Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. 2024/08/24 04:22:36 ignoring optional flag "sandboxArg"="0" 2024/08/24 04:22:36 parsed 1 programs [ 48.103288][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 48.103301][ T24] audit: type=1400 audit(1724473356.840:94): avc: denied { mount } for pid=345 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.133775][ T24] audit: type=1400 audit(1724473356.880:95): avc: denied { unlink } for pid=345 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/08/24 04:22:36 executed programs: 0 [ 48.198020][ T345] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.255811][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.262747][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.270262][ T351] device bridge_slave_0 entered promiscuous mode [ 48.277159][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.283986][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.291390][ T351] device bridge_slave_1 entered promiscuous mode [ 48.326947][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.334050][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.341285][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.348136][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.365732][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.373033][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.380488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.388766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.406689][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.414709][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.421836][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.429984][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.438218][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.445043][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.452275][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.460056][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.468586][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.479860][ T351] device veth0_vlan entered promiscuous mode [ 48.486416][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.494491][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.501916][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.513973][ T351] device veth1_macvtap entered promiscuous mode [ 48.521356][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.534825][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.543187][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.555980][ T24] audit: type=1400 audit(1724473357.300:96): avc: denied { mounton } for pid=351 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.582010][ T24] audit: type=1400 audit(1724473357.300:97): avc: denied { prog_load } for pid=356 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.601449][ T24] audit: type=1400 audit(1724473357.300:98): avc: denied { bpf } for pid=356 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.622672][ T24] audit: type=1400 audit(1724473357.300:99): avc: denied { perfmon } for pid=356 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.644422][ T24] audit: type=1400 audit(1724473357.320:100): avc: denied { prog_run } for pid=356 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.663740][ T24] audit: type=1400 audit(1724473357.320:101): avc: denied { map_create } for pid=356 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.685842][ T24] audit: type=1400 audit(1724473357.320:102): avc: denied { map_read map_write } for pid=356 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.436101][ T306] ------------[ cut here ]------------ [ 49.441534][ T306] kernel BUG at kernel/bpf/arraymap.c:990! [ 49.447436][ T306] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 49.453322][ T306] CPU: 0 PID: 306 Comm: kworker/0:3 Not tainted 5.10.223-syzkaller-1003215-g0890c03b8b7d #0 [ 49.463292][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.473218][ T306] Workqueue: events prog_array_map_clear_deferred [ 49.479628][ T306] RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 [ 49.485770][ T306] Code: 93 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8d 93 e8 ff 0f 0b e9 de f9 ff ff e8 81 93 e8 ff 0f 0b e8 7a 93 e8 ff <0f> 0b e8 73 93 e8 ff 0f 0b e8 6c 93 e8 ff 0f 0b 66 2e 0f 1f 84 00 [ 49.505570][ T306] RSP: 0018:ffffc90000ec7b90 EFLAGS: 00010293 [ 49.511552][ T306] RAX: ffffffff81821586 RBX: ffff888111b01110 RCX: ffff88811f2e2780 [ 49.519362][ T306] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 49.527261][ T306] RBP: ffffc90000ec7c28 R08: ffffffff81821311 R09: fffffbfff0c1d669 [ 49.535063][ T306] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888111c98280 [ 49.542963][ T306] R13: dffffc0000000000 R14: ffff88811217c400 R15: 00000000fffffff0 [ 49.550871][ T306] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 49.559697][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.566323][ T306] CR2: 00007f2c84977988 CR3: 000000010c0ee000 CR4: 00000000003506b0 [ 49.574299][ T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.582201][ T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.590305][ T306] Call Trace: [ 49.593473][ T306] ? __die_body+0x62/0xb0 [ 49.597764][ T306] ? die+0x88/0xb0 [ 49.601640][ T306] ? do_trap+0x1a4/0x310 [ 49.605736][ T306] ? prog_array_map_poke_run+0x696/0x6b0 [ 49.611418][ T306] ? handle_invalid_op+0x95/0xc0 [ 49.616260][ T306] ? prog_array_map_poke_run+0x696/0x6b0 [ 49.621732][ T306] ? exc_invalid_op+0x32/0x50 [ 49.626242][ T306] ? asm_exc_invalid_op+0x12/0x20 [ 49.631099][ T306] ? prog_array_map_poke_run+0x421/0x6b0 [ 49.636659][ T306] ? prog_array_map_poke_run+0x696/0x6b0 [ 49.642127][ T306] ? prog_array_map_poke_run+0x696/0x6b0 [ 49.647591][ T306] ? bpf_prog_22fedb13000eacf7+0xb/0xb14 [ 49.653066][ T306] fd_array_map_delete_elem+0x154/0x250 [ 49.658796][ T306] prog_array_map_clear_deferred+0xf8/0x210 [ 49.664515][ T306] ? __bpf_array_map_seq_show+0x8b0/0x8b0 [ 49.670295][ T306] ? __kasan_check_read+0x11/0x20 [ 49.675113][ T306] ? read_word_at_a_time+0x12/0x20 [ 49.680233][ T306] ? strscpy+0x9c/0x260 [ 49.684316][ T306] process_one_work+0x6dc/0xbd0 [ 49.689086][ T306] worker_thread+0xaea/0x1510 [ 49.693676][ T306] ? _raw_spin_lock+0x1b0/0x1b0 [ 49.698451][ T306] ? __kasan_check_read+0x11/0x20 [ 49.703313][ T306] kthread+0x34b/0x3d0 [ 49.707214][ T306] ? worker_clr_flags+0x180/0x180 [ 49.712283][ T306] ? kthread_blkcg+0xd0/0xd0 [ 49.716701][ T306] ret_from_fork+0x1f/0x30 [ 49.720958][ T306] Modules linked in: [ 49.727204][ T306] ---[ end trace 6ee3d04f1bcf151e ]--- [ 49.732545][ T306] RIP: 0010:prog_array_map_poke_run+0x696/0x6b0 [ 49.738647][ T306] Code: 93 e8 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8d 93 e8 ff 0f 0b e9 de f9 ff ff e8 81 93 e8 ff 0f 0b e8 7a 93 e8 ff <0f> 0b e8 73 93 e8 ff 0f 0b e8 6c 93 e8 ff 0f 0b 66 2e 0f 1f 84 00 [ 49.758288][ T306] RSP: 0018:ffffc90000ec7b90 EFLAGS: 00010293 [ 49.764186][ T306] RAX: ffffffff81821586 RBX: ffff888111b01110 RCX: ffff88811f2e2780 [ 49.772153][ T306] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 49.780193][ T306] RBP: ffffc90000ec7c28 R08: ffffffff81821311 R09: fffffbfff0c1d669 [ 49.789080][ T306] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888111c98280 [ 49.797049][ T306] R13: dffffc0000000000 R14: ffff88811217c400 R15: 00000000fffffff0 [ 49.804854][ T306] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 49.813876][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.820469][ T306] CR2: 00007f2c849720d0 CR3: 000000010c0fb000 CR4: 00000000003506b0 [ 49.828463][ T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.836498][ T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.844307][ T306] Kernel panic - not syncing: Fatal exception [ 49.850604][ T306] Kernel Offset: disabled [ 49.854740][ T306] Rebooting in 86400 seconds..