Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. 2024/01/18 22:33:57 ignoring optional flag "sandboxArg"="0" 2024/01/18 22:33:57 parsed 1 programs [ 39.853412][ T27] audit: type=1400 audit(1705617237.916:156): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.878636][ T27] audit: type=1400 audit(1705617237.926:157): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/01/18 22:33:58 executed programs: 0 [ 39.922301][ T27] audit: type=1400 audit(1705617237.986:158): avc: denied { unlink } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.955028][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.974673][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.981496][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.988468][ T348] device bridge_slave_0 entered promiscuous mode [ 39.994786][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.001723][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.008704][ T348] device bridge_slave_1 entered promiscuous mode [ 40.020238][ T27] audit: type=1400 audit(1705617238.086:159): avc: denied { write } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.023513][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.040540][ T27] audit: type=1400 audit(1705617238.086:160): avc: denied { read } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.047544][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.075013][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.082217][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.091386][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.098488][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.105597][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.112826][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.122037][ T348] device veth0_vlan entered promiscuous mode [ 40.128476][ T348] device veth1_macvtap entered promiscuous mode [ 40.135283][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.143395][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.150941][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.157987][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.165051][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.172979][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.180763][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.187788][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.194858][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.202727][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.209553][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.216736][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.224301][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.233520][ T27] audit: type=1400 audit(1705617238.296:161): avc: denied { mounton } for pid=348 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.235714][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.264867][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.274451][ T27] audit: type=1400 audit(1705617238.336:162): avc: denied { mounton } for pid=352 comm="syz-executor.0" path="/root/syzkaller-testdir3545175072/syzkaller.68pHye/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.327197][ T353] BUG: kernel NULL pointer dereference, address: 000000000000000a [ 40.334805][ T353] #PF: supervisor read access in kernel mode [ 40.340616][ T353] #PF: error_code(0x0000) - not-present page [ 40.346440][ T353] PGD 111134067 P4D 111134067 PUD 111138067 PMD 0 [ 40.352778][ T353] Oops: 0000 [#1] PREEMPT SMP [ 40.357280][ T353] CPU: 0 PID: 353 Comm: syz-executor.0 Not tainted 6.1.57-syzkaller #0 [ 40.365351][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 40.375420][ T353] RIP: 0010:path_openat+0x552/0xb60 [ 40.380452][ T353] Code: 8b 40 18 75 37 48 83 f8 ff 8b 4d b4 0f 84 6f 01 00 00 48 85 c0 74 13 4c 89 f7 e8 e9 d1 00 00 8b 4d b4 48 8b 45 a8 4c 8b 70 18 <41> f6 46 02 70 75 17 41 bd fe ff ff ff e9 95 fe ff ff 4c 39 f0 8b [ 40.399895][ T353] RSP: 0018:ffffc90000797cc0 EFLAGS: 00010246 [ 40.405889][ T353] RAX: ffff88810ba1f780 RBX: 0000000000008000 RCX: 0000000000000000 [ 40.414139][ T353] RDX: 0000000300000000 RSI: 0000000000000000 RDI: ffff888108c55f00 [ 40.422028][ T353] RBP: ffffc90000797d58 R08: 00000000ffffff9c R09: ffffc90000797c38 [ 40.430015][ T353] R10: ffff8881113e3c00 R11: ffff888100041400 R12: ffffc90000797e98 [ 40.437936][ T353] R13: 0000000000000000 R14: 0000000000000008 R15: ffffc90000797d68 [ 40.445842][ T353] FS: 00007fc32b69b6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.454757][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.461614][ T353] CR2: 000000000000000a CR3: 0000000111125000 CR4: 00000000003506b0 [ 40.469428][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.477409][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.485420][ T353] Call Trace: [ 40.488554][ T353] [ 40.491324][ T353] ? __die_body+0x62/0xb0 [ 40.495667][ T353] ? __die+0x7e/0x90 [ 40.499393][ T353] ? page_fault_oops+0x369/0x3d0 [ 40.504197][ T353] ? fuse_dentry_init+0x1e/0x40 [ 40.508946][ T353] ? exc_page_fault+0x4dc/0x670 [ 40.514244][ T353] ? asm_exc_page_fault+0x27/0x30 [ 40.519098][ T353] ? path_openat+0x552/0xb60 [ 40.523526][ T353] do_filp_open+0xad/0x150 [ 40.527969][ T353] do_sys_openat2+0x8e/0x240 [ 40.532395][ T353] ? __this_cpu_preempt_check+0x13/0x20 [ 40.537775][ T353] __x64_sys_openat+0x79/0xa0 [ 40.542290][ T353] do_syscall_64+0x3d/0xb0 [ 40.546632][ T353] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.552377][ T353] RIP: 0033:0x7fc32a87cae9 [ 40.556611][ T353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.576749][ T353] RSP: 002b:00007fc32b69b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.584992][ T353] RAX: ffffffffffffffda RBX: 00007fc32a99bf80 RCX: 00007fc32a87cae9 [ 40.592802][ T353] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 40.600787][ T353] RBP: 00007fc32a8c847a R08: 0000000000000000 R09: 0000000000000000 [ 40.608602][ T353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.616588][ T353] R13: 000000000000000b R14: 00007fc32a99bf80 R15: 00007ffec7428ad8 [ 40.624543][ T353] [ 40.627419][ T353] Modules linked in: [ 40.631133][ T353] CR2: 000000000000000a [ 40.635126][ T353] ---[ end trace 0000000000000000 ]--- [ 40.640420][ T353] RIP: 0010:path_openat+0x552/0xb60 [ 40.645542][ T353] Code: 8b 40 18 75 37 48 83 f8 ff 8b 4d b4 0f 84 6f 01 00 00 48 85 c0 74 13 4c 89 f7 e8 e9 d1 00 00 8b 4d b4 48 8b 45 a8 4c 8b 70 18 <41> f6 46 02 70 75 17 41 bd fe ff ff ff e9 95 fe ff ff 4c 39 f0 8b [ 40.665072][ T353] RSP: 0018:ffffc90000797cc0 EFLAGS: 00010246 [ 40.671224][ T353] RAX: ffff88810ba1f780 RBX: 0000000000008000 RCX: 0000000000000000 [ 40.679054][ T353] RDX: 0000000300000000 RSI: 0000000000000000 RDI: ffff888108c55f00 [ 40.686875][ T353] RBP: ffffc90000797d58 R08: 00000000ffffff9c R09: ffffc90000797c38 [ 40.694781][ T353] R10: ffff8881113e3c00 R11: ffff888100041400 R12: ffffc90000797e98 [ 40.702580][ T353] R13: 0000000000000000 R14: 0000000000000008 R15: ffffc90000797d68 [ 40.710474][ T353] FS: 00007fc32b69b6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.719252][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.725669][ T353] CR2: 000000000000000a CR3: 0000000111125000 CR4: 00000000003506b0 [ 40.733560][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.741371][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.749181][ T353] Kernel panic - not syncing: Fatal exception [ 40.755339][ T353] Kernel Offset: disabled [ 40.759459][ T353] Rebooting in 86400 seconds..