Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. 2024/05/03 11:53:01 ignoring optional flag "sandboxArg"="0" 2024/05/03 11:53:01 parsed 1 programs [ 38.879011][ T27] audit: type=1400 audit(1714737181.391:156): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 38.903975][ T27] audit: type=1400 audit(1714737181.391:157): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/05/03 11:53:01 executed programs: 0 [ 38.941668][ T27] audit: type=1400 audit(1714737181.461:158): avc: denied { unlink } for pid=339 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.956134][ T339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.996200][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.003143][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.010285][ T345] device bridge_slave_0 entered promiscuous mode [ 39.016728][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.023962][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.031144][ T345] device bridge_slave_1 entered promiscuous mode [ 39.043831][ T27] audit: type=1400 audit(1714737181.561:159): avc: denied { write } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.045367][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.064906][ T27] audit: type=1400 audit(1714737181.561:160): avc: denied { read } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.071765][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.071784][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.106801][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.117177][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.124246][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.131646][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.138903][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.146609][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.154918][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.161815][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.169196][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.177364][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.184321][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.193625][ T345] device veth0_vlan entered promiscuous mode [ 39.200383][ T345] device veth1_macvtap entered promiscuous mode [ 39.206945][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.215015][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.222605][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.229533][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.236902][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.244976][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.253008][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.262813][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.271799][ T220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.280935][ T27] audit: type=1400 audit(1714737181.791:161): avc: denied { mounton } for pid=345 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.306432][ T27] audit: type=1400 audit(1714737181.821:162): avc: denied { bpf } for pid=350 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.327346][ C0] BUG: unable to handle page fault for address: ffffffffff600000 [ 39.334965][ C0] #PF: supervisor read access in kernel mode [ 39.340872][ C0] #PF: error_code(0x0000) - not-present page [ 39.346705][ C0] PGD 300e067 P4D 300e067 PUD 3010067 PMD 3012067 PTE 0 [ 39.353461][ C0] Oops: 0000 [#1] PREEMPT SMP [ 39.357963][ C0] CPU: 0 PID: 220 Comm: kworker/0:2 Not tainted 6.1.75-syzkaller #0 [ 39.365774][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 39.375782][ C0] Workqueue: mld mld_ifc_work [ 39.380264][ C0] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 39.386520][ C0] Code: 89 f7 48 89 d6 e8 be 52 dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 49 4d ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 39.406565][ C0] RSP: 0018:ffffc90000003c50 EFLAGS: 00010246 [ 39.412645][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 39.420917][ C0] RDX: 0000000000000000 RSI: ffff888100345f00 RDI: ffffffffff600000 [ 39.428924][ C0] RBP: ffffc90000003c68 R08: 0000000000000a20 R09: 0000000000000001 [ 39.437125][ C0] R10: ffffc90000003ae0 R11: 00000000ffffffff R12: 0000000000000680 [ 39.444949][ C0] R13: 0000000000000010 R14: ffffc90000003ca0 R15: ffffffffff600000 [ 39.453010][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 39.462296][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.468806][ C0] CR2: ffffffffff600000 CR3: 00000001151b0000 CR4: 00000000003506b0 [ 39.476792][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.484703][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.492780][ C0] Call Trace: [ 39.496166][ C0] [ 39.498956][ C0] ? __die_body+0x62/0xb0 [ 39.504135][ C0] ? __die+0x7e/0x90 [ 39.509713][ C0] ? page_fault_oops+0x369/0x3d0 [ 39.515008][ C0] ? __netif_receive_skb+0x52/0xe0 [ 39.520168][ C0] ? do_softirq+0x81/0xc0 [ 39.524334][ C0] ? __local_bh_enable_ip+0x63/0x70 [ 39.529451][ C0] ? __dev_queue_xmit+0x553/0xd70 [ 39.534400][ C0] ? 0xffffffffff600000 [ 39.538398][ C0] ? exc_page_fault+0x4dc/0x670 [ 39.543178][ C0] ? 0xffffffffff600000 [ 39.547175][ C0] ? asm_exc_page_fault+0x27/0x30 [ 39.552394][ C0] ? 0xffffffffff600000 [ 39.556395][ C0] ? 0xffffffffff600000 [ 39.560391][ C0] ? strncpy_from_kernel_nofault+0x42/0x80 [ 39.566021][ C0] bpf_probe_read_kernel_str+0x1a/0x40 [ 39.571622][ C0] ? skb_release_data+0x144/0x1b0 [ 39.576474][ C0] bpf_prog_ef3a4661c9d1378e+0x42/0x44 [ 39.581797][ C0] ? ip6t_do_table+0x479/0x4f0 [ 39.586463][ C0] bpf_trace_run2+0x4f/0xc0 [ 39.590801][ C0] ? skb_release_data+0x144/0x1b0 [ 39.595753][ C0] ? skb_release_data+0x144/0x1b0 [ 39.600720][ C0] __bpf_trace_kfree+0x9/0x10 [ 39.605665][ C0] kfree+0xce/0xf0 [ 39.609615][ C0] skb_release_data+0x144/0x1b0 [ 39.614504][ C0] kfree_skb_reason+0x44/0x120 [ 39.619428][ C0] ip6_mc_input+0x16f/0x1e0 [ 39.624031][ C0] ip6_rcv_finish+0x4a/0xa0 [ 39.628576][ C0] ipv6_rcv+0x47/0xe0 [ 39.632503][ C0] ? net_zcopy_put_abort+0x40/0x40 [ 39.637975][ C0] __netif_receive_skb+0x52/0xe0 [ 39.643379][ C0] process_backlog+0xda/0x190 [ 39.648458][ C0] __napi_poll+0x2a/0x1a0 [ 39.653018][ C0] net_rx_action+0x144/0x2a0 [ 39.657557][ C0] __do_softirq+0x11b/0x31e [ 39.662051][ C0] do_softirq+0x81/0xc0 [ 39.666118][ C0] [ 39.668959][ C0] [ 39.671917][ C0] __local_bh_enable_ip+0x63/0x70 [ 39.676856][ C0] __dev_queue_xmit+0x553/0xd70 [ 39.681544][ C0] ? __dev_queue_xmit+0x76/0xd70 [ 39.686505][ C0] ? _raw_write_unlock_bh+0x15/0x20 [ 39.691541][ C0] ? ___neigh_create+0x748/0x820 [ 39.696573][ C0] neigh_resolve_output+0x145/0x1b0 [ 39.701868][ C0] ip6_finish_output2+0x3ac/0x530 [ 39.707078][ C0] ? ip6table_mangle_hook+0xef/0x110 [ 39.712197][ C0] ? ip6t_do_table+0x479/0x4f0 [ 39.716888][ C0] ip6_finish_output+0x154/0x2b0 [ 39.721654][ C0] ? nf_hook_slow+0x57/0xd0 [ 39.726381][ C0] ip6_output+0x69/0x130 [ 39.730421][ C0] ? ip6_output+0x130/0x130 [ 39.734764][ C0] mld_sendpack+0x24b/0x380 [ 39.739225][ C0] ? igmp6_send+0x540/0x540 [ 39.743553][ C0] mld_ifc_work+0x287/0x3c0 [ 39.747867][ C0] process_one_work+0x1b2/0x380 [ 39.752640][ C0] worker_thread+0x222/0x390 [ 39.757276][ C0] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 39.763262][ C0] kthread+0xda/0xf0 [ 39.767778][ C0] ? process_one_work+0x380/0x380 [ 39.773252][ C0] ? kthread_blkcg+0x30/0x30 [ 39.777865][ C0] ret_from_fork+0x1f/0x30 [ 39.782110][ C0] [ 39.785038][ C0] Modules linked in: [ 39.788878][ C0] CR2: ffffffffff600000 [ 39.793030][ C0] ---[ end trace 0000000000000000 ]--- [ 39.793073][ T79] BUG: unable to handle page fault for address: ffffffffff600000 [ 39.798494][ C0] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 39.806042][ T79] #PF: supervisor read access in kernel mode [ 39.812390][ C0] Code: 89 f7 48 89 d6 e8 be 52 dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 49 4d ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 39.818840][ T79] #PF: error_code(0x0000) - not-present page [ 39.838282][ C0] RSP: 0018:ffffc90000003c50 EFLAGS: 00010246 [ 39.844318][ T79] PGD 300e067 P4D 300e067 PUD 3010067 PMD 3012067 [ 39.850723][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 39.850727][ C0] RDX: 0000000000000000 RSI: ffff888100345f00 RDI: ffffffffff600000 [ 39.857150][ T79] PTE 0 [ 39.865254][ C0] RBP: ffffc90000003c68 R08: 0000000000000a20 R09: 0000000000000001 [ 39.873888][ T79] [ 39.873893][ T79] Oops: 0000 [#2] PREEMPT SMP [ 39.876480][ C0] R10: ffffc90000003ae0 R11: 00000000ffffffff R12: 0000000000000680 [ 39.884381][ T79] CPU: 1 PID: 79 Comm: syslogd Tainted: G D 6.1.75-syzkaller #0 [ 39.886822][ C0] R13: 0000000000000010 R14: ffffc90000003ca0 R15: ffffffffff600000 [ 39.891846][ T79] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 39.899919][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 39.908963][ T79] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 39.917080][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.927640][ T79] Code: 89 f7 48 89 d6 e8 be 52 dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 49 4d ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 39.936659][ C0] CR2: ffffffffff600000 CR3: 00000001151b0000 CR4: 00000000003506b0 [ 39.943314][ T79] RSP: 0018:ffffc90000223b80 EFLAGS: 00010246 [ 39.949828][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.969776][ T79] [ 39.969779][ T79] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 39.978560][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.984911][ T79] RDX: 0000000000000000 RSI: ffff8881002a0000 RDI: ffffffffff600000 [ 39.992999][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 39.995250][ T79] RBP: ffffc90000223b98 R08: 0000000000000000 R09: ffffffff81c1c970 [ 39.995253][ T79] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000280 [ 39.995254][ T79] R13: ffff888108c26140 R14: ffffc90000223bd0 R15: ffffffffff600000 [ 39.995257][ T79] FS: 00007fd339923380(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 39.995260][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.995262][ T79] CR2: ffffffffff600000 CR3: 000000010b3a0000 CR4: 00000000003506a0 [ 39.995268][ T79] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.995270][ T79] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.995272][ T79] Call Trace: [ 39.995274][ T79] [ 39.995278][ T79] ? __die_body+0x62/0xb0 [ 39.995285][ T79] ? __die+0x7e/0x90 [ 39.995289][ T79] ? page_fault_oops+0x369/0x3d0 [ 39.995295][ T79] ? 0xffffffffff600000 [ 39.995298][ T79] ? exc_page_fault+0x4dc/0x670 [ 39.995305][ T79] ? 0xffffffffff600000 [ 39.995307][ T79] ? asm_exc_page_fault+0x27/0x30 [ 39.995319][ T79] ? 0xffffffffff600000 [ 39.995321][ T79] ? skb_copy_datagram_iter+0x90/0x90 [ 39.995327][ T79] ? 0xffffffffff600000 [ 39.995329][ T79] ? strncpy_from_kernel_nofault+0x42/0x80 [ 39.995336][ T79] bpf_probe_read_kernel_str+0x1a/0x40 [ 39.995342][ T79] ? skb_release_data+0x144/0x1b0 [ 39.995345][ T79] bpf_prog_ef3a4661c9d1378e+0x42/0x44 [ 39.995351][ T79] bpf_trace_run2+0x4f/0xc0 [ 39.995353][ T79] ? skb_release_data+0x144/0x1b0 [ 39.995356][ T79] ? skb_release_data+0x144/0x1b0 [ 39.995359][ T79] __bpf_trace_kfree+0x9/0x10 [ 39.995363][ T79] kfree+0xce/0xf0 [ 39.995367][ T79] skb_release_data+0x144/0x1b0 [ 39.995370][ T79] __kfree_skb+0x1f/0x90 [ 39.995373][ T79] consume_skb+0x22/0x90 [ 39.995376][ T79] skb_free_datagram+0xc/0x10 [ 39.995380][ T79] __unix_dgram_recvmsg+0x37a/0x3e0 [ 39.995386][ T79] unix_dgram_recvmsg+0x26/0x30 [ 39.995395][ T79] sock_read_iter+0x127/0x180 [ 39.995401][ T79] vfs_read+0x229/0x290 [ 39.995406][ T79] ksys_read+0x6c/0xd0 [ 39.995411][ T79] __x64_sys_read+0x16/0x20 [ 39.995415][ T79] do_syscall_64+0x3d/0xb0 [ 39.995418][ T79] ? sysvec_call_function_single+0x52/0xb0 [ 39.995423][ T79] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.995427][ T79] RIP: 0033:0x7fd339a77b6a [ 39.995431][ T79] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 39.995434][ T79] RSP: 002b:00007ffcf20c4748 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 39.995438][ T79] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fd339a77b6a [ 39.995440][ T79] RDX: 00000000000000ff RSI: 000055b3c4e3e300 RDI: 0000000000000000 [ 39.995442][ T79] RBP: 000055b3c4e3e2c0 R08: 0000000000000001 R09: 0000000000000000 [ 39.995444][ T79] R10: 00007fd339c163a3 R11: 0000000000000246 R12: 000055b3c4e3e3ff [ 39.995445][ T79] R13: 000055b3c4e3e300 R14: 0000000000000000 R15: 00007fd339c54a80 [ 39.995449][ T79] [ 39.995450][ T79] Modules linked in: [ 39.995454][ T79] CR2: ffffffffff600000 [ 40.003338][ T79] ---[ end trace 0000000000000000 ]--- [ 40.003340][ T79] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 40.003346][ T79] Code: 89 f7 48 89 d6 e8 be 52 dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 49 4d ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 40.003356][ T79] RSP: 0018:ffffc90000003c50 EFLAGS: 00010246 [ 40.003359][ T79] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 40.003361][ T79] RDX: 0000000000000000 RSI: ffff888100345f00 RDI: ffffffffff600000 [ 40.003363][ T79] RBP: ffffc90000003c68 R08: 0000000000000a20 R09: 0000000000000001 [ 40.003364][ T79] R10: ffffc90000003ae0 R11: 00000000ffffffff R12: 0000000000000680 [ 40.003366][ T79] R13: 0000000000000010 R14: ffffc90000003ca0 R15: ffffffffff600000 [ 40.003368][ T79] FS: 00007fd339923380(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 40.003371][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.003376][ T79] CR2: ffffffffff600000 CR3: 000000010b3a0000 CR4: 00000000003506a0 [ 40.003381][ T79] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.003382][ T79] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.117913][ C0] Shutting down cpus with NMI [ 41.567772][ C0] Kernel Offset: disabled [ 41.571972][ C0] Rebooting in 86400 seconds..