Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. 2025/01/05 01:02:47 ignoring optional flag "sandboxArg"="0" 2025/01/05 01:02:47 ignoring optional flag "type"="gce" 2025/01/05 01:02:47 parsed 1 programs [ 47.064562][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 47.064579][ T24] audit: type=1400 audit(1736038967.520:92): avc: denied { unlink } for pid=447 comm="syz-executor" name="swap-file" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.125833][ T447] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.162993][ T24] audit: type=1400 audit(1736038967.620:93): avc: denied { mounton } for pid=457 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.351607][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.358792][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.366287][ T470] device bridge_slave_0 entered promiscuous mode [ 47.372943][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.380011][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.387473][ T470] device bridge_slave_1 entered promiscuous mode [ 47.423182][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.430119][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.437252][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.444112][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.461864][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.468924][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.476480][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.483911][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.493609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.501584][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.508622][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.517196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.525583][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.532486][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.544832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.553875][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.567501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.578507][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.586745][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.594092][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.602863][ T470] device veth0_vlan entered promiscuous mode [ 47.612538][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.621288][ T470] device veth1_macvtap entered promiscuous mode [ 47.629943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.646184][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/01/05 01:02:48 executed programs: 0 [ 48.031107][ T503] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.037947][ T503] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.045540][ T503] device bridge_slave_0 entered promiscuous mode [ 48.052411][ T503] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.059345][ T503] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.066847][ T503] device bridge_slave_1 entered promiscuous mode [ 48.104163][ T503] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.111558][ T503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.118700][ T503] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.125530][ T503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.146676][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.154149][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.161741][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.182131][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.190707][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.198653][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.205510][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.212829][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.221833][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.228809][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.236075][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.243954][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.257336][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.265401][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.272688][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.281538][ T503] device veth0_vlan entered promiscuous mode [ 48.293950][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.303244][ T503] device veth1_macvtap entered promiscuous mode [ 48.312455][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.324726][ T474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.347458][ T24] audit: type=1400 audit(1736038968.800:94): avc: denied { mounton } for pid=508 comm="syz-executor" path="/root/syzkaller-testdir3213390220/syzkaller.vm2lIx/0/file0" dev="sda1" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 48.350536][ T509] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 48.374757][ T24] audit: type=1400 audit(1736038968.800:95): avc: denied { mounton } for pid=508 comm="syz-executor" path="/root/syzkaller-testdir3213390220/syzkaller.vm2lIx/0/file0" dev="incremental-fs" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.385631][ T509] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 48.385645][ T509] CPU: 0 PID: 509 Comm: syz-executor Not tainted 5.10.232-syzkaller-1004802-g49e8ba0a684f #0 [ 48.385651][ T509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.385683][ T509] RIP: 0010:dir_rename_wrap+0x1e5/0x570 [ 48.385694][ T509] Code: bb f0 ff ff ff 4c 8b 75 b8 e9 4c 03 00 00 e8 22 80 5f ff 31 db 48 83 c3 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 6d 1c 9d ff 48 8b 1b 48 8b 45 c8 48 [ 48.385701][ T509] RSP: 0018:ffffc9000441fb00 EFLAGS: 00010202 [ 48.385713][ T509] RAX: 0000000000000001 RBX: 0000000000000008 RCX: dffffc0000000000 [ 48.385721][ T509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.385729][ T509] RBP: ffffc9000441fb70 R08: ffffffff820b3d2a R09: fffff52000883f51 [ 48.385738][ T509] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022bad903 [ 48.385746][ T509] R13: ffff88811060daa0 R14: ffff888115d6c818 R15: ffff888115d6c828 [ 48.385757][ T509] FS: 00007f06eae526c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 48.385765][ T509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.385772][ T509] CR2: 00007f06eae31d58 CR3: 0000000115b7c000 CR4: 00000000003506b0 [ 48.385783][ T509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.385790][ T509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.385794][ T509] Call Trace: [ 48.385809][ T509] ? __die_body+0x62/0xb0 [ 48.385829][ T509] ? die_addr+0x9f/0xd0 [ 48.413771][ T24] audit: type=1400 audit(1736038968.800:96): avc: denied { write } for pid=508 comm="syz-executor" name="/" dev="incremental-fs" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.421644][ T509] ? exc_general_protection+0x3ff/0x490 [ 48.421662][ T509] ? asm_exc_general_protection+0x1e/0x30 [ 48.421675][ T509] ? dir_rename_wrap+0x9a/0x570 [ 48.421694][ T509] ? dir_rename_wrap+0x1e5/0x570 [ 48.431814][ T24] audit: type=1400 audit(1736038968.800:97): avc: denied { add_name } for pid=508 comm="syz-executor" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.441689][ T509] ? try_break_deleg+0x7c/0x120 [ 48.441701][ T509] vfs_rename+0x9fb/0xeb0 [ 48.441722][ T509] ? __ia32_sys_link+0x70/0x70 [ 48.447096][ T24] audit: type=1400 audit(1736038968.800:98): avc: denied { create } for pid=508 comm="syz-executor" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.466560][ T509] ? __lookup_hash+0x151/0x290 [ 48.466573][ T509] do_renameat2+0xa56/0x1240 [ 48.466588][ T509] ? fsnotify_move+0x290/0x290 [ 48.466605][ T509] __x64_sys_renameat2+0xdd/0xf0 [ 48.466617][ T509] do_syscall_64+0x34/0x70 [ 48.466629][ T509] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.466638][ T509] RIP: 0033:0x7f06eb2cfee9 [ 48.466650][ T509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.466658][ T509] RSP: 002b:00007f06eae520c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 48.466673][ T509] RAX: ffffffffffffffda RBX: 00007f06eb3fef80 RCX: 00007f06eb2cfee9 [ 48.466680][ T509] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000004 [ 48.466687][ T509] RBP: 00007f06eb31c49e R08: 0000000000000002 R09: 0000000000000000 [ 48.466694][ T509] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 48.466710][ T509] R13: 000000000000000b R14: 00007f06eb3fef80 R15: 00007ffe1d157ea8 [ 48.472807][ T24] audit: type=1400 audit(1736038968.800:99): avc: denied { associate } for pid=508 comm="syz-executor" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.480369][ T509] Modules linked in: [ 48.483088][ T509] ---[ end trace 63aa3b995255bde9 ]--- [ 48.488889][ T24] audit: type=1400 audit(1736038968.800:100): avc: denied { remove_name } for pid=508 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.496793][ T509] RIP: 0010:dir_rename_wrap+0x1e5/0x570 [ 48.504673][ T24] audit: type=1400 audit(1736038968.800:101): avc: denied { rename } for pid=508 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.512324][ T509] Code: bb f0 ff ff ff 4c 8b 75 b8 e9 4c 03 00 00 e8 22 80 5f ff 31 db 48 83 c3 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 6d 1c 9d ff 48 8b 1b 48 8b 45 c8 48 [ 48.868173][ T509] RSP: 0018:ffffc9000441fb00 EFLAGS: 00010202 [ 48.874656][ T9] device bridge_slave_1 left promiscuous mode [ 48.874664][ T509] RAX: 0000000000000001 RBX: 0000000000000008 RCX: dffffc0000000000 [ 48.874679][ T509] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.880698][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.888658][ T509] RBP: ffffc9000441fb70 R08: ffffffff820b3d2a R09: fffff52000883f51 [ 48.911527][ T509] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022bad903 [ 48.911721][ T9] device bridge_slave_0 left promiscuous mode [ 48.919331][ T509] R13: ffff88811060daa0 R14: ffff888115d6c818 R15: ffff888115d6c828 [ 48.919343][ T509] FS: 00007f06eae526c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.919353][ T509] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.919371][ T509] CR2: 0000000020000140 CR3: 0000000115b7c000 CR4: 00000000003506a0 [ 48.925793][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.933129][ T509] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.971376][ T509] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.979181][ T509] Kernel panic - not syncing: Fatal exception [ 48.979295][ T9] device veth1_macvtap left promiscuous mode [ 48.985716][ T509] Kernel Offset: disabled [ 48.995672][ T509] Rebooting in 86400 seconds..