[ 71.195950][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.198826][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:51061' (ED25519) to the list of known hosts. 2025/05/29 18:56:34 ignoring optional flag "sandboxArg"="0" 2025/05/29 18:56:34 ignoring optional flag "type"="qemu" 2025/05/29 18:56:34 parsed 1 programs [ 72.401667][ T40] audit: type=1400 audit(1748544994.525:101): avc: denied { unlink } for pid=6208 comm="syz-executor" name="swap-file" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 73.301500][ T6208] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.840176][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.842916][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.871206][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.874664][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.596653][ T6282] chnl_net:caif_netlink_parms(): no params data found [ 74.675942][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.678974][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.682057][ T6282] bridge_slave_0: entered allmulticast mode [ 74.685794][ T6282] bridge_slave_0: entered promiscuous mode [ 74.691861][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.694579][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.697288][ T6282] bridge_slave_1: entered allmulticast mode [ 74.699882][ T6282] bridge_slave_1: entered promiscuous mode [ 74.736061][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.745438][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.784647][ T6282] team0: Port device team_slave_0 added [ 74.788423][ T6282] team0: Port device team_slave_1 added [ 74.837568][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.840358][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.853373][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.857932][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.860147][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.869044][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.970611][ T6282] hsr_slave_0: entered promiscuous mode [ 74.973118][ T6282] hsr_slave_1: entered promiscuous mode [ 75.511972][ T6282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.516496][ T6282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.520757][ T6282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.525381][ T6282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.571051][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.588464][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.595894][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.598333][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.604255][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.606540][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.717327][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.737790][ T6282] veth0_vlan: entered promiscuous mode [ 75.743925][ T6282] veth1_vlan: entered promiscuous mode [ 75.759467][ T6282] veth0_macvtap: entered promiscuous mode [ 75.763806][ T6282] veth1_macvtap: entered promiscuous mode [ 75.773190][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.780634][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.785214][ T6282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.787971][ T6282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.790594][ T6282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.793965][ T6282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.868864][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.950327][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.966513][ T6027] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.969464][ T6027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.972546][ T6027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.975839][ T6027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.978608][ T6027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.014083][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.078015][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/05/29 18:56:38 executed programs: 0 [ 76.266790][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.270849][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.275106][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.280460][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.284349][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.413668][ T6392] chnl_net:caif_netlink_parms(): no params data found [ 76.495565][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.498323][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.501366][ T6392] bridge_slave_0: entered allmulticast mode [ 76.507794][ T6392] bridge_slave_0: entered promiscuous mode [ 76.511695][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.513988][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.516283][ T6392] bridge_slave_1: entered allmulticast mode [ 76.518969][ T6392] bridge_slave_1: entered promiscuous mode [ 76.554751][ T6392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.559322][ T6392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.595195][ T6392] team0: Port device team_slave_0 added [ 76.598851][ T6392] team0: Port device team_slave_1 added [ 76.631226][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.635731][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.646453][ T6392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.656790][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.659447][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.667968][ T6392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.716594][ T6392] hsr_slave_0: entered promiscuous mode [ 76.719684][ T6392] hsr_slave_1: entered promiscuous mode [ 76.722859][ T6392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.725371][ T6392] Cannot create hsr debugfs directory [ 78.311915][ T6027] Bluetooth: hci0: command tx timeout [ 78.853760][ T13] bridge_slave_1: left allmulticast mode [ 78.856236][ T13] bridge_slave_1: left promiscuous mode [ 78.858793][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.863440][ T13] bridge_slave_0: left allmulticast mode [ 78.865408][ T13] bridge_slave_0: left promiscuous mode [ 78.867306][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.099505][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.104181][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.107821][ T13] bond0 (unregistering): Released all slaves [ 79.238030][ T13] hsr_slave_0: left promiscuous mode [ 79.240766][ T13] hsr_slave_1: left promiscuous mode [ 79.243503][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.246083][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.248806][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.251169][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.263684][ T13] veth1_macvtap: left promiscuous mode [ 79.265531][ T13] veth0_macvtap: left promiscuous mode [ 79.267382][ T13] veth1_vlan: left promiscuous mode [ 79.269076][ T13] veth0_vlan: left promiscuous mode [ 79.715572][ T13] team0 (unregistering): Port device team_slave_1 removed [ 79.763135][ T13] team0 (unregistering): Port device team_slave_0 removed [ 80.392270][ T6027] Bluetooth: hci0: command tx timeout [ 80.581354][ T6392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.588259][ T6392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.592307][ T6392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.596583][ T6392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.647419][ T6392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.656636][ T6392] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.673531][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.676188][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.686270][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.689244][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.903242][ T6392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.938226][ T6392] veth0_vlan: entered promiscuous mode [ 80.946472][ T6392] veth1_vlan: entered promiscuous mode [ 80.975048][ T6392] veth0_macvtap: entered promiscuous mode [ 80.990387][ T6392] veth1_macvtap: entered promiscuous mode [ 81.005729][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.013662][ T6392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.020366][ T6392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.025841][ T6392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.029264][ T6392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.032734][ T6392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079078][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.083093][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.097601][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.100521][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.125524][ T6502] loop0: detected capacity change from 0 to 128 [ 81.131670][ T40] audit: type=1400 audit(1748545003.255:102): avc: denied { mounton } for pid=6501 comm="syz-executor" path="/syzkaller-testdir52712441/syzkaller.8OFIAG/0/file0" dev="sda1" ino=2034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 81.136812][ T6502] ------------[ cut here ]------------ [ 81.142295][ T6502] UBSAN: shift-out-of-bounds in fs/befs/super.c:96:9 [ 81.144402][ T6502] shift exponent 3229888891 is too large for 32-bit type 'int' [ 81.147956][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz-executor Not tainted 6.15.0-syzkaller-ge0797d3b91de #0 PREEMPT(full) [ 81.147980][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.147990][ T6502] Call Trace: [ 81.147996][ T6502] [ 81.148003][ T6502] dump_stack_lvl+0x16c/0x1f0 [ 81.148028][ T6502] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 [ 81.148116][ T6502] befs_check_sb.cold+0x19/0x6f [ 81.148145][ T6502] befs_fill_super+0x512/0xc90 [ 81.148183][ T6502] get_tree_bdev_flags+0x389/0x620 [ 81.148209][ T6502] ? __pfx_befs_fill_super+0x10/0x10 [ 81.148236][ T6502] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 81.148265][ T6502] ? bpf_lsm_capable+0x9/0x10 [ 81.148289][ T6502] ? security_capable+0x7e/0x260 [ 81.148309][ T6502] vfs_get_tree+0x8b/0x340 [ 81.148330][ T6502] path_mount+0x14d4/0x1f70 [ 81.148350][ T6502] ? kmem_cache_free+0x2d1/0x4d0 [ 81.148374][ T6502] ? __pfx_path_mount+0x10/0x10 [ 81.148395][ T6502] ? putname+0x154/0x1a0 [ 81.148414][ T6502] __x64_sys_mount+0x28d/0x310 [ 81.148432][ T6502] ? __pfx___x64_sys_mount+0x10/0x10 [ 81.148458][ T6502] do_syscall_64+0xcd/0x4c0 [ 81.148478][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.148494][ T6502] RIP: 0033:0x7f382467e5ea [ 81.148509][ T6502] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 81.148525][ T6502] RSP: 002b:00007f382542def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.148541][ T6502] RAX: ffffffffffffffda RBX: 00007f382542df80 RCX: 00007f382467e5ea [ 81.148552][ T6502] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007f382542df40 [ 81.148562][ T6502] RBP: 0000000020000100 R08: 00007f382542df80 R09: 0000000003008001 [ 81.148572][ T6502] R10: 0000000003008001 R11: 0000000000000246 R12: 0000000020009e40 [ 81.148582][ T6502] R13: 00007f382542df40 R14: 0000000000009e24 R15: 00000000200001c0 [ 81.148605][ T6502] [ 81.148611][ T6502] ---[ end trace ]--- [ 81.228898][ T6502] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 81.231155][ T6502] CPU: 1 UID: 0 PID: 6502 Comm: syz-executor Not tainted 6.15.0-syzkaller-ge0797d3b91de #0 PREEMPT(full) [ 81.234609][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.237992][ T6502] Call Trace: [ 81.239058][ T6502] [ 81.240024][ T6502] dump_stack_lvl+0x3d/0x1f0 [ 81.241551][ T6502] panic+0x71c/0x800 [ 81.242827][ T6502] ? __pfx_panic+0x10/0x10 [ 81.244333][ T6502] ? __pfx__printk+0x10/0x10 [ 81.246004][ T6502] ? check_panic_on_warn+0x1f/0xb0 [ 81.247846][ T6502] check_panic_on_warn+0xab/0xb0 [ 81.249733][ T6502] __ubsan_handle_shift_out_of_bounds+0x2a6/0x420 [ 81.251785][ T6502] befs_check_sb.cold+0x19/0x6f [ 81.253335][ T6502] befs_fill_super+0x512/0xc90 [ 81.254808][ T6502] get_tree_bdev_flags+0x389/0x620 [ 81.256366][ T6502] ? __pfx_befs_fill_super+0x10/0x10 [ 81.258078][ T6502] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 81.259830][ T6502] ? bpf_lsm_capable+0x9/0x10 [ 81.261331][ T6502] ? security_capable+0x7e/0x260 [ 81.262889][ T6502] vfs_get_tree+0x8b/0x340 [ 81.264309][ T6502] path_mount+0x14d4/0x1f70 [ 81.265855][ T6502] ? kmem_cache_free+0x2d1/0x4d0 [ 81.267530][ T6502] ? __pfx_path_mount+0x10/0x10 [ 81.269194][ T6502] ? putname+0x154/0x1a0 [ 81.270649][ T6502] __x64_sys_mount+0x28d/0x310 [ 81.272264][ T6502] ? __pfx___x64_sys_mount+0x10/0x10 [ 81.274134][ T6502] do_syscall_64+0xcd/0x4c0 [ 81.276064][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.278470][ T6502] RIP: 0033:0x7f382467e5ea [ 81.280329][ T6502] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 81.288343][ T6502] RSP: 002b:00007f382542def8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.291784][ T6502] RAX: ffffffffffffffda RBX: 00007f382542df80 RCX: 00007f382467e5ea [ 81.295201][ T6502] RDX: 0000000020000100 RSI: 0000000020009e40 RDI: 00007f382542df40 [ 81.298469][ T6502] RBP: 0000000020000100 R08: 00007f382542df80 R09: 0000000003008001 [ 81.301561][ T6502] R10: 0000000003008001 R11: 0000000000000246 R12: 0000000020009e40 [ 81.304649][ T6502] R13: 00007f382542df40 R14: 0000000000009e24 R15: 00000000200001c0 [ 81.307866][ T6502] [ 81.309709][ T6502] Kernel Offset: disabled [ 81.311100][ T6502] Rebooting in 86400 seconds..