Warning: Permanently added '10.128.10.50' (ECDSA) to the list of known hosts. 2023/05/25 15:50:49 ignoring optional flag "sandboxArg"="0" 2023/05/25 15:50:49 parsed 1 programs 2023/05/25 15:50:49 executed programs: 0 [ 68.887289][ T3852] chnl_net:caif_netlink_parms(): no params data found [ 68.927003][ T3852] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.934403][ T3852] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.942264][ T3852] device bridge_slave_0 entered promiscuous mode [ 68.950435][ T3852] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.957542][ T3852] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.965363][ T3852] device bridge_slave_1 entered promiscuous mode [ 68.985368][ T3852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.996192][ T3852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.018581][ T3852] team0: Port device team_slave_0 added [ 69.026542][ T3852] team0: Port device team_slave_1 added [ 69.044432][ T3852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.051583][ T3852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.077639][ T3852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.089556][ T3852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.096621][ T3852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.122780][ T3852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.151328][ T3852] device hsr_slave_0 entered promiscuous mode [ 69.157901][ T3852] device hsr_slave_1 entered promiscuous mode [ 69.584669][ T3852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.594263][ T3852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.605252][ T3852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.615559][ T3852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.638498][ T3852] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.645627][ T3852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.653195][ T3852] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.660334][ T3852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.717333][ T3852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.732809][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.742936][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.753501][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.763288][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.776503][ T3852] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.790346][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.799267][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.806408][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.825293][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.835345][ T2922] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.842479][ T2922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.862499][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.872672][ T2922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.887474][ T3852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.901752][ T3852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.915226][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.923956][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.932790][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.941812][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.950698][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.971288][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.045716][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.053998][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.068971][ T3852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.091108][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.103637][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.123344][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.132734][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.144416][ T3852] device veth0_vlan entered promiscuous mode [ 70.152318][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.161199][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.173546][ T3852] device veth1_vlan entered promiscuous mode [ 70.201364][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.209447][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.220023][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.228574][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.239377][ T3852] device veth0_macvtap entered promiscuous mode [ 70.252050][ T3852] device veth1_macvtap entered promiscuous mode [ 70.268749][ T3852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.277931][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.286878][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.295818][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.304946][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.316483][ T3852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.325432][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.334958][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.345829][ T3852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.356550][ T3852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.365685][ T3852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.375067][ T3852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.446136][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.460972][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.470242][ T2066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.493090][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.501524][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.512425][ T2066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.566849][ T3952] [ 70.569303][ T3952] ====================================================== [ 70.576317][ T3952] WARNING: possible circular locking dependency detected [ 70.583334][ T3952] 5.15.113-syzkaller #0 Not tainted [ 70.588526][ T3952] ------------------------------------------------------ [ 70.595540][ T3952] syz-executor.0/3952 is trying to acquire lock: [ 70.601862][ T3952] ffff888020c58460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x36/0x70 [ 70.610577][ T3952] [ 70.610577][ T3952] but task is already holding lock: [ 70.617944][ T3952] ffff8880183e9e00 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x61b/0x1510 [ 70.627341][ T3952] [ 70.627341][ T3952] which lock already depends on the new lock. [ 70.627341][ T3952] [ 70.637744][ T3952] [ 70.637744][ T3952] the existing dependency chain (in reverse order) is: [ 70.646757][ T3952] [ 70.646757][ T3952] -> #1 (&iint->mutex){+.+.}-{3:3}: [ 70.654141][ T3952] lock_acquire+0x1db/0x4f0 [ 70.659172][ T3952] __mutex_lock_common+0x1da/0x25a0 [ 70.664899][ T3952] mutex_lock_nested+0x17/0x20 [ 70.670232][ T3952] process_measurement+0x61b/0x1510 [ 70.675958][ T3952] ima_file_check+0xeb/0x170 [ 70.681109][ T3952] path_openat+0x2336/0x28d0 [ 70.686226][ T3952] do_filp_open+0x208/0x400 [ 70.691258][ T3952] do_sys_openat2+0x10b/0x430 [ 70.696462][ T3952] __x64_sys_openat+0x209/0x250 [ 70.701838][ T3952] do_syscall_64+0x3d/0xb0 [ 70.706897][ T3952] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 70.714184][ T3952] [ 70.714184][ T3952] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 70.721570][ T3952] validate_chain+0x1646/0x58b0 [ 70.726950][ T3952] __lock_acquire+0x1295/0x1ff0 [ 70.732331][ T3952] lock_acquire+0x1db/0x4f0 [ 70.737361][ T3952] sb_start_write+0x49/0x140 [ 70.742475][ T3952] mnt_want_write+0x36/0x70 [ 70.747505][ T3952] ovl_maybe_copy_up+0xb1/0x100 [ 70.752882][ T3952] ovl_open+0x86/0x1f0 [ 70.757568][ T3952] do_dentry_open+0x60a/0xcc0 [ 70.762768][ T3952] dentry_open+0xb5/0xf0 [ 70.767539][ T3952] ima_calc_file_hash+0x133/0x1680 [ 70.773269][ T3952] ima_collect_measurement+0x21a/0x460 [ 70.779346][ T3952] process_measurement+0xb72/0x1510 [ 70.785075][ T3952] ima_file_check+0xeb/0x170 [ 70.790285][ T3952] path_openat+0x2336/0x28d0 [ 70.795401][ T3952] do_filp_open+0x208/0x400 [ 70.800427][ T3952] do_sys_openat2+0x10b/0x430 [ 70.805748][ T3952] __x64_sys_openat+0x209/0x250 [ 70.811131][ T3952] do_syscall_64+0x3d/0xb0 [ 70.816072][ T3952] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 70.822485][ T3952] [ 70.822485][ T3952] other info that might help us debug this: [ 70.822485][ T3952] [ 70.832722][ T3952] Possible unsafe locking scenario: [ 70.832722][ T3952] [ 70.840171][ T3952] CPU0 CPU1 [ 70.845542][ T3952] ---- ---- [ 70.851000][ T3952] lock(&iint->mutex); [ 70.855169][ T3952] lock(sb_writers#5); [ 70.861848][ T3952] lock(&iint->mutex); [ 70.868530][ T3952] lock(sb_writers#5); [ 70.872696][ T3952] [ 70.872696][ T3952] *** DEADLOCK *** [ 70.872696][ T3952] [ 70.880840][ T3952] 1 lock held by syz-executor.0/3952: [ 70.886206][ T3952] #0: ffff8880183e9e00 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x61b/0x1510 [ 70.896034][ T3952] [ 70.896034][ T3952] stack backtrace: [ 70.901948][ T3952] CPU: 1 PID: 3952 Comm: syz-executor.0 Not tainted 5.15.113-syzkaller #0 [ 70.910446][ T3952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/16/2023 [ 70.920500][ T3952] Call Trace: [ 70.923785][ T3952] [ 70.926727][ T3952] dump_stack_lvl+0x163/0x213 [ 70.931405][ T3952] ? io_uring_drop_tctx_refs+0x15d/0x15d [ 70.937046][ T3952] ? print_circular_bug+0x12b/0x1a0 [ 70.942244][ T3952] check_noncircular+0x2f8/0x3b0 [ 70.947186][ T3952] ? add_chain_block+0x850/0x850 [ 70.952126][ T3952] ? lockdep_lock+0x11f/0x2a0 [ 70.956818][ T3952] validate_chain+0x1646/0x58b0 [ 70.961675][ T3952] ? kfree+0xf1/0x270 [ 70.965663][ T3952] ? kasan_set_track+0x4b/0x80 [ 70.970442][ T3952] ? __x64_sys_openat+0x209/0x250 [ 70.975470][ T3952] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 70.981634][ T3952] ? reacquire_held_locks+0x660/0x660 [ 70.987008][ T3952] ? mark_lock+0x98/0x340 [ 70.991343][ T3952] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 70.997331][ T3952] ? mark_lock+0x98/0x340 [ 71.001665][ T3952] __lock_acquire+0x1295/0x1ff0 [ 71.006523][ T3952] lock_acquire+0x1db/0x4f0 [ 71.011120][ T3952] ? mnt_want_write+0x36/0x70 [ 71.015804][ T3952] ? read_lock_is_recursive+0x10/0x10 [ 71.021187][ T3952] ? __might_sleep+0xc0/0xc0 [ 71.025789][ T3952] ? apparmor_file_open+0x4f4/0x6f0 [ 71.030996][ T3952] sb_start_write+0x49/0x140 [ 71.035675][ T3952] ? mnt_want_write+0x36/0x70 [ 71.040349][ T3952] mnt_want_write+0x36/0x70 [ 71.044881][ T3952] ovl_maybe_copy_up+0xb1/0x100 [ 71.049737][ T3952] ovl_open+0x86/0x1f0 [ 71.053808][ T3952] do_dentry_open+0x60a/0xcc0 [ 71.058485][ T3952] ? ovl_mmap+0x400/0x400 [ 71.062820][ T3952] dentry_open+0xb5/0xf0 [ 71.067063][ T3952] ima_calc_file_hash+0x133/0x1680 [ 71.072173][ T3952] ? validate_chain+0x13b7/0x58b0 [ 71.077201][ T3952] ? mark_lock+0x98/0x340 [ 71.081530][ T3952] ? __lock_acquire+0x1295/0x1ff0 [ 71.086561][ T3952] ? ima_alloc_tfm+0x2b0/0x2b0 [ 71.091333][ T3952] ? ext4_xattr_get+0x46c/0x680 [ 71.096191][ T3952] ? __lock_acquire+0x1ff0/0x1ff0 [ 71.101309][ T3952] ? __up_read+0x2b9/0x690 [ 71.105729][ T3952] ? up_read+0x20/0x20 [ 71.109803][ T3952] ? ext4_xattr_get+0x46c/0x680 [ 71.114657][ T3952] ? vfs_getxattr+0x58c/0x5d0 [ 71.119340][ T3952] ima_collect_measurement+0x21a/0x460 [ 71.124807][ T3952] ? ima_get_action+0xb0/0xb0 [ 71.129489][ T3952] ? ima_get_cache_status+0x160/0x160 [ 71.134872][ T3952] process_measurement+0xb72/0x1510 [ 71.141127][ T3952] ? ima_file_mmap+0x170/0x170 [ 71.145923][ T3952] ? apparmor_task_getsecid+0x57/0xc0 [ 71.151307][ T3952] ima_file_check+0xeb/0x170 [ 71.155905][ T3952] ? do_dentry_open+0x7ec/0xcc0 [ 71.160760][ T3952] ? ima_bprm_check+0x290/0x290 [ 71.165620][ T3952] path_openat+0x2336/0x28d0 [ 71.170223][ T3952] ? do_filp_open+0x400/0x400 [ 71.174911][ T3952] do_filp_open+0x208/0x400 [ 71.179423][ T3952] ? vfs_tmpfile+0x290/0x290 [ 71.184037][ T3952] ? _raw_spin_unlock+0x24/0x40 [ 71.188903][ T3952] ? alloc_fd+0x441/0x4d0 [ 71.193243][ T3952] do_sys_openat2+0x10b/0x430 [ 71.197936][ T3952] ? read_lock_is_recursive+0x10/0x10 [ 71.203311][ T3952] ? do_sys_open+0x1c0/0x1c0 [ 71.207899][ T3952] ? do_raw_spin_unlock+0x137/0x8b0 [ 71.213099][ T3952] ? rcu_is_watching+0x11/0xa0 [ 71.217868][ T3952] __x64_sys_openat+0x209/0x250 [ 71.222725][ T3952] ? __ia32_sys_open+0x230/0x230 [ 71.227663][ T3952] ? syscall_enter_from_user_mode+0x2e/0x230 [ 71.233636][ T3952] ? lockdep_hardirqs_on+0x94/0x130 [ 71.238833][ T3952] ? syscall_enter_from_user_mode+0x2e/0x230 [ 71.244825][ T3952] do_syscall_64+0x3d/0xb0 [ 71.249253][ T3952] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 71.255223][ T3952] RIP: 0033:0x7fbadb2a60f9 [ 71.259642][ T3952] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.279335][ T3952] RSP: 002b:00007fbada618168 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.287750][ T3952] RAX: ffffffffffffffda RBX: 00007fbadb3c5f80 RCX: 00007fbadb2a60f9 [ 71.295720][ T3952] RDX: 0000000000000003 RSI: 0000000020000340 RDI: 0000000000000006 [ 71.303684][ T3952] RBP: 00007fbadb301b39 R08: 0000000000000000 R09: 0000000000000000 [ 71.311650][ T3952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.319609][ T3952] R13: 00007ffd44c2a91f R14: 00007fbada618300 R15: 0000000000022000 [ 71.327580][ T3952] [ 71.331794][ T2066] Bluetooth: hci0: command 0x0409 tx timeout [ 73.360001][ T3515] Bluetooth: hci0: command 0x041b tx timeout 2023/05/25 15:50:54 executed programs: 65 [ 75.449984][ T3515] Bluetooth: hci0: command 0x040f tx timeout [ 76.320175][ T1065] cfg80211: failed to load regulatory.db [ 77.519980][ T3515] Bluetooth: hci0: command 0x0419 tx timeout 2023/05/25 15:50:59 executed programs: 264