Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. 2023/09/18 15:32:16 ignoring optional flag "sandboxArg"="0" 2023/09/18 15:32:17 parsed 1 programs [ 106.360614][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 106.360630][ T26] audit: type=1400 audit(1695051137.231:201): avc: denied { getattr } for pid=5383 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.391033][ T26] audit: type=1400 audit(1695051137.231:202): avc: denied { read } for pid=5383 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.412462][ T26] audit: type=1400 audit(1695051137.231:203): avc: denied { open } for pid=5383 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2023/09/18 15:32:17 executed programs: 0 [ 106.451577][ T26] audit: type=1400 audit(1695051137.321:204): avc: denied { mounton } for pid=5388 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 106.479441][ T26] audit: type=1400 audit(1695051137.321:205): avc: denied { mount } for pid=5388 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 106.582855][ T5042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.590983][ T5042] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.599175][ T5042] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.607690][ T5042] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.615433][ T5042] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.622696][ T5042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.644207][ T26] audit: type=1400 audit(1695051137.511:206): avc: denied { mounton } for pid=5396 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.791134][ T5396] chnl_net:caif_netlink_parms(): no params data found [ 106.867144][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.874492][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.882127][ T5396] bridge_slave_0: entered allmulticast mode [ 106.889303][ T5396] bridge_slave_0: entered promiscuous mode [ 106.897815][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.905682][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.912955][ T5396] bridge_slave_1: entered allmulticast mode [ 106.920471][ T5396] bridge_slave_1: entered promiscuous mode [ 106.953898][ T5396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.967113][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.005451][ T5396] team0: Port device team_slave_0 added [ 107.015914][ T5396] team0: Port device team_slave_1 added [ 107.047071][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.054050][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.080114][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.094086][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.101223][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.127384][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.176506][ T5396] hsr_slave_0: entered promiscuous mode [ 107.183035][ T5396] hsr_slave_1: entered promiscuous mode [ 108.143198][ T5396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.157807][ T5396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.172338][ T5396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.189184][ T5396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.346824][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.381026][ T5396] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.400537][ T5038] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.407879][ T5038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.428913][ T5038] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.436167][ T5038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.594084][ T26] audit: type=1400 audit(1695051139.461:207): avc: denied { sys_module } for pid=5396 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 108.667121][ T5042] Bluetooth: hci0: command 0x0409 tx timeout [ 108.771963][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.842625][ T5396] veth0_vlan: entered promiscuous mode [ 108.861958][ T5396] veth1_vlan: entered promiscuous mode [ 108.909294][ T5396] veth0_macvtap: entered promiscuous mode [ 108.936041][ T5396] veth1_macvtap: entered promiscuous mode [ 108.966324][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.994170][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.012442][ T5396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.025806][ T5396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.034558][ T5396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.046630][ T5396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.170680][ T5456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.199258][ T5456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.266771][ T5456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.274640][ T5456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.293812][ T26] audit: type=1400 audit(1695051140.161:208): avc: denied { mounton } for pid=5396 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 109.372546][ T5462] ------------[ cut here ]------------ [ 109.378443][ T5462] WARNING: CPU: 1 PID: 5462 at lib/iov_iter.c:385 _copy_from_iter+0x2c2/0x1270 [ 109.387853][ T5462] Modules linked in: [ 109.391781][ T5462] CPU: 1 PID: 5462 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-gce9ecca0238b #0 [ 109.402082][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 109.412277][ T5462] RIP: 0010:_copy_from_iter+0x2c2/0x1270 [ 109.418031][ T5462] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 99 6b 64 fd be 85 01 00 00 48 c7 c7 e0 9a e8 8a e8 f8 9b a3 fd e9 48 fe ff ff e8 7e 6b 64 fd <0f> 0b 45 31 ff eb 88 e8 72 6b 64 fd 31 ff 89 ee e8 99 66 64 fd 40 [ 109.438529][ T5462] RSP: 0018:ffffc9000386f650 EFLAGS: 00010293 [ 109.444647][ T5462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 109.452866][ T5462] RDX: ffff88802221a0c0 RSI: ffffffff842259d2 RDI: 0000000000000001 [ 109.461256][ T5462] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 109.469359][ T5462] R10: 0000000000000000 R11: ffffffff81db8595 R12: 0000000000000021 [ 109.477668][ T5462] R13: ffffc9000386f898 R14: 0000000000000021 R15: 0000160000000000 [ 109.485704][ T5462] FS: 00007fc0f18f86c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 109.494675][ T5462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.501394][ T5462] CR2: 00007fc0f0d980c0 CR3: 000000001bdf6000 CR4: 00000000003506e0 [ 109.509469][ T5462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.517544][ T5462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.526742][ T5462] Call Trace: [ 109.530142][ T5462] [ 109.533161][ T5462] ? show_regs+0x8f/0xa0 [ 109.535039][ T26] audit: type=1400 audit(1695051140.241:209): avc: denied { read } for pid=5461 comm="syz-executor.0" name="sg0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.537626][ T5462] ? __warn+0xe6/0x380 [ 109.565755][ T5462] ? _copy_from_iter+0x2c2/0x1270 [ 109.568069][ T26] audit: type=1400 audit(1695051140.241:210): avc: denied { open } for pid=5461 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 109.570795][ T5462] ? report_bug+0x3bc/0x580 [ 109.570836][ T5462] ? handle_bug+0x3c/0x70 [ 109.604597][ T5462] ? exc_invalid_op+0x17/0x40 [ 109.609383][ T5462] ? asm_exc_invalid_op+0x1a/0x20 [ 109.614443][ T5462] ? kasan_set_track+0x25/0x30 [ 109.619314][ T5462] ? _copy_from_iter+0x2c2/0x1270 [ 109.624377][ T5462] ? _copy_from_iter+0x2c2/0x1270 [ 109.630100][ T5462] ? iov_iter_extract_pages+0x19b0/0x19b0 [ 109.636495][ T5462] ? bio_add_hw_page+0x1b9/0x430 [ 109.641573][ T5462] ? bio_add_pc_page+0xb5/0x100 [ 109.646539][ T5462] ? bio_add_hw_page+0x430/0x430 [ 109.651523][ T5462] copy_page_from_iter+0xa5/0x120 [ 109.656675][ T5462] blk_rq_map_user_iov+0x9d5/0x1860 [ 109.661923][ T5462] ? bio_map_user_iov+0xa70/0xa70 [ 109.667036][ T5462] ? sg_common_write.constprop.0+0xc0e/0x1c90 [ 109.673141][ T5462] ? __mutex_lock+0x25b/0x1340 [ 109.678111][ T5462] ? find_held_lock+0x2d/0x110 [ 109.682997][ T5462] blk_rq_map_user_io+0x202/0x230 [ 109.688157][ T5462] ? blk_rq_map_user_io.part.0+0x2c0/0x2c0 [ 109.694198][ T5462] ? bit_wait_io_timeout+0x160/0x160 [ 109.699622][ T5462] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 109.706043][ T5462] sg_common_write.constprop.0+0xd61/0x1c90 [ 109.712155][ T5462] ? sg_read+0x1590/0x1590 [ 109.717143][ T5462] ? security_capable+0x92/0xc0 [ 109.722049][ T5462] sg_new_write.isra.0+0x546/0xaa0 [ 109.727234][ T5462] ? sg_common_write.constprop.0+0x1c90/0x1c90 [ 109.734014][ T5462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.740166][ T5462] ? do_vfs_ioctl+0x379/0x1920 [ 109.745113][ T5462] sg_ioctl+0x1814/0x2760 [ 109.749511][ T5462] ? selinux_bprm_creds_for_exec+0xb30/0xb30 [ 109.755583][ T5462] ? sg_new_write.isra.0+0xaa0/0xaa0 [ 109.760905][ T5462] ? selinux_file_ioctl+0x17d/0x270 [ 109.766284][ T5462] ? selinux_file_ioctl+0xb5/0x270 [ 109.771437][ T5462] ? sg_new_write.isra.0+0xaa0/0xaa0 [ 109.776903][ T5462] __x64_sys_ioctl+0x18f/0x210 [ 109.781701][ T5462] do_syscall_64+0x38/0xb0 [ 109.786478][ T5462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 109.793028][ T5462] RIP: 0033:0x7fc0f0c7c8d9 [ 109.797585][ T5462] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 109.817297][ T5462] RSP: 002b:00007fc0f18f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.825801][ T5462] RAX: ffffffffffffffda RBX: 00007fc0f0d9bf80 RCX: 00007fc0f0c7c8d9 [ 109.834683][ T5462] RDX: 0000000020000180 RSI: 0000000000002285 RDI: 0000000000000003 [ 109.842848][ T5462] RBP: 00007fc0f0cd8b20 R08: 0000000000000000 R09: 0000000000000000 [ 109.851238][ T5462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.859326][ T5462] R13: 000000000000000b R14: 00007fc0f0d9bf80 R15: 00007ffe46480b38 [ 109.867683][ T5462] [ 109.870739][ T5462] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.878048][ T5462] CPU: 1 PID: 5462 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-gce9ecca0238b #0 [ 109.887955][ T5462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 109.898022][ T5462] Call Trace: [ 109.901301][ T5462] [ 109.904274][ T5462] dump_stack_lvl+0xd9/0x1b0 [ 109.908880][ T5462] panic+0x6a6/0x750 [ 109.912930][ T5462] ? panic_smp_self_stop+0xa0/0xa0 [ 109.918049][ T5462] ? _copy_from_iter+0x2c2/0x1270 [ 109.923335][ T5462] check_panic_on_warn+0xab/0xb0 [ 109.928280][ T5462] __warn+0xf2/0x380 [ 109.932175][ T5462] ? _copy_from_iter+0x2c2/0x1270 [ 109.937198][ T5462] report_bug+0x3bc/0x580 [ 109.941539][ T5462] handle_bug+0x3c/0x70 [ 109.945699][ T5462] exc_invalid_op+0x17/0x40 [ 109.950204][ T5462] asm_exc_invalid_op+0x1a/0x20 [ 109.955055][ T5462] RIP: 0010:_copy_from_iter+0x2c2/0x1270 [ 109.960685][ T5462] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 99 6b 64 fd be 85 01 00 00 48 c7 c7 e0 9a e8 8a e8 f8 9b a3 fd e9 48 fe ff ff e8 7e 6b 64 fd <0f> 0b 45 31 ff eb 88 e8 72 6b 64 fd 31 ff 89 ee e8 99 66 64 fd 40 [ 109.980382][ T5462] RSP: 0018:ffffc9000386f650 EFLAGS: 00010293 [ 109.986453][ T5462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 109.994525][ T5462] RDX: ffff88802221a0c0 RSI: ffffffff842259d2 RDI: 0000000000000001 [ 110.002527][ T5462] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 110.010516][ T5462] R10: 0000000000000000 R11: ffffffff81db8595 R12: 0000000000000021 [ 110.018494][ T5462] R13: ffffc9000386f898 R14: 0000000000000021 R15: 0000160000000000 [ 110.026661][ T5462] ? kasan_set_track+0x25/0x30 [ 110.031488][ T5462] ? _copy_from_iter+0x2c2/0x1270 [ 110.036534][ T5462] ? iov_iter_extract_pages+0x19b0/0x19b0 [ 110.042277][ T5462] ? bio_add_hw_page+0x1b9/0x430 [ 110.047403][ T5462] ? bio_add_pc_page+0xb5/0x100 [ 110.052364][ T5462] ? bio_add_hw_page+0x430/0x430 [ 110.057417][ T5462] copy_page_from_iter+0xa5/0x120 [ 110.062590][ T5462] blk_rq_map_user_iov+0x9d5/0x1860 [ 110.067948][ T5462] ? bio_map_user_iov+0xa70/0xa70 [ 110.073052][ T5462] ? sg_common_write.constprop.0+0xc0e/0x1c90 [ 110.079159][ T5462] ? __mutex_lock+0x25b/0x1340 [ 110.083957][ T5462] ? find_held_lock+0x2d/0x110 [ 110.088738][ T5462] blk_rq_map_user_io+0x202/0x230 [ 110.093785][ T5462] ? blk_rq_map_user_io.part.0+0x2c0/0x2c0 [ 110.099703][ T5462] ? bit_wait_io_timeout+0x160/0x160 [ 110.105044][ T5462] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 110.110954][ T5462] sg_common_write.constprop.0+0xd61/0x1c90 [ 110.116863][ T5462] ? sg_read+0x1590/0x1590 [ 110.121342][ T5462] ? security_capable+0x92/0xc0 [ 110.126202][ T5462] sg_new_write.isra.0+0x546/0xaa0 [ 110.131357][ T5462] ? sg_common_write.constprop.0+0x1c90/0x1c90 [ 110.137543][ T5462] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.143467][ T5462] ? do_vfs_ioctl+0x379/0x1920 [ 110.148256][ T5462] sg_ioctl+0x1814/0x2760 [ 110.152607][ T5462] ? selinux_bprm_creds_for_exec+0xb30/0xb30 [ 110.158600][ T5462] ? sg_new_write.isra.0+0xaa0/0xaa0 [ 110.163916][ T5462] ? selinux_file_ioctl+0x17d/0x270 [ 110.169240][ T5462] ? selinux_file_ioctl+0xb5/0x270 [ 110.174380][ T5462] ? sg_new_write.isra.0+0xaa0/0xaa0 [ 110.179775][ T5462] __x64_sys_ioctl+0x18f/0x210 [ 110.184640][ T5462] do_syscall_64+0x38/0xb0 [ 110.189061][ T5462] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 110.194966][ T5462] RIP: 0033:0x7fc0f0c7c8d9 [ 110.199555][ T5462] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 110.219858][ T5462] RSP: 002b:00007fc0f18f80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.228299][ T5462] RAX: ffffffffffffffda RBX: 00007fc0f0d9bf80 RCX: 00007fc0f0c7c8d9 [ 110.236269][ T5462] RDX: 0000000020000180 RSI: 0000000000002285 RDI: 0000000000000003 [ 110.244237][ T5462] RBP: 00007fc0f0cd8b20 R08: 0000000000000000 R09: 0000000000000000 [ 110.252207][ T5462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.260184][ T5462] R13: 000000000000000b R14: 00007fc0f0d9bf80 R15: 00007ffe46480b38 [ 110.268190][ T5462] [ 110.271618][ T5462] Kernel Offset: disabled [ 110.276347][ T5462] Rebooting in 86400 seconds..