Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. 2024/09/03 07:20:58 ignoring optional flag "sandboxArg"="0" 2024/09/03 07:20:58 parsed 1 programs [ 103.479793][ T29] audit: type=1400 audit(1725348058.792:132): avc: denied { getattr } for pid=5515 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 103.531600][ T29] audit: type=1400 audit(1725348058.842:133): avc: denied { read write } for pid=5520 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 103.558448][ T29] audit: type=1400 audit(1725348058.842:134): avc: denied { open } for pid=5520 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 103.599599][ T29] audit: type=1400 audit(1725348058.912:135): avc: denied { unlink } for pid=5520 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 104.101551][ T29] audit: type=1400 audit(1725348059.412:136): avc: denied { relabelto } for pid=5522 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/09/03 07:21:00 executed programs: 0 [ 105.455797][ T5520] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.516606][ T4613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.525154][ T4613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.533262][ T4613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.541758][ T4613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.550236][ T4613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.558556][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.578421][ T29] audit: type=1400 audit(1725348060.882:137): avc: denied { mounton } for pid=5530 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 105.721830][ T5530] chnl_net:caif_netlink_parms(): no params data found [ 105.792896][ T5530] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.800209][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.807465][ T5530] bridge_slave_0: entered allmulticast mode [ 105.814464][ T5530] bridge_slave_0: entered promiscuous mode [ 105.822917][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.830596][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.837902][ T5530] bridge_slave_1: entered allmulticast mode [ 105.844890][ T5530] bridge_slave_1: entered promiscuous mode [ 105.875354][ T5530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.887490][ T5530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.923818][ T5530] team0: Port device team_slave_0 added [ 105.932419][ T5530] team0: Port device team_slave_1 added [ 105.958794][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.965874][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.992041][ T5530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.004703][ T5530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.011873][ T5530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.038403][ T5530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.081131][ T5530] hsr_slave_0: entered promiscuous mode [ 106.088309][ T5530] hsr_slave_1: entered promiscuous mode [ 106.815659][ T5530] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.828343][ T5530] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.840232][ T5530] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.852609][ T5530] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.986947][ T5530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.020346][ T5530] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.039688][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.046904][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.067006][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.074302][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.360942][ T5530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.432540][ T5530] veth0_vlan: entered promiscuous mode [ 107.450570][ T5530] veth1_vlan: entered promiscuous mode [ 107.506696][ T5530] veth0_macvtap: entered promiscuous mode [ 107.523185][ T5530] veth1_macvtap: entered promiscuous mode [ 107.555544][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.582579][ T5530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.600749][ T5530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.609565][ T5530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.621494][ T5530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.631852][ T4613] Bluetooth: hci0: command tx timeout [ 107.632207][ T5530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.769923][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.780359][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.832080][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.842535][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.858121][ T29] audit: type=1400 audit(1725348063.172:138): avc: denied { mounton } for pid=5530 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 107.960792][ T29] audit: type=1400 audit(1725348063.272:139): avc: denied { mounton } for pid=5589 comm="syz-executor.0" path="/root/syzkaller-testdir2306357574/syzkaller.CfsT4w/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 107.962561][ T5590] jffs2: notice: (5590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.016634][ T29] audit: type=1400 audit(1725348063.322:140): avc: denied { mount } for pid=5589 comm="syz-executor.0" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.049901][ T29] audit: type=1400 audit(1725348063.362:141): avc: denied { unmount } for pid=5530 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.114893][ T5598] jffs2: notice: (5598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.152261][ T5530] ------------[ cut here ]------------ [ 108.158945][ T5530] kernel BUG at fs/jffs2/nodelist.c:462! [ 108.166476][ T5530] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 108.173461][ T5530] CPU: 1 UID: 0 PID: 5530 Comm: syz-executor.0 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 108.184506][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 108.194586][ T5530] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 108.200536][ T5530] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 62 f6 ad fe 90 <0f> 0b e8 da b8 0c ff e9 5b fe ff ff e8 a0 b8 0c ff e9 59 ff ff ff [ 108.220268][ T5530] RSP: 0018:ffffc900046efae8 EFLAGS: 00010293 [ 108.226358][ T5530] RAX: 0000000000000000 RBX: ffff888023924000 RCX: 0000000000000000 [ 108.234439][ T5530] RDX: ffff888078460000 RSI: ffffffff82ddc9ee RDI: ffff888027c2c060 [ 108.242515][ T5530] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed100472486d [ 108.250683][ T5530] R10: ffff88802392436b R11: 0000000000000000 R12: ffff888077b905d0 [ 108.258674][ T5530] R13: dffffc0000000000 R14: ffff888027c2c040 R15: ffff888077b90688 [ 108.266665][ T5530] FS: 0000555589224480(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 108.275623][ T5530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.282230][ T5530] CR2: 000055558922d938 CR3: 00000000342ee000 CR4: 00000000003506f0 [ 108.290225][ T5530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.298216][ T5530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.306206][ T5530] Call Trace: [ 108.309492][ T5530] [ 108.312436][ T5530] ? show_regs+0x8c/0xa0 [ 108.316718][ T5530] ? die+0x36/0xa0 [ 108.320468][ T5530] ? do_trap+0x232/0x430 [ 108.324734][ T5530] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 108.330049][ T5530] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 108.335357][ T5530] ? do_error_trap+0xf4/0x230 [ 108.340065][ T5530] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 108.345375][ T5530] ? handle_invalid_op+0x34/0x40 [ 108.350344][ T5530] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 108.355703][ T5530] ? exc_invalid_op+0x2e/0x50 [ 108.360410][ T5530] ? asm_exc_invalid_op+0x1a/0x20 [ 108.365459][ T5530] ? jffs2_del_ino_cache+0x24e/0x2c0 [ 108.370946][ T5530] ? jffs2_del_ino_cache+0x24f/0x2c0 [ 108.376268][ T5530] ? jffs2_del_ino_cache+0x24e/0x2c0 [ 108.381594][ T5530] jffs2_do_clear_inode+0x3bf/0x470 [ 108.386910][ T5530] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 108.392399][ T5530] evict+0x398/0x8c0 [ 108.396317][ T5530] ? find_held_lock+0x2d/0x110 [ 108.401108][ T5530] ? __pfx_evict+0x10/0x10 [ 108.405558][ T5530] ? evict_inodes+0x344/0x450 [ 108.410267][ T5530] ? __pfx_lock_release+0x10/0x10 [ 108.415330][ T5530] dispose_list+0x117/0x1e0 [ 108.419867][ T5530] evict_inodes+0x34e/0x450 [ 108.424399][ T5530] ? __pfx_evict_inodes+0x10/0x10 [ 108.429452][ T5530] ? sync_blockdev+0x51/0x70 [ 108.434080][ T5530] generic_shutdown_super+0xb5/0x3d0 [ 108.439401][ T5530] kill_mtd_super+0x1d/0x80 [ 108.443938][ T5530] jffs2_kill_sb+0x7c/0xb0 [ 108.448384][ T5530] deactivate_locked_super+0xbe/0x1a0 [ 108.453779][ T5530] deactivate_super+0xde/0x100 [ 108.458566][ T5530] cleanup_mnt+0x222/0x450 [ 108.463018][ T5530] task_work_run+0x14e/0x250 [ 108.467635][ T5530] ? __pfx_task_work_run+0x10/0x10 [ 108.472775][ T5530] syscall_exit_to_user_mode+0x27b/0x2a0 [ 108.478446][ T5530] do_syscall_64+0xda/0x250 [ 108.482985][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.488900][ T5530] RIP: 0033:0x7f4bb867f117 [ 108.493340][ T5530] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 108.513059][ T5530] RSP: 002b:00007ffce4066f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.521673][ T5530] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4bb867f117 [ 108.529668][ T5530] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffce4067010 [ 108.537666][ T5530] RBP: 00007ffce4067010 R08: 0000000000000000 R09: 0000000000000000 [ 108.545835][ T5530] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce40680d0 [ 108.553832][ T5530] R13: 00007f4bb86c93b9 R14: 000000000001a630 R15: 0000000000000003 [ 108.561833][ T5530] [ 108.564867][ T5530] Modules linked in: [ 108.583414][ T5530] ---[ end trace 0000000000000000 ]--- [ 108.590562][ T5530] RIP: 0010:jffs2_del_ino_cache+0x24f/0x2c0 [ 108.596517][ T5530] Code: 4c 89 e2 49 8b 5e 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 71 49 89 1c 24 e9 42 ff ff ff e8 62 f6 ad fe 90 <0f> 0b e8 da b8 0c ff e9 5b fe ff ff e8 a0 b8 0c ff e9 59 ff ff ff [ 108.626434][ T5530] RSP: 0018:ffffc900046efae8 EFLAGS: 00010293 [ 108.632894][ T5530] RAX: 0000000000000000 RBX: ffff888023924000 RCX: 0000000000000000 [ 108.642106][ T5530] RDX: ffff888078460000 RSI: ffffffff82ddc9ee RDI: ffff888027c2c060 [ 108.650464][ T5530] RBP: 0000000000000006 R08: 0000000000000000 R09: ffffed100472486d [ 108.660821][ T5530] R10: ffff88802392436b R11: 0000000000000000 R12: ffff888077b905d0 [ 108.670149][ T5530] R13: dffffc0000000000 R14: ffff888027c2c040 R15: ffff888077b90688 [ 108.678486][ T5530] FS: 0000555589224480(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 108.688112][ T5530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.694905][ T5530] CR2: 0000557ddca89680 CR3: 00000000342ee000 CR4: 00000000003506f0 [ 108.703481][ T5530] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.711575][ T5530] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.720094][ T5530] Kernel panic - not syncing: Fatal exception [ 108.726443][ T5530] Kernel Offset: disabled [ 108.730764][ T5530] Rebooting in 86400 seconds..