Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. 2024/02/05 11:03:57 ignoring optional flag "sandboxArg"="0" 2024/02/05 11:03:57 parsed 1 programs [ 39.890410][ T28] audit: type=1400 audit(1707131037.940:158): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.916206][ T28] audit: type=1400 audit(1707131037.950:159): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.941764][ T28] audit: type=1400 audit(1707131038.000:160): avc: denied { unlink } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/02/05 11:03:58 executed programs: 0 [ 39.994544][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.054569][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.061722][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.069252][ T347] device bridge_slave_0 entered promiscuous mode [ 40.075987][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.083512][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.091470][ T347] device bridge_slave_1 entered promiscuous mode [ 40.138994][ T28] audit: type=1400 audit(1707131038.190:161): avc: denied { write } for pid=347 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.144959][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.159857][ T28] audit: type=1400 audit(1707131038.190:162): avc: denied { read } for pid=347 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.166688][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.194244][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.201064][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.222421][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.229474][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.237210][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.245052][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.255287][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.264140][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.271461][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.287910][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.295988][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.302936][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.310209][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.318234][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.333011][ T347] device veth0_vlan entered promiscuous mode [ 40.340272][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.349291][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.358053][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.365440][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.378309][ T347] device veth1_macvtap entered promiscuous mode [ 40.387759][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.396262][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.410825][ T28] audit: type=1400 audit(1707131038.460:163): avc: denied { mounton } for pid=347 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.411939][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.451712][ T352] FAULT_INJECTION: forcing a failure. [ 40.451712][ T352] name failslab, interval 1, probability 0, space 0, times 1 [ 40.457559][ T28] audit: type=1400 audit(1707131038.500:164): avc: denied { map } for pid=351 comm="syz-executor.0" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 40.465026][ T352] CPU: 0 PID: 352 Comm: syz-executor.0 Not tainted 6.1.68-syzkaller-1150765-g76f0396b5761 #0 [ 40.498610][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 40.508525][ T352] Call Trace: [ 40.511634][ T352] [ 40.514402][ T352] dump_stack_lvl+0x151/0x1b7 [ 40.519015][ T352] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 40.524408][ T352] ? __kasan_check_read+0x11/0x20 [ 40.529256][ T352] ? call_rcu+0xd98/0x1340 [ 40.533497][ T352] dump_stack+0x15/0x1b [ 40.537579][ T352] should_fail_ex+0x3d0/0x520 [ 40.542088][ T352] ? mas_alloc_nodes+0x267/0x7d0 [ 40.546884][ T352] __should_failslab+0xaf/0xf0 [ 40.551554][ T352] should_failslab+0x9/0x20 [ 40.555899][ T352] kmem_cache_alloc+0x3b/0x2c0 [ 40.560527][ T352] mas_alloc_nodes+0x267/0x7d0 [ 40.565832][ T352] mas_preallocate+0xef2/0x1bd0 [ 40.570672][ T352] ? mas_destroy+0x3280/0x3280 [ 40.576541][ T352] ? rwsem_write_trylock+0x15b/0x290 [ 40.582108][ T352] vma_expand+0x2f2/0xa10 [ 40.586509][ T352] ? can_vma_merge_after+0x99/0x300 [ 40.591653][ T352] mmap_region+0xde5/0x2390 [ 40.595985][ T352] ? file_mmap_ok+0x150/0x150 [ 40.600618][ T352] ? shmem_get_unmapped_area+0x2e3/0x710 [ 40.606058][ T352] ? arch_get_unmapped_area+0x780/0x780 [ 40.612235][ T352] ? match_file+0x140/0x140 [ 40.617130][ T352] ? cap_mmap_addr+0x169/0x2e0 [ 40.622410][ T352] ? file_mmap_ok+0x104/0x150 [ 40.627266][ T352] do_mmap+0x853/0xe30 [ 40.631778][ T352] ? mlock_future_check+0x110/0x110 [ 40.637171][ T352] vm_mmap_pgoff+0x208/0x430 [ 40.642722][ T352] ? account_locked_vm+0x250/0x250 [ 40.648536][ T352] ? __fget_files+0x2cb/0x330 [ 40.653145][ T352] ksys_mmap_pgoff+0x15d/0x1e0 [ 40.657919][ T352] __x64_sys_mmap+0x103/0x120 [ 40.662418][ T352] do_syscall_64+0x3d/0xb0 [ 40.666670][ T352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.672743][ T352] RIP: 0033:0x7f407c67cda9 [ 40.677083][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.696965][ T352] RSP: 002b:00007f407d4960c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 40.705199][ T352] RAX: ffffffffffffffda RBX: 00007f407c7abf80 RCX: 00007f407c67cda9 [ 40.713244][ T352] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 40.721135][ T352] RBP: 00007f407d496120 R08: 0000000000000003 R09: 0000000008000000 [ 40.729030][ T352] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 40.736926][ T352] R13: 000000000000000b R14: 00007f407c7abf80 R15: 00007ffe97255a48 [ 40.744828][ T352] [ 40.748292][ T352] ------------[ cut here ]------------ [ 40.754027][ T352] kernel BUG at mm/mmap.c:2828! [ 40.758899][ T352] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 40.765078][ T352] CPU: 1 PID: 352 Comm: syz-executor.0 Not tainted 6.1.68-syzkaller-1150765-g76f0396b5761 #0 [ 40.775321][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 40.785488][ T352] RIP: 0010:mmap_region+0x225e/0x2390 [ 40.790691][ T352] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 83 62 09 00 e9 11 fc ff ff e8 89 be c2 ff 0f 0b e8 82 be c2 ff <0f> 0b 65 8b 05 e9 79 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 40.810695][ T352] RSP: 0018:ffffc90002ddfa40 EFLAGS: 00010293 [ 40.816611][ T352] RAX: ffffffff81b2976e RBX: 0000000020ffefff RCX: ffff88810f24d100 [ 40.824513][ T352] RDX: 0000000000000000 RSI: 0000000020ffefff RDI: 0000000020fff000 [ 40.832317][ T352] RBP: ffffc90002ddfc50 R08: ffffffff81b283b1 R09: ffffffff84eebd43 [ 40.840127][ T352] R10: 0000000000000003 R11: ffff88810f24d100 R12: ffffc90002ddfba8 [ 40.847943][ T352] R13: dffffc0000000000 R14: 0000000020ffd000 R15: 0000000020fff000 [ 40.856033][ T352] FS: 00007f407d4966c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.864945][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.871533][ T352] CR2: 000055c04c174ee8 CR3: 0000000124a0e000 CR4: 00000000003506a0 [ 40.879430][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.887509][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.895428][ T352] Call Trace: [ 40.898704][ T352] [ 40.901698][ T352] ? __die_body+0x62/0xb0 [ 40.906017][ T352] ? die+0x88/0xb0 [ 40.909568][ T352] ? do_trap+0x103/0x330 [ 40.913826][ T352] ? mmap_region+0x225e/0x2390 [ 40.918511][ T352] ? handle_invalid_op+0x95/0xc0 [ 40.923458][ T352] ? mmap_region+0x225e/0x2390 [ 40.928055][ T352] ? exc_invalid_op+0x32/0x50 [ 40.932880][ T352] ? asm_exc_invalid_op+0x1b/0x20 [ 40.937736][ T352] ? mas_next_slot+0x413/0xb00 [ 40.942420][ T352] ? mmap_region+0xea1/0x2390 [ 40.947080][ T352] ? mmap_region+0x225e/0x2390 [ 40.952020][ T352] ? mmap_region+0x225e/0x2390 [ 40.956663][ T352] ? file_mmap_ok+0x150/0x150 [ 40.961141][ T352] ? shmem_get_unmapped_area+0x2e3/0x710 [ 40.966599][ T352] ? arch_get_unmapped_area+0x780/0x780 [ 40.971986][ T352] ? match_file+0x140/0x140 [ 40.976323][ T352] ? cap_mmap_addr+0x169/0x2e0 [ 40.981011][ T352] ? file_mmap_ok+0x104/0x150 [ 40.985518][ T352] do_mmap+0x853/0xe30 [ 40.989510][ T352] ? mlock_future_check+0x110/0x110 [ 40.994664][ T352] vm_mmap_pgoff+0x208/0x430 [ 40.999091][ T352] ? account_locked_vm+0x250/0x250 [ 41.004047][ T352] ? __fget_files+0x2cb/0x330 [ 41.008544][ T352] ksys_mmap_pgoff+0x15d/0x1e0 [ 41.013326][ T352] __x64_sys_mmap+0x103/0x120 [ 41.018003][ T352] do_syscall_64+0x3d/0xb0 [ 41.022351][ T352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.028511][ T352] RIP: 0033:0x7f407c67cda9 [ 41.033066][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.052819][ T352] RSP: 002b:00007f407d4960c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 41.061404][ T352] RAX: ffffffffffffffda RBX: 00007f407c7abf80 RCX: 00007f407c67cda9 [ 41.069471][ T352] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 41.078072][ T352] RBP: 00007f407d496120 R08: 0000000000000003 R09: 0000000008000000 [ 41.085959][ T352] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 41.093770][ T352] R13: 000000000000000b R14: 00007f407c7abf80 R15: 00007ffe97255a48 [ 41.101597][ T352] [ 41.104459][ T352] Modules linked in: [ 41.108952][ T352] ---[ end trace 0000000000000000 ]--- [ 41.114502][ T352] RIP: 0010:mmap_region+0x225e/0x2390 [ 41.119854][ T352] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 83 62 09 00 e9 11 fc ff ff e8 89 be c2 ff 0f 0b e8 82 be c2 ff <0f> 0b 65 8b 05 e9 79 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 41.140816][ T352] RSP: 0018:ffffc90002ddfa40 EFLAGS: 00010293 [ 41.147033][ T352] RAX: ffffffff81b2976e RBX: 0000000020ffefff RCX: ffff88810f24d100 [ 41.155404][ T352] RDX: 0000000000000000 RSI: 0000000020ffefff RDI: 0000000020fff000 [ 41.163689][ T352] RBP: ffffc90002ddfc50 R08: ffffffff81b283b1 R09: ffffffff84eebd43 [ 41.172715][ T352] R10: 0000000000000003 R11: ffff88810f24d100 R12: ffffc90002ddfba8 [ 41.180795][ T352] R13: dffffc0000000000 R14: 0000000020ffd000 R15: 0000000020fff000 [ 41.188589][ T352] FS: 00007f407d4966c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 41.197968][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.204673][ T352] CR2: 000055c04c174ee8 CR3: 0000000124a0e000 CR4: 00000000003506a0 [ 41.213247][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.221283][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.229339][ T352] Kernel panic - not syncing: Fatal exception [ 41.235650][ T352] Kernel Offset: disabled [ 41.240618][ T352] Rebooting in 86400 seconds..