Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2024/04/10 15:43:08 ignoring optional flag "sandboxArg"="0" 2024/04/10 15:43:08 parsed 1 programs [ 39.964441][ T23] kauditd_printk_skb: 72 callbacks suppressed [ 39.964450][ T23] audit: type=1400 audit(1712763788.559:148): avc: denied { mounton } for pid=404 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2024/04/10 15:43:08 executed programs: 0 [ 39.995016][ T23] audit: type=1400 audit(1712763788.559:149): avc: denied { mount } for pid=404 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 40.018083][ T23] audit: type=1400 audit(1712763788.599:150): avc: denied { unlink } for pid=404 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 40.055609][ T404] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.110524][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.117541][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.125518][ T410] device bridge_slave_0 entered promiscuous mode [ 40.132416][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.139636][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.147125][ T410] device bridge_slave_1 entered promiscuous mode [ 40.182098][ T23] audit: type=1400 audit(1712763788.779:151): avc: denied { create } for pid=410 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.202585][ T23] audit: type=1400 audit(1712763788.799:152): avc: denied { write } for pid=410 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.206780][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.223320][ T23] audit: type=1400 audit(1712763788.799:153): avc: denied { read } for pid=410 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.229773][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.229875][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.263893][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.283006][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.290268][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.297298][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.304923][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.321068][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.329148][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.336022][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.343411][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.351556][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.358373][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.365666][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.373439][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.389877][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.398288][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.415691][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.424819][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.433436][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.447257][ T23] audit: type=1400 audit(1712763789.039:154): avc: denied { mounton } for pid=410 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=10680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.480181][ T23] audit: type=1400 audit(1712763789.079:155): avc: denied { mounton } for pid=415 comm="syz-executor.0" path="/root/syzkaller-testdir526586915/syzkaller.4593BI/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.483157][ T416] ------------[ cut here ]------------ [ 40.506790][ T23] audit: type=1400 audit(1712763789.079:156): avc: denied { mount } for pid=415 comm="syz-executor.0" name="/" dev="tmpfs" ino=11614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.512019][ T416] WARNING: CPU: 1 PID: 416 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 40.512022][ T416] Modules linked in: [ 40.512032][ T416] CPU: 1 PID: 416 Comm: syz-executor.0 Not tainted 5.4.268-syzkaller-04870-gd0d34dcb02cc #0 [ 40.512042][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 40.534737][ T23] audit: type=1400 audit(1712763789.079:157): avc: denied { mounton } for pid=415 comm="syz-executor.0" path="/root/syzkaller-testdir526586915/syzkaller.4593BI/0/file0" dev="tmpfs" ino=11614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.541961][ T416] RIP: 0010:drop_nlink+0xbb/0x100 [ 40.541969][ T416] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 eb ac f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 e5 05 c3 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 40.541974][ T416] RSP: 0018:ffff8881d748f890 EFLAGS: 00010293 [ 40.623296][ T416] RAX: ffffffff81a1413b RBX: 1ffff1103dd758f3 RCX: ffff8881f32daf40 [ 40.631184][ T416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.639606][ T416] RBP: 0000000000000000 R08: ffffffff81a140bf R09: 000000006616b38d [ 40.647360][ T416] R10: 0000000004c4b0c4 R11: 000000006616b38d R12: ffff8881eebac798 [ 40.655252][ T416] R13: 0000000004c4b0c4 R14: ffff8881eebac750 R15: dffffc0000000000 [ 40.663120][ T416] FS: 00007f5abedc36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.672178][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.678702][ T416] CR2: 0000000020004b00 CR3: 00000001eeb1d000 CR4: 00000000003406a0 [ 40.686610][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.694555][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.702390][ T416] Call Trace: [ 40.705546][ T416] ? __warn+0x162/0x250 [ 40.709503][ T416] ? report_bug+0x3a1/0x4e0 [ 40.713861][ T416] ? drop_nlink+0xbb/0x100 [ 40.718311][ T416] ? drop_nlink+0xbb/0x100 [ 40.722652][ T416] ? do_invalid_op+0x6e/0x110 [ 40.727159][ T416] ? invalid_op+0x1e/0x30 [ 40.731326][ T416] ? drop_nlink+0x3f/0x100 [ 40.735567][ T416] ? drop_nlink+0xbb/0x100 [ 40.739821][ T416] ? drop_nlink+0xbb/0x100 [ 40.744095][ T416] shmem_unlink+0x224/0x280 [ 40.748419][ T416] shmem_rename2+0x12d/0x5a0 [ 40.752848][ T416] vfs_rename+0x90e/0xda0 [ 40.757014][ T416] ? __ia32_sys_link+0x70/0x70 [ 40.761703][ T416] ? lockref_get_not_zero+0xbe/0x180 [ 40.766830][ T416] dir_rename_wrap+0x2ed/0x4f0 [ 40.771429][ T416] vfs_rename+0x90e/0xda0 [ 40.775585][ T416] ? dput+0x2a2/0x2f0 [ 40.779401][ T416] ? __ia32_sys_link+0x70/0x70 [ 40.784008][ T416] ? __lookup_hash+0x18e/0x240 [ 40.788600][ T416] do_renameat2+0x889/0x1110 [ 40.793032][ T416] ? may_open+0x340/0x340 [ 40.797198][ T416] ? debug_smp_processor_id+0x20/0x20 [ 40.802635][ T416] ? __se_sys_futex+0x355/0x470 [ 40.807264][ T416] ? switch_fpu_return+0x1d4/0x410 [ 40.812302][ T416] ? fpu__clear+0x3c0/0x3c0 [ 40.816636][ T416] __x64_sys_renameat2+0xb1/0xc0 [ 40.821409][ T416] do_syscall_64+0xca/0x1c0 [ 40.825747][ T416] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 40.831666][ T416] ---[ end trace 8dd188c633ddcd3f ]--- [ 40.839367][ T416] list_del corruption. prev->next should be ffff8881d9eaa4d0, but was ffff8881d9eaac40 [ 40.849287][ T416] ------------[ cut here ]------------ [ 40.854742][ T416] kernel BUG at lib/list_debug.c:61! [ 40.859979][ T416] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 40.866005][ T416] CPU: 1 PID: 416 Comm: syz-executor.0 Tainted: G W 5.4.268-syzkaller-04870-gd0d34dcb02cc #0 [ 40.877333][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 40.887238][ T416] RIP: 0010:__list_del_entry_valid+0x107/0x120 [ 40.893220][ T416] Code: 4c 89 f6 e8 da 06 1e 02 0f 0b 48 c7 c7 c0 40 fa 84 4c 89 f6 e8 c9 06 1e 02 0f 0b 48 c7 c7 20 41 fa 84 4c 89 f6 e8 b8 06 1e 02 <0f> 0b 48 c7 c7 80 41 fa 84 4c 89 f6 e8 a7 06 1e 02 0f 0b 66 0f 1f [ 40.913041][ T416] RSP: 0018:ffff8881d748fab8 EFLAGS: 00010246 [ 40.919070][ T416] RAX: 0000000000000054 RBX: ffff8881d9eaac40 RCX: 4ba7e970251cd900 [ 40.927118][ T416] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 40.934983][ T416] RBP: ffff8881d9eaa450 R08: ffffffff814d6872 R09: ffffed103edea9b8 [ 40.942794][ T416] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 40.950603][ T416] R13: ffff8881d9eaa498 R14: ffff8881d9eaa4d0 R15: ffff8881d9eaa090 [ 40.958583][ T416] FS: 00007f5abedc36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 40.967589][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.974100][ T416] CR2: 0000000020004b00 CR3: 00000001eeb1d000 CR4: 00000000003406a0 [ 40.981923][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.989808][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.997614][ T416] Call Trace: [ 41.000927][ T416] ? __die+0xb4/0x100 [ 41.004750][ T416] ? die+0x26/0x50 [ 41.008430][ T416] ? do_trap+0x1e7/0x340 [ 41.012517][ T416] ? __list_del_entry_valid+0x107/0x120 [ 41.017981][ T416] ? __list_del_entry_valid+0x107/0x120 [ 41.023361][ T416] ? do_invalid_op+0xfb/0x110 [ 41.027877][ T416] ? __list_del_entry_valid+0x107/0x120 [ 41.033253][ T416] ? invalid_op+0x1e/0x30 [ 41.037414][ T416] ? wake_up_klogd+0xb2/0xf0 [ 41.041978][ T416] ? __list_del_entry_valid+0x107/0x120 [ 41.047359][ T416] ? __list_del_entry_valid+0x107/0x120 [ 41.052732][ T416] __dentry_kill+0x242/0x630 [ 41.057159][ T416] dentry_kill+0xb8/0x280 [ 41.061335][ T416] dput+0x154/0x2f0 [ 41.064972][ T416] path_put+0x35/0x60 [ 41.068787][ T416] ? dentry_revalidate+0x350/0x350 [ 41.073895][ T416] dentry_release+0x4e/0xa0 [ 41.078229][ T416] ? dentry_revalidate+0x350/0x350 [ 41.083184][ T416] __dentry_kill+0x48d/0x630 [ 41.087607][ T416] dentry_kill+0xb8/0x280 [ 41.091951][ T416] dput+0x154/0x2f0 [ 41.095594][ T416] do_renameat2+0x9bd/0x1110 [ 41.100022][ T416] ? may_open+0x340/0x340 [ 41.104176][ T416] ? debug_smp_processor_id+0x20/0x20 [ 41.109392][ T416] ? __se_sys_futex+0x355/0x470 [ 41.114081][ T416] ? switch_fpu_return+0x1d4/0x410 [ 41.119021][ T416] ? fpu__clear+0x3c0/0x3c0 [ 41.123368][ T416] __x64_sys_renameat2+0xb1/0xc0 [ 41.128153][ T416] do_syscall_64+0xca/0x1c0 [ 41.132483][ T416] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 41.138322][ T416] Modules linked in: [ 41.142179][ T416] ---[ end trace 8dd188c633ddcd40 ]--- [ 41.147493][ T416] RIP: 0010:__list_del_entry_valid+0x107/0x120 [ 41.153475][ T416] Code: 4c 89 f6 e8 da 06 1e 02 0f 0b 48 c7 c7 c0 40 fa 84 4c 89 f6 e8 c9 06 1e 02 0f 0b 48 c7 c7 20 41 fa 84 4c 89 f6 e8 b8 06 1e 02 <0f> 0b 48 c7 c7 80 41 fa 84 4c 89 f6 e8 a7 06 1e 02 0f 0b 66 0f 1f [ 41.172895][ T416] RSP: 0018:ffff8881d748fab8 EFLAGS: 00010246 [ 41.178758][ T416] RAX: 0000000000000054 RBX: ffff8881d9eaac40 RCX: 4ba7e970251cd900 [ 41.186607][ T416] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 41.194505][ T416] RBP: ffff8881d9eaa450 R08: ffffffff814d6872 R09: ffffed103edea9b8 [ 41.202443][ T416] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 41.210258][ T416] R13: ffff8881d9eaa498 R14: ffff8881d9eaa4d0 R15: ffff8881d9eaa090 [ 41.218182][ T416] FS: 00007f5abedc36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 41.226980][ T416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.233398][ T416] CR2: 0000000020004b00 CR3: 00000001eeb1d000 CR4: 00000000003406a0 [ 41.241218][ T416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.248985][ T416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.256849][ T416] Kernel panic - not syncing: Fatal exception [ 41.262855][ T416] Kernel Offset: disabled [ 41.266960][ T416] Rebooting in 86400 seconds..