Warning: Permanently added '10.128.10.18' (ED25519) to the list of known hosts. 2025/05/22 04:20:51 ignoring optional flag "sandboxArg"="0" 2025/05/22 04:20:51 ignoring optional flag "type"="gce" 2025/05/22 04:20:51 parsed 1 programs [ 53.089637][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 53.089642][ T29] audit: type=1400 audit(1747887651.336:79): avc: denied { unlink } for pid=366 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/05/22 04:20:51 executed programs: 0 [ 53.143836][ T366] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.177034][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.183910][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.190891][ T374] device bridge_slave_0 entered promiscuous mode [ 53.198419][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.205440][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.212402][ T377] device bridge_slave_0 entered promiscuous mode [ 53.218871][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.225724][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.232680][ T377] device bridge_slave_1 entered promiscuous mode [ 53.238963][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.245805][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.252784][ T374] device bridge_slave_1 entered promiscuous mode [ 53.274596][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.281436][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.288540][ T384] device bridge_slave_0 entered promiscuous mode [ 53.296952][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.303837][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.310798][ T384] device bridge_slave_1 entered promiscuous mode [ 53.318068][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.325105][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.331980][ T380] device bridge_slave_0 entered promiscuous mode [ 53.338171][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.345103][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.352020][ T380] device bridge_slave_1 entered promiscuous mode [ 53.366985][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.373913][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.380993][ T378] device bridge_slave_0 entered promiscuous mode [ 53.387166][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.394011][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.400932][ T378] device bridge_slave_1 entered promiscuous mode [ 53.414706][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.421565][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.428582][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.435445][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.451326][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.458154][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.465215][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.472049][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.485050][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.491892][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.499122][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.505982][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.515777][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.522628][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.529673][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.536491][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.544871][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.551715][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.558756][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.565598][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.576937][ T377] device veth0_vlan entered promiscuous mode [ 53.585898][ T380] device veth0_vlan entered promiscuous mode [ 53.592784][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.599975][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.607952][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.615911][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.623773][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.631796][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.638641][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.645817][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.653724][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.660777][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.668386][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.675999][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.683849][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.691465][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.699314][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.707157][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.715385][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.723471][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.730406][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.737286][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.744759][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.751913][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.759809][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.767431][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.775371][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.782910][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.789913][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.796986][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.804052][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.811664][ T374] device veth0_vlan entered promiscuous mode [ 53.819113][ T374] device veth1_macvtap entered promiscuous mode [ 53.826607][ T380] device veth1_macvtap entered promiscuous mode [ 53.832912][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.840041][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.847715][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.855565][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.863425][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.870544][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.881835][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.888905][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.896970][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.905683][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.914069][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.922121][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.930164][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.936977][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.944188][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.952293][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.960131][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.966912][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.974037][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.981838][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.988608][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.999100][ T384] device veth0_vlan entered promiscuous mode [ 54.006307][ T29] audit: type=1400 audit(1747887652.246:80): avc: denied { mounton } for pid=374 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 54.029318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.037591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.045323][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.048228][ T29] audit: type=1400 audit(1747887652.286:81): avc: denied { read write } for pid=402 comm="syz-executor.2" name="fuse" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.054689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.076710][ T29] audit: type=1400 audit(1747887652.316:82): avc: denied { open } for pid=402 comm="syz-executor.2" path="/dev/fuse" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 54.083765][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.106448][ T29] audit: type=1400 audit(1747887652.316:83): avc: denied { mounton } for pid=402 comm="syz-executor.2" path="/root/syzkaller-testdir114125633/syzkaller.tGE3hK/0/file0" dev="sda1" ino=2044 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 54.114143][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.148025][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.155864][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.162653][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.169881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.177683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.186823][ T384] device veth1_macvtap entered promiscuous mode [ 54.193527][ T377] device veth1_macvtap entered promiscuous mode [ 54.202050][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.210029][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.218034][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.234254][ T378] device veth0_vlan entered promiscuous mode [ 54.241430][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.249649][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.257890][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.265873][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.273866][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.281806][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.289948][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.297973][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.306004][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.314042][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.321927][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.329504][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.337045][ T415] BUG: kernel NULL pointer dereference, address: 0000000000000038 [ 54.338649][ T378] device veth1_macvtap entered promiscuous mode [ 54.344575][ T415] #PF: supervisor read access in kernel mode [ 54.344579][ T415] #PF: error_code(0x0000) - not-present page [ 54.344582][ T415] PGD 111123067 P4D 111123067 PUD 11111f067 PMD 0 [ 54.344599][ T415] Oops: 0000 [#1] PREEMPT SMP [ 54.344603][ T415] CPU: 0 PID: 415 Comm: syz-executor.3 Not tainted 5.15.183-syzkaller #0 [ 54.344608][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.344610][ T415] RIP: 0010:open_or_create_special_dir+0x27/0xd0 [ 54.352988][ T29] audit: type=1400 audit(1747887652.596:84): avc: denied { read } for pid=78 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.356668][ T415] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 09 98 ff ff 48 85 c0 74 76 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3 [ 54.356673][ T415] RSP: 0018:ffffc90000533da8 EFLAGS: 00010203 [ 54.356677][ T415] RAX: 0000000000000008 RBX: ffffc90000533ddf RCX: 0000000000000000 [ 54.356680][ T415] RDX: 0000000000000001 RSI: ffff888114d3a500 RDI: 00000000ffffffff [ 54.356682][ T415] RBP: ffffc90000533dc8 R08: 0000000000000008 R09: 0000000000000064 [ 54.362743][ T29] audit: type=1400 audit(1747887652.596:85): avc: denied { search } for pid=78 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.368916][ T415] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000008 [ 54.368918][ T415] R13: ffff88810c1be800 R14: ffff88811498c000 R15: ffff888111154540 [ 54.368921][ T415] FS: 00007f0a8ce326c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 54.368928][ T415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.373717][ T29] audit: type=1400 audit(1747887652.596:86): avc: denied { write } for pid=78 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.381678][ T415] CR2: 0000000000000038 CR3: 0000000111132000 CR4: 00000000003506b0 [ 54.381682][ T415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.381683][ T415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.381686][ T415] Call Trace: [ 54.381688][ T415] [ 54.381691][ T415] incfs_mount_fs+0x1ad/0x2f0 [ 54.381701][ T415] legacy_get_tree+0x26/0x50 [ 54.381707][ T415] vfs_get_tree+0x1a/0x70 [ 54.391817][ T29] audit: type=1400 audit(1747887652.596:87): avc: denied { add_name } for pid=78 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.397730][ T415] path_mount+0x307/0xba0 [ 54.397738][ T415] ? putname+0x50/0x60 [ 54.419518][ T29] audit: type=1400 audit(1747887652.596:88): avc: denied { create } for pid=78 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.438788][ T415] __x64_sys_mount+0x103/0x140 [ 54.438800][ T415] x64_sys_call+0x50d/0x990 [ 54.438805][ T415] do_syscall_64+0x33/0xb0 [ 54.438810][ T415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.438816][ T415] RIP: 0033:0x7f0a8d2d1da9 [ 54.438823][ T415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.438827][ T415] RSP: 002b:00007f0a8ce320c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.684545][ T415] RAX: ffffffffffffffda RBX: 00007f0a8d400050 RCX: 00007f0a8d2d1da9 [ 54.692342][ T415] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 0000000020000080 [ 54.700328][ T415] RBP: 00007f0a8d31e47a R08: 0000000000000000 R09: 0000000000000000 [ 54.708150][ T415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.716037][ T415] R13: 000000000000006e R14: 00007f0a8d400050 R15: 00007ffd334e2cc8 [ 54.723861][ T415] [ 54.726714][ T415] Modules linked in: [ 54.730459][ T415] CR2: 0000000000000038 [ 54.734441][ T415] ---[ end trace 5e400af71f7a2c67 ]--- [ 54.739742][ T415] RIP: 0010:open_or_create_special_dir+0x27/0xd0 [ 54.746027][ T415] Code: 00 00 00 55 48 89 e5 41 56 41 55 41 54 53 48 89 d3 4c 8b 6f 30 e8 09 98 ff ff 48 85 c0 74 76 48 3d 00 f0 ff ff 49 89 c4 77 0a <48> 83 78 30 00 74 0f c6 03 00 5b 4c 89 e0 41 5c 41 5d 41 5e 5d c3 [ 54.765714][ T415] RSP: 0018:ffffc90000533da8 EFLAGS: 00010203 [ 54.771844][ T415] RAX: 0000000000000008 RBX: ffffc90000533ddf RCX: 0000000000000000 [ 54.779670][ T415] RDX: 0000000000000001 RSI: ffff888114d3a500 RDI: 00000000ffffffff [ 54.787463][ T415] RBP: ffffc90000533dc8 R08: 0000000000000008 R09: 0000000000000064 [ 54.795387][ T415] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000008 [ 54.803183][ T415] R13: ffff88810c1be800 R14: ffff88811498c000 R15: ffff888111154540 [ 54.810995][ T415] FS: 00007f0a8ce326c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 54.819852][ T415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.826452][ T415] CR2: 0000000000000038 CR3: 0000000111132000 CR4: 00000000003506b0 [ 54.834269][ T415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.842160][ T415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.850147][ T415] Kernel panic - not syncing: Fatal exception [ 54.856548][ T415] Kernel Offset: disabled [ 54.860664][ T415] Rebooting in 86400 seconds..