Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. 2025/01/21 01:12:18 ignoring optional flag "sandboxArg"="0" 2025/01/21 01:12:18 parsed 1 programs [ 22.253597][ T28] audit: type=1400 audit(1737421938.979:66): avc: denied { node_bind } for pid=289 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.059676][ T28] audit: type=1400 audit(1737421939.789:67): avc: denied { mounton } for pid=295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.060768][ T295] cgroup: Unknown subsys name 'net' [ 23.082204][ T28] audit: type=1400 audit(1737421939.789:68): avc: denied { mount } for pid=295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.109101][ T28] audit: type=1400 audit(1737421939.819:69): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.109237][ T295] cgroup: Unknown subsys name 'devices' [ 23.247416][ T295] cgroup: Unknown subsys name 'hugetlb' [ 23.252806][ T295] cgroup: Unknown subsys name 'rlimit' [ 23.357324][ T28] audit: type=1400 audit(1737421940.089:70): avc: denied { setattr } for pid=295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.380372][ T28] audit: type=1400 audit(1737421940.089:71): avc: denied { create } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.400514][ T28] audit: type=1400 audit(1737421940.089:72): avc: denied { write } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.413824][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.420568][ T28] audit: type=1400 audit(1737421940.089:73): avc: denied { read } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.448929][ T28] audit: type=1400 audit(1737421940.089:74): avc: denied { module_request } for pid=295 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 23.470472][ T28] audit: type=1400 audit(1737421940.089:75): avc: denied { mounton } for pid=295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.475431][ T295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.924370][ T307] request_module fs-gadgetfs succeeded, but still no fs? [ 24.122245][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.129407][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.136816][ T321] device bridge_slave_0 entered promiscuous mode [ 24.143884][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.150737][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.157901][ T321] device bridge_slave_1 entered promiscuous mode [ 24.202299][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.209223][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.216322][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.223103][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.242451][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.249555][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.256955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.264100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.273422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.281843][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.288680][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.296988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.304931][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.311767][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.323673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.335629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.346591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.357838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.365905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.373083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.381079][ T321] device veth0_vlan entered promiscuous mode [ 24.390728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.400360][ T321] device veth1_macvtap entered promiscuous mode [ 24.409903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.419643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.447140][ T321] syz-executor (321) used greatest stack depth: 20688 bytes left 2025/01/21 01:12:21 executed programs: 0 [ 24.981912][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.988895][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.996126][ T362] device bridge_slave_0 entered promiscuous mode [ 25.005005][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.011960][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.019152][ T362] device bridge_slave_1 entered promiscuous mode [ 25.065962][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.072891][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.080001][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.086792][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.106396][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.113685][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.120740][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.129857][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.138223][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.146201][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.153015][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.160810][ T43] device bridge_slave_1 left promiscuous mode [ 25.166746][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.173911][ T43] device bridge_slave_0 left promiscuous mode [ 25.179985][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.187631][ T43] device veth1_macvtap left promiscuous mode [ 25.193452][ T43] device veth0_vlan left promiscuous mode [ 25.260926][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.269137][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.277476][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.284304][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.294625][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.303154][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.311894][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.319677][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.332627][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.340911][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.351135][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.358931][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.366777][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.373988][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.382432][ T362] device veth0_vlan entered promiscuous mode [ 25.391635][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.399528][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.408613][ T362] device veth1_macvtap entered promiscuous mode [ 25.417315][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.424703][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.432893][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.441894][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.450022][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready SIGILL: illegal instruction PC=0x40708e m=3 sigcode=128 instruction bytes: 0x48 0x3d 0x1 0xf0 0xff 0xff 0x76 0x15 0x48 0xf7 0xd8 0x48 0x89 0xc1 0x48 0xc7 goroutine 0 gp=0xc000006e00 m=3 mp=0xc00007f008 [idle]: runtime/internal/syscall.Syscall6() /usr/local/go/src/runtime/internal/syscall/asm_linux_amd64.s:36 +0xe fp=0xc0000936d8 sp=0xc0000936d0 pc=0x40708e runtime/internal/syscall.EpollWait(0x5?, {0xc000093774?, 0x10?, 0x1?}, 0x0?, 0x0?) /usr/local/go/src/runtime/internal/syscall/syscall_linux.go:55 +0x45 fp=0xc000093728 sp=0xc0000936d8 pc=0x407005 runtime.netpoll(0xc00005c010?) /usr/local/go/src/runtime/netpoll_epoll.go:118 +0xd2 fp=0xc000093db8 sp=0xc000093728 pc=0x43a212 runtime.findRunnable() /usr/local/go/src/runtime/proc.go:3470 +0x8c5 fp=0xc000093f30 sp=0xc000093db8 pc=0x446745 runtime.schedule() /usr/local/go/src/runtime/proc.go:3868 +0xb1 fp=0xc000093f68 sp=0xc000093f30 pc=0x447cb1 runtime.park_m(0xc001ed8fc0) /usr/local/go/src/runtime/proc.go:4036 +0x1ec fp=0xc000093fc0 sp=0xc000093f68 pc=0x44828c runtime.mcall() /usr/local/go/src/runtime/asm_amd64.s:458 +0x4e fp=0xc000093fd8 sp=0xc000093fc0 pc=0x47228e goroutine 1 gp=0xc0000061c0 m=nil [select]: runtime.gopark(0xc002c27c60?, 0x4?, 0x60?, 0x0?, 0xc002c27be0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc0022e7a80 sp=0xc0022e7a60 pc=0x440a6e runtime.selectgo(0xc0022e7c60, 0xc002c27bd8, 0xc002c27ce0?, 0x0, 0xc001cc5cc0?, 0x1) /usr/local/go/src/runtime/select.go:327 +0x725 fp=0xc0022e7ba0 sp=0xc0022e7a80 pc=0x4526a5 github.com/google/syzkaller/pkg/rpcserver.RunLocal(0xc0019c0000) /syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpcserver/local.go:95 +0x835 fp=0xc0022e7da8 sp=0xc0022e7ba0 pc=0x1127875 main.main() /syzkaller/gopath/src/github.com/google/syzkaller/tools/syz-execprog/execprog.go:187 +0x93c fp=0xc0022e7f50 sp=0xc0022e7da8 pc=0x1132dfc runtime.main() /usr/local/go/src/runtime/proc.go:271 +0x29d fp=0xc0022e7fe0 sp=0xc0022e7f50 pc=0x44063d runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0022e7fe8 sp=0xc0022e7fe0 pc=0x474141 goroutine 2 gp=0xc000006700 m=nil [force gc (idle)]: runtime.gopark(0x0?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000078fa8 sp=0xc000078f88 pc=0x440a6e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:408 runtime.forcegchelper() /usr/local/go/src/runtime/proc.go:326 +0xb3 fp=0xc000078fe0 sp=0xc000078fa8 pc=0x4408f3 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc000078fe8 sp=0xc000078fe0 pc=0x474141 created by runtime.init.6 in goroutine 1 /usr/local/go/src/runtime/proc.go:314 +0x1a goroutine 17 gp=0xc000104000 m=nil [GC sweep wait]: runtime.gopark(0x1?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000074780 sp=0xc000074760 pc=0x440a6e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:408 runtime.bgsweep(0xc000100000) /usr/local/go/src/runtime/mgcsweep.go:318 +0xdf fp=0xc0000747c8 sp=0xc000074780 pc=0x42ad1f runtime.gcenable.gowrap1() /usr/local/go/src/runtime/mgc.go:203 +0x25 fp=0xc0000747e0 sp=0xc0000747c8 pc=0x41f625 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0000747e8 sp=0xc0000747e0 pc=0x474141 created by runtime.gcenable in goroutine 1 /usr/local/go/src/runtime/mgc.go:203 +0x66 goroutine 18 gp=0xc0001041c0 m=nil [GC scavenge wait]: runtime.gopark(0x10000?, 0x1c1c068?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000074f78 sp=0xc000074f58 pc=0x440a6e runtime.goparkunlock(...) /usr/local/go/src/runtime/proc.go:408 runtime.(*scavengerState).park(0x41f6400) /usr/local/go/src/runtime/mgcscavenge.go:425 +0x49 fp=0xc000074fa8 sp=0xc000074f78 pc=0x4286c9 runtime.bgscavenge(0xc000100000) /usr/local/go/src/runtime/mgcscavenge.go:658 +0x59 fp=0xc000074fc8 sp=0xc000074fa8 pc=0x428c79 runtime.gcenable.gowrap2() /usr/local/go/src/runtime/mgc.go:204 +0x25 fp=0xc000074fe0 sp=0xc000074fc8 pc=0x41f5c5 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc000074fe8 sp=0xc000074fe0 pc=0x474141 created by runtime.gcenable in goroutine 1 /usr/local/go/src/runtime/mgc.go:204 +0xa5 goroutine 19 gp=0xc000104380 m=nil [finalizer wait]: runtime.gopark(0xc000078660?, 0x427b9c?, 0x80?, 0x37?, 0x550011?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000078620 sp=0xc000078600 pc=0x440a6e runtime.runfinq() /usr/local/go/src/runtime/mfinal.go:194 +0x107 fp=0xc0000787e0 sp=0xc000078620 pc=0x41e667 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0000787e8 sp=0xc0000787e0 pc=0x474141 created by runtime.createfing in goroutine 1 /usr/local/go/src/runtime/mfinal.go:164 +0x3d goroutine 3 gp=0xc0000076c0 m=nil [select]: runtime.gopark(0xc000079778?, 0x3?, 0xb8?, 0xc5?, 0xc000079772?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000079618 sp=0xc0000795f8 pc=0x440a6e runtime.selectgo(0xc000079778, 0xc00007976c, 0xc0000a0a80?, 0x0, 0x0?, 0x1) /usr/local/go/src/runtime/select.go:327 +0x725 fp=0xc000079738 sp=0xc000079618 pc=0x4526a5 go.opencensus.io/stats/view.(*worker).start(0xc0000a0a80) /syzkaller/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:292 +0x9f fp=0xc0000797c8 sp=0xc000079738 pc=0x97ba3f go.opencensus.io/stats/view.init.0.gowrap1() /syzkaller/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x25 fp=0xc0000797e0 sp=0xc0000797c8 pc=0x97ada5 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0000797e8 sp=0xc0000797e0 pc=0x474141 created by go.opencensus.io/stats/view.init.0 in goroutine 1 /syzkaller/gopath/src/github.com/google/syzkaller/vendor/go.opencensus.io/stats/view/worker.go:34 +0x8d goroutine 21 gp=0xc000105880 m=nil [chan receive]: runtime.gopark(0xc001766f00?, 0xc0018fc4e0?, 0xb0?, 0xd9?, 0x9cc040?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc0000756f8 sp=0xc0000756d8 pc=0x440a6e runtime.chanrecv(0xc001766ea0, 0xc0000757b8, 0x1) /usr/local/go/src/runtime/chan.go:583 +0x3bf fp=0xc000075770 sp=0xc0000756f8 pc=0x40a73f runtime.chanrecv2(0xc00010a6e0?, 0xc0018dc008?) /usr/local/go/src/runtime/chan.go:447 +0x12 fp=0xc000075798 sp=0xc000075770 pc=0x40a372 github.com/google/syzkaller/pkg/stat.newSet.func1() /syzkaller/gopath/src/github.com/google/syzkaller/pkg/stat/set.go:95 +0x66 fp=0xc0000757e0 sp=0xc000075798 pc=0x9cab26 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc0000757e8 sp=0xc0000757e0 pc=0x474141 created by github.com/google/syzkaller/pkg/stat.newSet in goroutine 1 /syzkaller/gopath/src/github.com/google/syzkaller/pkg/stat/set.go:94 +0xd6 goroutine 22 gp=0xc000105dc0 m=nil [GC worker (idle)]: runtime.gopark(0x1a8e0f0?, 0xc0001fe4a0?, 0x1a?, 0xa?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000075f50 sp=0xc000075f30 pc=0x440a6e runtime.gcBgMarkWorker() /usr/local/go/src/runtime/mgc.go:1310 +0xe5 fp=0xc000075fe0 sp=0xc000075f50 pc=0x421705 runtime.goexit({}) /usr/local/go/src/runtime/asm_amd64.s:1695 +0x1 fp=0xc000075fe8 sp=0xc000075fe0 pc=0x474141 created by runtime.gcBgMarkStartWorkers in goroutine 1 /usr/local/go/src/runtime/mgc.go:1234 +0x1c goroutine 23 gp=0xc0010c2000 m=nil [GC worker (idle)]: runtime.gopark(0x58c3261eb?, 0x0?, 0x0?, 0x0?, 0x0?) /usr/local/go/src/runtime/proc.go:402 +0xce fp=0xc000076750 sp=0xc000076730 pc=0x440a6e runtime.gcBgMarkWorker() /usr/local/go/src/runtime/mgc.goConnection to 10.128.0.123 closed by remote host. [ 26.846155][ T43] device bridge_slave_1 left promiscuous mode [ 26.852183][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.859449][ T43] device bridge_slave_0 left promiscuous mode [ 26.865344][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.872971][ T43] device veth1_macvtap left promiscuous mode [ 26.878840][ T43] device veth0_vlan left promiscuous mode