[ 20.701750][ T293] device veth1_macvtap entered promiscuous mode [ 20.710564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.720380][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.815485][ T293] syz-executor.0 (293) used greatest stack depth: 21760 bytes left [ 21.816832][ T45] device bridge_slave_1 left promiscuous mode [ 21.823086][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.830610][ T45] device bridge_slave_0 left promiscuous mode [ 21.836801][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.844405][ T45] device veth1_macvtap left promiscuous mode [ 21.850451][ T45] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. 2025/11/24 17:22:43 ignoring optional flag "type"="gce" 2025/11/24 17:22:44 parsed 1 programs [ 37.915368][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 37.915380][ T30] audit: type=1400 audit(1764004964.162:92): avc: denied { unlink } for pid=328 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/11/24 17:22:44 executed programs: 0 [ 37.957413][ T328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.002595][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.009939][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.017382][ T334] device bridge_slave_0 entered promiscuous mode [ 38.024155][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.031218][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.038856][ T334] device bridge_slave_1 entered promiscuous mode [ 38.077504][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.084547][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.091850][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.098981][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.114810][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.122203][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.129651][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.137047][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.145887][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.154040][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.161085][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.170346][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.178624][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.185660][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.196919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.206094][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.218645][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.229097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.237256][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.244642][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.252948][ T334] device veth0_vlan entered promiscuous mode [ 38.262369][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.271345][ T334] device veth1_macvtap entered promiscuous mode [ 38.280032][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.289947][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.309539][ T30] audit: type=1400 audit(1764004964.552:93): avc: denied { read write } for pid=344 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.335340][ T30] audit: type=1400 audit(1764004964.552:94): avc: denied { open } for pid=344 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 38.359380][ T30] audit: type=1400 audit(1764004964.552:95): avc: denied { mounton } for pid=344 comm="syz-executor.0" path="/root/syzkaller-testdir3168465629/syzkaller.HjU0Be/0/file0" dev="sda1" ino=2036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.387096][ T348] general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN [ 38.399007][ T348] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 38.408708][ T348] CPU: 1 PID: 348 Comm: syz-executor.0 Not tainted syzkaller #0 [ 38.416490][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.426529][ T348] RIP: 0010:fuse_atomic_open+0x238/0x2140 [ 38.432261][ T348] Code: 89 de 83 e6 40 31 ff e8 76 e2 71 ff 89 d8 83 e0 40 75 07 e8 ba de 71 ff eb 2e 48 8b 44 24 58 48 8d 58 30 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 69 60 b0 ff 48 83 3b 00 0f 84 9c [ 38.451848][ T348] RSP: 0018:ffffc90000dd7380 EFLAGS: 00010206 [ 38.457911][ T348] RAX: 0000000000000009 RBX: 0000000000000048 RCX: ffff88810d3e4f00 [ 38.466125][ T348] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 38.474114][ T348] RBP: ffffc90000dd79b0 R08: ffff88810d3e4f00 R09: 0000000000000002 [ 38.482070][ T348] R10: 00000000fffffffe R11: 0000000000000000 R12: dffffc0000000000 [ 38.490040][ T348] R13: ffff88811dd55000 R14: 1ffff920001bae88 R15: 0000000000000018 [ 38.498118][ T348] FS: 00007fafef12e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.507034][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.513595][ T348] CR2: 0000560c67568d70 CR3: 000000011f651000 CR4: 00000000003506a0 [ 38.521554][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.529555][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.537537][ T348] Call Trace: [ 38.540798][ T348] [ 38.543714][ T348] ? avc_alloc_node+0x8f/0x4c0 [ 38.548466][ T348] ? kmem_cache_alloc+0xf7/0x260 [ 38.553433][ T348] ? fuse_rename2+0x25f0/0x25f0 [ 38.558275][ T348] ? __kasan_check_write+0x14/0x20 [ 38.563394][ T348] ? avc_alloc_node+0x433/0x4c0 [ 38.568322][ T348] ? __kasan_check_write+0x14/0x20 [ 38.573440][ T348] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 38.578973][ T348] ? _raw_spin_lock+0xe0/0xe0 [ 38.583732][ T348] ? avc_xperms_populate+0x4d3/0x590 [ 38.589007][ T348] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 38.594821][ T348] ? avc_compute_av+0x4fd/0x830 [ 38.599650][ T348] ? avc_has_perm_noaudit+0x2f4/0x460 [ 38.604998][ T348] ? avc_denied+0x1b0/0x1b0 [ 38.609660][ T348] ? avc_has_perm+0x158/0x240 [ 38.614315][ T348] ? avc_has_perm_noaudit+0x460/0x460 [ 38.619671][ T348] ? selinux_determine_inode_label+0x290/0x3e0 [ 38.625924][ T348] ? may_create+0x377/0x460 [ 38.630539][ T348] ? selinux_determine_inode_label+0x3e0/0x3e0 [ 38.636774][ T348] ? make_kgid+0x640/0x640 [ 38.641276][ T348] ? selinux_inode_create+0x22/0x30 [ 38.646462][ T348] ? security_inode_create+0xbd/0x110 [ 38.651847][ T348] ? fuse_rename2+0x25f0/0x25f0 [ 38.656790][ T348] path_openat+0xe31/0x2f10 [ 38.661333][ T348] ? do_filp_open+0x3e0/0x3e0 [ 38.666000][ T348] ? expand_files+0xde/0x8e0 [ 38.670576][ T348] do_filp_open+0x1b3/0x3e0 [ 38.675066][ T348] ? vfs_tmpfile+0x2d0/0x2d0 [ 38.679677][ T348] do_sys_openat2+0x14c/0x7b0 [ 38.684420][ T348] ? __se_sys_futex+0x139/0x310 [ 38.689264][ T348] ? do_sys_open+0xe0/0xe0 [ 38.693696][ T348] ? __x64_sys_futex+0x100/0x100 [ 38.698632][ T348] ? ksys_write+0x110/0x240 [ 38.703124][ T348] ? __kasan_check_write+0x14/0x20 [ 38.708229][ T348] __x64_sys_creat+0x8e/0xb0 [ 38.712840][ T348] x64_sys_call+0x94a/0x9a0 [ 38.717337][ T348] do_syscall_64+0x4c/0xa0 [ 38.721740][ T348] ? clear_bhb_loop+0x50/0xa0 [ 38.726391][ T348] ? clear_bhb_loop+0x50/0xa0 [ 38.731170][ T348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.737063][ T348] RIP: 0033:0x7fafef5ccae9 [ 38.741459][ T348] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 38.761048][ T348] RSP: 002b:00007fafef12e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 38.769444][ T348] RAX: ffffffffffffffda RBX: 00007fafef6ec050 RCX: 00007fafef5ccae9 [ 38.777419][ T348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 38.785561][ T348] RBP: 00007fafef61847a R08: 0000000000000000 R09: 0000000000000000 [ 38.793522][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.803860][ T348] R13: 000000000000006e R14: 00007fafef6ec050 R15: 00007ffd7b1a9368 [ 38.811827][ T348] [ 38.814943][ T348] Modules linked in: [ 38.819886][ T30] audit: type=1400 audit(1764004965.062:96): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.841745][ T348] ---[ end trace b0ca19af5678b0ae ]--- [ 38.847247][ T348] RIP: 0010:fuse_atomic_open+0x238/0x2140 [ 38.847314][ T30] audit: type=1400 audit(1764004965.062:97): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.853057][ T348] Code: 89 de 83 e6 40 31 ff e8 76 e2 71 ff 89 d8 83 e0 40 75 07 e8 ba de 71 ff eb 2e 48 8b 44 24 58 48 8d 58 30 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 69 60 b0 ff 48 83 3b 00 0f 84 9c [ 38.853073][ T348] RSP: 0018:ffffc90000dd7380 EFLAGS: 00010206 [ 38.875116][ T30] audit: type=1400 audit(1764004965.062:98): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.894915][ T348] [ 38.901266][ T30] audit: type=1400 audit(1764004965.062:99): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.922152][ T348] RAX: 0000000000000009 RBX: 0000000000000048 RCX: ffff88810d3e4f00 [ 38.924372][ T30] audit: type=1400 audit(1764004965.062:100): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.944843][ T348] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000000 [ 38.952964][ T30] audit: type=1400 audit(1764004965.062:101): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.973505][ T348] RBP: ffffc90000dd79b0 R08: ffff88810d3e4f00 R09: 0000000000000002 [ 39.012647][ T348] R10: 00000000fffffffe R11: 0000000000000000 R12: dffffc0000000000 [ 39.020661][ T348] R13: ffff88811dd55000 R14: 1ffff920001bae88 R15: 0000000000000018 [ 39.028666][ T348] FS: 00007fafef12e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 39.037995][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.044696][ T348] CR2: 0000560c67568d70 CR3: 000000011f651000 CR4: 00000000003506a0 [ 39.052822][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.061047][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.069144][ T348] Kernel panic - not syncing: Fatal exception [ 39.075405][ T348] Kernel Offset: disabled [ 39.079718][ T348] Rebooting in 86400 seconds..