Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. 2024/04/15 14:40:40 ignoring optional flag "sandboxArg"="0" 2024/04/15 14:40:40 parsed 1 programs [ 40.171987][ T28] audit: type=1400 audit(1713192040.564:158): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.197434][ T28] audit: type=1400 audit(1713192040.564:159): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/04/15 14:40:40 executed programs: 0 [ 40.240805][ T28] audit: type=1400 audit(1713192040.634:160): avc: denied { unlink } for pid=339 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 40.275350][ T339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.333962][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.341173][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.349080][ T346] device bridge_slave_0 entered promiscuous mode [ 40.356360][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.365471][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.372924][ T346] device bridge_slave_1 entered promiscuous mode [ 40.413129][ T28] audit: type=1400 audit(1713192040.804:161): avc: denied { write } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.418940][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.434293][ T28] audit: type=1400 audit(1713192040.804:162): avc: denied { read } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.441356][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.441494][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.476324][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.497021][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.504319][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.512427][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.519857][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.529089][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.537120][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.544308][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.561253][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.569780][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.578965][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.586423][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.595136][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.606172][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.617772][ T346] device veth0_vlan entered promiscuous mode [ 40.624060][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.632261][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.639934][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.651980][ T346] device veth1_macvtap entered promiscuous mode [ 40.661101][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.673556][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.683222][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.695002][ T28] audit: type=1400 audit(1713192041.084:163): avc: denied { mounton } for pid=346 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.728014][ T353] FAULT_INJECTION: forcing a failure. [ 40.728014][ T353] name failslab, interval 1, probability 0, space 0, times 1 [ 40.728565][ T28] audit: type=1400 audit(1713192041.114:164): avc: denied { map } for pid=352 comm="syz-executor.0" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 40.745379][ T353] CPU: 1 PID: 353 Comm: syz-executor.0 Not tainted 6.1.75-syzkaller-1150980-g77fec6cefe26 #0 [ 40.774084][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 40.785041][ T353] Call Trace: [ 40.788151][ T353] [ 40.790940][ T353] dump_stack_lvl+0x151/0x1b7 [ 40.795902][ T353] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 40.801544][ T353] ? __kasan_check_read+0x11/0x20 [ 40.806500][ T353] ? call_rcu+0xd98/0x1340 [ 40.810831][ T353] dump_stack+0x15/0x1b [ 40.815033][ T353] should_fail_ex+0x3d0/0x520 [ 40.819614][ T353] ? mas_alloc_nodes+0x267/0x7d0 [ 40.824473][ T353] __should_failslab+0xaf/0xf0 [ 40.829157][ T353] should_failslab+0x9/0x20 [ 40.833827][ T353] kmem_cache_alloc+0x3b/0x2c0 [ 40.838889][ T353] mas_alloc_nodes+0x267/0x7d0 [ 40.843727][ T353] mas_preallocate+0xef2/0x1bd0 [ 40.848535][ T353] ? mas_destroy+0x3280/0x3280 [ 40.853323][ T353] ? rwsem_write_trylock+0x15b/0x290 [ 40.858866][ T353] vma_expand+0x2f2/0xa10 [ 40.863020][ T353] ? can_vma_merge_after+0x99/0x300 [ 40.868131][ T353] mmap_region+0xde5/0x2390 [ 40.872557][ T353] ? file_mmap_ok+0x150/0x150 [ 40.877084][ T353] ? shmem_get_unmapped_area+0x2e3/0x710 [ 40.882997][ T353] ? arch_get_unmapped_area+0x780/0x780 [ 40.888711][ T353] ? match_file+0x140/0x140 [ 40.893579][ T353] ? cap_mmap_addr+0x169/0x2e0 [ 40.898249][ T353] ? file_mmap_ok+0x104/0x150 [ 40.902998][ T353] do_mmap+0x853/0xe30 [ 40.906998][ T353] ? mlock_future_check+0x110/0x110 [ 40.912449][ T353] vm_mmap_pgoff+0x208/0x430 [ 40.917211][ T353] ? account_locked_vm+0x250/0x250 [ 40.922348][ T353] ? __fget_files+0x2cb/0x330 [ 40.927312][ T353] ksys_mmap_pgoff+0x15d/0x1e0 [ 40.933107][ T353] __x64_sys_mmap+0x103/0x120 [ 40.938919][ T353] do_syscall_64+0x3d/0xb0 [ 40.943166][ T353] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.948885][ T353] RIP: 0033:0x7ff58f87cda9 [ 40.953347][ T353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.972949][ T353] RSP: 002b:00007ff59051d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 40.981291][ T353] RAX: ffffffffffffffda RBX: 00007ff58f9abf80 RCX: 00007ff58f87cda9 [ 40.989286][ T353] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 40.997227][ T353] RBP: 00007ff59051d120 R08: 0000000000000003 R09: 0000000008000000 [ 41.005193][ T353] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 41.013009][ T353] R13: 000000000000000b R14: 00007ff58f9abf80 R15: 00007fffef82fc38 [ 41.020910][ T353] [ 41.025280][ T353] ------------[ cut here ]------------ [ 41.030614][ T353] kernel BUG at mm/mmap.c:2828! [ 41.035302][ T353] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.041227][ T353] CPU: 0 PID: 353 Comm: syz-executor.0 Not tainted 6.1.75-syzkaller-1150980-g77fec6cefe26 #0 [ 41.051206][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 41.061096][ T353] RIP: 0010:mmap_region+0x225e/0x2390 [ 41.066457][ T353] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 e3 66 09 00 e9 11 fc ff ff e8 19 9f c2 ff 0f 0b e8 12 9f c2 ff <0f> 0b 65 8b 05 99 54 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 41.086267][ T353] RSP: 0018:ffffc90002ecfa40 EFLAGS: 00010293 [ 41.092141][ T353] RAX: ffffffff81b2bcbe RBX: 0000000020ffefff RCX: ffff888126862880 [ 41.100219][ T353] RDX: 0000000000000000 RSI: 0000000020ffefff RDI: 0000000020fff000 [ 41.108196][ T353] RBP: ffffc90002ecfc50 R08: ffffffff81b2a901 R09: ffffffff84ef5d43 [ 41.116120][ T353] R10: 0000000000000003 R11: ffff888126862880 R12: ffffc90002ecfba8 [ 41.123999][ T353] R13: dffffc0000000000 R14: 0000000020ffd000 R15: 0000000020fff000 [ 41.131890][ T353] FS: 00007ff59051d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.140659][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.147078][ T353] CR2: 00007fff8e9cabe8 CR3: 0000000121b6e000 CR4: 00000000003506b0 [ 41.154980][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.162989][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.171114][ T353] Call Trace: [ 41.174219][ T353] [ 41.176993][ T353] ? __die_body+0x62/0xb0 [ 41.181247][ T353] ? die+0x88/0xb0 [ 41.184993][ T353] ? do_trap+0x103/0x330 [ 41.189076][ T353] ? mmap_region+0x225e/0x2390 [ 41.193746][ T353] ? handle_invalid_op+0x95/0xc0 [ 41.198603][ T353] ? mmap_region+0x225e/0x2390 [ 41.203209][ T353] ? exc_invalid_op+0x32/0x50 [ 41.207720][ T353] ? asm_exc_invalid_op+0x1b/0x20 [ 41.212586][ T353] ? mas_next_slot+0x413/0xb00 [ 41.217273][ T353] ? mmap_region+0xea1/0x2390 [ 41.222151][ T353] ? mmap_region+0x225e/0x2390 [ 41.226911][ T353] ? mmap_region+0x225e/0x2390 [ 41.231613][ T353] ? file_mmap_ok+0x150/0x150 [ 41.236215][ T353] ? shmem_get_unmapped_area+0x2e3/0x710 [ 41.241763][ T353] ? arch_get_unmapped_area+0x780/0x780 [ 41.247248][ T353] ? match_file+0x140/0x140 [ 41.251757][ T353] ? cap_mmap_addr+0x169/0x2e0 [ 41.256705][ T353] ? file_mmap_ok+0x104/0x150 [ 41.261321][ T353] do_mmap+0x853/0xe30 [ 41.265387][ T353] ? mlock_future_check+0x110/0x110 [ 41.270421][ T353] vm_mmap_pgoff+0x208/0x430 [ 41.274989][ T353] ? account_locked_vm+0x250/0x250 [ 41.280511][ T353] ? __fget_files+0x2cb/0x330 [ 41.285020][ T353] ksys_mmap_pgoff+0x15d/0x1e0 [ 41.289804][ T353] __x64_sys_mmap+0x103/0x120 [ 41.294297][ T353] do_syscall_64+0x3d/0xb0 [ 41.298545][ T353] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.304276][ T353] RIP: 0033:0x7ff58f87cda9 [ 41.308740][ T353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.328253][ T353] RSP: 002b:00007ff59051d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 41.336502][ T353] RAX: ffffffffffffffda RBX: 00007ff58f9abf80 RCX: 00007ff58f87cda9 [ 41.344389][ T353] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffd000 [ 41.352211][ T353] RBP: 00007ff59051d120 R08: 0000000000000003 R09: 0000000008000000 [ 41.360126][ T353] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 41.368405][ T353] R13: 000000000000000b R14: 00007ff58f9abf80 R15: 00007fffef82fc38 [ 41.376404][ T353] [ 41.379451][ T353] Modules linked in: [ 41.384613][ T353] ---[ end trace 0000000000000000 ]--- [ 41.390544][ T353] RIP: 0010:mmap_region+0x225e/0x2390 [ 41.396254][ T353] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 e3 66 09 00 e9 11 fc ff ff e8 19 9f c2 ff 0f 0b e8 12 9f c2 ff <0f> 0b 65 8b 05 99 54 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 41.416939][ T353] RSP: 0018:ffffc90002ecfa40 EFLAGS: 00010293 [ 41.423760][ T353] RAX: ffffffff81b2bcbe RBX: 0000000020ffefff RCX: ffff888126862880 [ 41.432636][ T353] RDX: 0000000000000000 RSI: 0000000020ffefff RDI: 0000000020fff000 [ 41.440679][ T353] RBP: ffffc90002ecfc50 R08: ffffffff81b2a901 R09: ffffffff84ef5d43 [ 41.448574][ T353] R10: 0000000000000003 R11: ffff888126862880 R12: ffffc90002ecfba8 [ 41.456547][ T353] R13: dffffc0000000000 R14: 0000000020ffd000 R15: 0000000020fff000 [ 41.464719][ T353] FS: 00007ff59051d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.474372][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.482310][ T353] CR2: 00007fff8e9cabe8 CR3: 0000000121b6e000 CR4: 00000000003506b0 [ 41.490664][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.500516][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.508653][ T353] Kernel panic - not syncing: Fatal exception [ 41.514677][ T353] Kernel Offset: disabled [ 41.521967][ T353] Rebooting in 86400 seconds..