[ 76.512598][ T972] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.10.50' (ED25519) to the list of known hosts. 2025/01/12 09:34:47 ignoring optional flag "sandboxArg"="0" 2025/01/12 09:34:47 ignoring optional flag "type"="gce" 2025/01/12 09:34:47 parsed 1 programs [ 77.456548][ T29] audit: type=1400 audit(1736674487.584:132): avc: denied { getattr } for pid=6108 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.494463][ T29] audit: type=1400 audit(1736674487.624:133): avc: denied { read write } for pid=6113 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.520737][ T29] audit: type=1400 audit(1736674487.624:134): avc: denied { open } for pid=6113 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.554028][ T29] audit: type=1400 audit(1736674487.684:135): avc: denied { unlink } for pid=6113 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.803896][ T29] audit: type=1400 audit(1736674487.934:136): avc: denied { relabelto } for pid=6114 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/01/12 09:34:48 executed programs: 0 [ 78.701726][ T6113] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.749133][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.757532][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.765233][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.773783][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.781208][ T5824] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.789628][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.799786][ T29] audit: type=1400 audit(1736674488.934:137): avc: denied { mounton } for pid=6119 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.885346][ T6119] chnl_net:caif_netlink_parms(): no params data found [ 78.920683][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.927906][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.935696][ T6119] bridge_slave_0: entered allmulticast mode [ 78.942439][ T6119] bridge_slave_0: entered promiscuous mode [ 78.949900][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.957148][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.964313][ T6119] bridge_slave_1: entered allmulticast mode [ 78.970713][ T6119] bridge_slave_1: entered promiscuous mode [ 78.988712][ T6119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.999239][ T6119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.019304][ T6119] team0: Port device team_slave_0 added [ 79.026374][ T6119] team0: Port device team_slave_1 added [ 79.042698][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.049652][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.076111][ T6119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.087829][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.094863][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.120864][ T6119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.146404][ T6119] hsr_slave_0: entered promiscuous mode [ 79.152584][ T6119] hsr_slave_1: entered promiscuous mode [ 79.587694][ T6119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.596666][ T6119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.606086][ T6119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.615270][ T6119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.636209][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.643426][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.650786][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.657930][ T6119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.705884][ T6119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.721205][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.729686][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.746011][ T6119] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.759078][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.766204][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.782064][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.789533][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.954657][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.990902][ T6119] veth0_vlan: entered promiscuous mode [ 80.005300][ T6119] veth1_vlan: entered promiscuous mode [ 80.032135][ T6119] veth0_macvtap: entered promiscuous mode [ 80.040504][ T6119] veth1_macvtap: entered promiscuous mode [ 80.059012][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.072756][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.085732][ T6119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.099933][ T6119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.110645][ T6119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.120708][ T6119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.186802][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.198893][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.230615][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.239535][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.251188][ T29] audit: type=1400 audit(1736674490.384:138): avc: denied { mounton } for pid=6119 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 80.300489][ T6185] loop0: detected capacity change from 0 to 64 [ 80.308510][ T29] audit: type=1400 audit(1736674490.434:139): avc: denied { mounton } for pid=6184 comm="syz-executor.0" path="/root/syzkaller-testdir317771605/syzkaller.awBoxQ/0/bus" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 80.361850][ T29] audit: type=1400 audit(1736674490.444:140): avc: denied { mount } for pid=6184 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 80.444792][ T6185] [ 80.447140][ T6185] ============================================ [ 80.453280][ T6185] WARNING: possible recursive locking detected [ 80.459435][ T6185] 6.13.0-rc6-syzkaller-gb62cef9a5c67 #0 Not tainted [ 80.466017][ T6185] -------------------------------------------- [ 80.472156][ T6185] syz-executor.0/6185 is trying to acquire lock: [ 80.478471][ T6185] ffff88804f98c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 80.487811][ T6185] [ 80.487811][ T6185] but task is already holding lock: [ 80.495169][ T6185] ffff88804f98c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 80.504493][ T6185] [ 80.504493][ T6185] other info that might help us debug this: [ 80.512548][ T6185] Possible unsafe locking scenario: [ 80.512548][ T6185] [ 80.519997][ T6185] CPU0 [ 80.523270][ T6185] ---- [ 80.526544][ T6185] lock(&tree->tree_lock/1); [ 80.531229][ T6185] lock(&tree->tree_lock/1); [ 80.535915][ T6185] [ 80.535915][ T6185] *** DEADLOCK *** [ 80.535915][ T6185] [ 80.544052][ T6185] May be due to missing lock nesting notation [ 80.544052][ T6185] [ 80.552366][ T6185] 6 locks held by syz-executor.0/6185: [ 80.557819][ T6185] #0: ffff8880728c82b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 80.566885][ T6185] #1: ffff88804f98e420 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 80.575959][ T6185] #2: ffff8880350b1620 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: generic_file_write_iter+0x8c/0x340 [ 80.587292][ T6185] #3: ffff8880350b1478 (&HFS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa2/0xb10 [ 80.598106][ T6185] #4: ffff88804f98c0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x183/0x220 [ 80.607878][ T6185] #5: ffff8880350b00f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa2/0xb10 [ 80.619033][ T6185] [ 80.619033][ T6185] stack backtrace: [ 80.624931][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz-executor.0 Not tainted 6.13.0-rc6-syzkaller-gb62cef9a5c67 #0 [ 80.635438][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.645607][ T6185] Call Trace: [ 80.648883][ T6185] [ 80.651811][ T6185] dump_stack_lvl+0x116/0x1f0 [ 80.656514][ T6185] print_deadlock_bug+0x2e3/0x410 [ 80.661543][ T6185] __lock_acquire+0x2117/0x3c40 [ 80.666400][ T6185] ? __pfx___lock_acquire+0x10/0x10 [ 80.671602][ T6185] ? hfs_find_init+0x95/0x220 [ 80.676283][ T6185] ? kasan_save_stack+0x42/0x60 [ 80.681138][ T6185] ? kasan_save_stack+0x33/0x60 [ 80.685996][ T6185] ? kasan_save_track+0x14/0x30 [ 80.690936][ T6185] ? __kasan_kmalloc+0xaa/0xb0 [ 80.695703][ T6185] lock_acquire.part.0+0x11b/0x380 [ 80.700823][ T6185] ? hfs_find_init+0x183/0x220 [ 80.705594][ T6185] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 80.711238][ T6185] ? rcu_is_watching+0x12/0xc0 [ 80.716013][ T6185] ? trace_lock_acquire+0x14e/0x1f0 [ 80.721223][ T6185] ? hfs_find_init+0x183/0x220 [ 80.725990][ T6185] ? lock_acquire+0x2f/0xb0 [ 80.730496][ T6185] ? hfs_find_init+0x183/0x220 [ 80.735263][ T6185] __mutex_lock+0x19b/0xa60 [ 80.739775][ T6185] ? hfs_find_init+0x183/0x220 [ 80.744547][ T6185] ? hfs_find_init+0x183/0x220 [ 80.749322][ T6185] ? __pfx___mutex_lock+0x10/0x10 [ 80.754364][ T6185] ? trace_kmalloc+0x2d/0xd0 [ 80.758965][ T6185] ? __kmalloc_noprof+0x23b/0x510 [ 80.763993][ T6185] ? hfs_find_init+0x183/0x220 [ 80.768753][ T6185] hfs_find_init+0x183/0x220 [ 80.773357][ T6185] hfs_ext_read_extent+0x19c/0x9e0 [ 80.778477][ T6185] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 80.784120][ T6185] ? do_raw_spin_unlock+0x172/0x230 [ 80.789326][ T6185] hfs_extend_file+0x4e4/0xb10 [ 80.794099][ T6185] ? __pfx_hfs_extend_file+0x10/0x10 [ 80.799395][ T6185] hfs_bmap_reserve+0x29c/0x380 [ 80.804265][ T6185] __hfs_ext_write_extent+0x3cf/0x520 [ 80.809647][ T6185] ? hfs_find_init+0x183/0x220 [ 80.814418][ T6185] hfs_ext_read_extent+0x809/0x9e0 [ 80.819546][ T6185] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 80.825368][ T6185] hfs_extend_file+0x4e4/0xb10 [ 80.830143][ T6185] ? __pfx_hfs_extend_file+0x10/0x10 [ 80.835441][ T6185] hfs_get_block+0x17f/0x830 [ 80.840045][ T6185] ? __pfx_hfs_get_block+0x10/0x10 [ 80.845166][ T6185] __block_write_begin_int+0x4fb/0x16e0 [ 80.850722][ T6185] ? __pfx_hfs_get_block+0x10/0x10 [ 80.853119][ T5824] Bluetooth: hci0: command tx timeout [ 80.855836][ T6185] ? __pfx___block_write_begin_int+0x10/0x10 [ 80.867156][ T6185] ? __pfx_hfs_get_block+0x10/0x10 [ 80.872307][ T6185] block_write_begin+0x9a/0x1d0 [ 80.877171][ T6185] cont_write_begin+0x61d/0x950 [ 80.882028][ T6185] ? __pfx_hfs_get_block+0x10/0x10 [ 80.887147][ T6185] ? __pfx_cont_write_begin+0x10/0x10 [ 80.892529][ T6185] ? fault_in_readable+0x160/0x200 [ 80.897645][ T6185] ? __pfx_fault_in_readable+0x10/0x10 [ 80.903108][ T6185] hfs_write_begin+0x64/0x120 [ 80.907794][ T6185] ? __pfx_hfs_get_block+0x10/0x10 [ 80.912912][ T6185] generic_perform_write+0x2ba/0x920 [ 80.918215][ T6185] ? __pfx_generic_perform_write+0x10/0x10 [ 80.924047][ T6185] ? inode_needs_update_time.part.0+0x191/0x270 [ 80.930297][ T6185] __generic_file_write_iter+0x1f7/0x240 [ 80.935938][ T6185] generic_file_write_iter+0xe1/0x340 [ 80.941320][ T6185] vfs_write+0x5ae/0x1150 [ 80.945652][ T6185] ? __pfx_generic_file_write_iter+0x10/0x10 [ 80.951640][ T6185] ? __pfx___mutex_lock+0x10/0x10 [ 80.956672][ T6185] ? __pfx_vfs_write+0x10/0x10 [ 80.961445][ T6185] ksys_write+0x12b/0x250 [ 80.965778][ T6185] ? __pfx_ksys_write+0x10/0x10 [ 80.970681][ T6185] do_syscall_64+0xcd/0x250 [ 80.975194][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.981097][ T6185] RIP: 0033:0x7f5d0647cda9 [ 80.985525][ T6185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 81.005136][ T6185] RSP: 002b:00007f5d071e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.013555][ T6185] RAX: ffffffffffffffda RBX: 00007f5d065abf80 RCX: 00007f5d0647cda9 [ 81.021531][ T6185] RDX: 000000000208e24b RSI: 0000000020000180 RDI: 0000000000000004 [ 81.029511][ T6185] RBP: 00007f5d064c947a R08: 0000000000000000 R09: 0000000000000000 [ 81.037490][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.045463][ T6185] R13: 000000000000000b R14: 00007f5d065abf80 R15: 00007ffe44c538b8 [ 81.053442][ T6185] [ 82.901871][ T5824] Bluetooth: hci0: command tx timeout [ 84.971897][ T5824] Bluetooth: hci0: command tx timeout [ 85.372091][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.372091][ T12] loop0: rw=1048577, sector=95, nr_sectors = 1 limit=64 [ 85.386193][ T12] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 85.394674][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.394674][ T12] loop0: rw=1048577, sector=96, nr_sectors = 1 limit=64 [ 85.408309][ T12] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 85.417095][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.417095][ T12] loop0: rw=1048577, sector=98, nr_sectors = 1 limit=64 [ 85.430780][ T12] Buffer I/O error on dev loop0, logical block 98, lost async page write [ 85.439313][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.439313][ T12] loop0: rw=1048577, sector=100, nr_sectors = 1 limit=64 [ 85.453544][ T12] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 85.462155][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.462155][ T12] loop0: rw=1048577, sector=101, nr_sectors = 1 limit=64 [ 85.475966][ T12] Buffer I/O error on dev loop0, logical block 101, lost async page write [ 85.484724][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.484724][ T12] loop0: rw=1048577, sector=102, nr_sectors = 1 limit=64 [ 85.498486][ T12] Buffer I/O error on dev loop0, logical block 102, lost async page write [ 85.507072][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.507072][ T12] loop0: rw=1048577, sector=103, nr_sectors = 1 limit=64 [ 85.520803][ T12] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 85.529370][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.529370][ T12] loop0: rw=1048577, sector=104, nr_sectors = 1 limit=64 [ 85.543384][ T12] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 85.554020][ T12] kworker/u8:1: attempt to access beyond end of device [ 85.554020][ T12] loop0: rw=1048577, sector=105, nr_sectors = 4064 limit=64 [ 87.051793][ T5824] Bluetooth: hci0: command tx timeout