[ 22.236141][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.243314][ T8] device bridge_slave_0 left promiscuous mode [ 22.249509][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.256855][ T8] device veth1_macvtap left promiscuous mode [ 22.262914][ T8] device veth0_vlan left promiscuous mode [ 32.182798][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 32.182802][ T27] audit: type=1400 audit(1694238829.441:152): avc: denied { transition } for pid=319 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.211338][ T27] audit: type=1400 audit(1694238829.441:153): avc: denied { noatsecure } for pid=319 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.230360][ T27] audit: type=1400 audit(1694238829.441:154): avc: denied { rlimitinh } for pid=319 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.250103][ T27] audit: type=1400 audit(1694238829.441:155): avc: denied { siginh } for pid=319 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. 2023/09/09 05:53:56 ignoring optional flag "sandboxArg"="0" 2023/09/09 05:53:56 parsed 1 programs [ 39.075603][ T27] audit: type=1400 audit(1694238836.331:156): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.101564][ T27] audit: type=1400 audit(1694238836.331:157): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.129721][ T27] audit: type=1400 audit(1694238836.391:158): avc: denied { unlink } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/09/09 05:53:56 executed programs: 0 [ 39.183874][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.206102][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.212997][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.220729][ T346] device bridge_slave_0 entered promiscuous mode [ 39.227180][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.234677][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.242029][ T346] device bridge_slave_1 entered promiscuous mode [ 39.253944][ T27] audit: type=1400 audit(1694238836.511:159): avc: denied { write } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.275627][ T27] audit: type=1400 audit(1694238836.531:160): avc: denied { read } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.277368][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.304034][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.311419][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.318335][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.327935][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.334930][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.341936][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.349165][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.359190][ T346] device veth0_vlan entered promiscuous mode [ 39.365989][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.374448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.383422][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.390635][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.397879][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.406180][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.413020][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.420410][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.428391][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.435394][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.443068][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.450835][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.459401][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.468330][ T346] device veth1_macvtap entered promiscuous mode [ 39.475691][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.485656][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.495326][ T27] audit: type=1400 audit(1694238836.751:161): avc: denied { mounton } for pid=346 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.522257][ T27] audit: type=1400 audit(1694238836.781:162): avc: denied { mounton } for pid=350 comm="syz-executor.0" path="/root/syzkaller-testdir25772039/syzkaller.9Gjh7d/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.572102][ T351] BUG: kernel NULL pointer dereference, address: 0000000000000032 [ 39.579822][ T351] #PF: supervisor read access in kernel mode [ 39.585818][ T351] #PF: error_code(0x0000) - not-present page [ 39.591940][ T351] PGD 10ba60067 P4D 10ba60067 PUD 10dcbb067 PMD 0 [ 39.598946][ T351] Oops: 0000 [#1] PREEMPT SMP [ 39.603544][ T351] CPU: 0 PID: 351 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0 [ 39.612050][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 39.622074][ T351] RIP: 0010:do_unlinkat+0x19b/0x2c0 [ 39.627118][ T351] Code: a9 00 00 70 00 74 53 25 00 00 60 00 31 c9 3d 00 00 20 00 0f 94 c1 41 be ec ff ff ff 41 29 ce 45 31 ed eb 47 41 bf a0 00 00 00 <4c> 8b 6b 30 f6 43 02 70 4c 8b 75 90 74 2d 4c 89 ef e8 cf f7 00 00 [ 39.647500][ T351] RSP: 0018:ffffc90000777e90 EFLAGS: 00010246 [ 39.653769][ T351] RAX: ffff888108b46028 RBX: 0000000000000002 RCX: 0000000000000005 [ 39.661579][ T351] RDX: 0000000300000000 RSI: 0000000000000000 RDI: ffff888108d09300 [ 39.669388][ T351] RBP: ffffc90000777f10 R08: 00000000ffffff9c R09: 000000008080007e [ 39.677201][ T351] R10: ffff88810ce95220 R11: ffff888100041400 R12: ffff88810d51e5b0 [ 39.685187][ T351] R13: ffffc90000777ec0 R14: 00000000000000a0 R15: 00000000000000a0 [ 39.693909][ T351] FS: 00007fae003116c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 39.703560][ T351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.710283][ T351] CR2: 0000000000000032 CR3: 000000010cea5000 CR4: 00000000003506b0 [ 39.718294][ T351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.726275][ T351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.734089][ T351] Call Trace: [ 39.737220][ T351] [ 39.740200][ T351] __x64_sys_unlink+0x1e/0x30 [ 39.744945][ T351] do_syscall_64+0x3d/0xb0 [ 39.749395][ T351] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.755316][ T351] RIP: 0033:0x7fadff67cb29 [ 39.760049][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 39.781110][ T351] RSP: 002b:00007fae003110c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 39.789707][ T351] RAX: ffffffffffffffda RBX: 00007fadff79bf80 RCX: 00007fadff67cb29 [ 39.797910][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 39.806094][ T351] RBP: 00007fadff6c847a R08: 0000000000000000 R09: 0000000000000000 [ 39.814292][ T351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.822361][ T351] R13: 000000000000000b R14: 00007fadff79bf80 R15: 00007ffcaad54b68 [ 39.830696][ T351] [ 39.833685][ T351] Modules linked in: [ 39.837563][ T351] CR2: 0000000000000032 [ 39.841572][ T351] ---[ end trace 0000000000000000 ]--- [ 39.846879][ T351] RIP: 0010:do_unlinkat+0x19b/0x2c0 [ 39.851886][ T351] Code: a9 00 00 70 00 74 53 25 00 00 60 00 31 c9 3d 00 00 20 00 0f 94 c1 41 be ec ff ff ff 41 29 ce 45 31 ed eb 47 41 bf a0 00 00 00 <4c> 8b 6b 30 f6 43 02 70 4c 8b 75 90 74 2d 4c 89 ef e8 cf f7 00 00 [ 39.871927][ T351] RSP: 0018:ffffc90000777e90 EFLAGS: 00010246 [ 39.878068][ T351] RAX: ffff888108b46028 RBX: 0000000000000002 RCX: 0000000000000005 [ 39.886153][ T351] RDX: 0000000300000000 RSI: 0000000000000000 RDI: ffff888108d09300 [ 39.894271][ T351] RBP: ffffc90000777f10 R08: 00000000ffffff9c R09: 000000008080007e [ 39.902170][ T351] R10: ffff88810ce95220 R11: ffff888100041400 R12: ffff88810d51e5b0 [ 39.910330][ T351] R13: ffffc90000777ec0 R14: 00000000000000a0 R15: 00000000000000a0 [ 39.918136][ T351] FS: 00007fae003116c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 39.927001][ T351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.933511][ T351] CR2: 0000000000000032 CR3: 000000010cea5000 CR4: 00000000003506b0 [ 39.941751][ T351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.951145][ T351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.959056][ T351] Kernel panic - not syncing: Fatal exception [ 39.965279][ T351] Kernel Offset: disabled [ 39.970682][ T351] Rebooting in 86400 seconds..