[ 30.459821][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.468357][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.477425][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.485829][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.493948][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.506486][ T386] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 31.143070][ T10] device bridge_slave_1 left promiscuous mode [ 31.149169][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.157008][ T10] device bridge_slave_0 left promiscuous mode [ 31.163127][ T10] bridge0: port 1(bridge_slave_0) entered disabled state Warning: Permanently added '10.128.15.225' (ECDSA) to the list of known hosts. 2022/08/09 18:47:33 ignoring optional flag "sandboxArg"="0" 2022/08/09 18:47:34 parsed 1 programs [ 47.750729][ T24] kauditd_printk_skb: 65 callbacks suppressed [ 47.750734][ T24] audit: type=1400 audit(1660070854.039:148): avc: denied { mounton } for pid=412 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.750972][ T412] cgroup: Unknown subsys name 'net' [ 47.786280][ T412] cgroup: Unknown subsys name 'devices' [ 47.792699][ T412] cgroup: Unknown subsys name 'hugetlb' 2022/08/09 18:47:34 executed programs: 0 [ 47.798342][ T412] cgroup: Unknown subsys name 'rlimit' [ 47.804340][ T24] audit: type=1400 audit(1660070854.099:149): avc: denied { mounton } for pid=412 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 47.829410][ T24] audit: type=1400 audit(1660070854.099:150): avc: denied { mount } for pid=412 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 47.838331][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.853169][ T24] audit: type=1400 audit(1660070854.099:151): avc: denied { mounton } for pid=415 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 47.860310][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.884562][ T24] audit: type=1400 audit(1660070854.099:152): avc: denied { module_request } for pid=415 comm="syz-executor.0" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.892088][ T415] device bridge_slave_0 entered promiscuous mode [ 47.920440][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.927539][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.934905][ T415] device bridge_slave_1 entered promiscuous mode [ 47.956891][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.964025][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.971425][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.978630][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.992029][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.999344][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.006859][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.015220][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.033748][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.043072][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.052300][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.061311][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.070074][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.078425][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.085679][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.093055][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.101106][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.108217][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.115589][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.123606][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.133950][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.144049][ T24] audit: type=1400 audit(1660070854.439:153): avc: denied { mount } for pid=415 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.158278][ T422] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 48.167226][ T24] audit: type=1400 audit(1660070854.449:154): avc: denied { mounton } for pid=421 comm="syz-executor.0" path="/root/syzkaller-testdir2507696692/syzkaller.s2zwnx/0/file0" dev="sda1" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 48.178169][ T422] CPU: 1 PID: 422 Comm: syz-executor.0 Not tainted 5.10.134-syzkaller #0 [ 48.213219][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.223420][ T422] Call Trace: [ 48.226694][ T422] dump_stack_lvl+0x81/0xac [ 48.231428][ T422] dump_stack+0x10/0x12 [ 48.235573][ T422] dump_header+0x106/0x631 [ 48.240211][ T422] oom_kill_process.cold+0xb/0x10 [ 48.245201][ T422] out_of_memory+0x3fd/0xe50 [ 48.249755][ T422] ? oom_killer_disable+0x210/0x210 [ 48.255016][ T422] ? __kasan_check_write+0x14/0x20 [ 48.260107][ T422] ? mutex_lock_killable+0x79/0xd0 [ 48.265482][ T422] mem_cgroup_out_of_memory+0x203/0x280 [ 48.271469][ T422] ? mem_cgroup_margin+0x140/0x140 [ 48.277285][ T422] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 48.283150][ T422] ? cgroup_file_notify+0xfa/0x160 [ 48.288385][ T422] memory_max_write+0x265/0x3b0 [ 48.293203][ T422] ? mem_cgroup_css_offline+0x410/0x410 [ 48.299383][ T422] ? kasan_save_stack+0x23/0x50 [ 48.304216][ T422] cgroup_file_write+0x193/0x740 [ 48.309224][ T422] ? __kasan_check_write+0x14/0x20 [ 48.314602][ T422] ? cgroup_file_poll+0xd0/0xd0 [ 48.319510][ T422] ? __mutex_lock_slowpath+0x10/0x10 [ 48.324935][ T422] ? cgroup_file_poll+0xd0/0xd0 [ 48.330055][ T422] kernfs_fop_write_iter+0x2e4/0x460 [ 48.335848][ T422] new_sync_write+0x358/0x6d0 [ 48.340532][ T422] ? futex_exit_release+0x200/0x200 [ 48.345690][ T422] ? new_sync_read+0x6d0/0x6d0 [ 48.350415][ T422] ? putname+0xab/0xf0 [ 48.354556][ T422] ? rw_verify_area+0xc3/0x2b0 [ 48.359283][ T422] ? __fget_light.part.0+0x19d/0x330 [ 48.364541][ T422] vfs_write+0x4f5/0x750 [ 48.369203][ T422] ksys_write+0x111/0x210 [ 48.373508][ T422] ? __ia32_sys_read+0xa0/0xa0 [ 48.378336][ T422] ? __kasan_check_write+0x14/0x20 [ 48.383411][ T422] ? switch_fpu_return+0xc3/0x1c0 [ 48.388402][ T422] __x64_sys_write+0x6e/0xb0 [ 48.392999][ T422] ? syscall_exit_to_user_mode+0x27/0x160 [ 48.398679][ T422] do_syscall_64+0x32/0x80 [ 48.403068][ T422] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 48.409030][ T422] RIP: 0033:0x7fb9c26b8049 [ 48.413769][ T422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 48.433518][ T422] RSP: 002b:00007fb9c262e168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.442030][ T422] RAX: ffffffffffffffda RBX: 00007fb9c27caf60 RCX: 00007fb9c26b8049 [ 48.449970][ T422] RDX: 0000000000000012 RSI: 0000000020000080 RDI: 0000000000000008 [ 48.457917][ T422] RBP: 00007fb9c271208d R08: 0000000000000000 R09: 0000000000000000 [ 48.465852][ T422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.473795][ T422] R13: 00007ffcf952168f R14: 00007fb9c262e300 R15: 0000000000022000 [ 48.483441][ T422] memory: usage 92kB, limit 0kB, failcnt 0 [ 48.489303][ T422] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.496559][ T422] Memory cgroup stats for /syz0: [ 48.496589][ T422] anon 0 [ 48.496589][ T422] file 0 [ 48.496589][ T422] kernel_stack 0 [ 48.496589][ T422] percpu 0 [ 48.496589][ T422] sock 0 [ 48.496589][ T422] shmem 0 [ 48.496589][ T422] file_mapped 0 [ 48.496589][ T422] file_dirty 0 [ 48.496589][ T422] file_writeback 0 [ 48.496589][ T422] anon_thp 0 [ 48.496589][ T422] inactive_anon 0 [ 48.496589][ T422] active_anon 0 [ 48.496589][ T422] inactive_file 0 [ 48.496589][ T422] active_file 0 [ 48.496589][ T422] unevictable 0 [ 48.496589][ T422] slab_reclaimable 0 [ 48.496589][ T422] slab_unreclaimable 0 [ 48.496589][ T422] slab 0 [ 48.496589][ T422] workingset_refault_anon 0 [ 48.496589][ T422] workingset_refault_file 0 [ 48.496589][ T422] workingset_activate_anon 0 [ 48.496589][ T422] workingset_activate_file 0 [ 48.496589][ T422] workingset_restore_anon 0 [ 48.496589][ T422] workingset_restore_file 0 [ 48.496589][ T422] workingset_nodereclaim 0 [ 48.496589][ T422] pgfault 66 [ 48.593939][ T422] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=421,uid=0 [ 48.609362][ T422] Memory cgroup out of memory: Killed process 421 (syz-executor.0) total-vm:34404kB, anon-rss:360kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:60kB oom_score_adj:1000 [ 48.626843][ T27] oom_reaper: reaped process 421 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:4kB [ 48.639369][ T415] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 48.649434][ T415] CPU: 0 PID: 415 Comm: syz-executor.0 Not tainted 5.10.134-syzkaller #0 [ 48.657834][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 48.668041][ T415] Call Trace: [ 48.671305][ T415] dump_stack_lvl+0x81/0xac [ 48.675793][ T415] dump_stack+0x10/0x12 [ 48.679931][ T415] dump_header+0x106/0x631 [ 48.684389][ T415] oom_kill_process.cold+0xb/0x10 [ 48.689393][ T415] out_of_memory+0x3fd/0xe50 [ 48.693951][ T415] ? oom_killer_disable+0x210/0x210 [ 48.699114][ T415] ? __kasan_check_write+0x14/0x20 [ 48.704190][ T415] ? mutex_lock_killable+0x79/0xd0 [ 48.709286][ T415] mem_cgroup_out_of_memory+0x203/0x280 [ 48.714974][ T415] ? mem_cgroup_margin+0x140/0x140 [ 48.720222][ T415] ? __kasan_check_write+0x14/0x20 [ 48.725402][ T415] ? _raw_spin_unlock+0x41/0x70 [ 48.730354][ T415] try_charge+0xe1c/0x1350 [ 48.734743][ T415] ? mem_cgroup_oom_trylock+0x3d0/0x3d0 [ 48.740377][ T415] ? warn_alloc+0x190/0x190 [ 48.744842][ T415] ? pgd_free+0x1f0/0x1f0 [ 48.749151][ T415] ? get_mem_cgroup_from_mm+0xd2/0x1e0 [ 48.754624][ T415] __mem_cgroup_charge+0x120/0x790 [ 48.759695][ T415] handle_pte_fault+0x170c/0x32f0 [ 48.764695][ T415] __handle_mm_fault+0xabc/0xf90 [ 48.769742][ T415] ? cp_new_stat+0x4aa/0x5d0 [ 48.774318][ T415] ? copy_page_range+0x2660/0x2660 [ 48.779463][ T415] ? __this_cpu_preempt_check+0x13/0x20 [ 48.785208][ T415] ? __count_memcg_events.part.0+0x7e/0x230 [ 48.791817][ T415] ? up_read+0x160/0x160 [ 48.796785][ T415] handle_mm_fault+0x373/0x590 [ 48.801788][ T415] do_user_addr_fault+0x4d0/0x9d0 [ 48.806884][ T415] ? trace_page_fault_user+0xb0/0xb0 [ 48.812260][ T415] ? debug_smp_processor_id+0x17/0x20 [ 48.817973][ T415] ? fpregs_assert_state_consistent+0x49/0xb0 [ 48.824104][ T415] ? debug_smp_processor_id+0x17/0x20 [ 48.829880][ T415] ? exit_to_user_mode_prepare+0x30/0xe0 [ 48.835706][ T415] exc_page_fault+0x65/0xc0 [ 48.840439][ T415] ? asm_exc_page_fault+0x8/0x30 [ 48.845512][ T415] asm_exc_page_fault+0x1e/0x30 [ 48.850534][ T415] RIP: 0033:0x7fb9c2687015 [ 48.854927][ T415] Code: e8 4b 8d 0c 2f 48 8b 6c 24 18 48 39 d3 48 89 4b 60 0f 95 c2 48 83 c8 01 0f b6 d2 48 c1 e2 02 4c 09 ea 48 83 ca 01 49 89 57 08 <48> 89 41 08 49 83 c7 10 eb b3 48 8d 3d 8a dc 09 00 e8 75 c9 ff ff [ 48.875031][ T415] RSP: 002b:00007ffcf9520630 EFLAGS: 00010206 [ 48.881386][ T415] RAX: 00000000000184d1 RBX: 00007fb9c279e5e0 RCX: 00005555568adb30 [ 48.889550][ T415] RDX: 0000000000008041 RSI: 0000000000000000 RDI: 0000000000000004 [ 48.897711][ T415] RBP: 0000000000008030 R08: 0000000000000003 R09: 00007fb9c279e640 [ 48.905663][ T415] R10: 0000000000000231 R11: 0000000000000000 R12: 0000000000000802 [ 48.913725][ T415] R13: 0000000000008040 R14: 0000000000000804 R15: 00005555568a5af0 [ 48.922194][ T415] memory: usage 32kB, limit 0kB, failcnt 19 [ 48.922568][ T24] audit: type=1400 audit(1660070855.209:155): avc: denied { append } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.928317][ T415] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 48.951093][ T24] audit: type=1400 audit(1660070855.209:156): avc: denied { open } for pid=142 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.958798][ T415] Memory cgroup stats for [ 48.980939][ T24] audit: type=1400 audit(1660070855.209:157): avc: denied { getattr } for pid=142 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.008887][ T415] /syz0: [ 49.009119][ T415] anon 0 [ 49.009119][ T415] file 0 [ 49.009119][ T415] kernel_stack 0 [ 49.009119][ T415] percpu 0 [ 49.009119][ T415] sock 0 [ 49.009119][ T415] shmem 0 [ 49.009119][ T415] file_mapped 0 [ 49.009119][ T415] file_dirty 0 [ 49.009119][ T415] file_writeback 0 [ 49.009119][ T415] anon_thp 0 [ 49.009119][ T415] inactive_anon 0 [ 49.009119][ T415] active_anon 0 [ 49.009119][ T415] inactive_file 0 [ 49.009119][ T415] active_file 0 [ 49.009119][ T415] unevictable 0 [ 49.009119][ T415] slab_reclaimable 0 [ 49.009119][ T415] slab_unreclaimable 0 [ 49.009119][ T415] slab 0 [ 49.009119][ T415] workingset_refault_anon 0 [ 49.009119][ T415] workingset_refault_file 0 [ 49.009119][ T415] workingset_activate_anon 0 [ 49.009119][ T415] workingset_activate_file 0 [ 49.009119][ T415] workingset_restore_anon 0 [ 49.009119][ T415] workingset_restore_file 0 [ 49.009119][ T415] workingset_nodereclaim 0 [ 49.009119][ T415] pgfault 66 [ 49.106176][ T415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=415,uid=0 [ 49.121332][ T415] Memory cgroup out of memory: Killed process 415 (syz-executor.0) total-vm:34140kB, anon-rss:356kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:48kB oom_score_adj:0 [ 49.138576][ T27] oom_reaper: reaped process 415 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 49.873294][ T189] device bridge_slave_1 left promiscuous mode [ 49.880049][ T189] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.887836][ T189] device bridge_slave_0 left promiscuous mode [ 49.894350][ T189] bridge0: port 1(bridge_slave_0) entered disabled state 2022/08/09 18:47:46 executor failed 11 times: executor 0: exit status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67