Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. 2024/09/01 21:28:21 ignoring optional flag "sandboxArg"="0" 2024/09/01 21:28:21 parsed 1 programs [ 36.987251][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 36.987255][ T29] audit: type=1400 audit(1725226101.411:96): avc: denied { mounton } for pid=336 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.018205][ T29] audit: type=1400 audit(1725226101.411:97): avc: denied { read write } for pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.044633][ T29] audit: type=1400 audit(1725226101.411:98): avc: denied { open } for pid=336 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/09/01 21:28:21 executed programs: 0 [ 37.071821][ T29] audit: type=1400 audit(1725226101.481:99): avc: denied { unlink } for pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.097218][ T29] audit: type=1400 audit(1725226101.481:100): avc: denied { relabelto } for pid=337 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.125017][ T336] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.144536][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.151760][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.158703][ T342] device bridge_slave_0 entered promiscuous mode [ 37.165247][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.172179][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.179080][ T342] device bridge_slave_1 entered promiscuous mode [ 37.190977][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.197807][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.205238][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.212256][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.221304][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.228410][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.235306][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.242585][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.251613][ T342] device veth0_vlan entered promiscuous mode [ 37.257989][ T342] device veth1_macvtap entered promiscuous mode [ 37.264477][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.272615][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.280103][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.287109][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.294242][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.302152][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.310064][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.316956][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.324151][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.332027][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.339066][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.346360][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.353921][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.363038][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.371367][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.383451][ T348] BUG: kernel NULL pointer dereference, address: 0000000000000030 [ 37.384014][ T29] audit: type=1400 audit(1725226101.811:101): avc: denied { mounton } for pid=347 comm="syz-executor.0" path="/root/syzkaller-testdir1158916804/syzkaller.ow6AAj/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.391057][ T348] #PF: supervisor read access in kernel mode [ 37.391060][ T348] #PF: error_code(0x0000) - not-present page [ 37.391062][ T348] PGD 10eb95067 P4D 10eb95067 PUD 10eb99067 PMD 0 [ 37.391078][ T348] Oops: 0000 [#1] PREEMPT SMP [ 37.391081][ T348] CPU: 1 PID: 348 Comm: syz-executor.0 Not tainted 5.15.156-syzkaller #0 [ 37.391086][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 37.391087][ T348] RIP: 0010:security_inode_getattr+0x4/0x40 [ 37.391096][ T348] Code: 85 c0 75 0a 48 8b 1b 48 85 db 75 eb 31 c0 5b 41 5c 41 5d 5d c3 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 47 08 <48> 8b 40 30 f6 40 0d 02 75 2f 55 48 89 e5 41 54 49 89 fc 53 48 8b [ 37.391099][ T348] RSP: 0018:ffffc90000403840 EFLAGS: 00010246 [ 37.418774][ T29] audit: type=1400 audit(1725226101.811:102): avc: denied { unlink } for pid=347 comm="syz-executor.0" name="#1" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 37.424045][ T348] [ 37.424047][ T348] RAX: 0000000000000000 RBX: ffff888109ded9c0 RCX: 0000000000000000 [ 37.424050][ T348] RDX: 00000000000007ff RSI: ffffc90000403988 RDI: ffffc90000403978 [ 37.424052][ T348] RBP: ffffc90000403868 R08: 0000000000000064 R09: ffff88810b02a1e0 [ 37.424054][ T348] R10: 000000000000007f R11: 0000000000000000 R12: ffffc90000403988 [ 37.424056][ T348] R13: 00000000000007ff R14: 0000000000000000 R15: ffffc90000403978 [ 37.424059][ T348] FS: 00007f36b7f626c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 37.424062][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.424067][ T348] CR2: 0000000000000030 CR3: 000000010eb85000 CR4: 00000000003506a0 [ 37.430233][ T29] audit: type=1400 audit(1725226101.811:103): avc: denied { mount } for pid=347 comm="syz-executor.0" name="/" dev="overlay" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.436659][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.441167][ T29] audit: type=1400 audit(1725226101.811:104): avc: denied { write } for pid=347 comm="syz-executor.0" name="/" dev="incremental-fs" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.449377][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.449382][ T348] Call Trace: [ 37.449384][ T348] [ 37.449386][ T348] ? show_regs.part.0+0x1e/0x20 [ 37.449393][ T348] ? __die+0x5d/0x9e [ 37.449396][ T348] ? page_fault_oops+0x12d/0x280 [ 37.459377][ T29] audit: type=1400 audit(1725226101.811:105): avc: denied { add_name } for pid=347 comm="syz-executor.0" name="file1" dev="incremental-fs" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.465003][ T348] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 37.688678][ T348] ? __wake_up_common_lock+0x85/0xb0 [ 37.693795][ T348] ? do_user_addr_fault+0x44b/0x730 [ 37.698830][ T348] ? __find_get_block+0xde/0x2d0 [ 37.703601][ T348] ? __crc32c_le_base+0x10/0x20 [ 37.708293][ T348] ? chksum_update+0x12/0x20 [ 37.712714][ T348] ? crypto_shash_update+0x13/0x20 [ 37.717923][ T348] ? ext4_inode_csum+0x199/0x210 [ 37.722783][ T348] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 37.728687][ T348] ? __wake_up_common_lock+0x85/0xb0 [ 37.733897][ T348] ? exc_page_fault+0x67/0x160 [ 37.738581][ T348] ? asm_exc_page_fault+0x27/0x30 [ 37.743544][ T348] ? security_inode_getattr+0x4/0x40 [ 37.748744][ T348] ? vfs_getattr+0x1d/0x40 [ 37.753178][ T348] ovl_copy_up_one+0xaa/0xed0 [ 37.757769][ T348] ? vsnprintf+0x399/0x4d0 [ 37.762031][ T348] ovl_copy_up_flags+0xb6/0x100 [ 37.766709][ T348] ovl_maybe_copy_up+0x8d/0xb0 [ 37.771394][ T348] ovl_open+0x27/0x80 [ 37.775307][ T348] ? ovl_file_accessed.part.0+0x90/0x90 [ 37.780692][ T348] do_dentry_open+0x167/0x410 [ 37.785196][ T348] dentry_open+0x48/0x70 [ 37.789882][ T348] file_open+0xca/0x230 [ 37.794058][ T348] ? read_single_page+0x3f0/0x3f0 [ 37.798906][ T348] do_dentry_open+0x167/0x410 [ 37.803419][ T348] vfs_open+0x28/0x30 [ 37.807239][ T348] path_openat+0xcfa/0x1230 [ 37.811580][ T348] do_filp_open+0xb1/0x150 [ 37.815831][ T348] ? _raw_spin_unlock+0x1f/0x40 [ 37.820517][ T348] do_sys_openat2+0x9c/0x250 [ 37.824946][ T348] __x64_sys_openat+0x51/0x90 [ 37.829550][ T348] x64_sys_call+0x2eb/0x990 [ 37.833991][ T348] do_syscall_64+0x33/0xb0 [ 37.838435][ T348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.844337][ T348] RIP: 0033:0x7f36b83e0da9 [ 37.848626][ T348] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 37.868029][ T348] RSP: 002b:00007f36b7f620c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 37.876634][ T348] RAX: ffffffffffffffda RBX: 00007f36b850ef80 RCX: 00007f36b83e0da9 [ 37.884731][ T348] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 37.892546][ T348] RBP: 00007f36b842d47a R08: 0000000000000000 R09: 0000000000000000 [ 37.900618][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.908647][ T348] R13: 000000000000000b R14: 00007f36b850ef80 R15: 00007ffce8b1cba8 [ 37.916536][ T348] [ 37.919404][ T348] Modules linked in: [ 37.923123][ T348] CR2: 0000000000000030 [ 37.927116][ T348] ---[ end trace 9f3f85378cb7dd06 ]--- [ 37.932423][ T348] RIP: 0010:security_inode_getattr+0x4/0x40 [ 37.938138][ T348] Code: 85 c0 75 0a 48 8b 1b 48 85 db 75 eb 31 c0 5b 41 5c 41 5d 5d c3 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 47 08 <48> 8b 40 30 f6 40 0d 02 75 2f 55 48 89 e5 41 54 49 89 fc 53 48 8b [ 37.958025][ T348] RSP: 0018:ffffc90000403840 EFLAGS: 00010246 [ 37.963926][ T348] RAX: 0000000000000000 RBX: ffff888109ded9c0 RCX: 0000000000000000 [ 37.971998][ T348] RDX: 00000000000007ff RSI: ffffc90000403988 RDI: ffffc90000403978 [ 37.979809][ T348] RBP: ffffc90000403868 R08: 0000000000000064 R09: ffff88810b02a1e0 [ 37.987621][ T348] R10: 000000000000007f R11: 0000000000000000 R12: ffffc90000403988 [ 37.995432][ T348] R13: 00000000000007ff R14: 0000000000000000 R15: ffffc90000403978 [ 38.003244][ T348] FS: 00007f36b7f626c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 38.012020][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.018607][ T348] CR2: 0000000000000030 CR3: 000000010eb85000 CR4: 00000000003506a0 [ 38.026508][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.034511][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.042485][ T348] Kernel panic - not syncing: Fatal exception [ 38.048614][ T348] Kernel Offset: disabled [ 38.052752][ T348] Rebooting in 86400 seconds..