Warning: Permanently added '[localhost]:27540' (ED25519) to the list of known hosts. 2024/10/01 08:11:13 ignoring optional flag "sandboxArg"="0" 2024/10/01 08:11:13 ignoring optional flag "type"="qemu" 2024/10/01 08:11:13 parsed 1 programs [ 52.316002][ T39] audit: type=1400 audit(1727770273.729:132): avc: denied { getattr } for pid=5448 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.322206][ T39] audit: type=1400 audit(1727770273.729:133): avc: denied { read } for pid=5448 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.329351][ T39] audit: type=1400 audit(1727770273.729:134): avc: denied { open } for pid=5448 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.411776][ T39] audit: type=1400 audit(1727770273.829:135): avc: denied { unlink } for pid=5454 comm="syz-executor" name="swap-file" dev="sda1" ino=1931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.217045][ T5454] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/10/01 08:11:14 executed programs: 0 [ 53.250116][ T66] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.252639][ T66] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.254924][ T66] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.257544][ T66] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.259886][ T66] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.261888][ T66] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.266034][ T39] audit: type=1400 audit(1727770274.679:136): avc: denied { mounton } for pid=5459 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.344367][ T5459] chnl_net:caif_netlink_parms(): no params data found [ 53.395372][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.397341][ T5459] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.399748][ T5459] bridge_slave_0: entered allmulticast mode [ 53.402744][ T5459] bridge_slave_0: entered promiscuous mode [ 53.406561][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.409304][ T5459] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.411978][ T5459] bridge_slave_1: entered allmulticast mode [ 53.414986][ T5459] bridge_slave_1: entered promiscuous mode [ 53.435770][ T5459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.439992][ T5459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.460294][ T5459] team0: Port device team_slave_0 added [ 53.463697][ T5459] team0: Port device team_slave_1 added [ 53.481501][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.483364][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.490122][ T5459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.494260][ T5459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.496136][ T5459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.503927][ T5459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.525913][ T5459] hsr_slave_0: entered promiscuous mode [ 53.527783][ T5459] hsr_slave_1: entered promiscuous mode [ 53.969745][ T5459] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.973654][ T5459] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.981230][ T5459] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.985132][ T5459] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.994979][ T5459] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.997126][ T5459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.999301][ T5459] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.001183][ T5459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.035644][ T5459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.043879][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.046859][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.057672][ T5459] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.063312][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.065213][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.070832][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.072712][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.165076][ T5459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.181485][ T5459] veth0_vlan: entered promiscuous mode [ 54.185857][ T5459] veth1_vlan: entered promiscuous mode [ 54.197919][ T5459] veth0_macvtap: entered promiscuous mode [ 54.203292][ T5459] veth1_macvtap: entered promiscuous mode [ 54.212024][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.220855][ T5459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.224471][ T5459] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.226872][ T5459] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.229869][ T5459] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.232262][ T5459] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.267879][ T1215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.270273][ T1215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.284862][ T1215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.286954][ T1215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.316310][ T5517] jffs2: notice: (5517) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 54.316548][ T39] audit: type=1400 audit(1727770275.729:137): avc: denied { mounton } for pid=5516 comm="syz-executor.0" path="/syzkaller-testdir398571547/syzkaller.LxU9Ll/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 54.329477][ T39] audit: type=1400 audit(1727770275.739:138): avc: denied { mount } for pid=5516 comm="syz-executor.0" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.335396][ T39] audit: type=1400 audit(1727770275.739:139): avc: denied { write } for pid=5516 comm="syz-executor.0" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.336747][ T5459] ------------[ cut here ]------------ [ 54.341650][ T39] audit: type=1400 audit(1727770275.739:140): avc: denied { setattr } for pid=5516 comm="syz-executor.0" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.343245][ T5459] kernel BUG at fs/jffs2/nodelist.c:462! [ 54.349595][ T39] audit: type=1400 audit(1727770275.749:141): avc: denied { unmount } for pid=5459 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.351374][ T5459] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 54.359720][ T5459] CPU: 1 UID: 0 PID: 5459 Comm: syz-executor.0 Not tainted 6.12.0-rc1-syzkaller-ge32cde8d2bd7 #0 [ 54.362543][ T5459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.365341][ T5459] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 54.366903][ T5459] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 42 58 aa fe 90 <0f> 0b e8 ea cc 0b ff e9 5b fe ff ff e8 b0 cc 0b ff e9 59 ff ff ff [ 54.371853][ T5459] RSP: 0018:ffffc9000478fae8 EFLAGS: 00010293 [ 54.373430][ T5459] RAX: 0000000000000000 RBX: ffff888040546000 RCX: 0000000000000000 [ 54.375493][ T5459] RDX: ffff888024eb0000 RSI: ffffffff82e330ae RDI: ffff88802a897020 [ 54.377533][ T5459] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed10080a8c6d [ 54.379609][ T5459] R10: ffff88804054636b R11: 0000000000000000 R12: ffff8880366a0000 [ 54.381617][ T5459] R13: dffffc0000000000 R14: ffff88802a897000 R15: ffff8880366a00b8 [ 54.383650][ T5459] FS: 000055556a000480(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 54.385922][ T5459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.387623][ T5459] CR2: 000055556a009938 CR3: 00000000278c4000 CR4: 0000000000352ef0 [ 54.389936][ T5459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.392009][ T5459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.394039][ T5459] Call Trace: [ 54.394929][ T5459] [ 54.395759][ T5459] ? die+0x31/0x80 [ 54.396743][ T5459] ? do_trap+0x232/0x430 [ 54.397847][ T5459] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 54.399260][ T5459] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 54.400631][ T5459] ? do_error_trap+0xf4/0x230 [ 54.401849][ T5459] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 54.403225][ T5459] ? handle_invalid_op+0x34/0x40 [ 54.404525][ T5459] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 54.405894][ T5459] ? exc_invalid_op+0x2e/0x50 [ 54.407173][ T5459] ? asm_exc_invalid_op+0x1a/0x20 [ 54.408485][ T5459] ? jffs2_del_ino_cache+0x24e/0x2c0 [ 54.410084][ T5459] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 54.411472][ T5459] ? jffs2_del_ino_cache+0x24e/0x2c0 [ 54.412867][ T5459] jffs2_do_clear_inode+0x3bf/0x470 [ 54.414705][ T5459] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 54.416683][ T5459] evict+0x409/0x970 [ 54.418123][ T5459] ? __pfx_evict+0x10/0x10 [ 54.419711][ T5459] ? __pfx_lock_release+0x10/0x10 [ 54.421556][ T5459] dispose_list+0x117/0x1e0 [ 54.423201][ T5459] evict_inodes+0x39d/0x4b0 [ 54.424815][ T5459] ? __pfx_evict_inodes+0x10/0x10 [ 54.426620][ T5459] ? sync_blockdev+0x51/0x70 [ 54.428306][ T5459] generic_shutdown_super+0xb8/0x3d0 [ 54.430198][ T5459] kill_mtd_super+0x1d/0x80 [ 54.431843][ T5459] jffs2_kill_sb+0x7c/0xb0 [ 54.433229][ T5459] deactivate_locked_super+0xbe/0x1a0 [ 54.434640][ T5459] deactivate_super+0xde/0x100 [ 54.435933][ T5459] cleanup_mnt+0x222/0x450 [ 54.437111][ T5459] task_work_run+0x14e/0x250 [ 54.438325][ T5459] ? __pfx_task_work_run+0x10/0x10 [ 54.439690][ T5459] syscall_exit_to_user_mode+0x27b/0x2a0 [ 54.441157][ T5459] do_syscall_64+0xda/0x250 [ 54.442381][ T5459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.443933][ T5459] RIP: 0033:0x7efd8c27f117 [ 54.445263][ T5459] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 54.451985][ T5459] RSP: 002b:00007ffd322bfa38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 54.454842][ T5459] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efd8c27f117 [ 54.456904][ T5459] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd322bfaf0 [ 54.459035][ T5459] RBP: 00007ffd322bfaf0 R08: 0000000000000000 R09: 0000000000000000 [ 54.461197][ T5459] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd322c0bb0 [ 54.463213][ T5459] R13: 00007efd8c2c93b9 R14: 000000000000d3bb R15: 0000000000000003 [ 54.465249][ T5459] [ 54.466057][ T5459] Modules linked in: [ 54.467710][ T5459] ---[ end trace 0000000000000000 ]--- [ 54.471591][ T5459] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 54.473173][ T5459] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 42 58 aa fe 90 <0f> 0b e8 ea cc 0b ff e9 5b fe ff ff e8 b0 cc 0b ff e9 59 ff ff ff [ 54.478228][ T5459] RSP: 0018:ffffc9000478fae8 EFLAGS: 00010293 [ 54.480365][ T5459] RAX: 0000000000000000 RBX: ffff888040546000 RCX: 0000000000000000 [ 54.482496][ T5459] RDX: ffff888024eb0000 RSI: ffffffff82e330ae RDI: ffff88802a897020 [ 54.484572][ T5459] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed10080a8c6d [ 54.486629][ T5459] R10: ffff88804054636b R11: 0000000000000000 R12: ffff8880366a0000 [ 54.489092][ T5459] R13: dffffc0000000000 R14: ffff88802a897000 R15: ffff8880366a00b8 [ 54.491238][ T5459] FS: 000055556a000480(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 54.494297][ T5459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.496317][ T5459] CR2: 000055556a009938 CR3: 00000000278c4000 CR4: 0000000000352ef0 [ 54.498386][ T5459] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.500762][ T5459] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.502899][ T5459] Kernel panic - not syncing: Fatal exception [ 54.505069][ T5459] Kernel Offset: disabled [ 54.506217][ T5459] Rebooting in 86400 seconds..