[ 28.332655][ T306] device veth1_macvtap entered promiscuous mode [ 28.343112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.353701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.451128][ T306] syz-executor.0 (306) used greatest stack depth: 19872 bytes left [ 29.320278][ T45] device bridge_slave_1 left promiscuous mode [ 29.326566][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.334078][ T45] device bridge_slave_0 left promiscuous mode [ 29.340595][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.348490][ T45] device veth1_macvtap left promiscuous mode [ 29.354649][ T45] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. 2025/04/20 02:48:40 ignoring optional flag "sandboxArg"="0" 2025/04/20 02:48:40 ignoring optional flag "type"="gce" 2025/04/20 02:48:41 parsed 1 programs 2025/04/20 02:48:41 executed programs: 0 [ 46.440217][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 46.440233][ T30] audit: type=1400 audit(1745117321.059:95): avc: denied { unlink } for pid=347 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.479244][ T347] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.539931][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.546908][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.554375][ T353] device bridge_slave_0 entered promiscuous mode [ 46.561461][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.568393][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.575920][ T353] device bridge_slave_1 entered promiscuous mode [ 46.623338][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.630404][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.637733][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.644643][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.664938][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.672247][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.680348][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.687892][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.697436][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.705589][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.712804][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.721874][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.729939][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.736876][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.748787][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.758353][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.772034][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.783224][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.791247][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.798903][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.807076][ T353] device veth0_vlan entered promiscuous mode [ 46.817233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.826677][ T353] device veth1_macvtap entered promiscuous mode [ 46.836209][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.846227][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.869169][ T30] audit: type=1400 audit(1745117321.479:96): avc: denied { read write } for pid=357 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.893520][ T30] audit: type=1400 audit(1745117321.509:97): avc: denied { open } for pid=357 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 46.917515][ T30] audit: type=1400 audit(1745117321.509:98): avc: denied { mounton } for pid=357 comm="syz-executor.0" path="/root/syzkaller-testdir4276833023/syzkaller.xrOgQs/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.991180][ T361] general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN [ 47.002928][ T361] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 47.011228][ T361] CPU: 1 PID: 361 Comm: syz-executor.0 Not tainted 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 47.021380][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 47.031360][ T361] RIP: 0010:fuse_atomic_open+0x26f/0x3a90 [ 47.037011][ T361] Code: e0 40 4c 8b 64 24 48 75 07 e8 6d 5f 66 ff eb 37 48 8b 44 24 70 48 8d 58 30 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 33 ca a8 ff 48 83 3b 00 0f 84 a6 00 [ 47.057122][ T361] RSP: 0018:ffffc90000d372a0 EFLAGS: 00010206 [ 47.063454][ T361] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 47.071244][ T361] RDX: ffff88810fb5e2c0 RSI: 0000000000000040 RDI: 0000000000000000 [ 47.079150][ T361] RBP: ffffc90000d37910 R08: ffffffff8209b7d2 R09: 0000000000000003 [ 47.087061][ T361] R10: fffff520001a6ce0 R11: dffffc0000000001 R12: ffff88812203a428 [ 47.094881][ T361] R13: ffff88810fb1b000 R14: 1ffff920001a6e70 R15: 0000000000000018 [ 47.102887][ T361] FS: 00007fdabc9ab6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.111713][ T361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.118335][ T361] CR2: 00007fdabcea4c01 CR3: 000000011dad9000 CR4: 00000000003506a0 [ 47.126307][ T361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.134104][ T361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.142004][ T361] Call Trace: [ 47.145127][ T361] [ 47.148001][ T361] ? slab_post_alloc_hook+0x72/0x2c0 [ 47.153378][ T361] ? avc_alloc_node+0x8f/0x500 [ 47.158027][ T361] ? avc_alloc_node+0x8f/0x500 [ 47.162669][ T361] ? fuse_rename2+0x4ad0/0x4ad0 [ 47.167523][ T361] ? __kasan_check_write+0x14/0x20 [ 47.172707][ T361] ? __kasan_check_write+0x14/0x20 [ 47.177823][ T361] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 47.183217][ T361] ? _raw_spin_lock+0x1b0/0x1b0 [ 47.188020][ T361] ? avc_xperms_populate+0x4c7/0x590 [ 47.193192][ T361] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 47.198833][ T361] ? avc_compute_av+0x4f5/0x830 [ 47.203523][ T361] ? avc_has_perm_noaudit+0x2dd/0x430 [ 47.208730][ T361] ? avc_denied+0x1b0/0x1b0 [ 47.213095][ T361] ? avc_has_perm+0x16f/0x260 [ 47.217600][ T361] ? avc_has_perm_noaudit+0x430/0x430 [ 47.222792][ T361] ? selinux_determine_inode_label+0x29c/0x3b0 [ 47.228953][ T361] ? may_create+0x3d3/0x540 [ 47.233754][ T361] ? selinux_determine_inode_label+0x3b0/0x3b0 [ 47.239986][ T361] ? make_kgid+0x6f0/0x6f0 [ 47.244455][ T361] ? selinux_inode_create+0x22/0x30 [ 47.249649][ T361] ? security_inode_create+0xbc/0x100 [ 47.254856][ T361] ? fuse_rename2+0x4ad0/0x4ad0 [ 47.259543][ T361] path_openat+0xfde/0x2f40 [ 47.264015][ T361] ? do_filp_open+0x460/0x460 [ 47.268592][ T361] do_filp_open+0x21c/0x460 [ 47.273057][ T361] ? vfs_tmpfile+0x2c0/0x2c0 [ 47.277484][ T361] do_sys_openat2+0x13f/0x820 [ 47.282013][ T361] ? do_sys_open+0x220/0x220 [ 47.286428][ T361] __x64_sys_creat+0x11f/0x160 [ 47.291105][ T361] ? __ia32_compat_sys_openat+0x290/0x290 [ 47.296669][ T361] ? switch_fpu_return+0x15f/0x2e0 [ 47.301608][ T361] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 47.307103][ T361] x64_sys_call+0x27b/0x9a0 [ 47.311967][ T361] do_syscall_64+0x3b/0x80 [ 47.316376][ T361] ? clear_bhb_loop+0x35/0x90 [ 47.320987][ T361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.326704][ T361] RIP: 0033:0x7fdabce49ae9 [ 47.331066][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.351050][ T361] RSP: 002b:00007fdabc9ab0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 47.359285][ T361] RAX: ffffffffffffffda RBX: 00007fdabcf69050 RCX: 00007fdabce49ae9 [ 47.367097][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 47.374996][ T361] RBP: 00007fdabce9547a R08: 0000000000000000 R09: 0000000000000000 [ 47.382904][ T361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.390705][ T361] R13: 000000000000006e R14: 00007fdabcf69050 R15: 00007ffc01966648 [ 47.398525][ T361] [ 47.401835][ T361] Modules linked in: [ 47.407427][ T30] audit: type=1400 audit(1745117322.019:99): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.419476][ T361] ---[ end trace bc98e19bf6106d60 ]--- [ 47.434513][ T361] RIP: 0010:fuse_atomic_open+0x26f/0x3a90 [ 47.440308][ T361] Code: e0 40 4c 8b 64 24 48 75 07 e8 6d 5f 66 ff eb 37 48 8b 44 24 70 48 8d 58 30 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 33 ca a8 ff 48 83 3b 00 0f 84 a6 00 [ 47.459934][ T361] RSP: 0018:ffffc90000d372a0 EFLAGS: 00010206 [ 47.465750][ T361] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 47.473704][ T361] RDX: ffff88810fb5e2c0 RSI: 0000000000000040 RDI: 0000000000000000 [ 47.481751][ T361] RBP: ffffc90000d37910 R08: ffffffff8209b7d2 R09: 0000000000000003 [ 47.489877][ T361] R10: fffff520001a6ce0 R11: dffffc0000000001 R12: ffff88812203a428 [ 47.497704][ T361] R13: ffff88810fb1b000 R14: 1ffff920001a6e70 R15: 0000000000000018 [ 47.505779][ T361] FS: 00007fdabc9ab6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.514719][ T361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.521639][ T361] CR2: 00007fdabc9cbfa8 CR3: 000000011dad9000 CR4: 00000000003506b0 [ 47.529596][ T361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.537335][ T361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.545531][ T361] Kernel panic - not syncing: Fatal exception [ 47.551717][ T361] Kernel Offset: disabled [ 47.555858][ T361] Rebooting in 86400 seconds..