Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2025/04/17 12:28:18 ignoring optional flag "sandboxArg"="0" 2025/04/17 12:28:18 ignoring optional flag "type"="gce" 2025/04/17 12:28:18 parsed 1 programs [ 49.578490][ T23] kauditd_printk_skb: 18 callbacks suppressed [ 49.578493][ T23] audit: type=1400 audit(1744892898.870:94): avc: denied { mounton } for pid=347 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.608974][ T23] audit: type=1400 audit(1744892898.870:95): avc: denied { read write } for pid=347 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.634863][ T23] audit: type=1400 audit(1744892898.870:96): avc: denied { open } for pid=347 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/04/17 12:28:19 executed programs: 0 [ 49.660738][ T23] audit: type=1400 audit(1744892898.900:97): avc: denied { unlink } for pid=347 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.686161][ T23] audit: type=1400 audit(1744892898.900:98): avc: denied { relabelto } for pid=348 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.711415][ T347] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.711573][ T23] audit: type=1400 audit(1744892899.000:99): avc: denied { read } for pid=73 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 49.746297][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.753338][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.760271][ T356] device bridge_slave_0 entered promiscuous mode [ 49.771668][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.778511][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.785554][ T356] device bridge_slave_1 entered promiscuous mode [ 49.803148][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.809991][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.817040][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.823864][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.833781][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.840741][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.847596][ T362] device bridge_slave_0 entered promiscuous mode [ 49.853772][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.860676][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.867576][ T362] device bridge_slave_1 entered promiscuous mode [ 49.876036][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.882917][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.889799][ T365] device bridge_slave_0 entered promiscuous mode [ 49.897419][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.904232][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.911275][ T363] device bridge_slave_0 entered promiscuous mode [ 49.917710][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.924649][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.931606][ T363] device bridge_slave_1 entered promiscuous mode [ 49.941960][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.948815][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.955703][ T365] device bridge_slave_1 entered promiscuous mode [ 49.968229][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.975071][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.982105][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.988944][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.000553][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.007389][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.014430][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.021356][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.032532][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.039356][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.046491][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.053423][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.067275][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.074269][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.081290][ T364] device bridge_slave_0 entered promiscuous mode [ 50.088438][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.096287][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.104209][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.111382][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.119074][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.126681][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.133789][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.141689][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.148624][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.155399][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.163406][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.171323][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.179245][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.186991][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.194728][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.202797][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.210372][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.217972][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.225913][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.233007][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.240203][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.248565][ T363] device veth0_vlan entered promiscuous mode [ 50.255783][ T363] device veth1_macvtap entered promiscuous mode [ 50.262062][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.269027][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.275881][ T364] device bridge_slave_1 entered promiscuous mode [ 50.282621][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.290131][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.297223][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.304336][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.312319][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.319663][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.326951][ T362] device veth0_vlan entered promiscuous mode [ 50.334043][ T362] device veth1_macvtap entered promiscuous mode [ 50.341069][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.348315][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.356127][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.364008][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.370759][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.378016][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.385825][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.392905][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.400183][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.408376][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.416292][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.425711][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.435817][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.447455][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.455371][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.463032][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.470086][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.478978][ T356] device veth0_vlan entered promiscuous mode [ 50.484896][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.495004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.505254][ T365] device veth0_vlan entered promiscuous mode [ 50.511923][ T23] audit: type=1400 audit(1744892899.800:100): avc: denied { read write } for pid=383 comm="syz-executor.4" name="fuse" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.535417][ T23] audit: type=1400 audit(1744892899.800:101): avc: denied { open } for pid=383 comm="syz-executor.4" path="/dev/fuse" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.536033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.560350][ T23] audit: type=1400 audit(1744892899.800:102): avc: denied { mounton } for pid=383 comm="syz-executor.4" path="/root/syzkaller-testdir2663520342/syzkaller.p841n0/0/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.566872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.600861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.607982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.616480][ T356] device veth1_macvtap entered promiscuous mode [ 50.625396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.633429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.641549][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.648557][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.648868][ T385] BUG: kernel NULL pointer dereference, address: 0000000000000038 [ 50.655765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.663211][ T385] #PF: supervisor read access in kernel mode [ 50.663212][ T385] #PF: error_code(0x0000) - not-present page [ 50.663214][ T385] PGD 111c2f067 P4D 111c2f067 PUD 111c33067 PMD 0 [ 50.663228][ T385] Oops: 0000 [#1] PREEMPT SMP [ 50.663231][ T385] CPU: 0 PID: 385 Comm: syz-executor.4 Not tainted 5.10.236-syzkaller #0 [ 50.663234][ T385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.671303][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.676837][ T385] RIP: 0010:open_or_create_special_dir+0x27/0xc0 [ 50.676840][ T385] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 f9 96 ff ff 48 85 c0 74 6f 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3 [ 50.676841][ T385] RSP: 0018:ffffc900006b7db8 EFLAGS: 00010203 [ 50.682647][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.688988][ T385] RAX: 0000000000000008 RBX: ffffc900006b7def RCX: 0000000000000000 [ 50.688989][ T385] RDX: 0000000000000007 RSI: 0000000700000000 RDI: ffff88811144b8a0 [ 50.688990][ T385] RBP: ffffc900006b7dd8 R08: 0000000000000008 R09: 0000000000000064 [ 50.688992][ T385] R10: ffff888111862d40 R11: 0000000000000001 R12: 0000000000000008 [ 50.688993][ T385] R13: ffff88811144b800 R14: ffff888111897000 R15: ffff888111c29840 [ 50.688995][ T385] FS: 00007f406cf6d6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 50.688998][ T385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.693808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.701750][ T385] CR2: 0000000000000038 CR3: 0000000111cd1000 CR4: 00000000003506b0 [ 50.701752][ T385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.701753][ T385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.701754][ T385] Call Trace: [ 50.701761][ T385] incfs_mount_fs+0x1af/0x320 [ 50.701766][ T385] legacy_get_tree+0x26/0x50 [ 50.701770][ T385] vfs_get_tree+0x1a/0x70 [ 50.701775][ T385] path_mount+0x2f8/0xb70 [ 50.711805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.718493][ T385] __x64_sys_mount+0x103/0x140 [ 50.718499][ T385] do_syscall_64+0x32/0x80 [ 50.718503][ T385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.718505][ T385] RIP: 0033:0x7f406d40cda9 [ 50.718508][ T385] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.718512][ T385] RSP: 002b:00007f406cf6d0c8 EFLAGS: 00000246 [ 50.725052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.744095][ T385] ORIG_RAX: 00000000000000a5 [ 50.744097][ T385] RAX: ffffffffffffffda RBX: 00007f406d53b050 RCX: 00007f406d40cda9 [ 50.744098][ T385] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080 [ 50.744100][ T385] RBP: 00007f406d45947a R08: 0000000000000000 R09: 0000000000000000 [ 50.744101][ T385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.744102][ T385] R13: 000000000000006e R14: 00007f406d53b050 R15: 00007ffc8287eef8 [ 50.744106][ T385] Modules linked in: [ 50.744120][ T385] CR2: 0000000000000038 [ 50.744126][ T385] ---[ end trace ed54cd174c76c066 ]--- [ 50.744133][ T385] RIP: 0010:open_or_create_special_dir+0x27/0xc0 [ 50.744135][ T385] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 f9 96 ff ff 48 85 c0 74 6f 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3 [ 50.744136][ T385] RSP: 0018:ffffc900006b7db8 EFLAGS: 00010203 [ 50.744139][ T385] RAX: 0000000000000008 RBX: ffffc900006b7def RCX: 0000000000000000 [ 50.744140][ T385] RDX: 0000000000000007 RSI: 0000000700000000 RDI: ffff88811144b8a0 [ 50.744141][ T385] RBP: ffffc900006b7dd8 R08: 0000000000000008 R09: 0000000000000064 [ 50.744142][ T385] R10: ffff888111862d40 R11: 0000000000000001 R12: 0000000000000008 [ 50.744143][ T385] R13: ffff88811144b800 R14: ffff888111897000 R15: ffff888111c29840 [ 50.744145][ T385] FS: 00007f406cf6d6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 50.744147][ T385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.744152][ T385] CR2: 0000000000000038 CR3: 0000000111cd1000 CR4: 00000000003506b0 [ 50.744153][ T385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.744154][ T385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.744156][ T385] Kernel panic - not syncing: Fatal exception [ 50.744323][ T385] Kernel Offset: disabled [ 51.100179][ T385] Rebooting in 86400 seconds..