Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts. 2023/12/29 00:10:16 ignoring optional flag "sandboxArg"="0" 2023/12/29 00:10:17 parsed 1 programs [ 70.376304][ T37] audit: type=1400 audit(1703808617.013:184): avc: denied { getattr } for pid=4662 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.400068][ T37] audit: type=1400 audit(1703808617.013:185): avc: denied { read } for pid=4662 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.422263][ T37] audit: type=1400 audit(1703808617.013:186): avc: denied { open } for pid=4662 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.446096][ T37] audit: type=1400 audit(1703808617.013:187): avc: denied { mounton } for pid=4667 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 70.471202][ T37] audit: type=1400 audit(1703808617.013:188): avc: denied { mount } for pid=4667 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/12/29 00:10:17 executed programs: 0 [ 70.510390][ T37] audit: type=1400 audit(1703808617.153:189): avc: denied { unlink } for pid=4667 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 70.534432][ T4667] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.569553][ T37] audit: type=1400 audit(1703808617.213:190): avc: denied { mounton } for pid=4673 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.627964][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.635140][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.642475][ T4673] device bridge_slave_0 entered promiscuous mode [ 70.649480][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.657125][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.664808][ T4673] device bridge_slave_1 entered promiscuous mode [ 70.692623][ T4673] team0: Port device team_slave_0 added [ 70.698880][ T4673] team0: Port device team_slave_1 added [ 70.727010][ T4673] device hsr_slave_0 entered promiscuous mode [ 70.733706][ T4673] device hsr_slave_1 entered promiscuous mode [ 71.162349][ T37] audit: type=1400 audit(1703808617.803:191): avc: denied { write } for pid=4673 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.183805][ T4673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.191673][ T4673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.198479][ T37] audit: type=1400 audit(1703808617.833:192): avc: denied { read } for pid=4673 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.201063][ T4673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.226708][ T4673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.238758][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.245849][ T4673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.253247][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.260396][ T4673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.450124][ T2417] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.457442][ T2417] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.465929][ T2417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.473406][ T2417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.481735][ T4673] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.490492][ T2417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.498782][ T2417] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.506019][ T2417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.519087][ T4673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.529736][ T4673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.541622][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.550359][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.557452][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.565029][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.573361][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.581580][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.590299][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.598516][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.605869][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.795285][ T4673] device veth0_vlan entered promiscuous mode [ 71.802163][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.810909][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.819264][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.827773][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.837346][ T4673] device veth1_vlan entered promiscuous mode [ 71.844615][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.852205][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.859843][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.946887][ T4673] device veth0_macvtap entered promiscuous mode [ 71.954376][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.962648][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.971138][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.980000][ T4673] device veth1_macvtap entered promiscuous mode [ 71.990470][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.998282][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.006441][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.015063][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.023824][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.032310][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.041345][ T4673] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.050127][ T4673] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.058857][ T4673] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.068025][ T4673] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.093194][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.104191][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.105703][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.118137][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.126788][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.134723][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.212598][ T5009] loop0: detected capacity change from 0 to 8192 [ 72.220988][ T37] audit: type=1400 audit(1703808618.853:193): avc: denied { mounton } for pid=5007 comm="syz-executor.0" path="/root/syzkaller-testdir2978330581/syzkaller.7pHT7l/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 72.230843][ T5009] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 72.257556][ T5009] REISERFS (device loop0): using ordered data mode [ 72.264475][ T5009] reiserfs: using flush barriers [ 72.269781][ T5009] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.286474][ T5009] REISERFS (device loop0): checking transaction log (loop0) [ 72.327218][ T5009] REISERFS (device loop0): Using r5 hash to sort names [ 72.334470][ T5009] REISERFS (device loop0): using 3.5.x disk format [ 72.341456][ T5009] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 72.376977][ C0] invalid opcode: 0000 [#1] PREEMPT SMP [ 72.382629][ C0] CPU: 0 PID: 5009 Comm: syz-executor.0 Not tainted 5.14.0-rc1-syzkaller #0 [ 72.391470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 72.401606][ C0] RIP: 0010:add_timer+0x2f/0x40 [ 72.406707][ C0] Code: 97 4a 07 00 48 8b 45 08 48 85 c0 75 17 e8 89 4a 07 00 48 8b 75 10 48 89 ef ba 04 00 00 00 5d e9 47 f8 ff ff e8 72 4a 07 00 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 fd 53 e8 [ 72.426388][ C0] RSP: 0018:ffffc90000003da8 EFLAGS: 00010046 [ 72.432454][ C0] RAX: 0000000080010003 RBX: 0000000000000046 RCX: 0000000000000000 [ 72.440715][ C0] RDX: ffff888107110400 RSI: ffffffff8123aaae RDI: ffff888114ca1698 [ 72.448931][ C0] RBP: ffff888114ca1698 R08: 0000000000000008 R09: 0000000014ca1000 [ 72.457314][ C0] R10: ffffffff811ad481 R11: 0000000000000000 R12: ffff888114ca1650 [ 72.465358][ C0] R13: 0000000000000001 R14: 0000000000000008 R15: ffff888114ca1000 [ 72.473308][ C0] FS: 00007ffba65bf6c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 72.482680][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.489499][ C0] CR2: 00007ffba6b58000 CR3: 000000010d67f000 CR4: 00000000003506f0 [ 72.497642][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.505683][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.513703][ C0] Call Trace: [ 72.516973][ C0] [ 72.519825][ C0] queue_delayed_work_on+0x10a/0x160 [ 72.525093][ C0] psi_task_change+0x91/0x110 [ 72.529837][ C0] enqueue_task+0xdc/0x120 [ 72.534226][ C0] ttwu_do_activate+0x6a/0xe0 [ 72.538880][ C0] try_to_wake_up+0x24e/0x720 [ 72.543534][ C0] ? __hrtimer_run_queues+0x1c6/0x5c0 [ 72.548881][ C0] ? hrtimer_init_sleeper_on_stack+0x50/0x50 [ 72.554835][ C0] hrtimer_wakeup+0x28/0x40 [ 72.559321][ C0] __hrtimer_run_queues+0x235/0x5c0 [ 72.564499][ C0] hrtimer_interrupt+0x12b/0x360 [ 72.569756][ C0] __sysvec_apic_timer_interrupt+0x85/0x1d0 [ 72.575727][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 72.581336][ C0] [ 72.584266][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 72.590372][ C0] RIP: 0010:__memmove+0x24/0x1a0 [ 72.595299][ C0] Code: cc cc cc cc cc cc 48 89 f8 48 39 fe 7d 0f 49 89 f0 49 01 d0 49 39 f8 0f 8f a9 00 00 00 48 83 fa 20 0f 82 f5 00 00 00 48 89 d1 a4 c3 48 81 fa a8 02 00 00 72 05 40 38 fe 74 3b 48 83 ea 20 48 [ 72.614901][ C0] RSP: 0018:ffffc9000134b590 EFLAGS: 00010286 [ 72.621137][ C0] RAX: ffff8881143f2030 RBX: 0000000000000000 RCX: ffffffffff5edfc8 [ 72.629081][ C0] RDX: fffffffffffffec9 RSI: ffff888114e04f01 RDI: ffff888114e03f31 [ 72.637286][ C0] RBP: ffff8881143f20d8 R08: 0000000000000000 R09: 0000000000000000 [ 72.645543][ C0] R10: ffffffff81678dc9 R11: 0000000000000000 R12: 0000000000000001 [ 72.653498][ C0] R13: 0000000000000008 R14: 0000000000000009 R15: 0000000000000fd0 [ 72.661461][ C0] ? leaf_paste_in_buffer+0x79/0x3a0 [ 72.666857][ C0] Modules linked in: [ 72.670860][ C0] ---[ end trace 6a267dd142d466d1 ]--- [ 72.670896][ T4273] BUG: unable to handle page fault for address: ffffffffffffffe0 [ 72.676454][ C0] RIP: 0010:add_timer+0x2f/0x40 [ 72.684251][ T4273] #PF: supervisor read access in kernel mode [ 72.689184][ C0] Code: 97 4a 07 00 48 8b 45 08 48 85 c0 75 17 e8 89 4a 07 00 48 8b 75 10 48 89 ef ba 04 00 00 00 5d e9 47 f8 ff ff e8 72 4a 07 00 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 fd 53 e8 [ 72.695136][ T4273] #PF: error_code(0x0000) - not-present page [ 72.715097][ C0] RSP: 0018:ffffc90000003da8 EFLAGS: 00010046 [ 72.721061][ T4273] PGD 4c3d067 P4D 4c3d067 PUD 4c3f067 [ 72.727448][ C0] RAX: 0000000080010003 RBX: 0000000000000046 RCX: 0000000000000000 [ 72.727465][ C0] RDX: ffff888107110400 RSI: ffffffff8123aaae RDI: ffff888114ca1698 [ 72.732920][ T4273] PMD 0 [ 72.741141][ C0] RBP: ffff888114ca1698 R08: 0000000000000008 R09: 0000000014ca1000 [ 72.749184][ T4273] Oops: 0000 [#2] PREEMPT SMP [ 72.752019][ C0] R10: ffffffff811ad481 R11: 0000000000000000 R12: ffff888114ca1650 [ 72.760429][ T4273] CPU: 1 PID: 4273 Comm: kworker/1:3 Tainted: G D 5.14.0-rc1-syzkaller #0 [ 72.765168][ C0] R13: 0000000000000001 R14: 0000000000000008 R15: ffff888114ca1000 [ 72.773808][ T4273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 72.783665][ C0] FS: 00007ffba65bf6c0(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 72.791614][ T4273] Workqueue: events nsim_fib_event_work [ 72.801906][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.811093][ T4273] [ 72.811098][ T4273] RIP: 0010:memcmp+0x18/0x30 [ 72.816785][ C0] CR2: 00007ffba6b58000 CR3: 000000010d67f000 CR4: 00000000003506f0 [ 72.823441][ T4273] Code: 83 c0 01 48 39 c2 74 05 40 38 30 75 f2 c3 0f 1f 40 00 48 85 d2 49 89 f0 48 89 d6 74 1d 31 c0 eb 09 48 83 c0 01 48 39 c6 74 0d <0f> b6 14 07 41 0f b6 0c 00 29 ca 74 ea 89 d0 c3 31 d2 eb f9 0f 1f [ 72.825849][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.830410][ T4273] RSP: 0018:ffffc90000fefd10 EFLAGS: 00010246 [ 72.838355][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.859589][ T4273] [ 72.859593][ T4273] RAX: 0000000000000000 RBX: ffff888112b87868 RCX: 0000000000000000 [ 72.867545][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 72.873578][ T4273] RDX: 000000000000001c RSI: 000000000000001c RDI: ffffffffffffffe0 [ 72.907285][ T4273] RBP: ffff888112bb3000 R08: ffffc90000fefd30 R09: 0000000000000000 [ 72.915258][ T4273] R10: ffffffff8248accf R11: 0000000000000000 R12: 0000000000000000 [ 72.923387][ T4273] R13: ffff888112bb30d8 R14: 0000000000000020 R15: 000000000000001c [ 72.931642][ T4273] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 72.940948][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.947608][ T4273] CR2: ffffffffffffffe0 CR3: 000000010f3a7000 CR4: 00000000003506e0 [ 72.955831][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 72.963786][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.972267][ T4273] Call Trace: [ 72.975612][ T4273] nsim_fib_rt_lookup+0x18c/0x2e0 [ 72.980887][ T4273] nsim_fib_event_work+0x4ce/0xf90 [ 72.986591][ T4273] process_one_work+0x3a8/0x770 [ 72.991433][ T4273] worker_thread+0x2e3/0x520 [ 72.996378][ T4273] ? rescuer_thread+0x500/0x500 [ 73.001840][ T4273] kthread+0x174/0x1b0 [ 73.005997][ T4273] ? set_kthread_struct+0x60/0x60 [ 73.011096][ T4273] ret_from_fork+0x1f/0x30 [ 73.015672][ T4273] Modules linked in: [ 73.019633][ T4273] CR2: ffffffffffffffe0 [ 73.023876][ T4273] ---[ end trace 6a267dd142d466d2 ]--- [ 73.029405][ T4273] RIP: 0010:add_timer+0x2f/0x40 [ 73.034519][ T4273] Code: 97 4a 07 00 48 8b 45 08 48 85 c0 75 17 e8 89 4a 07 00 48 8b 75 10 48 89 ef ba 04 00 00 00 5d e9 47 f8 ff ff e8 72 4a 07 00 90 <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 89 fd 53 e8 [ 73.054894][ T4273] RSP: 0018:ffffc90000003da8 EFLAGS: 00010046 [ 73.061136][ T4273] RAX: 0000000080010003 RBX: 0000000000000046 RCX: 0000000000000000 [ 73.069265][ T4273] RDX: ffff888107110400 RSI: ffffffff8123aaae RDI: ffff888114ca1698 [ 73.077586][ T4273] RBP: ffff888114ca1698 R08: 0000000000000008 R09: 0000000014ca1000 [ 73.085540][ T4273] R10: ffffffff811ad481 R11: 0000000000000000 R12: ffff888114ca1650 [ 73.093591][ T4273] R13: 0000000000000001 R14: 0000000000000008 R15: ffff888114ca1000 [ 73.101725][ T4273] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 73.110739][ T4273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.117307][ T4273] CR2: ffffffffffffffe0 CR3: 000000010f3a7000 CR4: 00000000003506e0 [ 73.125262][ T4273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.133215][ T4273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.968366][ C0] Shutting down cpus with NMI [ 73.973417][ C0] Kernel Offset: disabled [ 73.977807][ C0] Rebooting in 86400 seconds..