u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 40.171961][ T23] audit: type=1400 audit(1688692785.179:154): avc: denied { siginh } for pid=400 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.190' (ECDSA) to the list of known hosts. 2023/07/07 01:19:51 ignoring optional flag "sandboxArg"="0" 2023/07/07 01:19:51 parsed 1 programs [ 46.673198][ T23] audit: type=1400 audit(1688692791.749:155): avc: denied { mounton } for pid=421 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 46.698404][ T23] audit: type=1400 audit(1688692791.749:156): avc: denied { mount } for pid=421 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/07/07 01:19:51 executed programs: 0 [ 46.721867][ T23] audit: type=1400 audit(1688692791.769:157): avc: denied { unlink } for pid=421 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.750934][ T421] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.767874][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.775273][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.782188][ T427] device bridge_slave_0 entered promiscuous mode [ 46.788420][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.795295][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.802619][ T427] device bridge_slave_1 entered promiscuous mode [ 46.811706][ T23] audit: type=1400 audit(1688692791.879:158): avc: denied { write } for pid=427 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.813232][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.833091][ T23] audit: type=1400 audit(1688692791.879:159): avc: denied { read } for pid=427 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.839879][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.867988][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.874912][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.883298][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.890279][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.897206][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.904281][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.912894][ T427] device veth0_vlan entered promiscuous mode [ 46.919100][ T427] device veth1_macvtap entered promiscuous mode [ 46.925503][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.933515][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.940930][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.948135][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.955411][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.963208][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.970911][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.977767][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.984849][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.993168][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.999931][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.007078][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.014759][ T120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.022928][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.033472][ T23] audit: type=1400 audit(1688692792.109:160): avc: denied { mounton } for pid=427 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.057071][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2023/07/07 01:20:47 executed programs: 1 [ 147.051744][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 147.058409][ C0] rcu: 0-....: (9999 ticks this GP) idle=c9e/1/0x4000000000000000 softirq=1480/1480 fqs=4846 last_accelerate: 9d19/c428 dyntick_enabled: 1 [ 147.072787][ C0] (t=10000 jiffies g=445 q=2446) [ 147.077620][ C0] NMI backtrace for cpu 0 [ 147.081972][ C0] CPU: 0 PID: 433 Comm: syz-executor.0 Not tainted 5.10.185-syzkaller #0 [ 147.090418][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 147.100405][ C0] Call Trace: [ 147.103519][ C0] [ 147.106435][ C0] dump_stack+0x60/0x76 [ 147.110375][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 147.115615][ C0] nmi_cpu_backtrace.cold+0x30/0x65 [ 147.120736][ C0] ? lapic_can_unplug_cpu+0x80/0x80 [ 147.125883][ C0] nmi_trigger_cpumask_backtrace+0xce/0xe0 [ 147.131521][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 147.137622][ C0] rcu_dump_cpu_stacks+0x8d/0xbf [ 147.142483][ C0] rcu_sched_clock_irq.cold+0x1c3/0x6ed [ 147.147883][ C0] ? account_system_index_time+0xa2/0xb0 [ 147.153522][ C0] ? irqtime_account_process_tick+0x18d/0x1d0 [ 147.159506][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 147.165756][ C0] ? __raise_softirq_irqoff+0x1a/0x80 [ 147.170955][ C0] update_process_times+0x58/0x90 [ 147.175899][ C0] tick_sched_handle+0x24/0x60 [ 147.180501][ C0] tick_sched_timer+0x8d/0xb0 [ 147.185099][ C0] ? can_stop_idle_tick+0xd0/0xd0 [ 147.190141][ C0] __hrtimer_run_queues+0x117/0x290 [ 147.195255][ C0] hrtimer_interrupt+0x104/0x2a0 [ 147.200200][ C0] __sysvec_apic_timer_interrupt+0x73/0x160 [ 147.206268][ C0] asm_call_irq_on_stack+0xf/0x20 [ 147.211200][ C0] [ 147.214050][ C0] sysvec_apic_timer_interrupt+0xb2/0xf0 [ 147.219619][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 147.225503][ C0] RIP: 0010:kvm_wait+0x3e/0x40 [ 147.230110][ C0] Code: 40 38 d6 74 03 50 9d c3 f6 c4 02 75 0f 0f 1f 44 00 00 0f 00 2d f1 76 35 01 f4 eb e9 0f 1f 44 00 00 0f 00 2d e2 76 35 01 fb f4 d9 8b 05 2a 89 d7 01 83 f8 ff 74 06 85 c0 0f 95 c0 c3 55 48 89 [ 147.250423][ C0] RSP: 0018:ffffc900006077b8 EFLAGS: 00000242 [ 147.256316][ C0] RAX: 0000000000000246 RBX: ffff888237c4a980 RCX: 0000000000000008 [ 147.264134][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff8881059d84ac [ 147.271942][ C0] RBP: ffffc900006077f8 R08: ffff88823fff1980 R09: 0000000000000000 [ 147.279840][ C0] R10: 0000000000000001 R11: ffff888237c4a980 R12: ffff8881059d84ac [ 147.287735][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 147.295738][ C0] ? __pv_queued_spin_lock_slowpath+0x29f/0x2e0 [ 147.302059][ C0] _raw_spin_lock_bh+0x39/0x40 [ 147.306839][ C0] get_dist_table+0x92/0xd0 [ 147.311346][ C0] netem_change+0x4da/0x5e0 [ 147.315693][ C0] netem_init+0x41/0x60 [ 147.319678][ C0] qdisc_create+0x1a9/0x4b0 [ 147.324032][ C0] ? security_capable+0x33/0x50 [ 147.328712][ C0] tc_modify_qdisc+0x13c/0x8d0 [ 147.333999][ C0] rtnetlink_rcv_msg+0x132/0x370 [ 147.339065][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 147.344875][ C0] ? rtnl_calcit.isra.0+0x110/0x110 [ 147.349918][ C0] netlink_rcv_skb+0x4e/0xf0 [ 147.358069][ C0] rtnetlink_rcv+0x10/0x20 [ 147.362404][ C0] netlink_unicast+0x250/0x340 [ 147.367108][ C0] netlink_sendmsg+0x239/0x470 [ 147.372050][ C0] sock_sendmsg+0x35/0x40 [ 147.376605][ C0] ____sys_sendmsg+0x23e/0x260 [ 147.381271][ C0] ? import_iovec+0x31/0x40 [ 147.385595][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 147.390652][ C0] ___sys_sendmsg+0x74/0xc0 [ 147.395234][ C0] ? do_futex+0xe4/0xb40 [ 147.399519][ C0] ? dev_get_by_name_rcu+0x9/0x20 [ 147.404317][ C0] ? netdev_name_node_lookup_rcu+0x5d/0x70 [ 147.410247][ C0] ? should_fail_usercopy+0x15/0x20 [ 147.415283][ C0] ? _copy_to_user+0x4a/0x60 [ 147.419873][ C0] ? __fget_light.part.0+0x87/0xd0 [ 147.424879][ C0] __sys_sendmsg+0x5d/0xb0 [ 147.429213][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 147.434004][ C0] do_syscall_64+0x32/0x80 [ 147.438235][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 147.444046][ C0] RIP: 0033:0x7f2a21660389 [ 147.448501][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 147.468460][ C0] RSP: 002b:00007f2a211d3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.476795][ C0] RAX: ffffffffffffffda RBX: 00007f2a2177ff80 RCX: 00007f2a21660389 [ 147.484690][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 147.492597][ C0] RBP: 00007f2a216ab493 R08: 0000000000000000 R09: 0000000000000000 [ 147.500642][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.508587][ C0] R13: 00007ffd8520c28f R14: 00007f2a211d3300 R15: 0000000000022000 [ 286.401663][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 123s! [syz-executor.0:433] [ 286.410191][ C0] Modules linked in: [ 286.413913][ C0] CPU: 0 PID: 433 Comm: syz-executor.0 Not tainted 5.10.185-syzkaller #0 [ 286.422243][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 286.432231][ C0] RIP: 0010:kvm_wait+0x3e/0x40 [ 286.436834][ C0] Code: 40 38 d6 74 03 50 9d c3 f6 c4 02 75 0f 0f 1f 44 00 00 0f 00 2d f1 76 35 01 f4 eb e9 0f 1f 44 00 00 0f 00 2d e2 76 35 01 fb f4 d9 8b 05 2a 89 d7 01 83 f8 ff 74 06 85 c0 0f 95 c0 c3 55 48 89 [ 286.457739][ C0] RSP: 0018:ffffc900006077b8 EFLAGS: 00000242 [ 286.463650][ C0] RAX: 0000000000000246 RBX: ffff888237c4a980 RCX: 0000000000000008 [ 286.471478][ C0] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff8881059d84ac [ 286.479528][ C0] RBP: ffffc900006077f8 R08: ffff88823fff1980 R09: 0000000000000000 [ 286.487535][ C0] R10: 0000000000000001 R11: ffff888237c4a980 R12: ffff8881059d84ac [ 286.495439][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000100 [ 286.503440][ C0] FS: 00007f2a211d3700(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 286.512486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.519024][ C0] CR2: 0000000020000080 CR3: 000000010e287000 CR4: 00000000003506b0 [ 286.527343][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.535593][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.543499][ C0] Call Trace: [ 286.547047][ C0] [ 286.549766][ C0] ? show_regs.part.0+0x1e/0x20 [ 286.554509][ C0] ? show_regs.cold+0x8/0xd [ 286.559220][ C0] ? watchdog_timer_fn+0x213/0x280 [ 286.564867][ C0] ? softlockup_fn+0x50/0x50 [ 286.569293][ C0] ? __hrtimer_run_queues+0x117/0x290 [ 286.574501][ C0] ? hrtimer_interrupt+0x104/0x2a0 [ 286.579554][ C0] ? __sysvec_apic_timer_interrupt+0x73/0x160 [ 286.585785][ C0] ? asm_call_irq_on_stack+0xf/0x20 [ 286.590833][ C0] [ 286.593680][ C0] ? sysvec_apic_timer_interrupt+0xb2/0xf0 [ 286.599331][ C0] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 286.605401][ C0] ? kvm_wait+0x3e/0x40 [ 286.609467][ C0] ? __pv_queued_spin_lock_slowpath+0x29f/0x2e0 [ 286.615553][ C0] _raw_spin_lock_bh+0x39/0x40 [ 286.620331][ C0] get_dist_table+0x92/0xd0 [ 286.624748][ C0] netem_change+0x4da/0x5e0 [ 286.629089][ C0] netem_init+0x41/0x60 [ 286.633167][ C0] qdisc_create+0x1a9/0x4b0 [ 286.637509][ C0] ? security_capable+0x33/0x50 [ 286.642194][ C0] tc_modify_qdisc+0x13c/0x8d0 [ 286.646969][ C0] rtnetlink_rcv_msg+0x132/0x370 [ 286.651831][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 286.656954][ C0] ? rtnl_calcit.isra.0+0x110/0x110 [ 286.662128][ C0] netlink_rcv_skb+0x4e/0xf0 [ 286.666851][ C0] rtnetlink_rcv+0x10/0x20 [ 286.671281][ C0] netlink_unicast+0x250/0x340 [ 286.676119][ C0] netlink_sendmsg+0x239/0x470 [ 286.681060][ C0] sock_sendmsg+0x35/0x40 [ 286.685332][ C0] ____sys_sendmsg+0x23e/0x260 [ 286.690017][ C0] ? import_iovec+0x31/0x40 [ 286.694429][ C0] ? sendmsg_copy_msghdr+0x79/0xa0 [ 286.699543][ C0] ___sys_sendmsg+0x74/0xc0 [ 286.703972][ C0] ? do_futex+0xe4/0xb40 [ 286.708284][ C0] ? dev_get_by_name_rcu+0x9/0x20 [ 286.713224][ C0] ? netdev_name_node_lookup_rcu+0x5d/0x70 [ 286.718856][ C0] ? should_fail_usercopy+0x15/0x20 [ 286.724088][ C0] ? _copy_to_user+0x4a/0x60 [ 286.728754][ C0] ? __fget_light.part.0+0x87/0xd0 [ 286.733701][ C0] __sys_sendmsg+0x5d/0xb0 [ 286.738040][ C0] __x64_sys_sendmsg+0x1a/0x20 [ 286.742641][ C0] do_syscall_64+0x32/0x80 [ 286.746893][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 286.752625][ C0] RIP: 0033:0x7f2a21660389 [ 286.757049][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 286.776895][ C0] RSP: 002b:00007f2a211d3168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.785291][ C0] RAX: ffffffffffffffda RBX: 00007f2a2177ff80 RCX: 00007f2a21660389 [ 286.793493][ C0] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 286.801259][ C0] RBP: 00007f2a216ab493 R08: 0000000000000000 R09: 0000000000000000 [ 286.809071][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.816999][ C0] R13: 00007ffd8520c28f R14: 00007f2a211d3300 R15: 0000000000022000 [ 286.825081][ C0] Sending NMI from CPU 0 to CPUs 1: [ 286.830214][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x5a/0x60