[ 28.301434][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.320348][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.328479][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.342480][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.357162][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.432081][ T364] syz-executor.0 (364) used greatest stack depth: 20152 bytes left [ 29.220628][ T179] device bridge_slave_1 left promiscuous mode [ 29.226671][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.234162][ T179] device bridge_slave_0 left promiscuous mode [ 29.240203][ T179] bridge0: port 1(bridge_slave_0) entered disabled state Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. 2024/09/04 13:13:37 ignoring optional flag "sandboxArg"="0" 2024/09/04 13:13:37 parsed 1 programs [ 46.336842][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 46.336855][ T23] audit: type=1400 audit(1725455617.620:95): avc: denied { unlink } for pid=407 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/09/04 13:13:37 executed programs: 0 [ 46.391027][ T407] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.467558][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.475322][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.482743][ T413] device bridge_slave_0 entered promiscuous mode [ 46.489887][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.496751][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.504494][ T413] device bridge_slave_1 entered promiscuous mode [ 46.559542][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.566438][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.573564][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.580436][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.606004][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.614057][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.622219][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.629615][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.640246][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.648334][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.655203][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.664526][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.673099][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.679923][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.695958][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.710267][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.730386][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.738676][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.761522][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.769859][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.778613][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.804730][ T23] audit: type=1400 audit(1725455618.090:96): avc: denied { read } for pid=419 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.805482][ T420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 46.828483][ T23] audit: type=1400 audit(1725455618.090:97): avc: denied { open } for pid=419 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.867484][ T23] audit: type=1400 audit(1725455618.090:98): avc: denied { ioctl } for pid=419 comm="syz-executor.0" path="/dev/kvm" dev="devtmpfs" ino=101 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 46.954505][ T427] BUG: kernel NULL pointer dereference, address: 0000000000000086 [ 46.962249][ T427] #PF: supervisor instruction fetch in kernel mode [ 46.968690][ T427] #PF: error_code(0x0010) - not-present page [ 46.974564][ T427] PGD 1d985f067 P4D 1d985f067 PUD 1ef49a067 PMD 0 [ 46.980893][ T427] Oops: 0010 [#1] PREEMPT SMP KASAN [ 46.985947][ T427] CPU: 0 PID: 427 Comm: syz-executor.0 Not tainted 5.4.281-syzkaller-04937-gd883a2284ec1 #0 [ 46.996015][ T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.005993][ T427] RIP: 0010:0x86 [ 47.009609][ T427] Code: Bad RIP value. [ 47.013749][ T427] RSP: 0018:ffff8881ef18f308 EFLAGS: 00010086 [ 47.019635][ T427] RAX: ffff8881ef18f338 RBX: dffffc0000000000 RCX: ffff8881f32f5e80 [ 47.027449][ T427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 47.035337][ T427] RBP: 0000000000000ec0 R08: ffffffff82316a81 R09: ffffffff811c8e45 [ 47.043153][ T427] R10: ffff8881f32f5e80 R11: 0000000000000002 R12: ffffffff84601550 [ 47.050956][ T427] R13: fffffe0000000ec8 R14: ffff8881d99c8000 R15: fffffe0000000ecb [ 47.058777][ T427] FS: 00007f0a7665a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 47.067546][ T427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.073963][ T427] CR2: 000000000000005c CR3: 00000001d9876000 CR4: 00000000003426b0 [ 47.081849][ T427] Call Trace: [ 47.084991][ T427] ? __die+0xb4/0x100 [ 47.088910][ T427] ? no_context+0xac7/0xd20 [ 47.093241][ T427] ? is_prefetch+0x4b0/0x4b0 [ 47.097827][ T427] ? rcu_preempt_deferred_qs+0xa4/0x2b0 [ 47.103332][ T427] ? __do_page_fault+0xa72/0xbb0 [ 47.108163][ T427] ? vmx_spec_ctrl_restore_host+0x83/0xfd [ 47.113749][ T427] ? __bad_area_nosemaphore+0xc0/0x470 [ 47.119061][ T427] ? page_fault+0x2f/0x40 [ 47.123287][ T427] ? __entry_text_end+0x4/0x4 [ 47.127880][ T427] ? vmx_handle_exit_irqoff+0x45/0x220 [ 47.133301][ T427] ? check_preemption_disabled+0x91/0x320 [ 47.138940][ T427] ? handle_external_interrupt_irqoff+0x148/0x2f0 [ 47.145307][ T427] ? handle_external_interrupt_irqoff+0x12a/0x2f0 [ 47.151540][ T427] ? __entry_text_end+0x4/0x4 [ 47.156140][ T427] ? vcpu_enter_guest+0x2d06/0x9f70 [ 47.161194][ T427] ? check_preemption_disabled+0x9f/0x320 [ 47.166712][ T427] ? debug_smp_processor_id+0x20/0x20 [ 47.172006][ T427] ? __free_pages_ok+0x847/0x950 [ 47.176863][ T427] ? __kvm_set_memory_region+0xda6/0xf60 [ 47.182336][ T427] ? check_preemption_disabled+0x9f/0x320 [ 47.187880][ T427] ? do_vfs_ioctl+0x742/0x1720 [ 47.192653][ T427] ? __x64_sys_ioctl+0xd4/0x110 [ 47.197350][ T427] ? do_syscall_64+0xca/0x1c0 [ 47.201856][ T427] ? debug_smp_processor_id+0x20/0x20 [ 47.207074][ T427] ? local_bh_enable+0x20/0x20 [ 47.211733][ T427] ? _raw_spin_lock+0xa4/0x1b0 [ 47.216258][ T427] ? _raw_spin_trylock_bh+0x190/0x190 [ 47.221575][ T427] ? newidle_balance+0x50a/0x930 [ 47.226423][ T427] ? check_preemption_disabled+0x9f/0x320 [ 47.232057][ T427] ? check_preemption_disabled+0x9f/0x320 [ 47.237613][ T427] ? debug_smp_processor_id+0x20/0x20 [ 47.242991][ T427] ? debug_smp_processor_id+0x20/0x20 [ 47.248240][ T427] ? dequeue_task_fair+0x4f4/0x12e0 [ 47.253758][ T427] ? llist_add_batch+0x91/0xb0 [ 47.258446][ T427] ? generic_exec_single+0x280/0x3e0 [ 47.263789][ T427] ? smp_call_function_single+0x4a0/0x4a0 [ 47.269870][ T427] ? __schedule+0xb0d/0x1320 [ 47.274493][ T427] ? smp_call_function_single+0x388/0x4a0 [ 47.280221][ T427] ? loaded_vmcs_clear+0x80/0x80 [ 47.284996][ T427] ? generic_smp_call_function_single_interrupt+0x10/0x10 [ 47.292087][ T427] ? check_preemption_disabled+0x9f/0x320 [ 47.297673][ T427] ? loaded_vmcs_clear+0x80/0x80 [ 47.302440][ T427] ? debug_smp_processor_id+0x20/0x20 [ 47.307651][ T427] ? schedule+0x143/0x1d0 [ 47.311821][ T427] ? get_cpu_entry_area+0x8/0x30 [ 47.316593][ T427] ? vmx_vcpu_load_vmcs+0x655/0x8b0 [ 47.321631][ T427] ? read_msr+0x40/0x40 [ 47.325704][ T427] ? check_preemption_disabled+0x9f/0x320 [ 47.331309][ T427] ? debug_smp_processor_id+0x20/0x20 [ 47.336468][ T427] ? kvm_arch_vcpu_ioctl_run+0x748/0x18d0 [ 47.342117][ T427] ? kvm_vcpu_ioctl+0x7f9/0xd10 [ 47.346814][ T427] ? preempt_count_add+0x8f/0x180 [ 47.351654][ T427] ? create_vcpu_fd+0x120/0x120 [ 47.356431][ T427] ? do_futex+0x13c1/0x19f0 [ 47.360769][ T427] ? kvm_reboot+0x40/0x40 [ 47.365022][ T427] ? create_vcpu_fd+0x120/0x120 [ 47.369711][ T427] ? do_vfs_ioctl+0x742/0x1720 [ 47.374400][ T427] ? ioctl_preallocate+0x250/0x250 [ 47.379433][ T427] ? __fget+0x407/0x490 [ 47.383520][ T427] ? fget_many+0x20/0x20 [ 47.387615][ T427] ? switch_fpu_return+0x1d4/0x410 [ 47.392667][ T427] ? security_file_ioctl+0x7d/0xa0 [ 47.397956][ T427] ? __x64_sys_ioctl+0xd4/0x110 [ 47.402774][ T427] ? do_syscall_64+0xca/0x1c0 [ 47.407290][ T427] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 47.413265][ T427] Modules linked in: [ 47.417006][ T427] CR2: 0000000000000086 [ 47.421209][ T427] ---[ end trace 1774a2d02b85c381 ]--- [ 47.427780][ T427] RIP: 0010:0x86 [ 47.431360][ T427] Code: Bad RIP value. [ 47.435600][ T427] RSP: 0018:ffff8881ef18f308 EFLAGS: 00010086 [ 47.441503][ T427] RAX: ffff8881ef18f338 RBX: dffffc0000000000 RCX: ffff8881f32f5e80 [ 47.449322][ T427] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 47.457317][ T427] RBP: 0000000000000ec0 R08: ffffffff82316a81 R09: ffffffff811c8e45 [ 47.465155][ T427] R10: ffff8881f32f5e80 R11: 0000000000000002 R12: ffffffff84601550 [ 47.473025][ T427] R13: fffffe0000000ec8 R14: ffff8881d99c8000 R15: fffffe0000000ecb [ 47.480831][ T427] FS: 00007f0a7665a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 47.489825][ T427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.496248][ T427] CR2: 000000000000005c CR3: 00000001d9876000 CR4: 00000000003426b0 [ 47.504223][ T427] Kernel panic - not syncing: Fatal exception [ 47.510384][ T427] Kernel Offset: disabled [ 47.514509][ T427] Rebooting in 86400 seconds..