Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. 2024/08/24 04:15:36 ignoring optional flag "sandboxArg"="0" 2024/08/24 04:15:36 parsed 1 programs [ 47.075254][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 47.075267][ T24] audit: type=1400 audit(1724472936.960:94): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/08/24 04:15:37 executed programs: 0 [ 47.104992][ T24] audit: type=1400 audit(1724472936.990:95): avc: denied { unlink } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.135640][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.184976][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.191970][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.199288][ T348] device bridge_slave_0 entered promiscuous mode [ 47.206041][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.213010][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.220275][ T348] device bridge_slave_1 entered promiscuous mode [ 47.255245][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.262711][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.269780][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.276617][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.293514][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.300742][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.307990][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.315864][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.324513][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.332743][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.339562][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.348090][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.356390][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.363552][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.375615][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.390537][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.398753][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.409446][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.417781][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.425305][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.433633][ T348] device veth0_vlan entered promiscuous mode [ 47.443405][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.452372][ T348] device veth1_macvtap entered promiscuous mode [ 47.464562][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.473110][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.485716][ T24] audit: type=1400 audit(1724472937.370:96): avc: denied { mounton } for pid=348 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.510919][ T24] audit: type=1400 audit(1724472937.400:97): avc: denied { prog_load } for pid=354 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.530746][ T24] audit: type=1400 audit(1724472937.400:98): avc: denied { bpf } for pid=354 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.551665][ T24] audit: type=1400 audit(1724472937.400:99): avc: denied { perfmon } for pid=354 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.572856][ T24] audit: type=1400 audit(1724472937.440:100): avc: denied { prog_run } for pid=354 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.592178][ T24] audit: type=1400 audit(1724472937.440:101): avc: denied { map_create } for pid=354 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.611690][ T24] audit: type=1400 audit(1724472937.440:102): avc: denied { map_read map_write } for pid=354 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.228481][ T24] audit: type=1400 audit(1724472938.110:103): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 2024/08/24 04:15:42 executed programs: 765 2024/08/24 04:15:47 executed programs: 1604 [ 58.340911][ T5617] ------------[ cut here ]------------ [ 58.346354][ T5617] kernel BUG at kernel/bpf/arraymap.c:990! [ 58.352736][ T5617] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 58.358630][ T5617] CPU: 1 PID: 5617 Comm: kworker/1:6 Not tainted 5.10.223-syzkaller-1003215-g0890c03b8b7d #0 [ 58.368796][ T5617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 58.378707][ T5617] Workqueue: events prog_array_map_clear_deferred [ 58.385038][ T5617] RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 [ 58.391106][ T5617] Code: 93 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8d 93 e8 ff 0f 0b e9 de f9 ff ff e8 81 93 e8 ff 0f 0b e8 7a 93 e8 ff <0f> 0b e8 73 93 e8 ff 0f 0b e8 6c 93 e8 ff 0f 0b 66 2e 0f 1f 84 00 [ 58.411148][ T5617] RSP: 0018:ffffc90000c47b90 EFLAGS: 00010293 [ 58.416973][ T5617] RAX: ffffffff81821586 RBX: ffff888112de3d50 RCX: ffff888116993b40 [ 58.425190][ T5617] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 58.433117][ T5617] RBP: ffffc90000c47c28 R08: ffffffff81821311 R09: fffffbfff0c1d669 [ 58.441017][ T5617] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888115594e80 [ 58.448941][ T5617] R13: dffffc0000000000 R14: ffff888116790000 R15: 00000000fffffff0 [ 58.457144][ T5617] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 58.466164][ T5617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.473056][ T5617] CR2: 00007ffe1081dc18 CR3: 000000010e42b000 CR4: 00000000003506a0 [ 58.480992][ T5617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.489061][ T5617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.496863][ T5617] Call Trace: [ 58.499994][ T5617] ? __die_body+0x62/0xb0 [ 58.504144][ T5617] ? die+0x88/0xb0 [ 58.507714][ T5617] ? do_trap+0x1a4/0x310 [ 58.511817][ T5617] ? prog_array_map_poke_run+0x696/0x6b0 [ 58.517273][ T5617] ? handle_invalid_op+0x95/0xc0 [ 58.522060][ T5617] ? prog_array_map_poke_run+0x696/0x6b0 [ 58.527504][ T5617] ? exc_invalid_op+0x32/0x50 [ 58.532005][ T5617] ? asm_exc_invalid_op+0x12/0x20 [ 58.536953][ T5617] ? prog_array_map_poke_run+0x421/0x6b0 [ 58.543062][ T5617] ? prog_array_map_poke_run+0x696/0x6b0 [ 58.548497][ T5617] ? prog_array_map_poke_run+0x696/0x6b0 [ 58.553971][ T5617] ? bpf_prog_22fedb13000eacf7+0xb/0xcd0 [ 58.559431][ T5617] fd_array_map_delete_elem+0x154/0x250 [ 58.564815][ T5617] prog_array_map_clear_deferred+0xf8/0x210 [ 58.570553][ T5617] ? __bpf_array_map_seq_show+0x8b0/0x8b0 [ 58.576281][ T5617] ? __kasan_check_read+0x11/0x20 [ 58.581147][ T5617] ? read_word_at_a_time+0x12/0x20 [ 58.586094][ T5617] ? strscpy+0x9c/0x260 [ 58.590096][ T5617] process_one_work+0x6dc/0xbd0 [ 58.595055][ T5617] worker_thread+0xaea/0x1510 [ 58.599567][ T5617] ? _raw_spin_lock+0x1b0/0x1b0 [ 58.604344][ T5617] ? __kasan_check_read+0x11/0x20 [ 58.609208][ T5617] kthread+0x34b/0x3d0 [ 58.613106][ T5617] ? worker_clr_flags+0x180/0x180 [ 58.618409][ T5617] ? kthread_blkcg+0xd0/0xd0 [ 58.622846][ T5617] ret_from_fork+0x1f/0x30 [ 58.627278][ T5617] Modules linked in: [ 58.635028][ T5617] ---[ end trace 77529a5775a2b98a ]--- [ 58.640473][ T5617] RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 [ 58.646512][ T5617] Code: 93 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8d 93 e8 ff 0f 0b e9 de f9 ff ff e8 81 93 e8 ff 0f 0b e8 7a 93 e8 ff <0f> 0b e8 73 93 e8 ff 0f 0b e8 6c 93 e8 ff 0f 0b 66 2e 0f 1f 84 00 [ 58.666686][ T5617] RSP: 0018:ffffc90000c47b90 EFLAGS: 00010293 [ 58.672890][ T5617] RAX: ffffffff81821586 RBX: ffff888112de3d50 RCX: ffff888116993b40 [ 58.681191][ T5617] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 58.690258][ T5617] RBP: ffffc90000c47c28 R08: ffffffff81821311 R09: fffffbfff0c1d669 [ 58.698163][ T5617] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888115594e80 [ 58.706258][ T5617] R13: dffffc0000000000 R14: ffff888116790000 R15: 00000000fffffff0 [ 58.714352][ T5617] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 58.723457][ T5617] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.730044][ T5617] CR2: 00007f73d5c716cc CR3: 000000010c0e7000 CR4: 00000000003506a0 [ 58.738339][ T5617] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.747501][ T5617] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.755354][ T5617] Kernel panic - not syncing: Fatal exception [ 58.761374][ T5617] Kernel Offset: disabled [ 58.765514][ T5617] Rebooting in 86400 seconds..