Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. 2024/08/08 11:57:43 ignoring optional flag "sandboxArg"="0" 2024/08/08 11:57:43 parsed 1 programs [ 39.910148][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 39.910165][ T28] audit: type=1400 audit(1723118263.592:94): avc: denied { unlink } for pid=421 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.946971][ T421] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.977495][ T28] audit: type=1400 audit(1723118263.652:95): avc: denied { mounton } for pid=427 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.107111][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.113998][ T437] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.121777][ T437] device bridge_slave_0 entered promiscuous mode [ 40.128462][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.135676][ T437] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.143067][ T437] device bridge_slave_1 entered promiscuous mode [ 40.181519][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.188365][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.195489][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.202272][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.221076][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.228282][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.235723][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.243144][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.260336][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.268300][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.275378][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.282698][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.290776][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.297704][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.305644][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.313510][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.321502][ T28] audit: type=1400 audit(1723118264.002:96): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.328704][ T437] device veth0_vlan entered promiscuous mode [ 40.350001][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.358978][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.367114][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.375028][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.386572][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.396303][ T437] device veth1_macvtap entered promiscuous mode [ 40.405516][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.415480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.441271][ T437] syz-executor.0 (437) used greatest stack depth: 21200 bytes left 2024/08/08 11:57:44 executed programs: 0 [ 40.816567][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.823552][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.830938][ T474] device bridge_slave_0 entered promiscuous mode [ 40.837690][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.844687][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.852101][ T474] device bridge_slave_1 entered promiscuous mode [ 40.894430][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.901469][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.908735][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.915677][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.936902][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.944460][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.951898][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.970323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.978631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.986798][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.993765][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.001027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.008976][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.015868][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.023375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.032352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.046316][ T474] device veth0_vlan entered promiscuous mode [ 41.052449][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.060484][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.067928][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.081104][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.089822][ T474] device veth1_macvtap entered promiscuous mode [ 41.101865][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.110024][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.118089][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.126298][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.153071][ T480] loop0: detected capacity change from 0 to 2048 [ 41.161898][ T28] audit: type=1400 audit(1723118264.842:97): avc: denied { mounton } for pid=479 comm="syz-executor.0" path="/root/syzkaller-testdir1706167195/syzkaller.Tblous/0/file1" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.201508][ T480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.210201][ T28] audit: type=1400 audit(1723118264.892:98): avc: denied { mount } for pid=479 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.223104][ T480] ------------[ cut here ]------------ [ 41.231855][ T28] audit: type=1400 audit(1723118264.892:99): avc: denied { write } for pid=479 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.237083][ T480] kernel BUG at fs/ext4/inline.c:236! [ 41.259239][ T28] audit: type=1400 audit(1723118264.892:100): avc: denied { add_name } for pid=479 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.263876][ T480] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.284678][ T28] audit: type=1400 audit(1723118264.892:101): avc: denied { create } for pid=479 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.290288][ T480] CPU: 0 PID: 480 Comm: syz-executor.0 Not tainted 6.1.90-syzkaller-1151310-g99d09135c4ef #0 [ 41.290307][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 41.290324][ T480] RIP: 0010:ext4_write_inline_data+0x3a4/0x3b0 [ 41.310756][ T28] audit: type=1400 audit(1723118264.892:102): avc: denied { read write open } for pid=479 comm="syz-executor.0" path="/root/syzkaller-testdir1706167195/syzkaller.Tblous/0/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.320502][ T480] Code: 07 fe c1 38 c1 0f 8c 42 ff ff ff 4c 89 e7 49 89 d6 e8 10 8e ca ff 4c 89 f2 e9 2f ff ff ff e8 53 89 83 ff 0f 0b e8 4c 89 83 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 [ 41.320523][ T480] RSP: 0018:ffffc90000967768 EFLAGS: 00010293 [ 41.320539][ T480] RAX: ffffffff81f21714 RBX: 000000000000003c RCX: ffff88811141d100 [ 41.320550][ T480] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000010000000006 [ 41.320559][ T480] RBP: ffffc900009677d0 R08: ffffffff81f2149d R09: ffffed1022b6784b [ 41.320569][ T480] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000010000000005 [ 41.320579][ T480] R13: ffffc90000967860 R14: 0000010000000006 R15: 0000000000000001 [ 41.320591][ T480] FS: 00007f3a444ca6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.320605][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.445160][ T480] CR2: 00007f3a437a8000 CR3: 0000000126858000 CR4: 00000000003506b0 [ 41.453025][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.460779][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.468859][ T480] Call Trace: [ 41.472068][ T480] [ 41.474929][ T480] ? __die_body+0x62/0xb0 [ 41.479091][ T480] ? die+0x88/0xb0 [ 41.482657][ T480] ? do_trap+0x103/0x330 [ 41.486750][ T480] ? ext4_write_inline_data+0x3a4/0x3b0 [ 41.492112][ T480] ? handle_invalid_op+0x95/0xc0 [ 41.496896][ T480] ? ext4_write_inline_data+0x3a4/0x3b0 [ 41.502443][ T480] ? exc_invalid_op+0x32/0x50 [ 41.507230][ T480] ? asm_exc_invalid_op+0x1b/0x20 [ 41.512174][ T480] ? ext4_write_inline_data+0x12d/0x3b0 [ 41.517562][ T480] ? ext4_write_inline_data+0x3a4/0x3b0 [ 41.522941][ T480] ? ext4_write_inline_data+0x3a4/0x3b0 [ 41.528312][ T480] ? ext4_write_inline_data+0x3a4/0x3b0 [ 41.533704][ T480] ext4_write_inline_data_end+0x328/0xa90 [ 41.539377][ T480] ? put_page+0xc0/0xc0 [ 41.543361][ T480] ? ext4_da_write_begin+0x489/0x920 [ 41.548477][ T480] ? pipe_zero+0x220/0x220 [ 41.552831][ T480] ext4_da_write_end+0x1ea/0x9a0 [ 41.557677][ T480] ? ext4_da_write_begin+0x920/0x920 [ 41.562805][ T480] generic_perform_write+0x3e6/0x5c0 [ 41.567925][ T480] ? generic_file_direct_write+0x6b0/0x6b0 [ 41.573564][ T480] ? generic_write_checks_count+0x490/0x490 [ 41.579384][ T480] ext4_buffered_write_iter+0x360/0x640 [ 41.584836][ T480] ext4_file_write_iter+0x194/0x1570 [ 41.589884][ T480] ? futex_wake_mark+0x170/0x170 [ 41.594747][ T480] ? debug_smp_processor_id+0x17/0x20 [ 41.599944][ T480] ? avc_policy_seqno+0x1b/0x70 [ 41.604946][ T480] ? ext4_file_read_iter+0x470/0x470 [ 41.610163][ T480] ? fsnotify_perm+0x6a/0x5d0 [ 41.614804][ T480] vfs_write+0x902/0xeb0 [ 41.618876][ T480] ? file_end_write+0x1c0/0x1c0 [ 41.625034][ T480] ? __fget_files+0x2cb/0x330 [ 41.629637][ T480] ? __fdget+0x1b7/0x240 [ 41.633853][ T480] __x64_sys_pwrite64+0x1a6/0x230 [ 41.638940][ T480] ? ksys_pwrite64+0x1d0/0x1d0 [ 41.643539][ T480] ? switch_fpu_return+0xe/0x10 [ 41.648440][ T480] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 41.653855][ T480] x64_sys_call+0xa6/0x9a0 [ 41.658106][ T480] do_syscall_64+0x3b/0xb0 [ 41.662456][ T480] ? clear_bhb_loop+0x55/0xb0 [ 41.667082][ T480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.673023][ T480] RIP: 0033:0x7f3a4367cee9 [ 41.677257][ T480] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.696788][ T480] RSP: 002b:00007f3a444ca0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 41.705030][ T480] RAX: ffffffffffffffda RBX: 00007f3a437abf80 RCX: 00007f3a4367cee9 [ 41.713063][ T480] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 41.720948][ T480] RBP: 00007f3a436c949e R08: 0000000000000000 R09: 0000000000000000 [ 41.728916][ T480] R10: 0000010000000005 R11: 0000000000000246 R12: 0000000000000000 [ 41.736841][ T480] R13: 000000000000000b R14: 00007f3a437abf80 R15: 00007ffc882fe638 [ 41.744668][ T480] [ 41.747512][ T480] Modules linked in: [ 41.751570][ T480] ---[ end trace 0000000000000000 ]--- [ 41.756922][ T480] RIP: 0010:ext4_write_inline_data+0x3a4/0x3b0 [ 41.763047][ T480] Code: 07 fe c1 38 c1 0f 8c 42 ff ff ff 4c 89 e7 49 89 d6 e8 10 8e ca ff 4c 89 f2 e9 2f ff ff ff e8 53 89 83 ff 0f 0b e8 4c 89 83 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 [ 41.782475][ T480] RSP: 0018:ffffc90000967768 EFLAGS: 00010293 [ 41.788364][ T480] RAX: ffffffff81f21714 RBX: 000000000000003c RCX: ffff88811141d100 [ 41.796207][ T480] RDX: 0000000000000000 RSI: 000000000000003c RDI: 0000010000000006 [ 41.804179][ T480] RBP: ffffc900009677d0 R08: ffffffff81f2149d R09: ffffed1022b6784b [ 41.812032][ T480] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000010000000005 [ 41.819986][ T480] R13: ffffc90000967860 R14: 0000010000000006 R15: 0000000000000001 [ 41.827777][ T480] FS: 00007f3a444ca6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.836747][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.843426][ T480] CR2: 00007f3a437a8000 CR3: 0000000126858000 CR4: 00000000003506b0 [ 41.851312][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.859475][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.867286][ T480] Kernel panic - not syncing: Fatal exception [ 41.873562][ T480] Kernel Offset: disabled [ 41.877803][ T480] Rebooting in 86400 seconds..