[ 29.028221][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.036862][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.044781][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.085299][ T306] syz-executor.0 (306) used greatest stack depth: 10416 bytes left [ 29.565398][ T114] device bridge_slave_1 left promiscuous mode [ 29.571428][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.578467][ T114] device bridge_slave_0 left promiscuous mode [ 29.584443][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.591620][ T114] device veth1_macvtap left promiscuous mode [ 29.597448][ T114] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts. 2024/06/03 16:20:15 ignoring optional flag "sandboxArg"="0" 2024/06/03 16:20:15 parsed 1 programs 2024/06/03 16:20:15 executed programs: 0 [ 35.835293][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 35.835296][ T27] audit: type=1400 audit(1717431615.740:95): avc: denied { unlink } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.844474][ T337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.891920][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.898754][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.905752][ T342] device bridge_slave_0 entered promiscuous mode [ 35.911853][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.918642][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.925571][ T342] device bridge_slave_1 entered promiscuous mode [ 35.937240][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.944056][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.951114][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.957944][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.966952][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.974115][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.981068][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.988220][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.996967][ T342] device veth0_vlan entered promiscuous mode [ 36.003275][ T342] device veth1_macvtap entered promiscuous mode [ 36.009880][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.017904][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.025404][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.032403][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.039462][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.047286][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.055192][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.061992][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.069092][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.076903][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.083696][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.090779][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.098514][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.106815][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.116027][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.124272][ T27] audit: type=1400 audit(1717431616.020:96): avc: denied { mounton } for pid=342 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.149076][ T27] audit: type=1400 audit(1717431616.050:97): avc: denied { bpf } for pid=348 comm="syz-executor.0" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.169659][ C0] BUG: unable to handle page fault for address: ffffffffff600000 [ 36.177095][ C0] #PF: supervisor read access in kernel mode [ 36.182994][ C0] #PF: error_code(0x0000) - not-present page [ 36.188812][ C0] PGD 300e067 P4D 300e067 PUD 3010067 PMD 3012067 PTE 0 [ 36.195583][ C0] Oops: 0000 [#1] PREEMPT SMP [ 36.200094][ C0] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 6.1.78-syzkaller #0 [ 36.207731][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 36.217634][ C0] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 36.223741][ C0] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 36.230069][ C0] Code: 89 f7 48 89 d6 e8 de 4d dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 b9 48 ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 36.249683][ C0] RSP: 0018:ffffc90000003d60 EFLAGS: 00010246 [ 36.255585][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 36.263398][ C0] RDX: 0000000000000000 RSI: ffff888100208000 RDI: ffffffffff600000 [ 36.271205][ C0] RBP: ffffc90000003d78 R08: ffff88810ba2a3c0 R09: 00000000800c000a [ 36.279023][ C0] R10: ffff888100182900 R11: ffff88810ba2a3c0 R12: ffff888237c2bc00 [ 36.286840][ C0] R13: ffff888100208000 R14: ffffc90000003db0 R15: ffffffffff600000 [ 36.294662][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 36.303406][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.309838][ C0] CR2: ffffffffff600000 CR3: 000000010bad4000 CR4: 00000000003506b0 [ 36.317640][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.325457][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.333347][ C0] Call Trace: [ 36.336474][ C0] [ 36.339164][ C0] ? __die_body+0x62/0xb0 [ 36.343330][ C0] ? __die+0x7e/0x90 [ 36.347065][ C0] ? page_fault_oops+0x369/0x3d0 [ 36.351836][ C0] ? get_stack_info+0x36/0xa0 [ 36.356352][ C0] ? 0xffffffffff600000 [ 36.360342][ C0] ? exc_page_fault+0x4dc/0x670 [ 36.365288][ C0] ? 0xffffffffff600000 [ 36.369281][ C0] ? asm_exc_page_fault+0x27/0x30 [ 36.374143][ C0] ? 0xffffffffff600000 [ 36.378134][ C0] ? 0xffffffffff600000 [ 36.382127][ C0] ? strncpy_from_kernel_nofault+0x42/0x80 [ 36.387769][ C0] bpf_probe_read_kernel_str+0x1a/0x40 [ 36.393064][ C0] ? ip6_dst_destroy+0x34/0x140 [ 36.397750][ C0] bpf_prog_ef3a4661c9d1378e+0x42/0x44 [ 36.403046][ C0] bpf_trace_run2+0x4f/0xc0 [ 36.407385][ C0] ? ip6_dst_destroy+0x34/0x140 [ 36.412072][ C0] ? ip6_dst_destroy+0x34/0x140 [ 36.416854][ C0] __bpf_trace_kfree+0x9/0x10 [ 36.421360][ C0] kfree+0xce/0xf0 [ 36.424920][ C0] ip6_dst_destroy+0x34/0x140 [ 36.429432][ C0] dst_destroy+0x4f/0x130 [ 36.433595][ C0] dst_destroy_rcu+0xd/0x10 [ 36.437940][ C0] rcu_do_batch+0x1ae/0x400 [ 36.442277][ C0] rcu_core+0x193/0x4c0 [ 36.446268][ C0] rcu_core_si+0x9/0x10 [ 36.450260][ C0] __do_softirq+0x11b/0x31e [ 36.454603][ C0] ? wg_timers_any_authenticated_packet_traversal+0x2a/0x80 [ 36.461718][ C0] do_softirq+0x81/0xc0 [ 36.465714][ C0] [ 36.468488][ C0] [ 36.471267][ C0] __local_bh_enable_ip+0x63/0x70 [ 36.476125][ C0] wg_timers_any_authenticated_packet_traversal+0x6c/0x80 [ 36.483069][ C0] wg_packet_tx_worker+0xae/0x1d0 [ 36.487930][ C0] process_one_work+0x1b2/0x380 [ 36.492616][ C0] worker_thread+0x222/0x390 [ 36.497049][ C0] kthread+0xda/0xf0 [ 36.500773][ C0] ? process_one_work+0x380/0x380 [ 36.505635][ C0] ? kthread_blkcg+0x30/0x30 [ 36.510073][ C0] ret_from_fork+0x1f/0x30 [ 36.514315][ C0] [ 36.517178][ C0] Modules linked in: [ 36.520923][ C0] CR2: ffffffffff600000 [ 36.524921][ C0] ---[ end trace 0000000000000000 ]--- [ 36.524951][ C1] BUG: unable to handle page fault for address: ffffffffff600000 [ 36.530199][ C0] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 36.537750][ C1] #PF: supervisor read access in kernel mode [ 36.544113][ C0] Code: 89 f7 48 89 d6 e8 de 4d dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 b9 48 ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 36.549901][ C1] #PF: error_code(0x0000) - not-present page [ 36.569518][ C0] RSP: 0018:ffffc90000003d60 EFLAGS: 00010246 [ 36.575332][ C1] PGD 300e067 P4D 300e067 PUD 3010067 [ 36.581242][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 36.581243][ C1] PMD 3012067 [ 36.581244][ C0] RDX: 0000000000000000 RSI: ffff888100208000 RDI: ffffffffff600000 [ 36.586527][ C1] PTE 0 [ 36.594428][ C0] RBP: ffffc90000003d78 R08: ffff88810ba2a3c0 R09: 00000000800c000a [ 36.597640][ C1] Oops: 0000 [#2] PREEMPT SMP [ 36.605448][ C0] R10: ffff888100182900 R11: ffff88810ba2a3c0 R12: ffff888237c2bc00 [ 36.608075][ C1] CPU: 1 PID: 352 Comm: syz-executor.0 Tainted: G D 6.1.78-syzkaller #0 [ 36.615878][ C0] R13: ffff888100208000 R14: ffffc90000003db0 R15: ffffffffff600000 [ 36.620381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 36.628196][ C0] FS: 0000000000000000(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 36.637736][ C1] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 36.645555][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.655449][ C1] Code: 89 f7 48 89 d6 e8 de 4d dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 b9 48 ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 36.664214][ C0] CR2: ffffffffff600000 CR3: 000000010bad4000 CR4: 00000000003506b0 [ 36.670543][ C1] RSP: 0018:ffffc900000d4d40 EFLAGS: 00010246 [ 36.677058][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.696498][ C1] [ 36.696499][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 36.704306][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.710210][ C1] RDX: 0000000000000000 RSI: ffff8881003c4c00 RDI: ffffffffff600000 [ 36.718021][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 36.720191][ C1] RBP: ffffc900000d4d58 R08: 0000000000000001 R09: 0000000000000101 [ 36.720193][ C1] R10: 0000000000000009 R11: 00000000000002f8 R12: ffff888237d2bc00 [ 36.720195][ C1] R13: ffff8881003c4c00 R14: ffffc900000d4d90 R15: ffffffffff600000 [ 36.720197][ C1] FS: 00007f7b3bda56c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 36.720199][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.720201][ C1] CR2: ffffffffff600000 CR3: 000000011307b000 CR4: 00000000003506a0 [ 36.720205][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.720206][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.720207][ C1] Call Trace: [ 36.720209][ C1] [ 36.720211][ C1] ? __die_body+0x62/0xb0 [ 36.720217][ C1] ? __die+0x7e/0x90 [ 36.720220][ C1] ? page_fault_oops+0x369/0x3d0 [ 36.720224][ C1] ? get_stack_info_noinstr+0x19/0x100 [ 36.720229][ C1] ? 0xffffffffff600000 [ 36.720231][ C1] ? exc_page_fault+0x4dc/0x670 [ 36.720234][ C1] ? 0xffffffffff600000 [ 36.720236][ C1] ? asm_exc_page_fault+0x27/0x30 [ 36.720239][ C1] ? 0xffffffffff600000 [ 36.720241][ C1] ? 0xffffffffff600000 [ 36.720243][ C1] ? strncpy_from_kernel_nofault+0x42/0x80 [ 36.720247][ C1] bpf_probe_read_kernel_str+0x1a/0x40 [ 36.720252][ C1] ? ip6_dst_destroy+0x34/0x140 [ 36.720255][ C1] bpf_prog_ef3a4661c9d1378e+0x42/0x44 [ 36.720260][ C1] ? ttwu_do_wakeup+0x39/0x150 [ 36.720264][ C1] bpf_trace_run2+0x4f/0xc0 [ 36.720266][ C1] ? ip6_dst_destroy+0x34/0x140 [ 36.720269][ C1] ? ip6_dst_destroy+0x34/0x140 [ 36.720271][ C1] __bpf_trace_kfree+0x9/0x10 [ 36.720274][ C1] kfree+0xce/0xf0 [ 36.720278][ C1] ip6_dst_destroy+0x34/0x140 [ 36.720280][ C1] dst_destroy+0x4f/0x130 [ 36.720284][ C1] dst_destroy_rcu+0xd/0x10 [ 36.720286][ C1] rcu_do_batch+0x1ae/0x400 [ 36.720290][ C1] rcu_core+0x193/0x4c0 [ 36.720293][ C1] rcu_core_si+0x9/0x10 [ 36.720298][ C1] __do_softirq+0x11b/0x31e [ 36.720302][ C1] __irq_exit_rcu+0x50/0xc0 [ 36.720306][ C1] irq_exit_rcu+0x9/0x10 [ 36.720310][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 36.720314][ C1] [ 36.720315][ C1] [ 36.720316][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 36.720319][ C1] RIP: 0010:smp_call_function_many_cond+0x2b9/0x2f0 [ 36.720323][ C1] Code: 89 df e8 8a 12 4a 00 39 05 bc 07 fb 01 76 27 49 8b 0c 24 48 63 d0 48 8b 14 d5 70 58 d5 82 f7 44 0a 08 01 00 00 00 74 cb f3 90 <8b> 74 11 08 40 f6 c6 01 75 f4 eb bd 65 48 8b 04 25 28 00 00 00 48 [ 36.720325][ C1] RSP: 0018:ffffc9000073bab0 EFLAGS: 00000202 [ 36.720327][ C1] RAX: 0000000000000000 RBX: ffff888237d2bf88 RCX: 0000000000030460 [ 36.720329][ C1] RDX: ffff888237c00000 RSI: 0000000000000011 RDI: ffff888237d2bf88 [ 36.720330][ C1] RBP: ffffc9000073bb38 R08: 0000000000000000 R09: ffff888237d2bf90 [ 36.720332][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888237d2bf80 [ 36.720333][ C1] R13: 0000000000000001 R14: 0000000000000246 R15: 0000000000000000 [ 36.720336][ C1] ? text_poke_sync+0x30/0x30 [ 36.720340][ C1] ? text_poke_sync+0x30/0x30 [ 36.720342][ C1] on_each_cpu_cond_mask+0x3b/0x70 [ 36.720345][ C1] text_poke_bp_batch+0x235/0x270 [ 36.720349][ C1] text_poke_finish+0x1a/0x30 [ 36.720351][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 36.720354][ C1] __jump_label_update+0xc7/0xe0 [ 36.720359][ C1] jump_label_update+0xd3/0xf0 [ 36.720363][ C1] static_key_enable+0x3a/0x60 [ 36.720367][ C1] tracepoint_add_func+0x30c/0x360 [ 36.720371][ C1] ? __bpf_trace_kmalloc+0x20/0x20 [ 36.720374][ C1] tracepoint_probe_register_prio_may_exist+0x56/0x90 [ 36.720377][ C1] ? __bpf_trace_kmalloc+0x20/0x20 [ 36.720380][ C1] bpf_probe_register+0x3e/0x40 [ 36.720382][ C1] bpf_raw_tp_link_attach+0x209/0x2a0 [ 36.720388][ C1] bpf_raw_tracepoint_open+0xcc/0x170 [ 36.720392][ C1] ? security_bpf+0x2f/0x40 [ 36.720397][ C1] __sys_bpf+0x33a/0x4f0 [ 36.720401][ C1] __x64_sys_bpf+0x17/0x20 [ 36.720404][ C1] do_syscall_64+0x3d/0xb0 [ 36.720408][ C1] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 36.720411][ C1] RIP: 0033:0x7f7b3b07dda9 [ 36.720414][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 36.720416][ C1] RSP: 002b:00007f7b3bda50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.720418][ C1] RAX: ffffffffffffffda RBX: 00007f7b3b1abf80 RCX: 00007f7b3b07dda9 [ 36.720419][ C1] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000011 [ 36.720421][ C1] RBP: 00007f7b3b0ca47a R08: 0000000000000000 R09: 0000000000000000 [ 36.720422][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.720424][ C1] R13: 000000000000000b R14: 00007f7b3b1abf80 R15: 00007ffe2c8739d8 [ 36.720426][ C1] [ 36.720427][ C1] Modules linked in: [ 36.720429][ C1] CR2: ffffffffff600000 [ 36.728188][ C1] ---[ end trace 0000000000000000 ]--- [ 36.728189][ C1] RIP: 0010:strncpy_from_kernel_nofault+0x42/0x80 [ 36.728193][ C1] Code: 89 f7 48 89 d6 e8 de 4d dc ff 89 c1 48 c7 c0 de ff ff ff 84 c9 74 33 65 48 8b 35 b9 48 ce 7e ff 86 58 0b 00 00 31 c0 48 89 c2 <41> 8a 0c 07 41 88 0c 16 48 8d 42 01 84 c9 74 05 48 39 d8 7c e8 ff [ 36.728195][ C1] RSP: 0018:ffffc90000003d60 EFLAGS: 00010246 [ 36.728197][ C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000ff600001 [ 36.728199][ C1] RDX: 0000000000000000 RSI: ffff888100208000 RDI: ffffffffff600000 [ 36.728200][ C1] RBP: ffffc90000003d78 R08: ffff88810ba2a3c0 R09: 00000000800c000a [ 36.728202][ C1] R10: ffff888100182900 R11: ffff88810ba2a3c0 R12: ffff888237c2bc00 [ 36.728203][ C1] R13: ffff888100208000 R14: ffffc90000003db0 R15: ffffffffff600000 [ 36.728204][ C1] FS: 00007f7b3bda56c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 36.728207][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.728208][ C1] CR2: ffffffffff600000 CR3: 000000011307b000 CR4: 00000000003506a0 [ 36.728212][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.728213][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.802081][ C0] Shutting down cpus with NMI [ 38.413999][ C0] Kernel Offset: disabled [ 38.418107][ C0] Rebooting in 86400 seconds..