_to_user_mode_prepare+0x23c/0x250 [ 52.412150][ C0] syscall_exit_to_user_mode+0x19/0x50 [ 52.417606][ C0] do_syscall_64+0x42/0xb0 [ 52.422008][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.427886][ C0] RIP: 0033:0x7fc4a5486af9 [ 52.432284][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.451887][ C0] RSP: 002b:00007fc4a4c0c208 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 52.460283][ C0] RAX: 0000000000000000 RBX: 00007fc4a55084f8 RCX: 00007fc4a5486af9 [ 52.468236][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000003 [ 52.476190][ C0] RBP: 00007fc4a55084f0 R08: 00007fc4a4c0c700 R09: 0000000000000000 [ 52.484142][ C0] R10: 00007fc4a4c0c700 R11: 0000000000000246 R12: 00007fc4a55084fc [ 52.492127][ C0] R13: 00007ffe3642848f R14: 00007fc4a4c0c300 R15: 0000000000022000 write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory write to /proc/sys/net/core/bpf_jit_kallsyms failed: No such file or directory write to /proc/sys/net/core/bpf_jit_harden failed: No such file or directory [ 52.500093][ C0]