Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. 2024/10/17 08:40:12 ignoring optional flag "sandboxArg"="0" 2024/10/17 08:40:12 ignoring optional flag "type"="gce" 2024/10/17 08:40:13 parsed 1 programs [ 101.408545][ T29] audit: type=1400 audit(1729154413.154:132): avc: denied { getattr } for pid=5522 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 101.470434][ T29] audit: type=1400 audit(1729154413.224:133): avc: denied { read write } for pid=5527 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 101.497321][ T29] audit: type=1400 audit(1729154413.224:134): avc: denied { open } for pid=5527 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 101.526638][ T29] audit: type=1400 audit(1729154413.284:135): avc: denied { unlink } for pid=5527 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 102.006596][ T29] audit: type=1400 audit(1729154413.754:136): avc: denied { relabelto } for pid=5529 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/10/17 08:40:15 executed programs: 0 [ 103.457478][ T5527] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.532215][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.541030][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.549562][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.557689][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.566514][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.574190][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.589644][ T29] audit: type=1400 audit(1729154415.334:137): avc: denied { mounton } for pid=5534 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 103.715446][ T5534] chnl_net:caif_netlink_parms(): no params data found [ 103.769180][ T5534] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.776286][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.783719][ T5534] bridge_slave_0: entered allmulticast mode [ 103.790661][ T5534] bridge_slave_0: entered promiscuous mode [ 103.798721][ T5534] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.805869][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.813709][ T5534] bridge_slave_1: entered allmulticast mode [ 103.820845][ T5534] bridge_slave_1: entered promiscuous mode [ 103.845925][ T5534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.857237][ T5534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.885441][ T5534] team0: Port device team_slave_0 added [ 103.893327][ T5534] team0: Port device team_slave_1 added [ 103.914816][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.922058][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.948040][ T5534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.960238][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.967227][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.993191][ T5534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.029634][ T5534] hsr_slave_0: entered promiscuous mode [ 104.035973][ T5534] hsr_slave_1: entered promiscuous mode [ 104.665419][ T5534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.676751][ T5534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.689653][ T5534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.701855][ T5534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.733546][ T5534] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.740779][ T5534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.748240][ T5534] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.755513][ T5534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.770563][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.780383][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.856979][ T5534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.884236][ T5534] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.897433][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.904799][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.931068][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.938870][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.160130][ T5534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.207989][ T5534] veth0_vlan: entered promiscuous mode [ 105.224376][ T5534] veth1_vlan: entered promiscuous mode [ 105.262570][ T5534] veth0_macvtap: entered promiscuous mode [ 105.274465][ T5534] veth1_macvtap: entered promiscuous mode [ 105.300374][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.315231][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.330332][ T5534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.340446][ T5534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.351662][ T5534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.360552][ T5534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.445125][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.461377][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.493359][ T2560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.503550][ T2560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.516674][ T29] audit: type=1400 audit(1729154417.264:138): avc: denied { mounton } for pid=5534 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 105.591347][ T5597] loop0: detected capacity change from 0 to 128 [ 105.614254][ T29] audit: type=1400 audit(1729154417.364:139): avc: denied { mounton } for pid=5596 comm="syz-executor.0" path="/root/syzkaller-testdir3254401843/syzkaller.3ub4AQ/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 105.646948][ T54] Bluetooth: hci0: command tx timeout [ 105.649364][ T5597] ------------[ cut here ]------------ [ 105.668927][ T5597] UBSAN: shift-out-of-bounds in fs/befs/super.c:96:9 [ 105.675845][ T5597] shift exponent 3229888891 is too large for 32-bit type 'int' [ 105.683939][ T5597] CPU: 0 UID: 0 PID: 5597 Comm: syz-executor.0 Not tainted 6.12.0-rc3-syzkaller-gc964ced77262 #0 [ 105.694514][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.704628][ T5597] Call Trace: [ 105.707924][ T5597] [ 105.710879][ T5597] dump_stack_lvl+0x16c/0x1f0 [ 105.715618][ T5597] __ubsan_handle_shift_out_of_bounds+0x2a5/0x480 [ 105.722103][ T5597] befs_check_sb.cold+0x19/0x6f [ 105.727000][ T5597] befs_fill_super+0x9e8/0x1140 [ 105.731893][ T5597] ? __pfx_befs_fill_super+0x10/0x10 [ 105.737207][ T5597] ? do_raw_spin_lock+0x12d/0x2c0 [ 105.742262][ T5597] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.747675][ T5597] ? sb_set_blocksize+0xf6/0x120 [ 105.752649][ T5597] ? setup_bdev_super+0x369/0x730 [ 105.757716][ T5597] ? __pfx_befs_fill_super+0x10/0x10 [ 105.763034][ T5597] mount_bdev+0x1e3/0x2d0 [ 105.767434][ T5597] ? __pfx_mount_bdev+0x10/0x10 [ 105.772350][ T5597] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 105.778009][ T5597] ? cap_capable+0x1cf/0x240 [ 105.782640][ T5597] ? __pfx_befs_mount+0x10/0x10 [ 105.787521][ T5597] legacy_get_tree+0x109/0x220 [ 105.792333][ T5597] vfs_get_tree+0x8f/0x380 [ 105.796791][ T5597] path_mount+0x14e6/0x1f20 [ 105.801350][ T5597] ? kmem_cache_free+0x152/0x4b0 [ 105.806332][ T5597] ? __pfx_path_mount+0x10/0x10 [ 105.811236][ T5597] ? putname+0x12e/0x170 [ 105.815512][ T5597] __x64_sys_mount+0x294/0x320 [ 105.820334][ T5597] ? __pfx___x64_sys_mount+0x10/0x10 [ 105.825766][ T5597] do_syscall_64+0xcd/0x250 [ 105.830318][ T5597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.836283][ T5597] RIP: 0033:0x7f8d2287f4aa [ 105.840739][ T5597] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 105.860377][ T5597] RSP: 002b:00007f8d2352aef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.868824][ T5597] RAX: ffffffffffffffda RBX: 00007f8d2352af80 RCX: 00007f8d2287f4aa [ 105.876818][ T5597] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007f8d2352af40 [ 105.884816][ T5597] RBP: 0000000020000100 R08: 00007f8d2352af80 R09: 0000000003008001 [ 105.892808][ T5597] R10: 0000000003008001 R11: 0000000000000246 R12: 0000000020009e40 [ 105.900801][ T5597] R13: 00007f8d2352af40 R14: 0000000000009e24 R15: 00000000200001c0 [ 105.908817][ T5597] [ 105.922742][ T5597] ---[ end trace ]--- [ 105.926786][ T5597] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 105.934017][ T5597] CPU: 1 UID: 0 PID: 5597 Comm: syz-executor.0 Not tainted 6.12.0-rc3-syzkaller-gc964ced77262 #0 [ 105.944660][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.954755][ T5597] Call Trace: [ 105.958071][ T5597] [ 105.961045][ T5597] dump_stack_lvl+0x3d/0x1f0 [ 105.965709][ T5597] panic+0x71d/0x800 [ 105.969678][ T5597] ? __pfx_panic+0x10/0x10 [ 105.974170][ T5597] ? __pfx__printk+0x10/0x10 [ 105.978829][ T5597] ? check_panic_on_warn+0x1f/0xb0 [ 105.984034][ T5597] check_panic_on_warn+0xab/0xb0 [ 105.989062][ T5597] __ubsan_handle_shift_out_of_bounds+0x2cc/0x480 [ 105.995572][ T5597] befs_check_sb.cold+0x19/0x6f [ 106.000508][ T5597] befs_fill_super+0x9e8/0x1140 [ 106.005466][ T5597] ? __pfx_befs_fill_super+0x10/0x10 [ 106.010919][ T5597] ? do_raw_spin_lock+0x12d/0x2c0 [ 106.016009][ T5597] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.021463][ T5597] ? sb_set_blocksize+0xf6/0x120 [ 106.026463][ T5597] ? setup_bdev_super+0x369/0x730 [ 106.031571][ T5597] ? __pfx_befs_fill_super+0x10/0x10 [ 106.036919][ T5597] mount_bdev+0x1e3/0x2d0 [ 106.041325][ T5597] ? __pfx_mount_bdev+0x10/0x10 [ 106.046268][ T5597] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 106.051965][ T5597] ? cap_capable+0x1cf/0x240 [ 106.056625][ T5597] ? __pfx_befs_mount+0x10/0x10 [ 106.061534][ T5597] legacy_get_tree+0x109/0x220 [ 106.066370][ T5597] vfs_get_tree+0x8f/0x380 [ 106.070865][ T5597] path_mount+0x14e6/0x1f20 [ 106.075452][ T5597] ? kmem_cache_free+0x152/0x4b0 [ 106.080449][ T5597] ? __pfx_path_mount+0x10/0x10 [ 106.085379][ T5597] ? putname+0x12e/0x170 [ 106.089724][ T5597] __x64_sys_mount+0x294/0x320 [ 106.094577][ T5597] ? __pfx___x64_sys_mount+0x10/0x10 [ 106.099964][ T5597] do_syscall_64+0xcd/0x250 [ 106.104540][ T5597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.110503][ T5597] RIP: 0033:0x7f8d2287f4aa [ 106.114980][ T5597] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 106.134641][ T5597] RSP: 002b:00007f8d2352aef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.143120][ T5597] RAX: ffffffffffffffda RBX: 00007f8d2352af80 RCX: 00007f8d2287f4aa [ 106.151145][ T5597] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007f8d2352af40 [ 106.159213][ T5597] RBP: 0000000020000100 R08: 00007f8d2352af80 R09: 0000000003008001 [ 106.167242][ T5597] R10: 0000000003008001 R11: 0000000000000246 R12: 0000000020009e40 [ 106.175282][ T5597] R13: 00007f8d2352af40 R14: 0000000000009e24 R15: 00000000200001c0 [ 106.183322][ T5597] [ 106.186895][ T5597] Kernel Offset: disabled [ 106.191272][ T5597] Rebooting in 86400 seconds..