Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2023/10/03 12:53:49 ignoring optional flag "sandboxArg"="0" 2023/10/03 12:53:50 parsed 1 programs [ 106.447492][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 106.447507][ T26] audit: type=1400 audit(1696337630.122:205): avc: denied { getattr } for pid=5380 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.477926][ T26] audit: type=1400 audit(1696337630.122:206): avc: denied { read } for pid=5380 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.502778][ T26] audit: type=1400 audit(1696337630.122:207): avc: denied { open } for pid=5380 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 106.527013][ T26] audit: type=1400 audit(1696337630.182:208): avc: denied { mounton } for pid=5386 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 106.552385][ T26] audit: type=1400 audit(1696337630.182:209): avc: denied { mount } for pid=5386 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 106.582358][ T26] audit: type=1400 audit(1696337630.212:210): avc: denied { read write } for pid=5386 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 106.610402][ T26] audit: type=1400 audit(1696337630.212:211): avc: denied { open } for pid=5386 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 106.637257][ T26] audit: type=1400 audit(1696337630.292:212): avc: denied { unlink } for pid=5386 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 107.141102][ T26] audit: type=1400 audit(1696337630.812:213): avc: denied { relabelto } for pid=5388 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/10/03 12:53:52 executed programs: 0 [ 108.519462][ T5386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 108.586070][ T5038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.595202][ T5038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.603356][ T5038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.612345][ T5038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.620133][ T5038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.627542][ T5038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.643854][ T26] audit: type=1400 audit(1696337632.312:214): avc: denied { mounton } for pid=5392 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 108.791877][ T5392] chnl_net:caif_netlink_parms(): no params data found [ 108.869987][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.877396][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.884875][ T5392] bridge_slave_0: entered allmulticast mode [ 108.892312][ T5392] bridge_slave_0: entered promiscuous mode [ 108.901370][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.909156][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.916532][ T5392] bridge_slave_1: entered allmulticast mode [ 108.923599][ T5392] bridge_slave_1: entered promiscuous mode [ 108.958586][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.971183][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.011606][ T5392] team0: Port device team_slave_0 added [ 109.020511][ T5392] team0: Port device team_slave_1 added [ 109.051334][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.058404][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.084737][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.097422][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.104616][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.130735][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.182849][ T5392] hsr_slave_0: entered promiscuous mode [ 109.189844][ T5392] hsr_slave_1: entered promiscuous mode [ 110.152660][ T5392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.167513][ T5392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.180341][ T5392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 110.195468][ T5392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.338871][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.375242][ T5392] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.392634][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.400217][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.428969][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.436533][ T4776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.677381][ T5038] Bluetooth: hci0: command 0x0409 tx timeout [ 110.731609][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.807296][ T5392] veth0_vlan: entered promiscuous mode [ 110.825112][ T5392] veth1_vlan: entered promiscuous mode [ 110.878813][ T5392] veth0_macvtap: entered promiscuous mode [ 110.891723][ T5392] veth1_macvtap: entered promiscuous mode [ 110.925796][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.950921][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.966584][ T5392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.979169][ T5392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.989098][ T5392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.999080][ T5392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.099711][ T5048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.120834][ T5048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.175376][ T5048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.183343][ T5048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.656609][ T5456] loop0: detected capacity change from 0 to 32768 [ 111.666531][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 111.666545][ T26] audit: type=1400 audit(1696337635.342:218): avc: denied { mounton } for pid=5454 comm="syz-executor.0" path="/root/syzkaller-testdir807349328/syzkaller.ifJItK/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 111.735155][ T5456] ================================================================================ [ 111.746738][ T26] audit: type=1400 audit(1696337635.402:219): avc: denied { mount } for pid=5454 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.781824][ T5456] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:2887:37 [ 111.790982][ T5456] index -28 is out of range for type 'dtslot [128]' [ 111.804198][ T5456] CPU: 1 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-gce36c8b14987 #0 [ 111.814235][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 111.824314][ T5456] Call Trace: [ 111.827655][ T5456] [ 111.830626][ T5456] dump_stack_lvl+0x125/0x1b0 [ 111.835353][ T5456] __ubsan_handle_out_of_bounds+0x111/0x150 [ 111.841290][ T5456] jfs_readdir+0x37a2/0x4320 [ 111.845939][ T5456] ? dtDelete+0x33e0/0x33e0 [ 111.850492][ T5456] ? down_write+0x14f/0x200 [ 111.855044][ T5456] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 111.861076][ T5456] ? down_read+0x470/0x470 [ 111.865536][ T5456] ? dtDelete+0x33e0/0x33e0 [ 111.870084][ T5456] wrap_directory_iterator+0xa5/0xe0 [ 111.875576][ T5456] iterate_dir+0x1e5/0x5f0 [ 111.880025][ T5456] __x64_sys_getdents64+0x14f/0x2e0 [ 111.885259][ T5456] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 111.890576][ T5456] ? folio_memcg_unlock+0x2d0/0x2d0 [ 111.895803][ T5456] ? fillonedir+0x400/0x400 [ 111.900343][ T5456] ? syscall_enter_from_user_mode+0x26/0x80 [ 111.906274][ T5456] ? lockdep_hardirqs_on+0x7d/0x100 [ 111.911603][ T5456] do_syscall_64+0x38/0xb0 [ 111.916153][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 111.922090][ T5456] RIP: 0033:0x7f858887cae9 [ 111.926530][ T5456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 111.946773][ T5456] RSP: 002b:00007f85896280c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 111.955218][ T5456] RAX: ffffffffffffffda RBX: 00007f858899bf80 RCX: 00007f858887cae9 [ 111.963301][ T5456] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004 [ 111.971308][ T5456] RBP: 00007f85888c847a R08: 0000000000000000 R09: 0000000000000000 [ 111.979406][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.987622][ T5456] R13: 000000000000000b R14: 00007f858899bf80 R15: 00007ffe92f80f28 [ 111.995717][ T5456] [ 112.025300][ T5456] ================================================================================ [ 112.043067][ T5456] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 112.050315][ T5456] CPU: 1 PID: 5456 Comm: syz-executor.0 Not tainted 6.6.0-rc4-syzkaller-gce36c8b14987 #0 [ 112.060411][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 112.070580][ T5456] Call Trace: [ 112.073891][ T5456] [ 112.077193][ T5456] dump_stack_lvl+0xd9/0x1b0 [ 112.081822][ T5456] panic+0x6a6/0x750 [ 112.085749][ T5456] ? panic_smp_self_stop+0xa0/0xa0 [ 112.090889][ T5456] ? syslog_print_all+0x3f0/0x3f0 [ 112.096128][ T5456] check_panic_on_warn+0xab/0xb0 [ 112.101202][ T5456] __ubsan_handle_out_of_bounds+0x139/0x150 [ 112.107399][ T5456] jfs_readdir+0x37a2/0x4320 [ 112.112127][ T5456] ? dtDelete+0x33e0/0x33e0 [ 112.116678][ T5456] ? down_write+0x14f/0x200 [ 112.121309][ T5456] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 112.127337][ T5456] ? down_read+0x470/0x470 [ 112.132055][ T5456] ? dtDelete+0x33e0/0x33e0 [ 112.136686][ T5456] wrap_directory_iterator+0xa5/0xe0 [ 112.142269][ T5456] iterate_dir+0x1e5/0x5f0 [ 112.146986][ T5456] __x64_sys_getdents64+0x14f/0x2e0 [ 112.152219][ T5456] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 112.157549][ T5456] ? folio_memcg_unlock+0x2d0/0x2d0 [ 112.162781][ T5456] ? fillonedir+0x400/0x400 [ 112.167580][ T5456] ? syscall_enter_from_user_mode+0x26/0x80 [ 112.173511][ T5456] ? lockdep_hardirqs_on+0x7d/0x100 [ 112.178748][ T5456] do_syscall_64+0x38/0xb0 [ 112.183197][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 112.189311][ T5456] RIP: 0033:0x7f858887cae9 [ 112.193927][ T5456] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 112.214265][ T5456] RSP: 002b:00007f85896280c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 112.222800][ T5456] RAX: ffffffffffffffda RBX: 00007f858899bf80 RCX: 00007f858887cae9 [ 112.230893][ T5456] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004 [ 112.238895][ T5456] RBP: 00007f85888c847a R08: 0000000000000000 R09: 0000000000000000 [ 112.246894][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.255068][ T5456] R13: 000000000000000b R14: 00007f858899bf80 R15: 00007ffe92f80f28 [ 112.263170][ T5456] [ 112.266450][ T5456] Kernel Offset: disabled [ 112.270901][ T5456] Rebooting in 86400 seconds..