Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. 2023/12/05 23:00:08 ignoring optional flag "sandboxArg"="0" 2023/12/05 23:00:08 parsed 1 programs [ 41.831322][ T23] kauditd_printk_skb: 75 callbacks suppressed [ 41.831324][ T23] audit: type=1400 audit(1701817208.900:151): avc: denied { mounton } for pid=337 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.862464][ T23] audit: type=1400 audit(1701817208.900:152): avc: denied { mount } for pid=337 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.886017][ T23] audit: type=1400 audit(1701817208.900:153): avc: denied { setattr } for pid=337 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2023/12/05 23:00:09 executed programs: 0 [ 41.909755][ T23] audit: type=1400 audit(1701817208.900:154): avc: denied { read write } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.935923][ T23] audit: type=1400 audit(1701817208.900:155): avc: denied { open } for pid=337 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.935961][ T337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.962384][ T23] audit: type=1400 audit(1701817208.930:156): avc: denied { unlink } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.984026][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.997173][ T23] audit: type=1400 audit(1701817208.930:157): avc: denied { relabelto } for pid=338 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.030137][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.030277][ T342] device bridge_slave_0 entered promiscuous mode [ 42.043608][ T23] audit: type=1400 audit(1701817209.040:158): avc: denied { mounton } for pid=342 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 42.043804][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.075462][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.082376][ T342] device bridge_slave_1 entered promiscuous mode [ 42.093240][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.100364][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.107676][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.114678][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.124232][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.131235][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.138259][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.145608][ T288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.153012][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.161153][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.167989][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.176875][ T342] device veth0_vlan entered promiscuous mode [ 42.183244][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.191508][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.199228][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.206505][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.213926][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.222012][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.229001][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.236110][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.243987][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.252264][ T342] device veth1_macvtap entered promiscuous mode [ 42.259757][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.267823][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.275950][ T50] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.287435][ T23] audit: type=1400 audit(1701817209.350:159): avc: denied { mounton } for pid=346 comm="syz-executor.0" path="/root/syzkaller-testdir3139219735/syzkaller.RnBrGk/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.338124][ T347] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 42.345730][ T347] #PF: supervisor read access in kernel mode [ 42.351544][ T347] #PF: error_code(0x0000) - not-present page [ 42.357440][ T347] PGD 1094bd067 P4D 1094bd067 PUD 109503067 PMD 0 [ 42.364053][ T347] Oops: 0000 [#1] PREEMPT SMP [ 42.368585][ T347] CPU: 0 PID: 347 Comm: syz-executor.0 Not tainted 5.10.200-syzkaller #0 [ 42.377672][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 42.387776][ T347] RIP: 0010:do_renameat2+0x27f/0x4f0 [ 42.392950][ T347] Code: a8 e8 95 7b ff ff 48 8b 75 98 48 8d 7d b0 89 da 49 89 c4 e8 d3 8a ff ff 48 3d 00 f0 ff ff 49 89 c6 41 89 c5 0f 87 da 00 00 00 00 00 00 70 00 41 bd fe ff ff ff 0f 84 c0 00 00 00 8b 95 60 ff [ 42.412651][ T347] RSP: 0018:ffffc9000058fe60 EFLAGS: 00010203 [ 42.419510][ T347] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000500000000 [ 42.428125][ T347] RDX: 0000000000000004 RSI: 0000000400000000 RDI: ffff8881019fdc80 [ 42.436187][ T347] RBP: ffffc9000058ff10 R08: 0000000000000005 R09: 0000000000000064 [ 42.444349][ T347] R10: ffff88810a8d13c0 R11: 0000000000000000 R12: 0000000000000000 [ 42.452342][ T347] R13: 0000000000000010 R14: 0000000000000010 R15: ffff888107bf4000 [ 42.460265][ T347] FS: 00007efd72da56c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 42.469207][ T347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.475626][ T347] CR2: 0000000000000010 CR3: 000000010fce0000 CR4: 00000000003506b0 [ 42.484159][ T347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.491980][ T347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.499862][ T347] Call Trace: [ 42.503022][ T347] ? show_regs.part.0+0x1e/0x20 [ 42.507759][ T347] ? __die+0x5d/0x9e [ 42.511517][ T347] ? no_context+0x1f2/0x380 [ 42.515835][ T347] ? __bad_area_nosemaphore+0x4b/0x1a0 [ 42.521133][ T347] ? bad_area_nosemaphore+0x11/0x20 [ 42.526162][ T347] ? exc_page_fault+0x2c9/0x5a0 [ 42.530852][ T347] ? asm_exc_page_fault+0x1e/0x30 [ 42.535829][ T347] ? do_renameat2+0x27f/0x4f0 [ 42.540419][ T347] __x64_sys_rename+0x40/0x50 [ 42.544930][ T347] do_syscall_64+0x32/0x80 [ 42.549184][ T347] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 42.554918][ T347] RIP: 0033:0x7efd73222ae9 [ 42.559255][ T347] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.579330][ T347] RSP: 002b:00007efd72da50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 42.587862][ T347] RAX: ffffffffffffffda RBX: 00007efd73341f80 RCX: 00007efd73222ae9 [ 42.595649][ T347] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 [ 42.603542][ T347] RBP: 00007efd7326e47a R08: 0000000000000000 R09: 0000000000000000 [ 42.611355][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.619256][ T347] R13: 000000000000000b R14: 00007efd73341f80 R15: 00007ffd8ccda658 [ 42.627340][ T347] Modules linked in: [ 42.631061][ T347] CR2: 0000000000000010 [ 42.635229][ T347] ---[ end trace bea57c77a0d673e4 ]--- [ 42.640613][ T347] RIP: 0010:do_renameat2+0x27f/0x4f0 [ 42.645932][ T347] Code: a8 e8 95 7b ff ff 48 8b 75 98 48 8d 7d b0 89 da 49 89 c4 e8 d3 8a ff ff 48 3d 00 f0 ff ff 49 89 c6 41 89 c5 0f 87 da 00 00 00 00 00 00 70 00 41 bd fe ff ff ff 0f 84 c0 00 00 00 8b 95 60 ff [ 42.665745][ T347] RSP: 0018:ffffc9000058fe60 EFLAGS: 00010203 [ 42.671723][ T347] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000500000000 [ 42.679656][ T347] RDX: 0000000000000004 RSI: 0000000400000000 RDI: ffff8881019fdc80 [ 42.687673][ T347] RBP: ffffc9000058ff10 R08: 0000000000000005 R09: 0000000000000064 [ 42.695679][ T347] R10: ffff88810a8d13c0 R11: 0000000000000000 R12: 0000000000000000 [ 42.703902][ T347] R13: 0000000000000010 R14: 0000000000000010 R15: ffff888107bf4000 [ 42.712221][ T347] FS: 00007efd72da56c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 42.720981][ T347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.727579][ T347] CR2: 0000000000000010 CR3: 000000010fce0000 CR4: 00000000003506b0 [ 42.735493][ T347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.743293][ T347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.751253][ T347] Kernel panic - not syncing: Fatal exception [ 42.757474][ T347] Kernel Offset: disabled [ 42.761622][ T347] Rebooting in 86400 seconds..