Warning: Permanently added '[localhost]:21759' (ED25519) to the list of known hosts. 2024/02/15 14:15:57 ignoring optional flag "sandboxArg"="0" 2024/02/15 14:15:57 parsed 1 programs [ 86.870650][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 86.870664][ T39] audit: type=1400 audit(1708006557.932:206): avc: denied { getattr } for pid=5397 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.915058][ T39] audit: type=1400 audit(1708006557.982:207): avc: denied { mounton } for pid=5405 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 86.929064][ T39] audit: type=1400 audit(1708006558.002:208): avc: denied { mount } for pid=5405 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 86.944057][ T39] audit: type=1400 audit(1708006558.012:209): avc: denied { read write } for pid=5405 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 86.957634][ T39] audit: type=1400 audit(1708006558.012:210): avc: denied { open } for pid=5405 comm="syz-executor" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 86.971729][ T39] audit: type=1400 audit(1708006558.012:211): avc: denied { search } for pid=4653 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.984724][ T39] audit: type=1400 audit(1708006558.052:212): avc: denied { unlink } for pid=5405 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 87.565451][ T39] audit: type=1400 audit(1708006558.632:213): avc: denied { relabelto } for pid=5408 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 89.458442][ T5405] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/02/15 14:16:00 executed programs: 0 [ 89.525957][ T4614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.530979][ T4614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.535985][ T4614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.542360][ T4614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.548822][ T4614] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.553897][ T4614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.565802][ T39] audit: type=1400 audit(1708006560.632:214): avc: denied { mounton } for pid=5413 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 89.733130][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 89.839306][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.843018][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.847152][ T5413] bridge_slave_0: entered allmulticast mode [ 89.850634][ T5413] bridge_slave_0: entered promiscuous mode [ 89.855313][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.858308][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.862247][ T5413] bridge_slave_1: entered allmulticast mode [ 89.867087][ T5413] bridge_slave_1: entered promiscuous mode [ 89.912790][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.922246][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.993271][ T5413] team0: Port device team_slave_0 added [ 90.004959][ T5413] team0: Port device team_slave_1 added [ 90.076635][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.080234][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.093218][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.102724][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.106182][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.118811][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.191411][ T5413] hsr_slave_0: entered promiscuous mode [ 90.196824][ T5413] hsr_slave_1: entered promiscuous mode [ 90.865892][ T5413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.875773][ T5413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.884249][ T5413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.894996][ T5413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.999682][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.015949][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.034200][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.037722][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.045006][ T5200] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.048844][ T5200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.146218][ T39] audit: type=1400 audit(1708006562.212:215): avc: denied { sys_module } for pid=5413 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 91.279602][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.331723][ T5413] veth0_vlan: entered promiscuous mode [ 91.346236][ T5413] veth1_vlan: entered promiscuous mode [ 91.384448][ T5413] veth0_macvtap: entered promiscuous mode [ 91.399421][ T5413] veth1_macvtap: entered promiscuous mode [ 91.422659][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.433820][ T5413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.442661][ T5413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.447838][ T5413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.453055][ T5413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.456982][ T5413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.520431][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.525590][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.555943][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.559762][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.602738][ T4614] Bluetooth: hci0: command 0x0409 tx timeout [ 92.048596][ C3] [ 92.049972][ C3] ================================ [ 92.052590][ C3] WARNING: inconsistent lock state [ 92.055515][ C3] 6.8.0-rc4-syzkaller-g8d3dea210042 #0 Not tainted [ 92.058693][ C3] -------------------------------- [ 92.062595][ C3] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 92.082207][ C3] syz-executor.0/5490 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 92.085057][ C3] ffffffff8e602398 (sync_timeline_list_lock){?.+.}-{2:2}, at: sync_timeline_debug_remove+0x29/0x1a0 [ 92.089582][ C3] {HARDIRQ-ON-W} state was registered at: [ 92.094164][ C3] lockdep_hardirqs_on_prepare+0x139/0x420 [ 92.097054][ C3] trace_hardirqs_on+0x36/0x40 [ 92.099132][ C3] _raw_spin_unlock_irq+0x23/0x50 [ 92.101718][ C3] sync_info_debugfs_show+0xef/0x200 [ 92.104792][ C3] seq_read_iter+0x4fa/0x12c0 [ 92.107290][ C3] seq_read+0x392/0x4e0 [ 92.109208][ C3] vfs_read+0x1d4/0xb80 [ 92.111035][ C3] ksys_read+0x12f/0x260 [ 92.113275][ C3] do_syscall_64+0xd5/0x270 [ 92.115563][ C3] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 92.118577][ C3] irq event stamp: 160 [ 92.120863][ C3] hardirqs last enabled at (159): [] _raw_spin_unlock_irq+0x23/0x50 [ 92.126129][ C3] hardirqs last disabled at (160): [] sysvec_irq_work+0xe/0xb0 [ 92.130573][ C3] softirqs last enabled at (0): [] copy_process+0x245f/0x97b0 [ 92.135970][ C3] softirqs last disabled at (0): [<0000000000000000>] 0x0 [ 92.140696][ C3] [ 92.140696][ C3] other info that might help us debug this: [ 92.144845][ C3] Possible unsafe locking scenario: [ 92.144845][ C3] [ 92.148310][ C3] CPU0 [ 92.149874][ C3] ---- [ 92.151280][ C3] lock(sync_timeline_list_lock); [ 92.153340][ C3] [ 92.154828][ C3] lock(sync_timeline_list_lock); [ 92.157323][ C3] [ 92.157323][ C3] *** DEADLOCK *** [ 92.157323][ C3] [ 92.162481][ C3] no locks held by syz-executor.0/5490. [ 92.165623][ C3] [ 92.165623][ C3] stack backtrace: [ 92.168992][ C3] CPU: 3 PID: 5490 Comm: syz-executor.0 Not tainted 6.8.0-rc4-syzkaller-g8d3dea210042 #0 [ 92.173520][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 92.178659][ C3] Call Trace: [ 92.180347][ C3] [ 92.182018][ C3] dump_stack_lvl+0xd9/0x1b0 [ 92.184793][ C3] mark_lock+0x923/0xc60 [ 92.187405][ C3] ? __pfx_mark_lock+0x10/0x10 [ 92.190152][ C3] ? __pfx_lock_release+0x10/0x10 [ 92.192354][ C3] ? __pfx_mark_lock+0x10/0x10 [ 92.194639][ C3] ? __lock_acquire+0x2d63/0x3b40 [ 92.196727][ C3] __lock_acquire+0x137e/0x3b40 [ 92.199137][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 92.202388][ C3] ? __pfx___lock_acquire+0x10/0x10 [ 92.205694][ C3] lock_acquire+0x1ae/0x520 [ 92.208012][ C3] ? sync_timeline_debug_remove+0x29/0x1a0 [ 92.210654][ C3] ? __pfx_lock_acquire+0x10/0x10 [ 92.212996][ C3] ? timeline_fence_release+0x1f1/0x340 [ 92.215634][ C3] ? __pfx_lock_release+0x10/0x10 [ 92.218137][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 92.220691][ C3] ? sync_timeline_debug_remove+0x29/0x1a0 [ 92.223656][ C3] sync_timeline_debug_remove+0x29/0x1a0 [ 92.227352][ C3] timeline_fence_release+0x262/0x340 [ 92.230272][ C3] ? __pfx_timeline_fence_release+0x10/0x10 [ 92.233101][ C3] dma_fence_release+0x2ff/0x520 [ 92.235963][ C3] ? __pfx_lock_release+0x10/0x10 [ 92.239569][ C3] dma_fence_array_release+0x1fa/0x2e0 [ 92.242872][ C3] ? __pfx_dma_fence_array_release+0x10/0x10 [ 92.246285][ C3] dma_fence_release+0x2ff/0x520 [ 92.248664][ C3] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 92.252018][ C3] irq_dma_fence_array_work+0xa9/0xd0 [ 92.255311][ C3] irq_work_single+0x1be/0x260 [ 92.258560][ C3] irq_work_run_list+0x92/0xc0 [ 92.261903][ C3] irq_work_run+0x58/0xd0 [ 92.264969][ C3] __sysvec_irq_work+0x82/0x3a0 [ 92.268250][ C3] sysvec_irq_work+0x90/0xb0 [ 92.271430][ C3] [ 92.273362][ C3] [ 92.275223][ C3] asm_sysvec_irq_work+0x1a/0x20 [ 92.278932][ C3] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 92.283222][ C3] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 1a 6c a3 f6 48 89 df e8 02 e7 a3 f6 e8 fd 14 cb f6 fb bf 01 00 00 00 b2 33 95 f6 65 8b 05 33 7a 3c 75 85 c0 74 06 5b c3 cc cc cc cc [ 92.293502][ C3] RSP: 0018:ffffc9000374fda8 EFLAGS: 00000206 [ 92.296424][ C3] RAX: 000000000000009f RBX: ffff888024cf9d00 RCX: 1ffffffff1f3a379 [ 92.300534][ C3] RDX: 0000000000000000 RSI: ffffffff8b0cb340 RDI: 0000000000000001 [ 92.305596][ C3] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 92.309701][ C3] R10: ffffffff8f9d4e57 R11: 0000000000000001 R12: ffff888024cf9cb0 [ 92.313800][ C3] R13: dffffc0000000000 R14: ffff888024cf9cb0 R15: ffff888024cf9d00 [ 92.317390][ C3] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.320050][ C3] sw_sync_debugfs_release+0x164/0x240 [ 92.323284][ C3] ? __pfx_sw_sync_debugfs_release+0x10/0x10 [ 92.327597][ C3] __fput+0x270/0xb80 [ 92.329575][ C3] task_work_run+0x14f/0x250 [ 92.331805][ C3] ? __pfx_task_work_run+0x10/0x10 [ 92.334185][ C3] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 92.336757][ C3] syscall_exit_to_user_mode+0x281/0x2b0 [ 92.339067][ C3] do_syscall_64+0xe5/0x270 [ 92.341008][ C3] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 92.344019][ C3] RIP: 0033:0x7fdd6dc7cae9 [ 92.346616][ C3] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 92.355344][ C3] RSP: 002b:00007fdd6e9f20c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 92.359513][ C3] RAX: 0000000000000000 RBX: 00007fdd6dd9c050 RCX: 00007fdd6dc7cae9 [ 92.364124][ C3] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 92.368323][ C3] RBP: 00007fdd6dcc847a R08: 0000000000000000 R09: 0000000000000000 [ 92.372068][ C3] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.375912][ C3] R13: 000000000000006e R14: 00007fdd6dd9c050 R15: 00007ffd77837648 [ 92.381391][ C3] [ 93.121974][ T824] cfg80211: failed to load regulatory.db [ 93.682892][ T4614] Bluetooth: hci0: command 0x041b tx timeout 2024/02/15 14:16:05 executed programs: 30 [ 95.771879][ T4614] Bluetooth: hci0: command 0x040f tx timeout [ 97.852016][ T4614] Bluetooth: hci0: command 0x0419 tx timeout 2024/02/15 14:16:10 executed programs: 94