Warning: Permanently added '[localhost]:20999' (ED25519) to the list of known hosts. 2024/05/17 23:29:28 ignoring optional flag "sandboxArg"="0" 2024/05/17 23:29:28 parsed 1 programs [ 78.120858][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 78.120874][ T39] audit: type=1400 audit(1715988568.734:207): avc: denied { getattr } for pid=5414 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.182094][ T39] audit: type=1400 audit(1715988568.774:208): avc: denied { mounton } for pid=5426 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 78.194760][ T39] audit: type=1400 audit(1715988568.784:209): avc: denied { mount } for pid=5426 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 78.208178][ T39] audit: type=1400 audit(1715988568.794:210): avc: denied { read write } for pid=5426 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.219400][ T39] audit: type=1400 audit(1715988568.794:211): avc: denied { open } for pid=5426 comm="syz-executor" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.258922][ T39] audit: type=1400 audit(1715988568.864:212): avc: denied { unlink } for pid=5426 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.881170][ T39] audit: type=1400 audit(1715988569.494:213): avc: denied { relabelto } for pid=5430 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.994157][ T5426] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/05/17 23:29:30 executed programs: 0 [ 80.043096][ T5216] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.047021][ T5216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.051019][ T5216] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.055243][ T5216] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.059396][ T5216] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.062879][ T5216] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.072662][ T39] audit: type=1400 audit(1715988570.684:214): avc: denied { mounton } for pid=5438 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 80.231622][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 80.327942][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.331023][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.334054][ T5438] bridge_slave_0: entered allmulticast mode [ 80.337992][ T5438] bridge_slave_0: entered promiscuous mode [ 80.342292][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.344952][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.347598][ T5438] bridge_slave_1: entered allmulticast mode [ 80.353005][ T5438] bridge_slave_1: entered promiscuous mode [ 80.406875][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.413155][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.419391][ T39] audit: type=1400 audit(1715988571.034:215): avc: denied { search } for pid=4679 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.473439][ T5438] team0: Port device team_slave_0 added [ 80.479758][ T5438] team0: Port device team_slave_1 added [ 80.534186][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.537317][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.551429][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.558504][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.561570][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.572639][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.648747][ T5438] hsr_slave_0: entered promiscuous mode [ 80.652198][ T5438] hsr_slave_1: entered promiscuous mode [ 81.416890][ T5438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.429465][ T5438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.436186][ T5438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.443923][ T5438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.521529][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.537737][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.550539][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.553658][ T829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.563768][ T1270] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.566494][ T1270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.642375][ T39] audit: type=1400 audit(1715988572.254:216): avc: denied { sys_module } for pid=5438 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 81.763275][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.802480][ T5438] veth0_vlan: entered promiscuous mode [ 81.810158][ T5438] veth1_vlan: entered promiscuous mode [ 81.829607][ T5438] veth0_macvtap: entered promiscuous mode [ 81.836446][ T5438] veth1_macvtap: entered promiscuous mode [ 81.856778][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.882836][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.891977][ T5438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.895895][ T5438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.899986][ T5438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.903925][ T5438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.972585][ T801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.976112][ T801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.004850][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.010835][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.082510][ T5486] [ 82.083548][ T5486] ============================================ [ 82.086315][ T5486] WARNING: possible recursive locking detected [ 82.088848][ T5486] 6.9.0-syzkaller-g7ee332c9f12b #0 Not tainted [ 82.092106][ T5486] -------------------------------------------- [ 82.095282][ T5486] syz-executor.0/5486 is trying to acquire lock: [ 82.098129][ T5486] ffff88803c5ee220 (&stab->lock){+.-.}-{2:2}, at: __sock_map_delete+0x43/0xe0 [ 82.102034][ T5486] [ 82.102034][ T5486] but task is already holding lock: [ 82.105040][ T5486] ffff88803c5eea20 (&stab->lock){+.-.}-{2:2}, at: sock_map_update_common+0x197/0x870 [ 82.111198][ T5486] [ 82.111198][ T5486] other info that might help us debug this: [ 82.116316][ T5486] Possible unsafe locking scenario: [ 82.116316][ T5486] [ 82.119306][ T5486] CPU0 [ 82.120650][ T5486] ---- [ 82.121990][ T5486] lock(&stab->lock); [ 82.123604][ T5486] lock(&stab->lock); [ 82.125232][ T5486] [ 82.125232][ T5486] *** DEADLOCK *** [ 82.125232][ T5486] [ 82.128440][ T5486] May be due to missing lock nesting notation [ 82.128440][ T5486] [ 82.131679][ T5486] 5 locks held by syz-executor.0/5486: [ 82.133602][ T5486] #0: ffff88803bf24258 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sock_map_update_elem_sys+0x1b6/0x570 [ 82.137498][ T5486] #1: ffffffff8dbb1ce0 (rcu_read_lock){....}-{1:2}, at: sock_map_update_elem_sys+0x1d8/0x570 [ 82.142218][ T5486] #2: ffff88803c5eea20 (&stab->lock){+.-.}-{2:2}, at: sock_map_update_common+0x197/0x870 [ 82.146138][ T5486] #3: ffff88802da152b0 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xbf/0x6e0 [ 82.150326][ T5486] #4: ffffffff8dbb1ce0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 82.154098][ T5486] [ 82.154098][ T5486] stack backtrace: [ 82.156416][ T5486] CPU: 0 PID: 5486 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-g7ee332c9f12b #0 [ 82.159862][ T5486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 82.163395][ T5486] Call Trace: [ 82.164594][ T5486] [ 82.165636][ T5486] dump_stack_lvl+0x116/0x1f0 [ 82.167288][ T5486] __lock_acquire+0x20e6/0x3b30 [ 82.169480][ T5486] ? __pfx___lock_acquire+0x10/0x10 [ 82.171628][ T5486] ? __pfx_mark_lock+0x10/0x10 [ 82.173559][ T5486] ? __pfx___lock_acquire+0x10/0x10 [ 82.175618][ T5486] lock_acquire+0x1b1/0x560 [ 82.177448][ T5486] ? __sock_map_delete+0x43/0xe0 [ 82.179408][ T5486] ? __pfx_lock_acquire+0x10/0x10 [ 82.181458][ T5486] ? bpf_get_current_cgroup_id+0x149/0x3b0 [ 82.183992][ T5486] ? __pfx_lock_release+0x10/0x10 [ 82.186296][ T5486] _raw_spin_lock_bh+0x33/0x40 [ 82.188625][ T5486] ? __sock_map_delete+0x43/0xe0 [ 82.191339][ T5486] __sock_map_delete+0x43/0xe0 [ 82.194222][ T5486] ? __pfx_bpf_map_delete_elem+0x10/0x10 [ 82.197148][ T5486] sock_map_delete_elem+0xb5/0x100 [ 82.200005][ T5486] ___bpf_prog_run+0x3e51/0xabd0 [ 82.201932][ T5486] __bpf_prog_run32+0xc1/0x100 [ 82.203826][ T5486] ? __pfx___bpf_prog_run32+0x10/0x10 [ 82.205933][ T5486] ? __pfx_lock_acquire+0x10/0x10 [ 82.207949][ T5486] ? __pfx___cant_migrate+0x10/0x10 [ 82.209828][ T5486] bpf_trace_run2+0x231/0x590 [ 82.212036][ T5486] ? __pfx_bpf_trace_run2+0x10/0x10 [ 82.214524][ T5486] ? __pfx_lock_acquire+0x10/0x10 [ 82.217105][ T5486] ? sock_map_unref+0x392/0x6e0 [ 82.219170][ T5486] kfree+0x225/0x3a0 [ 82.220742][ T5486] sock_map_unref+0x392/0x6e0 [ 82.222624][ T5486] sock_map_update_common+0x4f3/0x870 [ 82.224850][ T5486] sock_map_update_elem_sys+0x3bb/0x570 [ 82.227032][ T5486] ? __pfx_sock_map_update_elem_sys+0x10/0x10 [ 82.229464][ T5486] ? __pfx___might_resched+0x10/0x10 [ 82.231587][ T5486] bpf_map_update_value+0x36c/0x6c0 [ 82.233648][ T5486] map_update_elem+0x623/0x910 [ 82.235555][ T5486] ? __pfx_map_update_elem+0x10/0x10 [ 82.237668][ T5486] ? selinux_bpf+0xee/0x130 [ 82.239453][ T5486] __sys_bpf+0xac0/0x4b70 [ 82.241164][ T5486] ? find_held_lock+0x2d/0x110 [ 82.242904][ T5486] ? __pfx___sys_bpf+0x10/0x10 [ 82.244574][ T5486] ? __might_fault+0x13b/0x190 [ 82.246238][ T5486] ? __pfx_lock_release+0x10/0x10 [ 82.247996][ T5486] ? __pfx___might_resched+0x10/0x10 [ 82.249835][ T5486] ? xfd_validate_state+0x5d/0x180 [ 82.251671][ T5486] __x64_sys_bpf+0x78/0xc0 [ 82.253505][ T5486] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.255555][ T5486] do_syscall_64+0xcf/0x260 [ 82.257360][ T5486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.259776][ T5486] RIP: 0033:0x7fdabac7dea9 [ 82.261570][ T5486] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 82.269099][ T5486] RSP: 002b:00007fdabba0d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 82.272398][ T5486] RAX: ffffffffffffffda RBX: 00007fdabadabf80 RCX: 00007fdabac7dea9 [ 82.275477][ T5486] RDX: 0000000000000020 RSI: 0000000020000680 RDI: 0000000000000002 [ 82.278782][ T5486] RBP: 00007fdabacca4a4 R08: 0000000000000000 R09: 0000000000000000 [ 82.281570][ T5486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.284280][ T5486] R13: 000000000000000b R14: 00007fdabadabf80 R15: 00007ffda6ad4b38 [ 82.286989][ T5486] [ 82.291829][ T65] Bluetooth: hci0: command tx timeout [ 84.348184][ T65] Bluetooth: hci0: command tx timeout 2024/05/17 23:29:35 executed programs: 74 [ 86.427973][ T65] Bluetooth: hci0: command tx timeout [ 87.319003][ T56] cfg80211: failed to load regulatory.db [ 88.508245][ T65] Bluetooth: hci0: command tx timeout 2024/05/17 23:29:40 executed programs: 213