Warning: Permanently added '10.128.0.128' (ED25519) to the list of known hosts. 2024/07/19 19:52:02 ignoring optional flag "sandboxArg"="0" 2024/07/19 19:52:02 parsed 1 programs 2024/07/19 19:52:02 executed programs: 0 [ 49.052913][ T27] audit: type=1400 audit(1721418722.371:95): avc: denied { unlink } for pid=350 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.068584][ T350] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.098140][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.105083][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.111980][ T355] device bridge_slave_0 entered promiscuous mode [ 49.118319][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.125252][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.132421][ T355] device bridge_slave_1 entered promiscuous mode [ 49.145172][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.152094][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.159365][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.166172][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.175510][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.182722][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.189536][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.196556][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.205792][ T355] device veth0_vlan entered promiscuous mode [ 49.212299][ T355] device veth1_macvtap entered promiscuous mode [ 49.219155][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.227318][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.234851][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.241901][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.249102][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.256937][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.264787][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.271953][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.279160][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.286954][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.293759][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.300991][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.308524][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.317000][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.326910][ T27] audit: type=1400 audit(1721418722.641:96): avc: denied { mounton } for pid=355 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.350956][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.360639][ T27] audit: type=1400 audit(1721418722.671:97): avc: denied { read write } for pid=361 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.384370][ T27] audit: type=1400 audit(1721418722.701:98): avc: denied { open } for pid=361 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 49.408006][ T27] audit: type=1400 audit(1721418722.711:99): avc: denied { mounton } for pid=361 comm="syz-executor.0" path="/root/syzkaller-testdir758712902/syzkaller.QnaptD/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 49.443939][ T364] BUG: kernel NULL pointer dereference, address: 0000000000000038 [ 49.451816][ T364] #PF: supervisor read access in kernel mode [ 49.457839][ T364] #PF: error_code(0x0000) - not-present page [ 49.463805][ T364] PGD 115d61067 P4D 115d61067 PUD 115d65067 PMD 0 [ 49.470160][ T364] Oops: 0000 [#1] PREEMPT SMP [ 49.474651][ T364] CPU: 0 PID: 364 Comm: syz-executor.0 Not tainted 6.1.84-syzkaller #0 [ 49.483084][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 49.493138][ T364] RIP: 0010:do_rmdir+0x100/0x1c0 [ 49.497920][ T364] Code: 8b 7e 30 b8 a0 00 00 00 48 01 c7 e8 ba 6b b9 00 48 8d 7d b0 4c 89 f6 44 89 e2 e8 fb c6 ff ff 49 89 c7 48 3d 00 f0 ff ff 77 2d <49> 83 7f 30 00 74 15 49 8b 7d 18 49 8b 76 30 4c 89 fa e8 e9 fa ff [ 49.517563][ T364] RSP: 0018:ffffc90000783eb0 EFLAGS: 00010203 [ 49.523459][ T364] RAX: 0000000000000008 RBX: ffffc90000783f01 RCX: 0000000000000003 [ 49.531265][ T364] RDX: 00000000ffffff9c RSI: 0000000300000000 RDI: ffff888100358000 [ 49.539262][ T364] RBP: ffffc90000783f10 R08: ffff888115d169c0 R09: ffffffff815470e0 [ 49.547154][ T364] R10: ffff888115d169c0 R11: ffff888100041400 R12: 0000000000000000 [ 49.554956][ T364] R13: ffff888108a4e620 R14: ffff888109fed820 R15: 0000000000000008 [ 49.562877][ T364] FS: 00007f311fa246c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 49.571653][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.578054][ T364] CR2: 0000000000000038 CR3: 0000000115d0f000 CR4: 00000000003506b0 [ 49.585869][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.593803][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.601695][ T364] Call Trace: [ 49.604829][ T364] [ 49.607625][ T364] ? __die_body+0x62/0xb0 [ 49.612023][ T364] ? __die+0x7e/0x90 [ 49.615753][ T364] ? page_fault_oops+0x369/0x3d0 [ 49.620717][ T364] ? exc_page_fault+0x4dc/0x670 [ 49.625405][ T364] ? asm_exc_page_fault+0x27/0x30 [ 49.630262][ T364] ? fuse_lookup_name+0x380/0x420 [ 49.635121][ T364] ? do_rmdir+0x100/0x1c0 [ 49.639288][ T364] __x64_sys_rmdir+0x1e/0x30 [ 49.643713][ T364] do_syscall_64+0x3d/0xb0 [ 49.647969][ T364] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.653779][ T364] RIP: 0033:0x7f311ec7dde9 [ 49.658034][ T364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.677480][ T364] RSP: 002b:00007f311fa240c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 49.685728][ T364] RAX: ffffffffffffffda RBX: 00007f311edac050 RCX: 00007f311ec7dde9 [ 49.693704][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 49.701608][ T364] RBP: 00007f311ecca47a R08: 0000000000000000 R09: 0000000000000000 [ 49.709419][ T364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.717234][ T364] R13: 000000000000006e R14: 00007f311edac050 R15: 00007ffe2c5ac438 [ 49.725044][ T364] [ 49.727900][ T364] Modules linked in: [ 49.731638][ T364] CR2: 0000000000000038 [ 49.735720][ T364] ---[ end trace 0000000000000000 ]--- [ 49.741007][ T364] RIP: 0010:do_rmdir+0x100/0x1c0 [ 49.745777][ T364] Code: 8b 7e 30 b8 a0 00 00 00 48 01 c7 e8 ba 6b b9 00 48 8d 7d b0 4c 89 f6 44 89 e2 e8 fb c6 ff ff 49 89 c7 48 3d 00 f0 ff ff 77 2d <49> 83 7f 30 00 74 15 49 8b 7d 18 49 8b 76 30 4c 89 fa e8 e9 fa ff [ 49.765247][ T364] RSP: 0018:ffffc90000783eb0 EFLAGS: 00010203 [ 49.771208][ T364] RAX: 0000000000000008 RBX: ffffc90000783f01 RCX: 0000000000000003 [ 49.779197][ T364] RDX: 00000000ffffff9c RSI: 0000000300000000 RDI: ffff888100358000 [ 49.787013][ T364] RBP: ffffc90000783f10 R08: ffff888115d169c0 R09: ffffffff815470e0 [ 49.794904][ T364] R10: ffff888115d169c0 R11: ffff888100041400 R12: 0000000000000000 [ 49.802904][ T364] R13: ffff888108a4e620 R14: ffff888109fed820 R15: 0000000000000008 [ 49.810799][ T364] FS: 00007f311fa246c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 49.819564][ T364] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.825987][ T364] CR2: 0000000000000038 CR3: 0000000115d0f000 CR4: 00000000003506b0 [ 49.833811][ T364] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.841608][ T364] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.849424][ T364] Kernel panic - not syncing: Fatal exception [ 49.855673][ T364] Kernel Offset: disabled [ 49.860103][ T364] Rebooting in 86400 seconds..