Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. 2024/04/23 10:53:38 ignoring optional flag "sandboxArg"="0" 2024/04/23 10:53:38 parsed 1 programs [ 115.516232][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 115.516256][ T28] audit: type=1400 audit(1713869618.935:200): avc: denied { getattr } for pid=5412 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.547238][ T28] audit: type=1400 audit(1713869618.935:201): avc: denied { read } for pid=5412 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.569076][ T28] audit: type=1400 audit(1713869618.935:202): avc: denied { open } for pid=5412 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.593519][ T28] audit: type=1400 audit(1713869619.005:203): avc: denied { mounton } for pid=5418 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 115.593651][ T5418] cgroup: Unknown subsys name 'net' [ 115.632903][ T5418] cgroup: Unknown subsys name 'rlimit' 2024/04/23 10:53:39 executed programs: 0 [ 115.642714][ T28] audit: type=1400 audit(1713869619.065:204): avc: denied { mounton } for pid=5418 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 115.682381][ T28] audit: type=1400 audit(1713869619.065:205): avc: denied { mount } for pid=5418 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 115.709883][ T28] audit: type=1400 audit(1713869619.065:206): avc: denied { setattr } for pid=5418 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.847132][ T5077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.855926][ T5077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.864877][ T5077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.874645][ T5077] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.883263][ T5077] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 116.891408][ T5077] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.910707][ T28] audit: type=1400 audit(1713869620.325:207): avc: denied { mounton } for pid=5424 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 117.044484][ T5424] chnl_net:caif_netlink_parms(): no params data found [ 117.118181][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.125697][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.133518][ T5424] bridge_slave_0: entered allmulticast mode [ 117.140726][ T5424] bridge_slave_0: entered promiscuous mode [ 117.149487][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.157205][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.164823][ T5424] bridge_slave_1: entered allmulticast mode [ 117.173144][ T5424] bridge_slave_1: entered promiscuous mode [ 117.206008][ T5424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.218314][ T5424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.253281][ T5424] team0: Port device team_slave_0 added [ 117.266948][ T5424] team0: Port device team_slave_1 added [ 117.296978][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.304057][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.331165][ T5424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.344275][ T5424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.351299][ T5424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.378247][ T5424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.430456][ T5424] hsr_slave_0: entered promiscuous mode [ 117.436908][ T5424] hsr_slave_1: entered promiscuous mode [ 117.551077][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.558373][ T5424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.566297][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.573916][ T5424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.640543][ T5424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.658786][ T783] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.667713][ T783] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.685466][ T5424] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.699026][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.706300][ T5086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.728247][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.735889][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.806920][ T5424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.839232][ T28] audit: type=1400 audit(1713869621.255:208): avc: denied { sys_module } for pid=5424 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 118.146052][ T5424] veth0_vlan: entered promiscuous mode [ 118.158299][ T5424] veth1_vlan: entered promiscuous mode [ 118.191898][ T5424] veth0_macvtap: entered promiscuous mode [ 118.203139][ T5424] veth1_macvtap: entered promiscuous mode [ 118.224074][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.239285][ T5424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.318875][ T2805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.327192][ T2805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.369020][ T2805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.378426][ T2805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.397255][ T28] audit: type=1400 audit(1713869621.815:209): avc: denied { mounton } for pid=5424 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 118.910790][ T4470] Bluetooth: hci0: command tx timeout [ 119.294198][ T5447] block nbd0: shutting down sockets [ 120.991285][ T4470] Bluetooth: hci0: command tx timeout [ 123.071064][ T4470] Bluetooth: hci0: command tx timeout [ 125.151116][ T4470] Bluetooth: hci0: command tx timeout [ 134.034257][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.041275][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.473948][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.480403][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.630908][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 256.914665][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.921104][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.310935][ T29] INFO: task syz-executor.0:5447 blocked for more than 143 seconds. [ 263.319192][ T29] Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0 [ 263.328751][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 263.337541][ T29] task:syz-executor.0 state:D stack:26608 pid:5447 tgid:5446 ppid:5424 flags:0x00004006 [ 263.348506][ T29] Call Trace: [ 263.351848][ T29] [ 263.354792][ T29] __schedule+0xf15/0x5d00 [ 263.359338][ T29] ? __pfx___lock_acquire+0x10/0x10 [ 263.365184][ T29] ? hlock_class+0x4e/0x130 [ 263.369818][ T29] ? __pfx___schedule+0x10/0x10 [ 263.374742][ T29] ? schedule+0x298/0x350 [ 263.379593][ T29] ? __pfx_lock_release+0x10/0x10 [ 263.384673][ T29] schedule+0xe7/0x350 [ 263.388748][ T29] schedule_timeout+0x258/0x2a0 [ 263.393686][ T29] ? __pfx_schedule_timeout+0x10/0x10 [ 263.399084][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.404357][ T29] __wait_for_common+0x3de/0x5f0 [ 263.409357][ T29] ? __pfx_schedule_timeout+0x10/0x10 [ 263.414829][ T29] ? __pfx___wait_for_common+0x10/0x10 [ 263.420340][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.425799][ T29] ? flush_workqueue_prep_pwqs+0x29b/0x500 [ 263.432149][ T29] ? check_flush_dependency+0x86/0x450 [ 263.437766][ T29] __flush_workqueue+0x39e/0x1200 [ 263.442969][ T29] ? __pfx___flush_workqueue+0x10/0x10 [ 263.448500][ T29] ? blk_mq_run_hw_queues+0x1fb/0x290 [ 263.454056][ T29] ? blk_mq_unquiesce_queue+0xbf/0x100 [ 263.459554][ T29] nbd_ioctl+0x308/0xfd0 [ 263.463953][ T29] ? __pfx_nbd_ioctl+0x10/0x10 [ 263.468742][ T29] ? __pfx_autoremove_wake_function+0x10/0x10 [ 263.474971][ T29] ? __pfx_nbd_ioctl+0x10/0x10 [ 263.479790][ T29] blkdev_ioctl+0x2f7/0x770 [ 263.484658][ T29] ? __pfx_blkdev_ioctl+0x10/0x10 [ 263.489771][ T29] ? selinux_file_ioctl+0xb4/0x270 [ 263.495352][ T29] ? __pfx_blkdev_ioctl+0x10/0x10 [ 263.500420][ T29] __x64_sys_ioctl+0x193/0x220 [ 263.505375][ T29] do_syscall_64+0xcf/0x260 [ 263.509961][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.516166][ T29] RIP: 0033:0x7f2ce46795e9 [ 263.520677][ T29] RSP: 002b:00007f2ce58530c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.529255][ T29] RAX: ffffffffffffffda RBX: 00007f2ce478bf60 RCX: 00007f2ce46795e9 [ 263.537768][ T29] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 263.546870][ T29] RBP: 00007f2ce46d5018 R08: 0000000000000000 R09: 0000000000000000 [ 263.555425][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.563573][ T29] R13: 000000000000000b R14: 00007f2ce478bf60 R15: 00007ffde9dafef8 [ 263.571644][ T29] [ 263.574790][ T29] [ 263.574790][ T29] Showing all locks held in the system: [ 263.583127][ T29] 1 lock held by khungtaskd/29: [ 263.588120][ T29] #0: ffffffff8d7b0e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 263.598885][ T29] 2 locks held by getty/4824: [ 263.603642][ T29] #0: ffff88802a5b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 263.613605][ T29] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 263.623783][ T29] 2 locks held by kworker/u9:2/5077: [ 263.629121][ T29] #0: ffff88801ff35948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x1296/0x1ac0 [ 263.640375][ T29] #1: ffffc90003137d80 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x906/0x1ac0 [ 263.651738][ T29] [ 263.654073][ T29] ============================================= [ 263.654073][ T29] [ 263.662515][ T29] NMI backtrace for cpu 1 [ 263.666950][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0 [ 263.677027][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 263.687116][ T29] Call Trace: [ 263.690401][ T29] [ 263.693340][ T29] dump_stack_lvl+0x116/0x1f0 [ 263.698142][ T29] nmi_cpu_backtrace+0x27b/0x390 [ 263.703124][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.709244][ T29] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 263.715234][ T29] watchdog+0xf86/0x1240 [ 263.719565][ T29] ? __pfx_watchdog+0x10/0x10 [ 263.724430][ T29] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.729819][ T29] ? __kthread_parkme+0x148/0x220 [ 263.734896][ T29] ? __pfx_watchdog+0x10/0x10 [ 263.739587][ T29] kthread+0x2c1/0x3a0 [ 263.743673][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 263.749317][ T29] ? __pfx_kthread+0x10/0x10 [ 263.754065][ T29] ret_from_fork+0x45/0x80 [ 263.758550][ T29] ? __pfx_kthread+0x10/0x10 [ 263.763259][ T29] ret_from_fork_asm+0x1a/0x30 [ 263.768115][ T29] [ 263.771565][ T29] Sending NMI from CPU 1 to CPUs 0: [ 263.776889][ C0] NMI backtrace for cpu 0 [ 263.776901][ C0] CPU: 0 PID: 4514 Comm: klogd Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0 [ 263.776923][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 263.776934][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 263.776970][ C0] Code: 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <48> 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd ff ff 0f 1f 84 00 00 00 [ 263.776989][ C0] RSP: 0018:ffffc90003447ac8 EFLAGS: 00000207 [ 263.777005][ C0] RAX: 0000000000000000 RBX: 000000001cffcc00 RCX: ffffffff813e7910 [ 263.777019][ C0] RDX: ffff88805a58da00 RSI: 0000000000000003 RDI: 000000000007ffff [ 263.777032][ C0] RBP: 0000000000000003 R08: 0000000000000007 R09: 0000000000000000 [ 263.777044][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 263.777056][ C0] R13: ffff88801cffcc51 R14: 0000000000000000 R15: ffff888059dc1500 [ 263.777070][ C0] FS: 00007f3d29bd3380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 263.777091][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.777105][ C0] CR2: 0000560e264e4680 CR3: 000000005a04e000 CR4: 00000000003506f0 [ 263.777119][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 263.777130][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 263.777143][ C0] Call Trace: [ 263.777150][ C0] [ 263.777156][ C0] ? show_regs+0x8c/0xa0 [ 263.777210][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 263.777233][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 263.777259][ C0] ? nmi_handle+0x1a9/0x5c0 [ 263.777278][ C0] ? __sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 263.777305][ C0] ? default_do_nmi+0x6a/0x160 [ 263.777328][ C0] ? exc_nmi+0x170/0x1e0 [ 263.777349][ C0] ? end_repeat_nmi+0xf/0x53 [ 263.777371][ C0] ? __virt_addr_valid+0xf0/0x580 [ 263.777392][ C0] ? __sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 263.777419][ C0] ? __sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 263.777446][ C0] ? __sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 263.777473][ C0] [ 263.777479][ C0] [ 263.777485][ C0] __virt_addr_valid+0xf0/0x580 [ 263.777506][ C0] __check_object_size+0x139/0x730 [ 263.777595][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 263.777668][ C0] skb_copy_datagram_from_iter+0x111/0x6c0 [ 263.777713][ C0] unix_dgram_sendmsg+0x58f/0x1b10 [ 263.777777][ C0] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 263.777847][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 263.777869][ C0] __sys_sendto+0x47f/0x4e0 [ 263.777912][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 263.777932][ C0] ? __pfx_lock_release+0x10/0x10 [ 263.777962][ C0] ? rcu_is_watching+0x12/0xc0 [ 263.778027][ C0] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 263.778081][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 263.778102][ C0] ? do_syscall_64+0x91/0x260 [ 263.778121][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 263.778148][ C0] do_syscall_64+0xcf/0x260 [ 263.778167][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.778187][ C0] RIP: 0033:0x7f3d29d359b5 [ 263.778206][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 263.778224][ C0] RSP: 002b:00007ffc41f1fd78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 263.778243][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3d29d359b5 [ 263.778256][ C0] RDX: 0000000000000051 RSI: 00005577ae79fdf0 RDI: 0000000000000003 [ 263.778269][ C0] RBP: 00005577ae7992c0 R08: 0000000000000000 R09: 0000000000000000 [ 263.778281][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 263.778294][ C0] R13: 00007f3d29ec3212 R14: 00007ffc41f1fe78 R15: 0000000000000000 [ 263.778310][ C0] [ 263.779022][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 264.163797][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.9.0-rc5-syzkaller-00031-g71b1543c83d6 #0 [ 264.173601][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 264.183676][ T29] Call Trace: [ 264.186960][ T29] [ 264.189892][ T29] dump_stack_lvl+0x3d/0x1f0 [ 264.194514][ T29] panic+0x6f5/0x7a0 [ 264.198511][ T29] ? __pfx_panic+0x10/0x10 [ 264.202952][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 264.208329][ T29] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 264.214406][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 264.219787][ T29] ? watchdog+0xd3d/0x1240 [ 264.224274][ T29] ? watchdog+0xd30/0x1240 [ 264.228723][ T29] watchdog+0xd4e/0x1240 [ 264.232996][ T29] ? __pfx_watchdog+0x10/0x10 [ 264.237708][ T29] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.243214][ T29] ? __kthread_parkme+0x148/0x220 [ 264.248264][ T29] ? __pfx_watchdog+0x10/0x10 [ 264.252962][ T29] kthread+0x2c1/0x3a0 [ 264.257052][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.262433][ T29] ? __pfx_kthread+0x10/0x10 [ 264.267041][ T29] ret_from_fork+0x45/0x80 [ 264.271469][ T29] ? __pfx_kthread+0x10/0x10 [ 264.276080][ T29] ret_from_fork_asm+0x1a/0x30 [ 264.280864][ T29] [ 264.284544][ T29] Kernel Offset: disabled [ 264.288921][ T29] Rebooting in 86400 seconds..