[ 35.383454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.437586][ T314] syz-executor.0 (314) used greatest stack depth: 10976 bytes left [ 35.997494][ T8] device bridge_slave_1 left promiscuous mode [ 36.003370][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.010423][ T8] device bridge_slave_0 left promiscuous mode [ 36.016310][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.023395][ T8] device veth1_macvtap left promiscuous mode [ 36.029190][ T8] device veth0_vlan left promiscuous mode [ 46.045037][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 46.045041][ T27] audit: type=1400 audit(1732983537.020:94): avc: denied { read } for pid=81 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.55' (ED25519) to the list of known hosts. 2024/11/30 16:19:03 ignoring optional flag "sandboxArg"="0" 2024/11/30 16:19:03 ignoring optional flag "type"="gce" 2024/11/30 16:19:03 parsed 1 programs 2024/11/30 16:19:03 executed programs: 0 [ 52.387471][ T27] audit: type=1400 audit(1732983543.370:95): avc: denied { unlink } for pid=353 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 52.425292][ T353] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.444303][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.451148][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.458080][ T359] device bridge_slave_0 entered promiscuous mode [ 52.464234][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.471017][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.477932][ T359] device bridge_slave_1 entered promiscuous mode [ 52.491231][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.498102][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.505083][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.511947][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.521175][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.528128][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.534913][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.541962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.549419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.557216][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.564060][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.571435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.579313][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.586054][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.594077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.601928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.610467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.618927][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.626414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.633532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.640815][ T359] device veth0_vlan entered promiscuous mode [ 52.647241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.655408][ T359] device veth1_macvtap entered promiscuous mode [ 52.662066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.670351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.680571][ T27] audit: type=1400 audit(1732983543.660:96): avc: denied { mounton } for pid=359 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 52.704798][ T27] audit: type=1400 audit(1732983543.680:97): avc: denied { read write } for pid=363 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.728042][ T27] audit: type=1400 audit(1732983543.680:98): avc: denied { open } for pid=363 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.751163][ T27] audit: type=1400 audit(1732983543.680:99): avc: denied { mounton } for pid=363 comm="syz-executor.0" path="/root/syzkaller-testdir1725351515/syzkaller.XDcUAK/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 52.806655][ T366] FAULT_INJECTION: forcing a failure. [ 52.806655][ T366] name failslab, interval 1, probability 0, space 0, times 1 [ 52.819124][ T366] CPU: 1 PID: 366 Comm: syz-executor.0 Not tainted 6.1.115-syzkaller #0 [ 52.827189][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.837081][ T366] Call Trace: [ 52.840207][ T366] [ 52.842987][ T366] dump_stack_lvl+0x68/0x91 [ 52.847324][ T366] dump_stack+0x10/0x19 [ 52.851315][ T366] should_fail_ex+0x13e/0x140 [ 52.855828][ T366] ? fuse_file_alloc+0x20/0xd0 [ 52.860429][ T366] __should_failslab+0x52/0x60 [ 52.865028][ T366] should_failslab+0x9/0x20 [ 52.869369][ T366] __kmem_cache_alloc_node+0x3d/0x2a0 [ 52.874575][ T366] ? __kmem_cache_alloc_node+0x193/0x2a0 [ 52.880045][ T366] ? fuse_alloc_forget+0x1a/0x20 [ 52.884816][ T366] ? fuse_file_alloc+0x20/0xd0 [ 52.889417][ T366] kmalloc_trace+0x2a/0xa0 [ 52.893668][ T366] fuse_file_alloc+0x20/0xd0 [ 52.898097][ T366] fuse_create_open+0x319/0xac0 [ 52.902787][ T366] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 52.908423][ T366] ? avc_compute_av+0x242/0x2a0 [ 52.913116][ T366] fuse_atomic_open+0xea/0x140 [ 52.917713][ T366] path_openat+0x3e2/0xb60 [ 52.921963][ T366] do_filp_open+0xad/0x150 [ 52.926253][ T366] do_sys_openat2+0x83/0x250 [ 52.930644][ T366] __x64_sys_open+0x77/0xa0 [ 52.934995][ T366] x64_sys_call+0x36/0x9a0 [ 52.939259][ T366] do_syscall_64+0x3b/0xb0 [ 52.943487][ T366] ? clear_bhb_loop+0x55/0xb0 [ 52.948002][ T366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.953732][ T366] RIP: 0033:0x7f9fa2e7dea9 [ 52.957987][ T366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.977424][ T366] RSP: 002b:00007f9fa3c520c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 52.985677][ T366] RAX: ffffffffffffffda RBX: 00007f9fa2fac050 RCX: 00007f9fa2e7dea9 [ 52.993478][ T366] RDX: 0000000000000000 RSI: 0000000004008040 RDI: 0000000020000200 [ 53.001291][ T366] RBP: 00007f9fa3c52120 R08: 0000000000000000 R09: 0000000000000000 [ 53.009102][ T366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.016913][ T366] R13: 000000000000006e R14: 00007f9fa2fac050 R15: 00007ffe6204ae98 [ 53.024727][ T366] [ 53.540708][ T27] audit: type=1400 audit(1732983544.520:100): avc: denied { unmount } for pid=359 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 53.694412][ T371] FAULT_INJECTION: forcing a failure. [ 53.694412][ T371] name failslab, interval 1, probability 0, space 0, times 0 [ 53.706809][ T371] CPU: 0 PID: 371 Comm: syz-executor.0 Not tainted 6.1.115-syzkaller #0 [ 53.714952][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.724849][ T371] Call Trace: [ 53.727965][ T371] [ 53.730743][ T371] dump_stack_lvl+0x68/0x91 [ 53.735114][ T371] dump_stack+0x10/0x19 [ 53.739076][ T371] should_fail_ex+0x13e/0x140 [ 53.743591][ T371] __should_failslab+0x52/0x60 [ 53.748187][ T371] should_failslab+0x9/0x20 [ 53.752526][ T371] slab_pre_alloc_hook+0x2e/0x1b0 [ 53.757386][ T371] kmem_cache_alloc_lru+0x49/0x270 [ 53.762332][ T371] ? fuse_alloc_inode+0x20/0x100 [ 53.767105][ T371] ? fuse_iget+0x2b0/0x2b0 [ 53.771360][ T371] fuse_alloc_inode+0x20/0x100 [ 53.775960][ T371] alloc_inode+0x1d/0xb0 [ 53.780039][ T371] iget5_locked+0x36/0x90 [ 53.784206][ T371] ? fuse_inode_eq+0x20/0x20 [ 53.788630][ T371] fuse_iget+0x138/0x2b0 [ 53.792711][ T371] fuse_create_open+0x601/0xac0 [ 53.797405][ T371] fuse_atomic_open+0xea/0x140 [ 53.801997][ T371] path_openat+0x3e2/0xb60 [ 53.806251][ T371] do_filp_open+0xad/0x150 [ 53.810510][ T371] do_sys_openat2+0x83/0x250 [ 53.814933][ T371] __x64_sys_open+0x77/0xa0 [ 53.819269][ T371] x64_sys_call+0x36/0x9a0 [ 53.823519][ T371] do_syscall_64+0x3b/0xb0 [ 53.827775][ T371] ? clear_bhb_loop+0x55/0xb0 [ 53.832287][ T371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.838013][ T371] RIP: 0033:0x7f9fa2e7dea9 [ 53.842271][ T371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.861822][ T371] RSP: 002b:00007f9fa3c520c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 53.870068][ T371] RAX: ffffffffffffffda RBX: 00007f9fa2fac050 RCX: 00007f9fa2e7dea9 [ 53.877882][ T371] RDX: 0000000000000000 RSI: 0000000004008040 RDI: 0000000020000200 [ 53.885689][ T371] RBP: 00007f9fa3c52120 R08: 0000000000000000 R09: 0000000000000000 [ 53.893503][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.901311][ T371] R13: 000000000000006e R14: 00007f9fa2fac050 R15: 00007ffe6204ae98 [ 53.909230][ T371] [ 53.912322][ T371] BUG: kernel NULL pointer dereference, address: 0000000000000028 [ 53.919919][ T371] #PF: supervisor read access in kernel mode [ 53.925724][ T371] #PF: error_code(0x0000) - not-present page [ 53.931541][ T371] PGD 110e66067 P4D 110e66067 PUD 110e6b067 PMD 0 [ 53.937876][ T371] Oops: 0000 [#1] PREEMPT SMP [ 53.942389][ T371] CPU: 0 PID: 371 Comm: syz-executor.0 Not tainted 6.1.115-syzkaller #0 [ 53.950547][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.960441][ T371] RIP: 0010:fuse_file_put+0x44/0x590 [ 53.965560][ T371] Code: 04 25 28 00 00 00 48 89 45 d0 4c 8b 76 08 b8 ff ff ff ff f0 0f c1 46 28 83 f8 01 0f 85 ef 00 00 00 41 89 cc 41 89 d5 49 89 ff <48> 8b 47 28 48 8b 80 c8 03 00 00 48 89 85 d8 fd ff ff 48 c7 85 08 [ 53.985004][ T371] RSP: 0018:ffffc900007eb5d8 EFLAGS: 00010246 [ 53.990904][ T371] RAX: 0000000000000001 RBX: ffff888110d46e00 RCX: 0000000000000000 [ 53.998721][ T371] RDX: 0000000000000001 RSI: ffff888110d46e00 RDI: 0000000000000000 [ 54.006525][ T371] RBP: ffffc900007eb808 R08: 0000000000000000 R09: ffffc900007eb770 [ 54.014339][ T371] R10: 00000000ffffefff R11: 3e4b5341542f3c20 R12: 0000000000000000 [ 54.022148][ T371] R13: 0000000000000001 R14: ffff888110d46f00 R15: 0000000000000000 [ 54.029961][ T371] FS: 00007f9fa3c526c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 54.038725][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.045149][ T371] CR2: 0000000000000028 CR3: 0000000110e5c000 CR4: 00000000003506b0 [ 54.052961][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.060770][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.068583][ T371] Call Trace: [ 54.071706][ T371] [ 54.074483][ T371] ? __die_body+0x62/0xb0 [ 54.078648][ T371] ? __die+0x7e/0x90 [ 54.082381][ T371] ? page_fault_oops+0x369/0x3d0 [ 54.087154][ T371] ? finish_task_switch+0x9c/0x250 [ 54.092119][ T371] ? exc_page_fault+0x4ce/0x630 [ 54.096790][ T371] ? asm_exc_page_fault+0x27/0x30 [ 54.101651][ T371] ? fuse_file_put+0x44/0x590 [ 54.106165][ T371] ? dump_stack_lvl+0x7d/0x91 [ 54.110680][ T371] ? dump_stack+0x10/0x19 [ 54.114842][ T371] ? should_fail_ex+0x13e/0x140 [ 54.119527][ T371] ? __should_failslab+0x52/0x60 [ 54.124328][ T371] ? should_failslab+0x9/0x20 [ 54.128820][ T371] ? slab_pre_alloc_hook+0x2e/0x1b0 [ 54.133848][ T371] ? kmem_cache_alloc_lru+0x49/0x270 [ 54.138969][ T371] ? fuse_alloc_inode+0x20/0x100 [ 54.143753][ T371] ? _raw_spin_lock_irqsave+0x3e/0x90 [ 54.148950][ T371] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 54.154590][ T371] ? __wake_up+0x7e/0xb0 [ 54.158671][ T371] ? fuse_prepare_release+0xb4/0x100 [ 54.163941][ T371] fuse_sync_release+0x2c/0x40 [ 54.168536][ T371] fuse_create_open+0x9cf/0xac0 [ 54.173251][ T371] fuse_atomic_open+0xea/0x140 [ 54.177825][ T371] path_openat+0x3e2/0xb60 [ 54.182084][ T371] do_filp_open+0xad/0x150 [ 54.186333][ T371] do_sys_openat2+0x83/0x250 [ 54.190754][ T371] __x64_sys_open+0x77/0xa0 [ 54.195094][ T371] x64_sys_call+0x36/0x9a0 [ 54.199345][ T371] do_syscall_64+0x3b/0xb0 [ 54.203598][ T371] ? clear_bhb_loop+0x55/0xb0 [ 54.208111][ T371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.213853][ T371] RIP: 0033:0x7f9fa2e7dea9 [ 54.218092][ T371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.237536][ T371] RSP: 002b:00007f9fa3c520c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 54.245779][ T371] RAX: ffffffffffffffda RBX: 00007f9fa2fac050 RCX: 00007f9fa2e7dea9 [ 54.253591][ T371] RDX: 0000000000000000 RSI: 0000000004008040 RDI: 0000000020000200 [ 54.261402][ T371] RBP: 00007f9fa3c52120 R08: 0000000000000000 R09: 0000000000000000 [ 54.269214][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.277025][ T371] R13: 000000000000006e R14: 00007f9fa2fac050 R15: 00007ffe6204ae98 [ 54.284840][ T371] [ 54.287699][ T371] Modules linked in: [ 54.291451][ T371] CR2: 0000000000000028 [ 54.295425][ T371] ---[ end trace 0000000000000000 ]--- [ 54.300720][ T371] RIP: 0010:fuse_file_put+0x44/0x590 [ 54.305863][ T371] Code: 04 25 28 00 00 00 48 89 45 d0 4c 8b 76 08 b8 ff ff ff ff f0 0f c1 46 28 83 f8 01 0f 85 ef 00 00 00 41 89 cc 41 89 d5 49 89 ff <48> 8b 47 28 48 8b 80 c8 03 00 00 48 89 85 d8 fd ff ff 48 c7 85 08 [ 54.325281][ T371] RSP: 0018:ffffc900007eb5d8 EFLAGS: 00010246 [ 54.331180][ T371] RAX: 0000000000000001 RBX: ffff888110d46e00 RCX: 0000000000000000 [ 54.338997][ T371] RDX: 0000000000000001 RSI: ffff888110d46e00 RDI: 0000000000000000 [ 54.346806][ T371] RBP: ffffc900007eb808 R08: 0000000000000000 R09: ffffc900007eb770 [ 54.354616][ T371] R10: 00000000ffffefff R11: 3e4b5341542f3c20 R12: 0000000000000000 [ 54.362427][ T371] R13: 0000000000000001 R14: ffff888110d46f00 R15: 0000000000000000 [ 54.370240][ T371] FS: 00007f9fa3c526c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 54.379005][ T371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.385428][ T371] CR2: 0000000000000028 CR3: 0000000110e5c000 CR4: 00000000003506b0 [ 54.393238][ T371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.401048][ T371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.408861][ T371] Kernel panic - not syncing: Fatal exception [ 54.415100][ T371] Kernel Offset: disabled [ 54.419210][ T371] Rebooting in 86400 seconds..