[ 31.179029][ T27] audit: type=1400 audit(1697741113.622:154): avc: denied { rlimitinh } for pid=317 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.198309][ T27] audit: type=1400 audit(1697741113.622:155): avc: denied { siginh } for pid=317 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 2023/10/19 18:45:20 ignoring optional flag "sandboxArg"="0" 2023/10/19 18:45:20 parsed 1 programs [ 37.878357][ T27] audit: type=1400 audit(1697741120.372:156): avc: denied { mounton } for pid=338 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.907855][ T27] audit: type=1400 audit(1697741120.372:157): avc: denied { mount } for pid=338 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/10/19 18:45:20 executed programs: 0 [ 37.955510][ T27] audit: type=1400 audit(1697741120.452:158): avc: denied { unlink } for pid=338 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.974188][ T338] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.002991][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.010426][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.017722][ T344] device bridge_slave_0 entered promiscuous mode [ 38.025147][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.033943][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.041525][ T344] device bridge_slave_1 entered promiscuous mode [ 38.053914][ T27] audit: type=1400 audit(1697741120.542:159): avc: denied { write } for pid=344 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.056991][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.076507][ T27] audit: type=1400 audit(1697741120.552:160): avc: denied { read } for pid=344 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.083882][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.113789][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.121527][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.131378][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.138499][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.146355][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.153948][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.163387][ T344] device veth0_vlan entered promiscuous mode [ 38.170103][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.178562][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.186979][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.194315][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.201832][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.210362][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.217527][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.224907][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.232926][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.239956][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.247496][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.255727][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.264677][ T344] device veth1_macvtap entered promiscuous mode [ 38.271644][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.282160][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.291113][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.304457][ T27] audit: type=1400 audit(1697741120.802:161): avc: denied { mounton } for pid=344 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.333047][ T27] audit: type=1400 audit(1697741120.822:162): avc: denied { mounton } for pid=349 comm="syz-executor.0" path="/root/syzkaller-testdir1182314621/syzkaller.Vb3SB8/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.383925][ T350] BUG: kernel NULL pointer dereference, address: 0000000000000012 [ 38.391772][ T350] #PF: supervisor read access in kernel mode [ 38.398178][ T350] #PF: error_code(0x0000) - not-present page [ 38.404456][ T350] PGD 10ce55067 P4D 10ce55067 PUD 10cf98067 PMD 0 [ 38.411669][ T350] Oops: 0000 [#1] PREEMPT SMP [ 38.416364][ T350] CPU: 1 PID: 350 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0 [ 38.424906][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 38.436316][ T350] RIP: 0010:do_renameat2+0x2f0/0x600 [ 38.441963][ T350] Code: ee e8 d4 b9 ff ff 48 89 c3 48 8d bd 60 ff ff ff 4c 89 ee 44 89 e2 e8 9f e1 ff ff 49 89 c7 48 3d 00 f0 ff ff 0f 87 7b 01 00 00 <41> f6 47 02 70 48 8b b5 30 ff ff ff 0f 84 09 01 00 00 48 89 9d 00 [ 38.462009][ T350] RSP: 0018:ffffc9000078fde8 EFLAGS: 00010203 [ 38.468996][ T350] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000000000004 [ 38.478051][ T350] RDX: 0000000400000000 RSI: 0000000000000000 RDI: ffff888100308000 [ 38.486935][ T350] RBP: ffffc9000078ff00 R08: 00000000ffffff9c R09: ffffffff8153cfac [ 38.496174][ T350] R10: ffff88810bab7fc0 R11: ffff888100041400 R12: 0000000000000000 [ 38.505023][ T350] R13: ffff88810da2b4e0 R14: 0000000020000101 R15: 0000000000000010 [ 38.513192][ T350] FS: 00007fb46ab7c6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 38.523833][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.531029][ T350] CR2: 0000000000000012 CR3: 000000010cf9e000 CR4: 00000000003506a0 [ 38.540315][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.549764][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.558578][ T350] Call Trace: [ 38.561780][ T350] [ 38.564905][ T350] ? slab_post_alloc_hook+0x71/0x300 [ 38.574079][ T350] __x64_sys_rename+0x3f/0x50 [ 38.581113][ T350] do_syscall_64+0x3d/0xb0 [ 38.586360][ T350] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 38.593645][ T350] RIP: 0033:0x7fb469e7cae9 [ 38.599851][ T350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 38.624404][ T350] RSP: 002b:00007fb46ab7c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 38.636618][ T350] RAX: ffffffffffffffda RBX: 00007fb469f9bf80 RCX: 00007fb469e7cae9 [ 38.645796][ T350] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 [ 38.655109][ T350] RBP: 00007fb469ec847a R08: 0000000000000000 R09: 0000000000000000 [ 38.663152][ T350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.672638][ T350] R13: 000000000000000b R14: 00007fb469f9bf80 R15: 00007ffd7c2824f8 [ 38.681589][ T350] [ 38.684475][ T350] Modules linked in: [ 38.688350][ T350] CR2: 0000000000000012 [ 38.692866][ T350] ---[ end trace 0000000000000000 ]--- [ 38.700521][ T350] RIP: 0010:do_renameat2+0x2f0/0x600 [ 38.706887][ T350] Code: ee e8 d4 b9 ff ff 48 89 c3 48 8d bd 60 ff ff ff 4c 89 ee 44 89 e2 e8 9f e1 ff ff 49 89 c7 48 3d 00 f0 ff ff 0f 87 7b 01 00 00 <41> f6 47 02 70 48 8b b5 30 ff ff ff 0f 84 09 01 00 00 48 89 9d 00 [ 38.729157][ T350] RSP: 0018:ffffc9000078fde8 EFLAGS: 00010203 [ 38.735869][ T350] RAX: 0000000000000010 RBX: 0000000000000000 RCX: 0000000000000004 [ 38.744655][ T350] RDX: 0000000400000000 RSI: 0000000000000000 RDI: ffff888100308000 [ 38.753738][ T350] RBP: ffffc9000078ff00 R08: 00000000ffffff9c R09: ffffffff8153cfac [ 38.765314][ T350] R10: ffff88810bab7fc0 R11: ffff888100041400 R12: 0000000000000000 [ 38.774384][ T350] R13: ffff88810da2b4e0 R14: 0000000020000101 R15: 0000000000000010 [ 38.782129][ T350] FS: 00007fb46ab7c6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 38.791158][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.799471][ T350] CR2: 0000000000000012 CR3: 000000010cf9e000 CR4: 00000000003506a0 [ 38.807808][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.817301][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.825735][ T350] Kernel panic - not syncing: Fatal exception [ 38.832132][ T350] Kernel Offset: disabled [ 38.836879][ T350] Rebooting in 86400 seconds..