Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. 2024/03/24 11:36:47 ignoring optional flag "sandboxArg"="0" 2024/03/24 11:36:47 parsed 1 programs [ 43.367576][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 43.367581][ T29] audit: type=1400 audit(1711280207.317:154): avc: denied { mounton } for pid=349 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.398430][ T29] audit: type=1400 audit(1711280207.317:155): avc: denied { mount } for pid=349 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.421667][ T29] audit: type=1400 audit(1711280207.317:156): avc: denied { setattr } for pid=349 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.445020][ T29] audit: type=1400 audit(1711280207.317:157): avc: denied { read write } for pid=349 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.471446][ T29] audit: type=1400 audit(1711280207.317:158): avc: denied { open } for pid=349 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/03/24 11:36:47 executed programs: 0 [ 43.497529][ T29] audit: type=1400 audit(1711280207.407:159): avc: denied { unlink } for pid=349 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.523326][ T29] audit: type=1400 audit(1711280207.407:160): avc: denied { relabelto } for pid=351 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.549730][ T349] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.569774][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.576605][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.583678][ T355] device bridge_slave_0 entered promiscuous mode [ 43.590175][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.596989][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.604339][ T355] device bridge_slave_1 entered promiscuous mode [ 43.617154][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.624119][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.631230][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.638169][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.647845][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.654759][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.661650][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.668764][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.676427][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.684317][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.691078][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.699294][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.707211][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.714041][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.721217][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.728820][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.737724][ T355] device veth0_vlan entered promiscuous mode [ 43.743804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.751752][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.759297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.766363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.774285][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.782444][ T355] device veth1_macvtap entered promiscuous mode [ 43.789130][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.798152][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.810398][ T29] audit: type=1400 audit(1711280207.767:161): avc: denied { mounton } for pid=360 comm="syz-executor.0" path="/root/syzkaller-testdir2638452704/syzkaller.F82STz/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 43.861257][ T361] BUG: kernel NULL pointer dereference, address: 0000000000000002 [ 43.869039][ T361] #PF: supervisor read access in kernel mode [ 43.875034][ T361] #PF: error_code(0x0000) - not-present page [ 43.880842][ T361] PGD 112831067 P4D 112831067 PUD 112835067 PMD 0 [ 43.887197][ T361] Oops: 0000 [#1] PREEMPT SMP [ 43.891692][ T361] CPU: 1 PID: 361 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller #0 [ 43.900026][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 43.909927][ T361] RIP: 0010:do_unlinkat+0x135/0x2a0 [ 43.915041][ T361] Code: 48 81 c7 a0 00 00 00 e8 99 b6 a9 00 48 8b 75 b8 48 8d 7d c0 89 da e8 aa 8c ff ff 48 3d 00 f0 ff ff 49 89 c7 0f 87 44 01 00 00 <8b> 00 8b 4d c4 48 8b 75 c8 89 c2 81 e2 00 00 70 00 80 3c 0e 00 0f [ 43.934836][ T361] RSP: 0018:ffffc900003e3eb0 EFLAGS: 00010203 [ 43.940728][ T361] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000400000000 [ 43.948539][ T361] RDX: 0000000000000003 RSI: 0000000300000000 RDI: ffff888103391280 [ 43.956351][ T361] RBP: ffffc900003e3f18 R08: 0000000000000004 R09: 0000000000000064 [ 43.964167][ T361] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 43.971974][ T361] R13: ffff8881002c6000 R14: 0000000000000000 R15: 0000000000000002 [ 43.979905][ T361] FS: 00007f91d9a6a6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 43.988650][ T361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.995077][ T361] CR2: 0000000000000002 CR3: 0000000112823000 CR4: 00000000003506a0 [ 44.002968][ T361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.010860][ T361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.018949][ T361] Call Trace: [ 44.022230][ T361] [ 44.025442][ T361] ? show_regs.part.0+0x1e/0x20 [ 44.030211][ T361] ? __die+0x5d/0x9e [ 44.034117][ T361] ? page_fault_oops+0x12d/0x280 [ 44.038893][ T361] ? do_user_addr_fault+0x44b/0x730 [ 44.043925][ T361] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 44.049575][ T361] ? __mod_timer+0x251/0x3a0 [ 44.053999][ T361] ? add_timer+0x1b/0x20 [ 44.058094][ T361] ? debug_smp_processor_id+0x17/0x20 [ 44.063305][ T361] ? call_rcu+0x194/0x640 [ 44.067457][ T361] ? exc_page_fault+0x67/0x160 [ 44.072157][ T361] ? asm_exc_page_fault+0x27/0x30 [ 44.077028][ T361] ? do_unlinkat+0x135/0x2a0 [ 44.081650][ T361] __x64_sys_unlink+0x3d/0x60 [ 44.086161][ T361] do_syscall_64+0x35/0xb0 [ 44.090592][ T361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.096489][ T361] RIP: 0033:0x7f91d9ee7b29 [ 44.101089][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.120717][ T361] RSP: 002b:00007f91d9a6a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 44.128953][ T361] RAX: ffffffffffffffda RBX: 00007f91da006f80 RCX: 00007f91d9ee7b29 [ 44.136846][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 44.144804][ T361] RBP: 00007f91d9f3347a R08: 0000000000000000 R09: 0000000000000000 [ 44.152681][ T361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.160590][ T361] R13: 000000000000000b R14: 00007f91da006f80 R15: 00007fff5ed17048 [ 44.168493][ T361] [ 44.171373][ T361] Modules linked in: [ 44.175095][ T361] CR2: 0000000000000002 [ 44.179251][ T361] ---[ end trace 3214933c44b20a40 ]--- [ 44.184559][ T361] RIP: 0010:do_unlinkat+0x135/0x2a0 [ 44.189663][ T361] Code: 48 81 c7 a0 00 00 00 e8 99 b6 a9 00 48 8b 75 b8 48 8d 7d c0 89 da e8 aa 8c ff ff 48 3d 00 f0 ff ff 49 89 c7 0f 87 44 01 00 00 <8b> 00 8b 4d c4 48 8b 75 c8 89 c2 81 e2 00 00 70 00 80 3c 0e 00 0f [ 44.209352][ T361] RSP: 0018:ffffc900003e3eb0 EFLAGS: 00010203 [ 44.215272][ T361] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000400000000 [ 44.223495][ T361] RDX: 0000000000000003 RSI: 0000000300000000 RDI: ffff888103391280 [ 44.231387][ T361] RBP: ffffc900003e3f18 R08: 0000000000000004 R09: 0000000000000064 [ 44.239205][ T361] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 44.247100][ T361] R13: ffff8881002c6000 R14: 0000000000000000 R15: 0000000000000002 [ 44.255014][ T361] FS: 00007f91d9a6a6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 44.263784][ T361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.270214][ T361] CR2: 0000000000000002 CR3: 0000000112823000 CR4: 00000000003506a0 [ 44.278102][ T361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.285915][ T361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.293810][ T361] Kernel panic - not syncing: Fatal exception [ 44.299973][ T361] Kernel Offset: disabled [ 44.304178][ T361] Rebooting in 86400 seconds..