Warning: Permanently added '10.128.1.235' (ED25519) to the list of known hosts. 2024/06/02 12:11:58 ignoring optional flag "sandboxArg"="0" 2024/06/02 12:11:58 parsed 1 programs [ 39.400219][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 39.400235][ T24] audit: type=1400 audit(1717330318.930:92): avc: denied { mount } for pid=429 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.466776][ T24] audit: type=1400 audit(1717330318.960:93): avc: denied { unlink } for pid=432 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.499328][ T432] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.537394][ T24] audit: type=1400 audit(1717330319.060:94): avc: denied { mounton } for pid=444 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.755401][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.762918][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.770435][ T461] device bridge_slave_0 entered promiscuous mode [ 39.777323][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.784483][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.792312][ T461] device bridge_slave_1 entered promiscuous mode [ 39.831415][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.838285][ T461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.845370][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.852200][ T461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.871269][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.878762][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.885903][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.895467][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.904186][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.911149][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.920706][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.930018][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.937875][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.949592][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.967144][ T461] device veth0_vlan entered promiscuous mode [ 39.974018][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.983050][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.991261][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.999132][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.007044][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.018887][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.028835][ T461] device veth1_macvtap entered promiscuous mode [ 40.041007][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.053052][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/06/02 12:11:59 executed programs: 0 [ 40.410127][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.417092][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.424729][ T490] device bridge_slave_0 entered promiscuous mode [ 40.431830][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.438854][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.446005][ T490] device bridge_slave_1 entered promiscuous mode [ 40.488006][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.494859][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.502104][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.508975][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.531793][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.540143][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.547270][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.568191][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.576397][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.583371][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.590782][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.598833][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.605660][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.613426][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.621312][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.637220][ T490] device veth0_vlan entered promiscuous mode [ 40.643696][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.652136][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.662052][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.669969][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.682288][ T490] device veth1_macvtap entered promiscuous mode [ 40.692551][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.703884][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.715735][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.740663][ T24] audit: type=1400 audit(1717330320.270:95): avc: denied { mounton } for pid=494 comm="syz-executor" path="/root/syzkaller-testdir3812745661/syzkaller.HEqLKT/0/file0" dev="sda1" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.743789][ T495] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 40.768532][ T24] audit: type=1400 audit(1717330320.270:96): avc: denied { mounton } for pid=494 comm="syz-executor" path="/root/syzkaller-testdir3812745661/syzkaller.HEqLKT/0/file0" dev="incremental-fs" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.779221][ T495] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 40.779235][ T495] CPU: 0 PID: 495 Comm: syz-executor Not tainted 5.10.214-syzkaller-1002040-g22b064ea5cbc #0 [ 40.779241][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 40.779274][ T495] RIP: 0010:dir_rename_wrap+0x1e5/0x570 [ 40.779294][ T495] Code: bb f0 ff ff ff 4c 8b 75 b8 e9 4c 03 00 00 e8 b2 bc 5f ff 31 db 48 83 c3 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 7d 4c 9d ff 48 8b 1b 48 8b 45 c8 48 [ 40.808573][ T24] audit: type=1400 audit(1717330320.270:97): avc: denied { write } for pid=494 comm="syz-executor" name="/" dev="incremental-fs" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.815550][ T495] RSP: 0018:ffffc90002c07b00 EFLAGS: 00010202 [ 40.815564][ T495] RAX: 0000000000000001 RBX: 0000000000000008 RCX: dffffc0000000000 [ 40.815649][ T495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.826302][ T24] audit: type=1400 audit(1717330320.270:98): avc: denied { add_name } for pid=494 comm="syz-executor" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.835851][ T495] RBP: ffffc90002c07b70 R08: ffffffff820af19a R09: fffff52000580f51 [ 40.835859][ T495] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110225b8d03 [ 40.835867][ T495] R13: ffff88811049f770 R14: ffff888112dc6818 R15: ffff888112dc6828 [ 40.835877][ T495] FS: 00007f936b8ab6c0(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 40.835886][ T495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.835893][ T495] CR2: 00007f936b88ad58 CR3: 000000012184d000 CR4: 00000000003506b0 [ 40.835903][ T495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.835910][ T495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.835915][ T495] Call Trace: [ 40.835944][ T495] ? __die_body+0x62/0xb0 [ 40.996905][ T495] ? die_addr+0x9f/0xd0 [ 41.000884][ T495] ? exc_general_protection+0x3ff/0x490 [ 41.006354][ T495] ? asm_exc_general_protection+0x1e/0x30 [ 41.011994][ T495] ? dir_rename_wrap+0x9a/0x570 [ 41.016848][ T495] ? dir_rename_wrap+0x1e5/0x570 [ 41.021628][ T495] ? try_break_deleg+0x7c/0x120 [ 41.026308][ T495] vfs_rename+0x9fb/0xeb0 [ 41.030480][ T495] ? __ia32_sys_link+0x70/0x70 [ 41.035252][ T495] ? __lookup_hash+0x151/0x290 [ 41.040409][ T495] do_renameat2+0xa56/0x1240 [ 41.044819][ T495] ? fsnotify_move+0x290/0x290 [ 41.049515][ T495] __x64_sys_renameat2+0xdd/0xf0 [ 41.054272][ T495] do_syscall_64+0x34/0x70 [ 41.058887][ T495] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 41.064868][ T495] RIP: 0033:0x7f936bd28ee9 [ 41.069129][ T495] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.088772][ T495] RSP: 002b:00007f936b8ab0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 41.097101][ T495] RAX: ffffffffffffffda RBX: 00007f936be57f80 RCX: 00007f936bd28ee9 [ 41.104918][ T495] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000004 [ 41.113069][ T495] RBP: 00007f936bd7549e R08: 0000000000000002 R09: 0000000000000000 [ 41.121150][ T495] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 41.129051][ T495] R13: 000000000000000b R14: 00007f936be57f80 R15: 00007fff3d090018 [ 41.136983][ T495] Modules linked in: [ 41.142961][ T495] ---[ end trace 1f6d79c531b92e52 ]--- [ 41.146990][ T24] audit: type=1400 audit(1717330320.270:99): avc: denied { create } for pid=494 comm="syz-executor" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.149493][ T495] RIP: 0010:dir_rename_wrap+0x1e5/0x570 [ 41.169124][ T24] audit: type=1400 audit(1717330320.270:100): avc: denied { associate } for pid=494 comm="syz-executor" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 41.174946][ T495] Code: bb f0 ff ff ff 4c 8b 75 b8 e9 4c 03 00 00 e8 b2 bc 5f ff 31 db 48 83 c3 08 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 7d 4c 9d ff 48 8b 1b 48 8b 45 c8 48 [ 41.196867][ T24] audit: type=1400 audit(1717330320.270:101): avc: denied { remove_name } for pid=494 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.217252][ T495] RSP: 0018:ffffc90002c07b00 EFLAGS: 00010202 [ 41.246873][ T495] RAX: 0000000000000001 RBX: 0000000000000008 RCX: dffffc0000000000 [ 41.255217][ T495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.263603][ T495] RBP: ffffc90002c07b70 R08: ffffffff820af19a R09: fffff52000580f51 [ 41.271906][ T495] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110225b8d03 [ 41.279972][ T495] R13: ffff88811049f770 R14: ffff888112dc6818 R15: ffff888112dc6828 [ 41.288069][ T495] FS: 00007f936b8ab6c0(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 41.297120][ T495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.304023][ T495] CR2: 00007f936bdad720 CR3: 000000012184d000 CR4: 00000000003506a0 [ 41.312174][ T495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.319958][ T495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.327948][ T495] Kernel panic - not syncing: Fatal exception [ 41.334032][ T495] Kernel Offset: disabled [ 41.338181][ T495] Rebooting in 86400 seconds..