Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. 2023/10/12 05:36:06 ignoring optional flag "sandboxArg"="0" 2023/10/12 05:36:07 parsed 1 programs [ 51.385964][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 51.385968][ T29] audit: type=1400 audit(1697088966.996:154): avc: denied { mounton } for pid=350 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 51.416522][ T29] audit: type=1400 audit(1697088966.996:155): avc: denied { mount } for pid=350 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 51.439522][ T29] audit: type=1400 audit(1697088966.996:156): avc: denied { setattr } for pid=350 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 51.462448][ T29] audit: type=1400 audit(1697088966.996:157): avc: denied { read write } for pid=350 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.488744][ T29] audit: type=1400 audit(1697088966.996:158): avc: denied { open } for pid=350 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/10/12 05:36:07 executed programs: 0 [ 51.514658][ T29] audit: type=1400 audit(1697088967.076:159): avc: denied { unlink } for pid=350 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.540543][ T29] audit: type=1400 audit(1697088967.076:160): avc: denied { relabelto } for pid=351 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.566798][ T350] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.585496][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.592337][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.599499][ T356] device bridge_slave_0 entered promiscuous mode [ 51.605720][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.612535][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.619514][ T356] device bridge_slave_1 entered promiscuous mode [ 51.631767][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.638603][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.645626][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.652771][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.661690][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.668622][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.675490][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.682893][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.691898][ T356] device veth0_vlan entered promiscuous mode [ 51.698409][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.706465][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.714026][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.721020][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.728053][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.736005][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.742845][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.750006][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.757803][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.764656][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.772150][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.779903][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.787986][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.795965][ T356] device veth1_macvtap entered promiscuous mode [ 51.803147][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.811087][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.823180][ T29] audit: type=1400 audit(1697088967.436:161): avc: denied { mounton } for pid=361 comm="syz-executor.0" path="/root/syzkaller-testdir3295974318/syzkaller.ZAGf4u/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 51.873301][ T362] BUG: kernel NULL pointer dereference, address: 0000000000000002 [ 51.880910][ T362] #PF: supervisor read access in kernel mode [ 51.886721][ T362] #PF: error_code(0x0000) - not-present page [ 51.892622][ T362] PGD 1091a6067 P4D 1091a6067 PUD 1015e7067 PMD 0 [ 51.898960][ T362] Oops: 0000 [#1] PREEMPT SMP [ 51.903739][ T362] CPU: 1 PID: 362 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller #0 [ 51.912330][ T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 51.922231][ T362] RIP: 0010:do_unlinkat+0x132/0x2a0 [ 51.927271][ T362] Code: 48 81 c7 a0 00 00 00 e8 cc 70 a9 00 48 8b 75 b8 48 8d 7d c0 89 da e8 ed 89 ff ff 48 3d 00 f0 ff ff 49 89 c7 0f 87 44 01 00 00 <8b> 00 8b 4d c4 48 8b 75 c8 89 c2 81 e2 00 00 70 00 80 3c 0e 00 0f [ 51.946911][ T362] RSP: 0018:ffffc9000039beb0 EFLAGS: 00010203 [ 51.952820][ T362] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000400000000 [ 51.960714][ T362] RDX: 0000000000000003 RSI: 0000000300000000 RDI: ffff8881091ba500 [ 51.968523][ T362] RBP: ffffc9000039bf18 R08: 0000000000000004 R09: 0000000000000064 [ 51.976336][ T362] R10: ffff88810218f060 R11: 0000000000000001 R12: 0000000000000000 [ 51.984229][ T362] R13: ffff888107ddd000 R14: 0000000000000000 R15: 0000000000000002 [ 51.992064][ T362] FS: 00007f191bde56c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 52.000810][ T362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.007321][ T362] CR2: 0000000000000002 CR3: 0000000101583000 CR4: 00000000003506a0 [ 52.015134][ T362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.023044][ T362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.030925][ T362] Call Trace: [ 52.034051][ T362] [ 52.036913][ T362] ? show_regs.part.0+0x1e/0x20 [ 52.041602][ T362] ? __die+0x5d/0x9e [ 52.045343][ T362] ? page_fault_oops+0x12d/0x280 [ 52.050206][ T362] ? do_user_addr_fault+0x44b/0x730 [ 52.055264][ T362] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 52.061146][ T362] ? __mod_timer+0x251/0x3a0 [ 52.065564][ T362] ? add_timer+0x1b/0x20 [ 52.069636][ T362] ? debug_smp_processor_id+0x17/0x20 [ 52.074843][ T362] ? call_rcu+0x194/0x640 [ 52.079100][ T362] ? exc_page_fault+0x67/0x160 [ 52.083699][ T362] ? asm_exc_page_fault+0x27/0x30 [ 52.088819][ T362] ? do_unlinkat+0x132/0x2a0 [ 52.093681][ T362] __x64_sys_unlink+0x3d/0x60 [ 52.098304][ T362] do_syscall_64+0x35/0xb0 [ 52.102535][ T362] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.108258][ T362] RIP: 0033:0x7f191c262b29 [ 52.112514][ T362] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.132049][ T362] RSP: 002b:00007f191bde50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 52.140294][ T362] RAX: ffffffffffffffda RBX: 00007f191c381f80 RCX: 00007f191c262b29 [ 52.148184][ T362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 52.155994][ T362] RBP: 00007f191c2ae47a R08: 0000000000000000 R09: 0000000000000000 [ 52.164155][ T362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.172071][ T362] R13: 000000000000000b R14: 00007f191c381f80 R15: 00007ffedc6c8558 [ 52.179971][ T362] [ 52.182852][ T362] Modules linked in: [ 52.186564][ T362] CR2: 0000000000000002 [ 52.190557][ T362] ---[ end trace 954679adddc238b5 ]--- [ 52.195945][ T362] RIP: 0010:do_unlinkat+0x132/0x2a0 [ 52.201234][ T362] Code: 48 81 c7 a0 00 00 00 e8 cc 70 a9 00 48 8b 75 b8 48 8d 7d c0 89 da e8 ed 89 ff ff 48 3d 00 f0 ff ff 49 89 c7 0f 87 44 01 00 00 <8b> 00 8b 4d c4 48 8b 75 c8 89 c2 81 e2 00 00 70 00 80 3c 0e 00 0f [ 52.220950][ T362] RSP: 0018:ffffc9000039beb0 EFLAGS: 00010203 [ 52.226940][ T362] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000400000000 [ 52.234745][ T362] RDX: 0000000000000003 RSI: 0000000300000000 RDI: ffff8881091ba500 [ 52.242741][ T362] RBP: ffffc9000039bf18 R08: 0000000000000004 R09: 0000000000000064 [ 52.250729][ T362] R10: ffff88810218f060 R11: 0000000000000001 R12: 0000000000000000 [ 52.258542][ T362] R13: ffff888107ddd000 R14: 0000000000000000 R15: 0000000000000002 [ 52.266348][ T362] FS: 00007f191bde56c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 52.275121][ T362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.281541][ T362] CR2: 0000000000000002 CR3: 0000000101583000 CR4: 00000000003506a0 [ 52.289354][ T362] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.297161][ T362] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.304978][ T362] Kernel panic - not syncing: Fatal exception [ 52.311035][ T362] Kernel Offset: disabled [ 52.315164][ T362] Rebooting in 86400 seconds..