Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. 2024/01/14 17:32:55 ignoring optional flag "sandboxArg"="0" 2024/01/14 17:32:55 parsed 1 programs [ 42.062185][ T23] kauditd_printk_skb: 75 callbacks suppressed [ 42.062187][ T23] audit: type=1400 audit(1705253575.140:151): avc: denied { mounton } for pid=337 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.092850][ T23] audit: type=1400 audit(1705253575.140:152): avc: denied { mount } for pid=337 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.115915][ T23] audit: type=1400 audit(1705253575.140:153): avc: denied { setattr } for pid=337 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2024/01/14 17:32:55 executed programs: 0 [ 42.139115][ T23] audit: type=1400 audit(1705253575.140:154): avc: denied { read write } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.139235][ T337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.165121][ T23] audit: type=1400 audit(1705253575.140:155): avc: denied { open } for pid=337 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.187155][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.199895][ T23] audit: type=1400 audit(1705253575.180:156): avc: denied { unlink } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.206691][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.232474][ T23] audit: type=1400 audit(1705253575.180:157): avc: denied { relabelto } for pid=338 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.239543][ T343] device bridge_slave_0 entered promiscuous mode [ 42.264867][ T23] audit: type=1400 audit(1705253575.260:158): avc: denied { mounton } for pid=343 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 42.271149][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.302271][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.309171][ T343] device bridge_slave_1 entered promiscuous mode [ 42.319824][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.326644][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.333711][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.340546][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.349268][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.356165][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.363154][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.370254][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.379035][ T343] device veth0_vlan entered promiscuous mode [ 42.385423][ T343] device veth1_macvtap entered promiscuous mode [ 42.391873][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.400009][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.407488][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.414830][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.422028][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.430128][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.437965][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.444876][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.452089][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.459918][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.466633][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.473732][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.481267][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.490719][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.498761][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.510115][ T23] audit: type=1400 audit(1705253575.590:159): avc: denied { mounton } for pid=349 comm="syz-executor.0" path="/root/syzkaller-testdir3610176722/syzkaller.QmHzN1/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.611440][ T350] BUG: kernel NULL pointer dereference, address: 0000000000000018 [ 42.619050][ T350] #PF: supervisor read access in kernel mode [ 42.625152][ T350] #PF: error_code(0x0000) - not-present page [ 42.630975][ T350] PGD 10fcbd067 P4D 10fcbd067 PUD 10dbdd067 PMD 0 [ 42.637473][ T350] Oops: 0000 [#1] PREEMPT SMP [ 42.641997][ T350] CPU: 0 PID: 350 Comm: syz-executor.0 Not tainted 5.10.206-syzkaller #0 [ 42.650410][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 42.660307][ T350] RIP: 0010:filename_create+0x97/0x160 [ 42.665597][ T350] Code: 48 81 c7 a0 00 00 00 e8 f7 eb a1 00 48 8b 73 08 48 8d 7d c0 44 89 e2 80 ce 06 e8 e4 a7 ff ff 48 3d 00 f0 ff ff 49 89 c4 77 59 00 00 00 70 00 75 3f 41 83 e6 02 0f 84 8b 00 00 00 45 85 ff 4d [ 42.685658][ T350] RSP: 0018:ffffc9000057fe78 EFLAGS: 00010207 [ 42.691560][ T350] RAX: 0000000000000018 RBX: ffffc9000057fee0 RCX: 0000000500000000 [ 42.699371][ T350] RDX: 0000000000000004 RSI: 0000000400000000 RDI: ffff88810a8e3780 [ 42.707329][ T350] RBP: ffffc9000057fec0 R08: 0000000000000005 R09: 0000000000000064 [ 42.715125][ T350] R10: ffff88810fdc88c0 R11: 0000000000000001 R12: 0000000000000018 [ 42.723020][ T350] R13: ffff888107f8f000 R14: 0000000000000000 R15: 0000000000000000 [ 42.731095][ T350] FS: 00007f1f349ac6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 42.740148][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.746545][ T350] CR2: 0000000000000018 CR3: 000000010fdf2000 CR4: 00000000003506b0 [ 42.754452][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.762282][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.770060][ T350] Call Trace: [ 42.773540][ T350] ? show_regs.part.0+0x1e/0x20 [ 42.778230][ T350] ? __die+0x5d/0x9e [ 42.782213][ T350] ? no_context+0x1f2/0x380 [ 42.786671][ T350] ? _raw_spin_unlock_irqrestore+0x21/0x40 [ 42.792542][ T350] ? __bad_area_nosemaphore+0x4b/0x1a0 [ 42.797836][ T350] ? bad_area_nosemaphore+0x11/0x20 [ 42.802887][ T350] ? exc_page_fault+0x2c9/0x5a0 [ 42.807559][ T350] ? kmem_cache_alloc_trace+0x162/0x4c0 [ 42.813026][ T350] ? asm_exc_page_fault+0x1e/0x30 [ 42.817894][ T350] ? filename_create+0x97/0x160 [ 42.822571][ T350] ? filename_create+0x8c/0x160 [ 42.827274][ T350] do_mknodat+0xd2/0x240 [ 42.831460][ T350] __x64_sys_mknodat+0x19/0x20 [ 42.836055][ T350] do_syscall_64+0x32/0x80 [ 42.840316][ T350] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 42.846256][ T350] RIP: 0033:0x7f1f34e29ae9 [ 42.850472][ T350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.869997][ T350] RSP: 002b:00007f1f349ac0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 42.878453][ T350] RAX: ffffffffffffffda RBX: 00007f1f34f48f80 RCX: 00007f1f34e29ae9 [ 42.886254][ T350] RDX: 0000000000000080 RSI: 00000000200000c0 RDI: 0000000000000004 [ 42.894071][ T350] RBP: 00007f1f34e7547a R08: 0000000000000000 R09: 0000000000000000 [ 42.901893][ T350] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 42.910037][ T350] R13: 000000000000000b R14: 00007f1f34f48f80 R15: 00007fff60f8ed58 [ 42.917861][ T350] Modules linked in: [ 42.921580][ T350] CR2: 0000000000000018 [ 42.925660][ T350] ---[ end trace 756e6f53beb1fa74 ]--- [ 42.930959][ T350] RIP: 0010:filename_create+0x97/0x160 [ 42.936524][ T350] Code: 48 81 c7 a0 00 00 00 e8 f7 eb a1 00 48 8b 73 08 48 8d 7d c0 44 89 e2 80 ce 06 e8 e4 a7 ff ff 48 3d 00 f0 ff ff 49 89 c4 77 59 00 00 00 70 00 75 3f 41 83 e6 02 0f 84 8b 00 00 00 45 85 ff 4d [ 42.956037][ T350] RSP: 0018:ffffc9000057fe78 EFLAGS: 00010207 [ 42.962150][ T350] RAX: 0000000000000018 RBX: ffffc9000057fee0 RCX: 0000000500000000 [ 42.970136][ T350] RDX: 0000000000000004 RSI: 0000000400000000 RDI: ffff88810a8e3780 [ 42.977946][ T350] RBP: ffffc9000057fec0 R08: 0000000000000005 R09: 0000000000000064 [ 42.985932][ T350] R10: ffff88810fdc88c0 R11: 0000000000000001 R12: 0000000000000018 [ 42.993833][ T350] R13: ffff888107f8f000 R14: 0000000000000000 R15: 0000000000000000 [ 43.001727][ T350] FS: 00007f1f349ac6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 43.010514][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.016921][ T350] CR2: 0000000000000018 CR3: 000000010fdf2000 CR4: 00000000003506b0 [ 43.024736][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.032666][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.040579][ T350] Kernel panic - not syncing: Fatal exception [ 43.046670][ T350] Kernel Offset: disabled [ 43.050934][ T350] Rebooting in 86400 seconds..