Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. 2024/08/04 21:30:43 ignoring optional flag "sandboxArg"="0" 2024/08/04 21:30:43 parsed 1 programs [ 48.241123][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 48.241137][ T24] audit: type=1400 audit(1722807043.990:94): avc: denied { mount } for pid=344 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/08/04 21:30:44 executed programs: 0 [ 48.271301][ T24] audit: type=1400 audit(1722807044.020:95): avc: denied { unlink } for pid=344 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.304535][ T344] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.355935][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.363011][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.370698][ T351] device bridge_slave_0 entered promiscuous mode [ 48.377639][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.384965][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.392692][ T351] device bridge_slave_1 entered promiscuous mode [ 48.429406][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.436402][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.443515][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.450772][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.468365][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.475736][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.483162][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.491765][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.500805][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.508923][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.515879][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.524696][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.532804][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.540514][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.551992][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.569740][ T351] device veth0_vlan entered promiscuous mode [ 48.576398][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.585013][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.592818][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.600171][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.608614][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.621221][ T351] device veth1_macvtap entered promiscuous mode [ 48.628217][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.641513][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.650310][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.662819][ T24] audit: type=1400 audit(1722807044.420:96): avc: denied { mounton } for pid=351 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.688680][ T24] audit: type=1400 audit(1722807044.440:97): avc: denied { mounton } for pid=356 comm="syz-executor.0" path="/root/syzkaller-testdir2090680147/syzkaller.E23sFJ/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 48.689773][ T357] incfs: ino conflict with backing FS 1 [ 48.716256][ T24] audit: type=1400 audit(1722807044.440:98): avc: denied { mount } for pid=356 comm="syz-executor.0" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.722811][ T357] incfs: ino conflict with backing FS 5 [ 48.743261][ T24] audit: type=1400 audit(1722807044.440:99): avc: denied { mounton } for pid=356 comm="syz-executor.0" path="/root/syzkaller-testdir2090680147/syzkaller.E23sFJ/0/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.743283][ T24] audit: type=1400 audit(1722807044.470:100): avc: denied { write } for pid=356 comm="syz-executor.0" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.749577][ T357] incfs: ino conflict with backing FS 2 [ 48.776092][ T24] audit: type=1400 audit(1722807044.470:101): avc: denied { add_name } for pid=356 comm="syz-executor.0" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.799048][ T357] ------------[ cut here ]------------ [ 48.803480][ T24] audit: type=1400 audit(1722807044.470:102): avc: denied { create } for pid=356 comm="syz-executor.0" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.803505][ T24] audit: type=1400 audit(1722807044.470:103): avc: denied { associate } for pid=356 comm="syz-executor.0" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.838209][ T357] WARNING: CPU: 0 PID: 357 at fs/inode.c:304 drop_nlink+0xc1/0x110 [ 48.919374][ T357] Modules linked in: [ 48.923201][ T357] CPU: 1 PID: 357 Comm: syz-executor.0 Not tainted 5.10.222-syzkaller-1003210-gfd58936f3c1f #0 [ 48.934115][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 48.944458][ T357] RIP: 0010:drop_nlink+0xc1/0x110 [ 48.949420][ T357] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 07 ce f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 35 b3 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 48.969127][ T357] RSP: 0018:ffffc90000f178b8 EFLAGS: 00010293 [ 48.974953][ T357] RAX: ffffffff81b77361 RBX: 0000000000000000 RCX: ffff88810b244f00 [ 48.983832][ T357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.991870][ T357] RBP: ffffc90000f178e0 R08: ffffffff81b772e4 R09: 0000000066aff304 [ 49.000531][ T357] R10: 000000002160ef54 R11: 0000000066aff304 R12: dffffc0000000000 [ 49.009332][ T357] R13: 1ffff11023e8b171 R14: ffff88811f458b40 R15: ffff88811f458b88 [ 49.017371][ T357] FS: 00007fe9a42a16c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 49.026669][ T357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.033120][ T357] CR2: 00007fe9a484f988 CR3: 0000000120b23000 CR4: 00000000003506a0 [ 49.041488][ T357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.049718][ T357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.057828][ T357] Call Trace: [ 49.060942][ T357] ? show_regs+0x58/0x60 [ 49.065161][ T357] ? __warn+0x160/0x2f0 [ 49.069460][ T357] ? drop_nlink+0xc1/0x110 [ 49.073998][ T357] ? report_bug+0x3d9/0x5b0 [ 49.078319][ T357] ? drop_nlink+0xc1/0x110 [ 49.082657][ T357] ? handle_bug+0x41/0x70 [ 49.087388][ T357] ? exc_invalid_op+0x1b/0x50 [ 49.091793][ T357] ? asm_exc_invalid_op+0x12/0x20 [ 49.096958][ T357] ? drop_nlink+0x44/0x110 [ 49.101196][ T357] ? drop_nlink+0xc1/0x110 [ 49.105864][ T357] ? drop_nlink+0xc1/0x110 [ 49.110192][ T357] ? drop_nlink+0xc1/0x110 [ 49.114797][ T357] shmem_unlink+0x22b/0x280 [ 49.119147][ T357] shmem_rename2+0x12c/0x5b0 [ 49.124022][ T357] vfs_rename+0x9fb/0xeb0 [ 49.128468][ T357] ? __ia32_sys_link+0x70/0x70 [ 49.133050][ T357] ? lockref_get_not_zero+0xce/0x1a0 [ 49.138318][ T357] ? lock_rename+0xdd/0xf0 [ 49.142717][ T357] dir_rename_wrap+0x345/0x570 [ 49.147481][ T357] vfs_rename+0x9fb/0xeb0 [ 49.151649][ T357] ? mntput+0x5d/0xc0 [ 49.155518][ T357] ? __ia32_sys_link+0x70/0x70 [ 49.160186][ T357] ? __lookup_hash+0x1cf/0x290 [ 49.164821][ T357] do_renameat2+0xa56/0x1240 [ 49.169209][ T357] ? fsnotify_move+0x290/0x290 [ 49.174012][ T357] __x64_sys_renameat2+0xdd/0xf0 [ 49.178920][ T357] do_syscall_64+0x34/0x70 [ 49.183258][ T357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.189203][ T357] RIP: 0033:0x7fe9a471fda9 [ 49.193431][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.213273][ T357] RSP: 002b:00007fe9a42a10c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 49.221887][ T357] RAX: ffffffffffffffda RBX: 00007fe9a484df80 RCX: 00007fe9a471fda9 [ 49.230160][ T357] RDX: ffffffffffffff9c RSI: 0000000020004b00 RDI: 0000000000000003 [ 49.238299][ T357] RBP: 00007fe9a476c47a R08: 0000000000000000 R09: 0000000000000000 [ 49.246265][ T357] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 49.254132][ T357] R13: 000000000000000b R14: 00007fe9a484df80 R15: 00007ffdece74f48 [ 49.262103][ T357] ---[ end trace 57919aa21cc0d11d ]--- [ 49.267789][ T357] list_del corruption. prev->next should be ffff88811cdfcf70, but was ffff88811cdfb800 [ 49.277382][ T357] ------------[ cut here ]------------ [ 49.282792][ T357] kernel BUG at lib/list_debug.c:61! [ 49.288062][ T357] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 49.294174][ T357] CPU: 1 PID: 357 Comm: syz-executor.0 Tainted: G W 5.10.222-syzkaller-1003210-gfd58936f3c1f #0 [ 49.305970][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 49.315964][ T357] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 49.322136][ T357] Code: 4c 89 f6 e8 0c b1 55 02 0f 0b 48 c7 c7 40 25 60 85 4c 89 f6 e8 fb b0 55 02 0f 0b 48 c7 c7 a0 25 60 85 4c 89 f6 e8 ea b0 55 02 <0f> 0b 48 c7 c7 00 26 60 85 4c 89 f6 e8 d9 b0 55 02 0f 0b cc 55 48 [ 49.341699][ T357] RSP: 0018:ffffc90000f17ae0 EFLAGS: 00010246 [ 49.347683][ T357] RAX: 0000000000000054 RBX: ffff88811cdfb800 RCX: 07082eb602b3e300 [ 49.355486][ T357] RDX: 0000000000000000 RSI: 0000000080000002 RDI: 0000000000000000 [ 49.363312][ T357] RBP: ffffc90000f17b00 R08: ffffffff81521b78 R09: fffff520001e2e75 [ 49.371455][ T357] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 49.379356][ T357] R13: ffff88811cdfcf38 R14: ffff88811cdfcf70 R15: ffff88811cdfb3c0 [ 49.387409][ T357] FS: 00007fe9a42a16c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 49.396870][ T357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.403389][ T357] CR2: 00007fe9a484f988 CR3: 0000000120b23000 CR4: 00000000003506a0 [ 49.411539][ T357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.419526][ T357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.427685][ T357] Call Trace: [ 49.430821][ T357] ? __die_body+0x62/0xb0 [ 49.435077][ T357] ? die+0x88/0xb0 [ 49.438726][ T357] ? do_trap+0x1a4/0x310 [ 49.442795][ T357] ? __list_del_entry_valid+0x10c/0x120 [ 49.448283][ T357] ? handle_invalid_op+0x95/0xc0 [ 49.453257][ T357] ? __list_del_entry_valid+0x10c/0x120 [ 49.459078][ T357] ? exc_invalid_op+0x32/0x50 [ 49.463678][ T357] ? asm_exc_invalid_op+0x12/0x20 [ 49.468524][ T357] ? wake_up_klogd+0xb8/0xf0 [ 49.473045][ T357] ? __list_del_entry_valid+0x10c/0x120 [ 49.478510][ T357] __dentry_kill+0x250/0x650 [ 49.482933][ T357] ? lockref_put_or_lock+0x104/0x170 [ 49.488065][ T357] dentry_kill+0xc0/0x2a0 [ 49.492401][ T357] dput+0x40/0x80 [ 49.496037][ T357] path_put+0x39/0x60 [ 49.499854][ T357] ? dentry_revalidate+0x350/0x350 [ 49.504800][ T357] dentry_release+0x52/0xb0 [ 49.509151][ T357] ? dentry_revalidate+0x350/0x350 [ 49.514102][ T357] __dentry_kill+0x4ad/0x650 [ 49.518517][ T357] dentry_kill+0xc0/0x2a0 [ 49.522682][ T357] dput+0x40/0x80 [ 49.526546][ T357] do_renameat2+0xadf/0x1240 [ 49.531062][ T357] ? fsnotify_move+0x290/0x290 [ 49.535778][ T357] __x64_sys_renameat2+0xdd/0xf0 [ 49.541035][ T357] do_syscall_64+0x34/0x70 [ 49.545661][ T357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.551456][ T357] RIP: 0033:0x7fe9a471fda9 [ 49.555889][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.575619][ T357] RSP: 002b:00007fe9a42a10c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 49.584512][ T357] RAX: ffffffffffffffda RBX: 00007fe9a484df80 RCX: 00007fe9a471fda9 [ 49.592454][ T357] RDX: ffffffffffffff9c RSI: 0000000020004b00 RDI: 0000000000000003 [ 49.600253][ T357] RBP: 00007fe9a476c47a R08: 0000000000000000 R09: 0000000000000000 [ 49.608149][ T357] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 49.616045][ T357] R13: 000000000000000b R14: 00007fe9a484df80 R15: 00007ffdece74f48 [ 49.623978][ T357] Modules linked in: [ 49.628087][ T357] ---[ end trace 57919aa21cc0d11e ]--- [ 49.633365][ T357] RIP: 0010:__list_del_entry_valid+0x10c/0x120 [ 49.639689][ T357] Code: 4c 89 f6 e8 0c b1 55 02 0f 0b 48 c7 c7 40 25 60 85 4c 89 f6 e8 fb b0 55 02 0f 0b 48 c7 c7 a0 25 60 85 4c 89 f6 e8 ea b0 55 02 <0f> 0b 48 c7 c7 00 26 60 85 4c 89 f6 e8 d9 b0 55 02 0f 0b cc 55 48 [ 49.659513][ T357] RSP: 0018:ffffc90000f17ae0 EFLAGS: 00010246 [ 49.665685][ T357] RAX: 0000000000000054 RBX: ffff88811cdfb800 RCX: 07082eb602b3e300 [ 49.673727][ T357] RDX: 0000000000000000 RSI: 0000000080000002 RDI: 0000000000000000 [ 49.681714][ T357] RBP: ffffc90000f17b00 R08: ffffffff81521b78 R09: fffff520001e2e75 [ 49.690165][ T357] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 49.698068][ T357] R13: ffff88811cdfcf38 R14: ffff88811cdfcf70 R15: ffff88811cdfb3c0 [ 49.706302][ T357] FS: 00007fe9a42a16c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 49.715805][ T357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.722260][ T357] CR2: 00007fe9a484f988 CR3: 0000000120b23000 CR4: 00000000003506a0 [ 49.730104][ T357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.738120][ T357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.746264][ T357] Kernel panic - not syncing: Fatal exception [ 49.752442][ T357] Kernel Offset: disabled [ 49.756580][ T357] Rebooting in 86400 seconds..