[ 20.605268][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.612362][ T10] device bridge_slave_0 left promiscuous mode [ 20.618257][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.625554][ T10] device veth1_macvtap left promiscuous mode [ 20.631345][ T10] device veth0_vlan left promiscuous mode [ 30.484143][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 30.484148][ T27] audit: type=1400 audit(1714310742.591:152): avc: denied { transition } for pid=318 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.511757][ T27] audit: type=1400 audit(1714310742.591:153): avc: denied { noatsecure } for pid=318 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.530774][ T27] audit: type=1400 audit(1714310742.591:154): avc: denied { rlimitinh } for pid=318 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.549517][ T27] audit: type=1400 audit(1714310742.591:155): avc: denied { siginh } for pid=318 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. 2024/04/28 13:25:51 ignoring optional flag "sandboxArg"="0" 2024/04/28 13:25:51 parsed 1 programs [ 39.650859][ T27] audit: type=1400 audit(1714310751.761:156): avc: denied { mounton } for pid=341 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.675516][ T27] audit: type=1400 audit(1714310751.761:157): avc: denied { mount } for pid=341 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/04/28 13:25:51 executed programs: 0 [ 39.709332][ T27] audit: type=1400 audit(1714310751.821:158): avc: denied { unlink } for pid=341 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.739835][ T341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.759414][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.766235][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.773218][ T347] device bridge_slave_0 entered promiscuous mode [ 39.779419][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.786221][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.793361][ T347] device bridge_slave_1 entered promiscuous mode [ 39.805810][ T27] audit: type=1400 audit(1714310751.911:159): avc: denied { write } for pid=347 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.807372][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.832953][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.833013][ T27] audit: type=1400 audit(1714310751.911:160): avc: denied { read } for pid=347 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.840024][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.867181][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.876794][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.883734][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.890629][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.897676][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.907025][ T347] device veth0_vlan entered promiscuous mode [ 39.913308][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.921364][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.928822][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.935935][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.943055][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.950939][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.957674][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.964793][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.972580][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.979384][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.986480][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.994041][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.002410][ T347] device veth1_macvtap entered promiscuous mode [ 40.009194][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.017125][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.025082][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.034686][ T27] audit: type=1400 audit(1714310752.141:161): avc: denied { mounton } for pid=347 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.060325][ T27] audit: type=1400 audit(1714310752.171:162): avc: denied { mounton } for pid=351 comm="syz-executor.0" path="/root/syzkaller-testdir1116358429/syzkaller.9iC9AC/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.110525][ T352] BUG: kernel NULL pointer dereference, address: 000000000000000a [ 40.118134][ T352] #PF: supervisor read access in kernel mode [ 40.123946][ T352] #PF: error_code(0x0000) - not-present page [ 40.129758][ T352] PGD 115eae067 P4D 115eae067 PUD 115eaa067 PMD 0 [ 40.136092][ T352] Oops: 0000 [#1] PREEMPT SMP [ 40.140606][ T352] CPU: 0 PID: 352 Comm: syz-executor.0 Not tainted 6.1.75-syzkaller #0 [ 40.148677][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 40.158572][ T352] RIP: 0010:path_openat+0x552/0xb60 [ 40.163605][ T352] Code: 8b 40 18 75 37 48 83 f8 ff 8b 4d b4 0f 84 6f 01 00 00 48 85 c0 74 13 4c 89 f7 e8 c9 ce 00 00 8b 4d b4 48 8b 45 a8 4c 8b 70 18 <41> f6 46 02 70 75 17 41 bd fe ff ff ff e9 95 fe ff ff 4c 39 f0 8b [ 40.183050][ T352] RSP: 0018:ffffc90000767cc0 EFLAGS: 00010246 [ 40.188951][ T352] RAX: ffff88810bd35640 RBX: 0000000000008000 RCX: 0000000000000000 [ 40.196884][ T352] RDX: 00000000ffffff9c RSI: 0000000300000000 RDI: ffff888100331300 [ 40.204832][ T352] RBP: ffffc90000767d58 R08: 0000000000000000 R09: ffffc90000767c38 [ 40.212627][ T352] R10: ffff888115ec0200 R11: ffff888100041400 R12: ffffc90000767e98 [ 40.220816][ T352] R13: 0000000000000000 R14: 0000000000000008 R15: ffffc90000767d68 [ 40.228626][ T352] FS: 00007fd6fc7136c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.237482][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.243907][ T352] CR2: 000000000000000a CR3: 0000000115ebb000 CR4: 00000000003506b0 [ 40.251715][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.259525][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.267339][ T352] Call Trace: [ 40.270462][ T352] [ 40.273245][ T352] ? __die_body+0x62/0xb0 [ 40.277404][ T352] ? __die+0x7e/0x90 [ 40.281138][ T352] ? page_fault_oops+0x369/0x3d0 [ 40.285921][ T352] ? fuse_dentry_init+0x1e/0x40 [ 40.290602][ T352] ? exc_page_fault+0x4dc/0x670 [ 40.295294][ T352] ? asm_exc_page_fault+0x27/0x30 [ 40.300146][ T352] ? path_openat+0x552/0xb60 [ 40.304574][ T352] do_filp_open+0xad/0x150 [ 40.308833][ T352] do_sys_openat2+0x8e/0x240 [ 40.313254][ T352] ? __this_cpu_preempt_check+0x13/0x20 [ 40.318637][ T352] __x64_sys_openat+0x79/0xa0 [ 40.323145][ T352] do_syscall_64+0x3d/0xb0 [ 40.327400][ T352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.333122][ T352] RIP: 0033:0x7fd6fba7cae9 [ 40.337377][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.357110][ T352] RSP: 002b:00007fd6fc7130c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.365363][ T352] RAX: ffffffffffffffda RBX: 00007fd6fbb9bf80 RCX: 00007fd6fba7cae9 [ 40.373168][ T352] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 40.381068][ T352] RBP: 00007fd6fbac847a R08: 0000000000000000 R09: 0000000000000000 [ 40.388877][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.396697][ T352] R13: 000000000000000b R14: 00007fd6fbb9bf80 R15: 00007fff666da408 [ 40.404501][ T352] [ 40.407362][ T352] Modules linked in: [ 40.411105][ T352] CR2: 000000000000000a [ 40.415089][ T352] ---[ end trace 0000000000000000 ]--- [ 40.420383][ T352] RIP: 0010:path_openat+0x552/0xb60 [ 40.425415][ T352] Code: 8b 40 18 75 37 48 83 f8 ff 8b 4d b4 0f 84 6f 01 00 00 48 85 c0 74 13 4c 89 f7 e8 c9 ce 00 00 8b 4d b4 48 8b 45 a8 4c 8b 70 18 <41> f6 46 02 70 75 17 41 bd fe ff ff ff e9 95 fe ff ff 4c 39 f0 8b [ 40.444859][ T352] RSP: 0018:ffffc90000767cc0 EFLAGS: 00010246 [ 40.450775][ T352] RAX: ffff88810bd35640 RBX: 0000000000008000 RCX: 0000000000000000 [ 40.458572][ T352] RDX: 00000000ffffff9c RSI: 0000000300000000 RDI: ffff888100331300 [ 40.466380][ T352] RBP: ffffc90000767d58 R08: 0000000000000000 R09: ffffc90000767c38 [ 40.474194][ T352] R10: ffff888115ec0200 R11: ffff888100041400 R12: ffffc90000767e98 [ 40.482004][ T352] R13: 0000000000000000 R14: 0000000000000008 R15: ffffc90000767d68 [ 40.489821][ T352] FS: 00007fd6fc7136c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.498583][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.505008][ T352] CR2: 000000000000000a CR3: 0000000115ebb000 CR4: 00000000003506b0 [ 40.512839][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.520626][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.528439][ T352] Kernel panic - not syncing: Fatal exception [ 40.534579][ T352] Kernel Offset: disabled [ 40.538691][ T352] Rebooting in 86400 seconds..