Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. 2023/09/11 08:02:56 ignoring optional flag "sandboxArg"="0" 2023/09/11 08:02:56 parsed 1 programs [ 39.426546][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 39.426550][ T29] audit: type=1400 audit(1694419376.703:154): avc: denied { mounton } for pid=337 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.458587][ T29] audit: type=1400 audit(1694419376.703:155): avc: denied { mount } for pid=337 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.482037][ T29] audit: type=1400 audit(1694419376.703:156): avc: denied { setattr } for pid=337 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.506188][ T29] audit: type=1400 audit(1694419376.703:157): avc: denied { read write } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.532428][ T29] audit: type=1400 audit(1694419376.703:158): avc: denied { open } for pid=337 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.630526][ T29] audit: type=1400 audit(1694419376.913:159): avc: denied { unlink } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/09/11 08:02:56 executed programs: 0 [ 39.656779][ T29] audit: type=1400 audit(1694419376.913:160): avc: denied { relabelto } for pid=338 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.669872][ T337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.701285][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.708124][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.715222][ T343] device bridge_slave_0 entered promiscuous mode [ 39.721564][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.728638][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.735600][ T343] device bridge_slave_1 entered promiscuous mode [ 39.747296][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.754278][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.761455][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.768369][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.777568][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.784563][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.791697][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.798897][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.807023][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.815227][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.822114][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.831448][ T343] device veth0_vlan entered promiscuous mode [ 39.838654][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.846926][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.856190][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.863994][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.872822][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.881089][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.888112][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.895247][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.902970][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.911310][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.920377][ T343] device veth1_macvtap entered promiscuous mode [ 39.927605][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.935626][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.948891][ T29] audit: type=1400 audit(1694419377.233:161): avc: denied { mounton } for pid=350 comm="syz-executor.0" path="/root/syzkaller-testdir639489287/syzkaller.dWU1Ny/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.000350][ T351] BUG: kernel NULL pointer dereference, address: 0000000000000002 [ 40.008307][ T351] #PF: supervisor read access in kernel mode [ 40.014379][ T351] #PF: error_code(0x0000) - not-present page [ 40.020460][ T351] PGD 112a13067 P4D 112a13067 PUD 112a17067 PMD 0 [ 40.027136][ T351] Oops: 0000 [#1] PREEMPT SMP [ 40.031995][ T351] CPU: 0 PID: 351 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller #0 [ 40.040440][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 40.050964][ T351] RIP: 0010:do_unlinkat+0x132/0x2a0 [ 40.055977][ T351] Code: 48 81 c7 a0 00 00 00 e8 cc 70 a9 00 48 8b 75 b8 48 8d 7d c0 89 da e8 ed 89 ff ff 48 3d 00 f0 ff ff 49 89 c7 0f 87 44 01 00 00 <8b> 00 8b 4d c4 48 8b 75 c8 89 c2 81 e2 00 00 70 00 80 3c 0e 00 0f [ 40.075863][ T351] RSP: 0018:ffffc900003d3eb0 EFLAGS: 00010203 [ 40.081845][ T351] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000400000000 [ 40.089905][ T351] RDX: 0000000000000003 RSI: 0000000300000000 RDI: ffff888101bf3780 [ 40.097725][ T351] RBP: ffffc900003d3f18 R08: 0000000000000004 R09: 0000000000000064 [ 40.105633][ T351] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 40.113435][ T351] R13: ffff888107de2000 R14: 0000000000000000 R15: 0000000000000002 [ 40.121511][ T351] FS: 00007f627a12b6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.131261][ T351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.137994][ T351] CR2: 0000000000000002 CR3: 00000001139e0000 CR4: 00000000003506b0 [ 40.146885][ T351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.155396][ T351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.163391][ T351] Call Trace: [ 40.166516][ T351] [ 40.169374][ T351] ? show_regs.part.0+0x1e/0x20 [ 40.174152][ T351] ? __die+0x5d/0x9e [ 40.177876][ T351] ? page_fault_oops+0x12d/0x280 [ 40.182650][ T351] ? do_user_addr_fault+0x44b/0x730 [ 40.187680][ T351] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 40.193781][ T351] ? __mod_timer+0x251/0x3a0 [ 40.198484][ T351] ? add_timer+0x1b/0x20 [ 40.202655][ T351] ? debug_smp_processor_id+0x17/0x20 [ 40.208300][ T351] ? call_rcu+0x194/0x640 [ 40.212453][ T351] ? exc_page_fault+0x67/0x160 [ 40.217144][ T351] ? asm_exc_page_fault+0x27/0x30 [ 40.222002][ T351] ? do_unlinkat+0x132/0x2a0 [ 40.226612][ T351] __x64_sys_unlink+0x3d/0x60 [ 40.231117][ T351] do_syscall_64+0x35/0xb0 [ 40.235392][ T351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.241315][ T351] RIP: 0033:0x7f627a5a8b29 [ 40.245963][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.267806][ T351] RSP: 002b:00007f627a12b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 40.277770][ T351] RAX: ffffffffffffffda RBX: 00007f627a6c7f80 RCX: 00007f627a5a8b29 [ 40.285884][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 40.293942][ T351] RBP: 00007f627a5f447a R08: 0000000000000000 R09: 0000000000000000 [ 40.301974][ T351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.309864][ T351] R13: 000000000000000b R14: 00007f627a6c7f80 R15: 00007fff467db7e8 [ 40.317846][ T351] [ 40.320707][ T351] Modules linked in: [ 40.324454][ T351] CR2: 0000000000000002 [ 40.328434][ T351] ---[ end trace 34401e4b169783c4 ]--- [ 40.333823][ T351] RIP: 0010:do_unlinkat+0x132/0x2a0 [ 40.338856][ T351] Code: 48 81 c7 a0 00 00 00 e8 cc 70 a9 00 48 8b 75 b8 48 8d 7d c0 89 da e8 ed 89 ff ff 48 3d 00 f0 ff ff 49 89 c7 0f 87 44 01 00 00 <8b> 00 8b 4d c4 48 8b 75 c8 89 c2 81 e2 00 00 70 00 80 3c 0e 00 0f [ 40.359042][ T351] RSP: 0018:ffffc900003d3eb0 EFLAGS: 00010203 [ 40.365349][ T351] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000000400000000 [ 40.373245][ T351] RDX: 0000000000000003 RSI: 0000000300000000 RDI: ffff888101bf3780 [ 40.381328][ T351] RBP: ffffc900003d3f18 R08: 0000000000000004 R09: 0000000000000064 [ 40.389137][ T351] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 40.396966][ T351] R13: ffff888107de2000 R14: 0000000000000000 R15: 0000000000000002 [ 40.404769][ T351] FS: 00007f627a12b6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.413612][ T351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.420034][ T351] CR2: 0000000000000002 CR3: 00000001139e0000 CR4: 00000000003506b0 [ 40.428324][ T351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.436381][ T351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.444616][ T351] Kernel panic - not syncing: Fatal exception [ 40.451256][ T351] Kernel Offset: disabled [ 40.455639][ T351] Rebooting in 86400 seconds..