Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. 2023/12/16 22:02:55 ignoring optional flag "sandboxArg"="0" 2023/12/16 22:02:55 parsed 1 programs [ 48.277517][ T28] audit: type=1400 audit(1702764175.338:156): avc: denied { mounton } for pid=350 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.302882][ T28] audit: type=1400 audit(1702764175.338:157): avc: denied { mount } for pid=350 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/12/16 22:02:55 executed programs: 0 [ 48.351736][ T28] audit: type=1400 audit(1702764175.418:158): avc: denied { unlink } for pid=350 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.383030][ T350] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.440709][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.448406][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.456088][ T356] device bridge_slave_0 entered promiscuous mode [ 48.462905][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.469830][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.477397][ T356] device bridge_slave_1 entered promiscuous mode [ 48.523127][ T28] audit: type=1400 audit(1702764175.588:159): avc: denied { write } for pid=356 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.537733][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.546564][ T28] audit: type=1400 audit(1702764175.598:160): avc: denied { read } for pid=356 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.554092][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.554194][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.588826][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.609722][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.617202][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.625790][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.633330][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.643186][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.651167][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.658038][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.672418][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.680478][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.687360][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.694617][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.702772][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.717118][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.728726][ T356] device veth0_vlan entered promiscuous mode [ 48.735390][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.743389][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.750863][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.763310][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.772765][ T356] device veth1_macvtap entered promiscuous mode [ 48.785740][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.794255][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.807586][ T28] audit: type=1400 audit(1702764175.868:161): avc: denied { mounton } for pid=356 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.842372][ T28] audit: type=1400 audit(1702764175.908:162): avc: denied { bpf } for pid=361 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.863568][ T28] audit: type=1400 audit(1702764175.908:163): avc: denied { prog_load } for pid=361 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.883533][ T28] audit: type=1400 audit(1702764175.908:164): avc: denied { perfmon } for pid=361 comm="syz-executor.0" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.906835][ T28] audit: type=1400 audit(1702764175.908:165): avc: denied { prog_run } for pid=361 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 2023/12/16 22:03:00 executed programs: 496 2023/12/16 22:03:05 executed programs: 1049 2023/12/16 22:03:10 executed programs: 1770 2023/12/16 22:03:15 executed programs: 2557 [ 72.912993][ T303] ------------[ cut here ]------------ [ 72.918553][ T303] kernel BUG at kernel/bpf/arraymap.c:1077! [ 72.925226][ T303] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 72.931242][ T303] CPU: 1 PID: 303 Comm: kworker/1:2 Not tainted 6.1.57-syzkaller-1150533-gcee8ebf7c508 #0 [ 72.940955][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 72.951204][ T303] Workqueue: events prog_array_map_clear_deferred [ 72.957617][ T303] RIP: 0010:prog_array_map_poke_run+0x692/0x6b0 [ 72.964310][ T303] Code: 98 e4 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 81 98 e4 ff 0f 0b e9 e2 f9 ff ff e8 75 98 e4 ff 0f 0b e8 6e 98 e4 ff <0f> 0b e8 67 98 e4 ff 0f 0b e8 60 98 e4 ff 0f 0b 66 2e 0f 1f 84 00 [ 72.984619][ T303] RSP: 0018:ffffc900010d7b70 EFLAGS: 00010293 [ 72.990597][ T303] RAX: ffffffff81909632 RBX: ffff88811695ba90 RCX: ffff88811eb40000 [ 72.998540][ T303] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 73.006600][ T303] RBP: ffffc900010d7c08 R08: ffffffff819093bd R09: fffff5200021af3d [ 73.014617][ T303] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811e559180 [ 73.022520][ T303] R13: dffffc0000000000 R14: ffff88812407a400 R15: 00000000fffffff0 [ 73.030677][ T303] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 73.039625][ T303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.046041][ T303] CR2: 00007fff13013af8 CR3: 000000010f773000 CR4: 00000000003506a0 [ 73.053972][ T303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.062165][ T303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.069978][ T303] Call Trace: [ 73.073091][ T303] [ 73.075873][ T303] ? __die_body+0x62/0xb0 [ 73.080065][ T303] ? die+0x88/0xb0 [ 73.083690][ T303] ? do_trap+0x103/0x330 [ 73.088129][ T303] ? prog_array_map_poke_run+0x692/0x6b0 [ 73.093596][ T303] ? handle_invalid_op+0x95/0xc0 [ 73.098713][ T303] ? prog_array_map_poke_run+0x692/0x6b0 [ 73.104356][ T303] ? exc_invalid_op+0x32/0x50 [ 73.108888][ T303] ? asm_exc_invalid_op+0x1b/0x20 [ 73.113951][ T303] ? prog_array_map_poke_run+0x41d/0x6b0 [ 73.119992][ T303] ? prog_array_map_poke_run+0x692/0x6b0 [ 73.125725][ T303] ? prog_array_map_poke_run+0x692/0x6b0 [ 73.131315][ T303] ? bpf_prog_22fedb13000eacf7+0xb/0xf [ 73.136602][ T303] fd_array_map_delete_elem+0x154/0x250 [ 73.141993][ T303] prog_array_map_clear_deferred+0xf8/0x210 [ 73.147914][ T303] ? __bpf_array_map_seq_show+0x850/0x850 [ 73.154120][ T303] ? __schedule+0xca1/0x1540 [ 73.158550][ T303] process_one_work+0x73d/0xcb0 [ 73.163434][ T303] worker_thread+0xa60/0x1260 [ 73.168040][ T303] ? __kasan_check_read+0x11/0x20 [ 73.173088][ T303] kthread+0x26d/0x300 [ 73.177166][ T303] ? worker_clr_flags+0x1a0/0x1a0 [ 73.182109][ T303] ? kthread_blkcg+0xd0/0xd0 [ 73.186720][ T303] ret_from_fork+0x1f/0x30 [ 73.191062][ T303] [ 73.193908][ T303] Modules linked in: [ 73.200197][ T303] ---[ end trace 0000000000000000 ]--- [ 73.208339][ T303] RIP: 0010:prog_array_map_poke_run+0x692/0x6b0 [ 73.214882][ T303] Code: 98 e4 ff 48 83 c4 70 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 81 98 e4 ff 0f 0b e9 e2 f9 ff ff e8 75 98 e4 ff 0f 0b e8 6e 98 e4 ff <0f> 0b e8 67 98 e4 ff 0f 0b e8 60 98 e4 ff 0f 0b 66 2e 0f 1f 84 00 [ 73.239080][ T303] RSP: 0018:ffffc900010d7b70 EFLAGS: 00010293 [ 73.246332][ T303] RAX: ffffffff81909632 RBX: ffff88811695ba90 RCX: ffff88811eb40000 [ 73.257246][ T303] RDX: 0000000000000000 RSI: 00000000fffffff0 RDI: 00000000ffffffea [ 73.265180][ T303] RBP: ffffc900010d7c08 R08: ffffffff819093bd R09: fffff5200021af3d [ 73.273193][ T303] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811e559180 [ 73.284074][ T303] R13: dffffc0000000000 R14: ffff88812407a400 R15: 00000000fffffff0 [ 73.292469][ T303] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 73.304159][ T303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.310655][ T303] CR2: 00007fff13013af8 CR3: 000000010f7a2000 CR4: 00000000003506a0 [ 73.318573][ T303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.326616][ T303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.334577][ T303] Kernel panic - not syncing: Fatal exception [ 73.340776][ T303] Kernel Offset: disabled [ 73.345141][ T303] Rebooting in 86400 seconds..