Warning: Permanently added '10.128.1.174' (ED25519) to the list of known hosts. 2023/09/18 16:12:36 ignoring optional flag "sandboxArg"="0" 2023/09/18 16:12:37 parsed 1 programs [ 105.026407][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 105.026418][ T27] audit: type=1400 audit(1695053557.019:205): avc: denied { getattr } for pid=5380 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.058683][ T27] audit: type=1400 audit(1695053557.049:206): avc: denied { read } for pid=5380 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.081386][ T27] audit: type=1400 audit(1695053557.049:207): avc: denied { open } for pid=5380 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.134030][ T27] audit: type=1400 audit(1695053557.119:208): avc: denied { mounton } for pid=5385 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 105.160631][ T27] audit: type=1400 audit(1695053557.129:209): avc: denied { mount } for pid=5385 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 105.185443][ T27] audit: type=1400 audit(1695053557.149:210): avc: denied { read write } for pid=5385 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 105.213431][ T27] audit: type=1400 audit(1695053557.149:211): avc: denied { open } for pid=5385 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 105.242647][ T27] audit: type=1400 audit(1695053557.219:212): avc: denied { unlink } for pid=5385 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 105.794413][ T27] audit: type=1400 audit(1695053557.779:213): avc: denied { relabelto } for pid=5387 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/09/18 16:12:39 executed programs: 0 [ 107.234086][ T5385] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.300012][ T4435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.308678][ T4435] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.317406][ T4435] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.326186][ T4435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.334230][ T4435] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.342028][ T4435] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.363701][ T27] audit: type=1400 audit(1695053559.349:214): avc: denied { mounton } for pid=5392 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 107.515404][ T5392] chnl_net:caif_netlink_parms(): no params data found [ 107.591531][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.599384][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.607432][ T5392] bridge_slave_0: entered allmulticast mode [ 107.614772][ T5392] bridge_slave_0: entered promiscuous mode [ 107.624413][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.632205][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.640792][ T5392] bridge_slave_1: entered allmulticast mode [ 107.648644][ T5392] bridge_slave_1: entered promiscuous mode [ 107.682273][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.694630][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.733390][ T5392] team0: Port device team_slave_0 added [ 107.742185][ T5392] team0: Port device team_slave_1 added [ 107.774201][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.781298][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.808939][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.822433][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.829714][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.856600][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.904164][ T5392] hsr_slave_0: entered promiscuous mode [ 107.913821][ T5392] hsr_slave_1: entered promiscuous mode [ 108.867621][ T5392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.881617][ T5392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.896443][ T5392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.911127][ T5392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.063811][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.100607][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.121436][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.129409][ T5048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.152379][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.160007][ T5048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.406367][ T5036] Bluetooth: hci0: command 0x0409 tx timeout [ 109.431029][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.510274][ T5392] veth0_vlan: entered promiscuous mode [ 109.531095][ T5392] veth1_vlan: entered promiscuous mode [ 109.587580][ T5392] veth0_macvtap: entered promiscuous mode [ 109.600311][ T5392] veth1_macvtap: entered promiscuous mode [ 109.630624][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.660208][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.681994][ T5392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.693035][ T5392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.703460][ T5392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.715978][ T5392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.828892][ T921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.852783][ T921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.905086][ T5045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.916611][ T5045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.059220][ T5457] loop0: detected capacity change from 0 to 256 [ 110.077270][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 110.077284][ T27] audit: type=1400 audit(1695053562.069:218): avc: denied { mounton } for pid=5455 comm="syz-executor.0" path="/root/syzkaller-testdir3346411116/syzkaller.g578vM/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 110.153391][ T27] audit: type=1400 audit(1695053562.139:219): avc: denied { read append } for pid=5455 comm="syz-executor.0" name="sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.159059][ T5456] sg_write: data in/out 80/6 bytes for SCSI command 0x0-- guessing data in; [ 110.159059][ T5456] program syz-executor.0 not setting count and/or reply_len properly [ 110.197436][ T27] audit: type=1400 audit(1695053562.139:220): avc: denied { open } for pid=5455 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 110.229649][ T5456] ------------[ cut here ]------------ [ 110.235811][ T5456] WARNING: CPU: 0 PID: 5456 at lib/iov_iter.c:385 _copy_from_iter+0x2c2/0x1270 [ 110.245681][ T5456] Modules linked in: [ 110.249595][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-gce9ecca0238b #0 [ 110.259537][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 110.270033][ T5456] RIP: 0010:_copy_from_iter+0x2c2/0x1270 [ 110.276340][ T5456] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 99 6b 64 fd be 85 01 00 00 48 c7 c7 e0 9a e8 8a e8 f8 9b a3 fd e9 48 fe ff ff e8 7e 6b 64 fd <0f> 0b 45 31 ff eb 88 e8 72 6b 64 fd 31 ff 89 ee e8 99 66 64 fd 40 [ 110.296414][ T5456] RSP: 0018:ffffc9000388f5f0 EFLAGS: 00010293 [ 110.302779][ T5456] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 110.311011][ T5456] RDX: ffff88801af96200 RSI: ffffffff842259d2 RDI: 0000000000000001 [ 110.319345][ T5456] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 110.327874][ T5456] R10: 0000000000000000 R11: ffffffff81db8595 R12: 0000000000000050 [ 110.336262][ T5456] R13: ffffc9000388f838 R14: 0000000000000050 R15: 0000160000000000 [ 110.344560][ T5456] FS: 00007f63eebfe6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 110.353659][ T5456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.360437][ T5456] CR2: 000000002019a000 CR3: 000000007529a000 CR4: 00000000003506f0 [ 110.368811][ T5456] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.376988][ T5456] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 110.384991][ T5456] Call Trace: [ 110.388344][ T5456] [ 110.391303][ T5456] ? show_regs+0x8f/0xa0 [ 110.395636][ T5456] ? __warn+0xe6/0x380 [ 110.399734][ T5456] ? _copy_from_iter+0x2c2/0x1270 [ 110.404865][ T5456] ? report_bug+0x3bc/0x580 [ 110.409461][ T5456] ? handle_bug+0x3c/0x70 [ 110.413911][ T5456] ? exc_invalid_op+0x17/0x40 [ 110.418980][ T5456] ? asm_exc_invalid_op+0x1a/0x20 [ 110.424128][ T5456] ? kasan_set_track+0x25/0x30 [ 110.429048][ T5456] ? _copy_from_iter+0x2c2/0x1270 [ 110.434163][ T5456] ? _copy_from_iter+0x2c2/0x1270 [ 110.439304][ T5456] ? iov_iter_extract_pages+0x19b0/0x19b0 [ 110.445062][ T5456] ? bio_add_hw_page+0x1b9/0x430 [ 110.450301][ T5456] ? bio_add_pc_page+0xb5/0x100 [ 110.455248][ T5456] ? bio_add_hw_page+0x430/0x430 [ 110.460228][ T5456] copy_page_from_iter+0xa5/0x120 [ 110.465502][ T5456] blk_rq_map_user_iov+0x9d5/0x1860 [ 110.470748][ T5456] ? bio_map_user_iov+0xa70/0xa70 [ 110.475968][ T5456] ? sg_common_write.constprop.0+0xc0e/0x1c90 [ 110.482167][ T5456] ? __mutex_lock+0x25b/0x1340 [ 110.487101][ T5456] ? find_held_lock+0x2d/0x110 [ 110.491919][ T5456] blk_rq_map_user_io+0x202/0x230 [ 110.497062][ T5456] ? blk_rq_map_user_io.part.0+0x2c0/0x2c0 [ 110.503048][ T5456] ? bit_wait_io_timeout+0x160/0x160 [ 110.508448][ T5456] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 110.514402][ T5456] sg_common_write.constprop.0+0xd61/0x1c90 [ 110.520588][ T5456] ? sg_read+0x1590/0x1590 [ 110.525049][ T5456] ? idr_get_free+0xa30/0xa30 [ 110.530067][ T5456] sg_write+0x82f/0xe10 [ 110.534538][ T5456] ? sg_ioctl+0x2760/0x2760 [ 110.539210][ T5456] ? security_file_permission+0x94/0x100 [ 110.545061][ T5456] vfs_write+0x2a4/0xe40 [ 110.549827][ T5456] ? sg_ioctl+0x2760/0x2760 [ 110.554459][ T5456] ? kernel_write+0x6c0/0x6c0 [ 110.559349][ T5456] ? __might_fault+0xe6/0x1a0 [ 110.564063][ T5456] ? __fget_files+0x272/0x410 [ 110.569277][ T5456] ? __fget_light+0xe6/0x260 [ 110.573935][ T5456] ksys_write+0x12f/0x250 [ 110.578547][ T5456] ? __ia32_sys_read+0xb0/0xb0 [ 110.583434][ T5456] ? syscall_enter_from_user_mode+0x26/0x80 [ 110.589437][ T5456] do_syscall_64+0x38/0xb0 [ 110.593909][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 110.600022][ T5456] RIP: 0033:0x7f63ef87cb29 [ 110.604468][ T5456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 110.624785][ T5456] RSP: 002b:00007f63eebfe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.633474][ T5456] RAX: ffffffffffffffda RBX: 00007f63ef99bf80 RCX: 00007f63ef87cb29 [ 110.641565][ T5456] RDX: 0000000000000030 RSI: 0000000020000000 RDI: 0000000000000005 [ 110.649618][ T5456] RBP: 00007f63ef8c847a R08: 0000000000000000 R09: 0000000000000000 [ 110.657764][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.665796][ T5456] R13: 000000000000000b R14: 00007f63ef99bf80 R15: 00007ffd3ecd8e48 [ 110.673823][ T5456] [ 110.677029][ T5456] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.684512][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-gce9ecca0238b #0 [ 110.694451][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 110.704733][ T5456] Call Trace: [ 110.708042][ T5456] [ 110.711172][ T5456] dump_stack_lvl+0xd9/0x1b0 [ 110.715931][ T5456] panic+0x6a6/0x750 [ 110.719971][ T5456] ? panic_smp_self_stop+0xa0/0xa0 [ 110.725144][ T5456] ? _copy_from_iter+0x2c2/0x1270 [ 110.730298][ T5456] check_panic_on_warn+0xab/0xb0 [ 110.735286][ T5456] __warn+0xf2/0x380 [ 110.739234][ T5456] ? _copy_from_iter+0x2c2/0x1270 [ 110.744385][ T5456] report_bug+0x3bc/0x580 [ 110.748761][ T5456] handle_bug+0x3c/0x70 [ 110.752954][ T5456] exc_invalid_op+0x17/0x40 [ 110.757511][ T5456] asm_exc_invalid_op+0x1a/0x20 [ 110.762399][ T5456] RIP: 0010:_copy_from_iter+0x2c2/0x1270 [ 110.768069][ T5456] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 e8 99 6b 64 fd be 85 01 00 00 48 c7 c7 e0 9a e8 8a e8 f8 9b a3 fd e9 48 fe ff ff e8 7e 6b 64 fd <0f> 0b 45 31 ff eb 88 e8 72 6b 64 fd 31 ff 89 ee e8 99 66 64 fd 40 [ 110.788058][ T5456] RSP: 0018:ffffc9000388f5f0 EFLAGS: 00010293 [ 110.794153][ T5456] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 110.802399][ T5456] RDX: ffff88801af96200 RSI: ffffffff842259d2 RDI: 0000000000000001 [ 110.810550][ T5456] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 110.818612][ T5456] R10: 0000000000000000 R11: ffffffff81db8595 R12: 0000000000000050 [ 110.826678][ T5456] R13: ffffc9000388f838 R14: 0000000000000050 R15: 0000160000000000 [ 110.834752][ T5456] ? kasan_set_track+0x25/0x30 [ 110.839521][ T5456] ? _copy_from_iter+0x2c2/0x1270 [ 110.845964][ T5456] ? iov_iter_extract_pages+0x19b0/0x19b0 [ 110.851700][ T5456] ? bio_add_hw_page+0x1b9/0x430 [ 110.856648][ T5456] ? bio_add_pc_page+0xb5/0x100 [ 110.861555][ T5456] ? bio_add_hw_page+0x430/0x430 [ 110.866914][ T5456] copy_page_from_iter+0xa5/0x120 [ 110.871978][ T5456] blk_rq_map_user_iov+0x9d5/0x1860 [ 110.877385][ T5456] ? bio_map_user_iov+0xa70/0xa70 [ 110.882424][ T5456] ? sg_common_write.constprop.0+0xc0e/0x1c90 [ 110.888682][ T5456] ? __mutex_lock+0x25b/0x1340 [ 110.893546][ T5456] ? find_held_lock+0x2d/0x110 [ 110.898417][ T5456] blk_rq_map_user_io+0x202/0x230 [ 110.903488][ T5456] ? blk_rq_map_user_io.part.0+0x2c0/0x2c0 [ 110.909642][ T5456] ? bit_wait_io_timeout+0x160/0x160 [ 110.914955][ T5456] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 110.922215][ T5456] sg_common_write.constprop.0+0xd61/0x1c90 [ 110.928215][ T5456] ? sg_read+0x1590/0x1590 [ 110.932958][ T5456] ? idr_get_free+0xa30/0xa30 [ 110.937640][ T5456] sg_write+0x82f/0xe10 [ 110.941804][ T5456] ? sg_ioctl+0x2760/0x2760 [ 110.946419][ T5456] ? security_file_permission+0x94/0x100 [ 110.952162][ T5456] vfs_write+0x2a4/0xe40 [ 110.956412][ T5456] ? sg_ioctl+0x2760/0x2760 [ 110.961011][ T5456] ? kernel_write+0x6c0/0x6c0 [ 110.965694][ T5456] ? __might_fault+0xe6/0x1a0 [ 110.970555][ T5456] ? __fget_files+0x272/0x410 [ 110.975338][ T5456] ? __fget_light+0xe6/0x260 [ 110.980025][ T5456] ksys_write+0x12f/0x250 [ 110.984450][ T5456] ? __ia32_sys_read+0xb0/0xb0 [ 110.989311][ T5456] ? syscall_enter_from_user_mode+0x26/0x80 [ 110.995307][ T5456] do_syscall_64+0x38/0xb0 [ 110.999818][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 111.005900][ T5456] RIP: 0033:0x7f63ef87cb29 [ 111.010404][ T5456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 111.030485][ T5456] RSP: 002b:00007f63eebfe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 111.039347][ T5456] RAX: ffffffffffffffda RBX: 00007f63ef99bf80 RCX: 00007f63ef87cb29 [ 111.047355][ T5456] RDX: 0000000000000030 RSI: 0000000020000000 RDI: 0000000000000005 [ 111.055676][ T5456] RBP: 00007f63ef8c847a R08: 0000000000000000 R09: 0000000000000000 [ 111.063652][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.071722][ T5456] R13: 000000000000000b R14: 00007f63ef99bf80 R15: 00007ffd3ecd8e48 [ 111.079797][ T5456] [ 111.083137][ T5456] Kernel Offset: disabled [ 111.087945][ T5456] Rebooting in 86400 seconds..