Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 2023/12/12 13:30:40 ignoring optional flag "sandboxArg"="0" 2023/12/12 13:30:41 parsed 1 programs [ 109.823231][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 109.823248][ T27] audit: type=1400 audit(1702387841.137:203): avc: denied { getattr } for pid=5406 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.854292][ T27] audit: type=1400 audit(1702387841.137:204): avc: denied { read } for pid=5406 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.876253][ T27] audit: type=1400 audit(1702387841.137:205): avc: denied { open } for pid=5406 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.901846][ T27] audit: type=1400 audit(1702387841.217:206): avc: denied { mounton } for pid=5411 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 109.927801][ T27] audit: type=1400 audit(1702387841.217:207): avc: denied { mount } for pid=5411 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 109.954763][ T27] audit: type=1400 audit(1702387841.247:208): avc: denied { read write } for pid=5411 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 109.981251][ T27] audit: type=1400 audit(1702387841.247:209): avc: denied { open } for pid=5411 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 110.032455][ T27] audit: type=1400 audit(1702387841.337:210): avc: denied { unlink } for pid=5411 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 110.545835][ T27] audit: type=1400 audit(1702387841.857:211): avc: denied { relabelto } for pid=5413 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/12/12 13:30:43 executed programs: 0 [ 111.942985][ T5411] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.005928][ T4454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.013898][ T4454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.022942][ T4454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.031026][ T4454] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.038934][ T4454] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 112.046368][ T4454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.066928][ T27] audit: type=1400 audit(1702387843.377:212): avc: denied { mounton } for pid=5417 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.217967][ T5417] chnl_net:caif_netlink_parms(): no params data found [ 112.296089][ T5417] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.303474][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.310903][ T5417] bridge_slave_0: entered allmulticast mode [ 112.318267][ T5417] bridge_slave_0: entered promiscuous mode [ 112.327011][ T5417] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.334586][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.341824][ T5417] bridge_slave_1: entered allmulticast mode [ 112.349752][ T5417] bridge_slave_1: entered promiscuous mode [ 112.383442][ T5417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.396528][ T5417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.435676][ T5417] team0: Port device team_slave_0 added [ 112.444582][ T5417] team0: Port device team_slave_1 added [ 112.475891][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.482955][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.509549][ T5417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.524866][ T5417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.531825][ T5417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.557850][ T5417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.605017][ T5417] hsr_slave_0: entered promiscuous mode [ 112.611617][ T5417] hsr_slave_1: entered promiscuous mode [ 113.588847][ T5417] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.612131][ T5417] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.625024][ T5417] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.639105][ T5417] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.780502][ T5417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.819389][ T5417] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.838096][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.845423][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.874918][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.882204][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.075137][ T4454] Bluetooth: hci0: command 0x0409 tx timeout [ 114.175632][ T5417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.257726][ T5417] veth0_vlan: entered promiscuous mode [ 114.279445][ T5417] veth1_vlan: entered promiscuous mode [ 114.344876][ T5417] veth0_macvtap: entered promiscuous mode [ 114.357916][ T5417] veth1_macvtap: entered promiscuous mode [ 114.394034][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.415766][ T5417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.437216][ T5417] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.447720][ T5417] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.458247][ T5417] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.469457][ T5417] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.613863][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.621820][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.701787][ T2806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.721374][ T2806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.251027][ T5484] loop0: detected capacity change from 0 to 32768 [ 115.264811][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 115.264826][ T27] audit: type=1400 audit(1702387846.577:214): avc: denied { mounton } for pid=5482 comm="syz-executor.0" path="/root/syzkaller-testdir1407183460/syzkaller.JQEqFL/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 115.298140][ T5484] ================================================================================ [ 115.298355][ T5484] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:2887:37 [ 115.298379][ T5484] index -28 is out of range for type 'dtslot [128]' [ 115.298394][ T5484] CPU: 1 PID: 5484 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0 [ 115.298420][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 115.298435][ T5484] Call Trace: [ 115.298443][ T5484] [ 115.298452][ T5484] dump_stack_lvl+0x125/0x1b0 [ 115.298489][ T5484] __ubsan_handle_out_of_bounds+0x111/0x150 [ 115.298525][ T5484] jfs_readdir+0x37a2/0x4320 [ 115.298561][ T5484] ? mutex_destroy+0x35/0x100 [ 115.298592][ T5484] ? dtDelete+0x33e0/0x33e0 [ 115.373546][ T5484] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 115.379555][ T5484] ? __down_write_common+0x17a/0x1400 [ 115.384938][ T5484] ? preempt_count_sub+0x160/0x160 [ 115.390402][ T5484] ? down_read_killable+0xcc/0x380 [ 115.395536][ T5484] ? dtDelete+0x33e0/0x33e0 [ 115.400050][ T5484] wrap_directory_iterator+0xa5/0xe0 [ 115.405347][ T5484] iterate_dir+0x1e5/0x5b0 [ 115.409942][ T5484] __x64_sys_getdents64+0x14f/0x2e0 [ 115.415239][ T5484] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 115.420618][ T5484] ? folio_memcg_unlock+0x240/0x240 [ 115.425930][ T5484] ? fillonedir+0x400/0x400 [ 115.430445][ T5484] ? syscall_enter_from_user_mode+0x7f/0x120 [ 115.436439][ T5484] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.441659][ T5484] do_syscall_64+0x40/0x110 [ 115.446174][ T5484] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 115.452175][ T5484] RIP: 0033:0x7f604027cae9 [ 115.456594][ T5484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 115.476386][ T5484] RSP: 002b:00007f60410530c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 115.484809][ T5484] RAX: ffffffffffffffda RBX: 00007f604039bf80 RCX: 00007f604027cae9 [ 115.492870][ T5484] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004 [ 115.500936][ T5484] RBP: 00007f60402c847a R08: 0000000000000000 R09: 0000000000000000 [ 115.508909][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.516892][ T5484] R13: 000000000000000b R14: 00007f604039bf80 R15: 00007ffce87e3718 [ 115.524954][ T5484] [ 115.556974][ T27] audit: type=1400 audit(1702387846.607:215): avc: denied { mount } for pid=5482 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 115.587438][ T5484] ================================================================================ [ 115.607523][ T5484] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 115.614795][ T5484] CPU: 1 PID: 5484 Comm: syz-executor.0 Not tainted 6.7.0-rc5-syzkaller-00014-g26aff849438c #0 [ 115.625171][ T5484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 115.635342][ T5484] Call Trace: [ 115.638665][ T5484] [ 115.641616][ T5484] dump_stack_lvl+0xd9/0x1b0 [ 115.646248][ T5484] panic+0x6dc/0x790 [ 115.650213][ T5484] ? mark_held_locks+0x9f/0xe0 [ 115.655189][ T5484] ? panic_smp_self_stop+0xa0/0xa0 [ 115.660338][ T5484] ? kmsg_dump_get_line+0x350/0x350 [ 115.665585][ T5484] ? check_panic_on_warn+0x1f/0xb0 [ 115.670737][ T5484] check_panic_on_warn+0xab/0xb0 [ 115.675716][ T5484] __ubsan_handle_out_of_bounds+0x139/0x150 [ 115.681647][ T5484] jfs_readdir+0x37a2/0x4320 [ 115.686285][ T5484] ? mutex_destroy+0x35/0x100 [ 115.690998][ T5484] ? dtDelete+0x33e0/0x33e0 [ 115.695551][ T5484] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 115.701662][ T5484] ? __down_write_common+0x17a/0x1400 [ 115.707080][ T5484] ? preempt_count_sub+0x160/0x160 [ 115.712219][ T5484] ? down_read_killable+0xcc/0x380 [ 115.717367][ T5484] ? dtDelete+0x33e0/0x33e0 [ 115.721993][ T5484] wrap_directory_iterator+0xa5/0xe0 [ 115.727309][ T5484] iterate_dir+0x1e5/0x5b0 [ 115.731772][ T5484] __x64_sys_getdents64+0x14f/0x2e0 [ 115.737023][ T5484] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 115.742352][ T5484] ? folio_memcg_unlock+0x240/0x240 [ 115.747682][ T5484] ? fillonedir+0x400/0x400 [ 115.752227][ T5484] ? syscall_enter_from_user_mode+0x7f/0x120 [ 115.758511][ T5484] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.763744][ T5484] do_syscall_64+0x40/0x110 [ 115.768367][ T5484] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 115.774392][ T5484] RIP: 0033:0x7f604027cae9 [ 115.778848][ T5484] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 115.798612][ T5484] RSP: 002b:00007f60410530c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 115.807530][ T5484] RAX: ffffffffffffffda RBX: 00007f604039bf80 RCX: 00007f604027cae9 [ 115.815664][ T5484] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004 [ 115.823873][ T5484] RBP: 00007f60402c847a R08: 0000000000000000 R09: 0000000000000000 [ 115.832320][ T5484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.840675][ T5484] R13: 000000000000000b R14: 00007f604039bf80 R15: 00007ffce87e3718 [ 115.848794][ T5484] [ 115.852060][ T5484] Kernel Offset: disabled [ 115.856636][ T5484] Rebooting in 86400 seconds..