Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. 2025/03/21 23:38:55 ignoring optional flag "sandboxArg"="0" 2025/03/21 23:38:55 ignoring optional flag "type"="gce" 2025/03/21 23:38:55 parsed 1 programs 2025/03/21 23:38:55 executed programs: 0 [ 52.218259][ T27] audit: type=1400 audit(1742600335.278:95): avc: denied { unlink } for pid=354 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 52.250290][ T354] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.282479][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.289349][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.296449][ T362] device bridge_slave_0 entered promiscuous mode [ 52.302956][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.309825][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.316801][ T362] device bridge_slave_1 entered promiscuous mode [ 52.333286][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.340165][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.347157][ T366] device bridge_slave_0 entered promiscuous mode [ 52.353928][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.360770][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.367676][ T365] device bridge_slave_0 entered promiscuous mode [ 52.376078][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.382955][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.389904][ T366] device bridge_slave_1 entered promiscuous mode [ 52.396087][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.402900][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.410291][ T365] device bridge_slave_1 entered promiscuous mode [ 52.420996][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.427941][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.434911][ T372] device bridge_slave_0 entered promiscuous mode [ 52.441348][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.448219][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.455097][ T372] device bridge_slave_1 entered promiscuous mode [ 52.481353][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.488189][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.495219][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.502095][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.510562][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.517518][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.524586][ T374] device bridge_slave_0 entered promiscuous mode [ 52.531123][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.537936][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.545062][ T374] device bridge_slave_1 entered promiscuous mode [ 52.555542][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.562490][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.569545][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.576359][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.591092][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.598005][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.605068][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.611893][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.624838][ T365] device veth0_vlan entered promiscuous mode [ 52.631007][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.637973][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.645139][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.651953][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.660760][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.667651][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.674729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.681904][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.689113][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.695985][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.703936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.712202][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.719794][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.727424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.735394][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.742866][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.749955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.757204][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.764184][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.772065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.781087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.795019][ T366] device veth0_vlan entered promiscuous mode [ 52.803379][ T365] device veth1_macvtap entered promiscuous mode [ 52.810421][ T362] device veth0_vlan entered promiscuous mode [ 52.817850][ T362] device veth1_macvtap entered promiscuous mode [ 52.824951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.832662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.841038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.848617][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.855774][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.863138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.870953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.879091][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.886698][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.893901][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.901255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.909126][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.915969][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.923053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.930120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.937152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.945063][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.951929][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.959061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.966985][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.973870][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.980951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.988806][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.995546][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.002650][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.010230][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.017819][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.025414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.032954][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.040901][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.047747][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.054882][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.062671][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.069458][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.076511][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.084129][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.095319][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.102423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.110334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.118533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.127035][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.135113][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.143540][ T366] device veth1_macvtap entered promiscuous mode [ 53.150476][ T27] audit: type=1400 audit(1742600336.208:96): avc: denied { mounton } for pid=365 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 53.154920][ T372] device veth0_vlan entered promiscuous mode [ 53.183132][ T374] device veth0_vlan entered promiscuous mode [ 53.189116][ T27] audit: type=1400 audit(1742600336.248:97): avc: denied { read write } for pid=390 comm="syz-executor.1" name="fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.212736][ T27] audit: type=1400 audit(1742600336.248:98): avc: denied { open } for pid=390 comm="syz-executor.1" path="/dev/fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.235858][ T27] audit: type=1400 audit(1742600336.248:99): avc: denied { mounton } for pid=390 comm="syz-executor.1" path="/root/syzkaller-testdir436418112/syzkaller.80qWMe/0/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 53.262600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.270932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.279179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.287153][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.295350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.302531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.309799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.317767][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.325277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.332478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.339647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.347450][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.354284][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.361435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.369274][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.376165][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.383430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.391241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.399037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.410495][ T374] device veth1_macvtap entered promiscuous mode [ 53.416615][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.424751][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.432860][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.441513][ T372] device veth1_macvtap entered promiscuous mode [ 53.453292][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.461412][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.469350][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.476604][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.484588][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.492677][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.500706][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.508848][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.516762][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.524681][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.532603][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.649786][ T408] BUG: kernel NULL pointer dereference, address: 0000000000000038 [ 53.657397][ T408] #PF: supervisor read access in kernel mode [ 53.663208][ T408] #PF: error_code(0x0000) - not-present page [ 53.669198][ T408] PGD 110594067 P4D 110594067 PUD 110590067 PMD 0 [ 53.675535][ T408] Oops: 0000 [#1] PREEMPT SMP [ 53.680062][ T408] CPU: 1 PID: 408 Comm: syz-executor.3 Not tainted 6.1.128-syzkaller #0 [ 53.688207][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.698250][ T408] RIP: 0010:open_or_create_special_dir+0x30/0xb0 [ 53.704358][ T408] Code: 41 56 41 55 41 54 53 49 89 d6 4c 8b 67 30 e8 47 7c ff ff 49 c7 c7 ea ff ff ff 48 85 c0 74 19 48 89 c3 48 3d 00 f0 ff ff 77 0b <48> 83 7b 30 00 74 15 41 c6 06 00 49 89 df 4c 89 f8 5b 41 5c 41 5d [ 53.724174][ T408] RSP: 0018:ffffc90000953d20 EFLAGS: 00010203 [ 53.730074][ T408] RAX: 0000000000000008 RBX: 0000000000000008 RCX: 0000000000000001 [ 53.737884][ T408] RDX: 00000000ffffff9c RSI: ffff888117589300 RDI: 00000000ffffffff [ 53.745693][ T408] RBP: ffffc90000953d48 R08: 0000000000000000 R09: ffffc90000953bd0 [ 53.753648][ T408] R10: ffff888100041400 R11: ffff888117701480 R12: ffff88810c3b8780 [ 53.761448][ T408] R13: ffffffff83117b98 R14: ffffc90000953d5f R15: ffffffffffffffea [ 53.769260][ T408] FS: 00007f0734c6c6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 53.778154][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.784659][ T408] CR2: 0000000000000038 CR3: 00000001177f9000 CR4: 00000000003506a0 [ 53.792477][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.800539][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.808701][ T408] Call Trace: [ 53.811831][ T408] [ 53.814602][ T408] ? __die_body+0x62/0xb0 [ 53.818774][ T408] ? __die+0x7e/0x90 [ 53.822500][ T408] ? page_fault_oops+0x369/0x3d0 [ 53.827273][ T408] ? __dentry_kill+0x17c/0x1c0 [ 53.831877][ T408] ? exc_page_fault+0x4ce/0x630 [ 53.836559][ T408] ? asm_exc_page_fault+0x27/0x30 [ 53.841422][ T408] ? open_or_create_special_dir+0x30/0xb0 [ 53.846980][ T408] incfs_mount_fs+0x197/0x360 [ 53.851488][ T408] legacy_get_tree+0x23/0x40 [ 53.855914][ T408] vfs_get_tree+0x1e/0x80 [ 53.860093][ T408] do_new_mount+0x149/0x360 [ 53.864420][ T408] path_mount+0x324/0x520 [ 53.868585][ T408] __se_sys_mount+0x143/0x1b0 [ 53.873104][ T408] __x64_sys_mount+0x20/0x30 [ 53.877525][ T408] x64_sys_call+0x49d/0x9a0 [ 53.881865][ T408] do_syscall_64+0x3b/0xb0 [ 53.886115][ T408] ? clear_bhb_loop+0x55/0xb0 [ 53.890630][ T408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.896358][ T408] RIP: 0033:0x7f0733e7dda9 [ 53.900612][ T408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.920053][ T408] RSP: 002b:00007f0734c6c0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.928297][ T408] RAX: ffffffffffffffda RBX: 00007f0733fac050 RCX: 00007f0733e7dda9 [ 53.936113][ T408] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080 [ 53.943920][ T408] RBP: 00007f0733eca47a R08: 0000000000000000 R09: 0000000000000000 [ 53.951750][ T408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.959543][ T408] R13: 000000000000006e R14: 00007f0733fac050 R15: 00007ffea96e3918 [ 53.967547][ T408] [ 53.970406][ T408] Modules linked in: [ 53.974254][ T408] CR2: 0000000000000038 [ 53.978222][ T408] ---[ end trace 0000000000000000 ]--- [ 53.983521][ T408] RIP: 0010:open_or_create_special_dir+0x30/0xb0 [ 53.989689][ T408] Code: 41 56 41 55 41 54 53 49 89 d6 4c 8b 67 30 e8 47 7c ff ff 49 c7 c7 ea ff ff ff 48 85 c0 74 19 48 89 c3 48 3d 00 f0 ff ff 77 0b <48> 83 7b 30 00 74 15 41 c6 06 00 49 89 df 4c 89 f8 5b 41 5c 41 5d [ 54.009292][ T408] RSP: 0018:ffffc90000953d20 EFLAGS: 00010203 [ 54.015202][ T408] RAX: 0000000000000008 RBX: 0000000000000008 RCX: 0000000000000001 [ 54.023004][ T408] RDX: 00000000ffffff9c RSI: ffff888117589300 RDI: 00000000ffffffff [ 54.030814][ T408] RBP: ffffc90000953d48 R08: 0000000000000000 R09: ffffc90000953bd0 [ 54.038626][ T408] R10: ffff888100041400 R11: ffff888117701480 R12: ffff88810c3b8780 [ 54.046784][ T408] R13: ffffffff83117b98 R14: ffffc90000953d5f R15: ffffffffffffffea [ 54.054594][ T408] FS: 00007f0734c6c6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 54.063374][ T408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.069786][ T408] CR2: 0000000000000038 CR3: 00000001177f9000 CR4: 00000000003506a0 [ 54.077599][ T408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.085408][ T408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.093218][ T408] Kernel panic - not syncing: Fatal exception [ 54.099391][ T408] Kernel Offset: disabled [ 54.103503][ T408] Rebooting in 86400 seconds..