Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. 2024/11/10 19:18:39 ignoring optional flag "sandboxArg"="0" 2024/11/10 19:18:39 ignoring optional flag "type"="gce" 2024/11/10 19:18:39 parsed 1 programs [ 53.370020][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 53.370034][ T24] audit: type=1400 audit(1731266319.700:94): avc: denied { mount } for pid=351 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/11/10 19:18:39 executed programs: 0 [ 53.399396][ T24] audit: type=1400 audit(1731266319.730:95): avc: denied { unlink } for pid=351 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.430564][ T351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.483679][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.490832][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.497893][ T357] device bridge_slave_0 entered promiscuous mode [ 53.504629][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.511481][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.518656][ T357] device bridge_slave_1 entered promiscuous mode [ 53.553419][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.560303][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.567348][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.574186][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.590843][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.597900][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.605178][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.613307][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.622173][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.630217][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.637384][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.645943][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.654069][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.660921][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.672902][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.681857][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.695663][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.706701][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.714903][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.722450][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.730629][ T357] device veth0_vlan entered promiscuous mode [ 53.739895][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.748947][ T357] device veth1_macvtap entered promiscuous mode [ 53.757796][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.767557][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.781655][ T24] audit: type=1400 audit(1731266320.120:96): avc: denied { mounton } for pid=357 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 53.808664][ T24] audit: type=1400 audit(1731266320.130:97): avc: denied { map_create } for pid=362 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.828814][ T24] audit: type=1400 audit(1731266320.130:98): avc: denied { bpf } for pid=362 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.849703][ T24] audit: type=1400 audit(1731266320.130:99): avc: denied { map_read map_write } for pid=362 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.870309][ T24] audit: type=1400 audit(1731266320.130:100): avc: denied { prog_load } for pid=362 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 53.889635][ T24] audit: type=1400 audit(1731266320.130:101): avc: denied { perfmon } for pid=362 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.019472][ T24] audit: type=1400 audit(1731266320.350:102): avc: denied { prog_run } for pid=362 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 54.830772][ T24] audit: type=1400 audit(1731266321.170:103): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 2024/11/10 19:18:44 executed programs: 208 [ 199.005599][ C1] watchdog: BUG: soft lockup - CPU#1 stuck for 123s! [kworker/1:1:25] [ 199.013716][ C1] Modules linked in: [ 199.017443][ C1] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 5.10.226-syzkaller-1003449-g6a01908517df #0 [ 199.027257][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.037251][ C1] Workqueue: events bpf_prog_free_deferred [ 199.042870][ C1] RIP: 0010:smp_call_function_single+0x289/0x510 [ 199.049044][ C1] Code: 31 ff e8 fa ed 0a 00 41 83 e5 01 75 0a e8 3f ea 0a 00 e9 eb 00 00 00 f3 90 42 0f b6 04 23 84 c0 75 15 f7 44 24 48 01 00 00 00 <0f> 84 cd 00 00 00 e8 1c ea 0a 00 eb e0 44 89 f1 80 e1 07 80 c1 03 [ 199.069091][ C1] RSP: 0018:ffffc900001af780 EFLAGS: 00000202 [ 199.074981][ C1] RAX: 0000000000000000 RBX: 1ffff92000035ef9 RCX: ffff8881002f62c0 [ 199.082901][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 199.090703][ C1] RBP: ffffc900001af870 R08: ffffffff815fc2a6 R09: ffffed103ee0aec9 [ 199.098534][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 199.106421][ C1] R13: 0000000000000001 R14: ffffc900001af7c8 R15: 0000000000000000 [ 199.114236][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 199.123041][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.129638][ C1] CR2: 000000c001490000 CR3: 000000010d6b2000 CR4: 00000000003506a0 [ 199.137460][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.145230][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.153046][ C1] Call Trace: [ 199.156157][ C1] [ 199.158873][ C1] ? show_regs+0x58/0x60 [ 199.162924][ C1] ? watchdog_timer_fn+0x471/0x590 [ 199.167874][ C1] ? proc_watchdog_cpumask+0xd0/0xd0 [ 199.173006][ C1] ? __hrtimer_run_queues+0x3d7/0xa50 [ 199.178219][ C1] ? hrtimer_interrupt+0x8b0/0x8b0 [ 199.183168][ C1] ? clockevents_program_event+0x214/0x2c0 [ 199.188903][ C1] ? ktime_get_update_offsets_now+0x266/0x280 [ 199.194947][ C1] ? hrtimer_interrupt+0x39a/0x8b0 [ 199.199833][ C1] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 199.205856][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 199.211031][ C1] [ 199.213806][ C1] ? sysvec_apic_timer_interrupt+0x85/0xe0 [ 199.219434][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 199.225426][ C1] ? smp_call_function_single+0x266/0x510 [ 199.231078][ C1] ? smp_call_function_single+0x289/0x510 [ 199.236634][ C1] ? flush_tlb_all+0x20/0x20 [ 199.241063][ C1] ? flush_smp_call_function_from_idle+0x1b0/0x1b0 [ 199.247719][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 199.252574][ C1] ? flush_tlb_all+0x20/0x20 [ 199.256984][ C1] smp_call_function_many_cond+0x94e/0xa30 [ 199.262646][ C1] ? queue_work_on+0x105/0x160 [ 199.267217][ C1] ? flush_tlb_all+0x20/0x20 [ 199.271644][ C1] ? worker_thread+0xaea/0x1510 [ 199.276330][ C1] ? smp_call_function_many+0x40/0x40 [ 199.281762][ C1] ? flush_tlb_all+0x20/0x20 [ 199.286256][ C1] on_each_cpu+0xa8/0x1a0 [ 199.290431][ C1] ? ____kasan_slab_free+0x121/0x160 [ 199.295541][ C1] ? __kasan_slab_free+0x11/0x20 [ 199.300400][ C1] ? slab_free_freelist_hook+0xc0/0x190 [ 199.306007][ C1] ? kfree+0xc3/0x270 [ 199.309824][ C1] ? smp_call_function+0x90/0x90 [ 199.314598][ C1] ? find_next_bit+0xc7/0x100 [ 199.319141][ C1] ? cpumask_next+0x11/0x30 [ 199.323439][ C1] ? cpumask_next+0x23/0x30 [ 199.327782][ C1] flush_tlb_kernel_range+0x40/0x1c0 [ 199.332901][ C1] __purge_vmap_area_lazy+0x102/0x1620 [ 199.338193][ C1] ? __kasan_check_write+0x14/0x20 [ 199.343225][ C1] ? pcpu_free_vm_areas+0xc0/0xc0 [ 199.348103][ C1] ? find_next_bit+0xc7/0x100 [ 199.352606][ C1] ? cpumask_next+0x11/0x30 [ 199.356962][ C1] _vm_unmap_aliases+0x334/0x3b0 [ 199.361777][ C1] __vunmap+0x617/0x8f0 [ 199.365745][ C1] ? kfree+0xc3/0x270 [ 199.369539][ C1] vfree+0x5c/0x80 [ 199.373084][ C1] module_memfree+0x17/0x30 [ 199.377510][ C1] bpf_jit_free_exec+0x15/0x20 [ 199.382119][ C1] bpf_jit_binary_free+0x4e/0x2b0 [ 199.386984][ C1] bpf_jit_free+0x7c/0x1e0 [ 199.391237][ C1] bpf_prog_free_deferred+0x4ba/0x550 [ 199.396445][ C1] process_one_work+0x6dc/0xbd0 [ 199.401149][ C1] worker_thread+0xaea/0x1510 [ 199.405636][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 199.410325][ C1] ? __kasan_check_read+0x11/0x20 [ 199.415181][ C1] kthread+0x34b/0x3d0 [ 199.419276][ C1] ? worker_clr_flags+0x180/0x180 [ 199.424135][ C1] ? kthread_blkcg+0xd0/0xd0 [ 199.428648][ C1] ret_from_fork+0x1f/0x30 [ 199.432995][ C1] Sending NMI from CPU 1 to CPUs 0: [ 199.439028][ C1] NMI backtrace for cpu 0 [ 199.439040][ C1] CPU: 0 PID: 1052 Comm: syz-executor.0 Not tainted 5.10.226-syzkaller-1003449-g6a01908517df #0 [ 199.439045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.439048][ C1] RIP: 0010:kvm_wait+0xec/0x150 [ 199.439058][ C1] Code: 03 42 0f b6 04 20 84 c0 75 6a 41 0f b6 45 00 44 38 f0 75 26 41 f7 c7 00 02 00 00 75 0f 0f 1f 44 00 00 0f 00 2d 55 53 d5 03 f4 0e 0f 1f 44 00 00 0f 00 2d 46 53 d5 03 fb f4 4c 89 7c 24 18 ff [ 199.439062][ C1] RSP: 0018:ffffc90000bb6fa0 EFLAGS: 00000046 [ 199.439071][ C1] RAX: 0000000000000003 RBX: 1ffff92000176df8 RCX: ffffffff8150b854 [ 199.439075][ C1] RDX: 0000000000000001 RSI: 0000000000000003 RDI: ffffc90000bb6fe0 [ 199.439079][ C1] RBP: ffffc90000bb7050 R08: dffffc0000000000 R09: ffffed10223b6ea5 [ 199.439084][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 199.439088][ C1] R13: ffff888111db7520 R14: 0000000000000003 R15: 0000000000000046 [ 199.439093][ C1] FS: 00007fcb326906c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 199.439096][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.439101][ C1] CR2: 00007fcb32c390c0 CR3: 0000000120c51000 CR4: 00000000003506b0 [ 199.439105][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 199.439109][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 199.439111][ C1] Call Trace: [ 199.439113][ C1] [ 199.439116][ C1] ? show_regs+0x58/0x60 [ 199.439119][ C1] ? nmi_cpu_backtrace+0x133/0x160 [ 199.439122][ C1] ? kvm_wait+0xec/0x150 [ 199.439126][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 199.439128][ C1] ? nmi_handle+0xa8/0x280 [ 199.439131][ C1] ? kvm_wait+0xec/0x150 [ 199.439134][ C1] ? default_do_nmi+0x69/0x160 [ 199.439137][ C1] ? exc_nmi+0xad/0x100 [ 199.439140][ C1] ? end_repeat_nmi+0x16/0x31 [ 199.439143][ C1] ? __pv_queued_spin_lock_slowpath+0x6d4/0xc70 [ 199.439146][ C1] ? kvm_wait+0xec/0x150 [ 199.439148][ C1] ? kvm_wait+0xec/0x150 [ 199.439151][ C1] ? kvm_wait+0xec/0x150 [ 199.439153][ C1] [ 199.439156][ C1] ? __set_page_owner+0x3b/0x2d0 [ 199.439159][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 199.439162][ C1] ? save_stack+0x1c3/0x240 [ 199.439165][ C1] __pv_queued_spin_lock_slowpath+0x72f/0xc70 [ 199.439169][ C1] ? __pv_queued_spin_unlock_slowpath+0x280/0x280 [ 199.439172][ C1] ? __set_page_owner+0x2b7/0x2d0 [ 199.439175][ C1] _raw_spin_lock_irqsave+0x1a0/0x210 [ 199.439178][ C1] ? prep_new_page+0x166/0x180 [ 199.439181][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 199.439184][ C1] ? get_page_from_freelist+0x2d8c/0x2f30 [ 199.439187][ C1] ? smp_call_function_single+0x400/0x510 [ 199.439190][ C1] trie_delete_elem+0x94/0x760 [ 199.439193][ C1] bpf_prog_fdee3c9a1e8a2a6e+0x3d/0x26c [ 199.439196][ C1] bpf_trace_run4+0x13e/0x2e0 [ 199.439199][ C1] ? bpf_trace_run3+0x2c0/0x2c0 [ 199.439202][ C1] ? __alloc_pages_nodemask+0xaf0/0xaf0 [ 199.439205][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 199.439208][ C1] __alloc_pages_nodemask+0xa8e/0xaf0 [ 199.439211][ C1] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 199.439214][ C1] ? stack_trace_save+0x113/0x1c0 [ 199.439217][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 199.439220][ C1] new_slab+0x80/0x400 [ 199.439223][ C1] ___slab_alloc+0x302/0x4b0 [ 199.439226][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.439229][ C1] ? trie_update_elem+0x1b5/0xb30 [ 199.439232][ C1] __slab_alloc+0x63/0xa0 [ 199.439235][ C1] ? trie_update_elem+0x1b5/0xb30 [ 199.439238][ C1] ? trie_update_elem+0x1b5/0xb30 [ 199.439240][ C1] __kmalloc+0x204/0x330 [ 199.439244][ C1] ? trie_update_elem+0x1b5/0xb30 [ 199.439247][ C1] trie_update_elem+0x1b5/0xb30 [ 199.439250][ C1] bpf_map_update_value+0x230/0x420 [ 199.439252][ C1] __se_sys_bpf+0x7687/0x11cb0 [ 199.439256][ C1] ? futex_wait+0x6a0/0x7c0 [ 199.439260][ C1] ? __x64_sys_bpf+0x90/0x90 [ 199.439263][ C1] ? do_futex+0x17b0/0x17b0 [ 199.439265][ C1] ? do_futex+0x139a/0x17b0 [ 199.439268][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 199.439272][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 199.439275][ C1] ? _raw_spin_lock_irqsave+0x210/0x210 [ 199.439278][ C1] ? __kasan_check_write+0x14/0x20 [ 199.439281][ C1] ? set_current_blocked+0x40/0x40 [ 199.439284][ C1] ? __se_sys_futex+0x355/0x470 [ 199.439287][ C1] ? fpu__clear_all+0x20/0x20 [ 199.439290][ C1] ? __kasan_check_read+0x11/0x20 [ 199.439292][ C1] __x64_sys_bpf+0x7b/0x90 [ 199.439295][ C1] do_syscall_64+0x34/0x70 [ 199.439299][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 199.439302][ C1] RIP: 0033:0x7fcb32b0eda9 [ 199.439311][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 199.439315][ C1] RSP: 002b:00007fcb326900c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 199.439323][ C1] RAX: ffffffffffffffda RBX: 00007fcb32c3cf80 RCX: 00007fcb32b0eda9 [ 199.439328][ C1] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000002 [ 199.439332][ C1] RBP: 00007fcb32b5b47a R08: 0000000000000000 R09: 0000000000000000 [ 199.439336][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.439341][ C1] R13: 000000000000000b R14: 00007fcb32c3cf80 R15: 00007ffc523531a8