[ 35.943783][ T313] device veth1_macvtap entered promiscuous mode [ 35.950346][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.958599][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.990404][ T313] syz-executor.0 (313) used greatest stack depth: 10840 bytes left [ 36.519233][ T52] device bridge_slave_1 left promiscuous mode [ 36.525148][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.532240][ T52] device bridge_slave_0 left promiscuous mode [ 36.538132][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.545571][ T52] device veth1_macvtap left promiscuous mode [ 36.551584][ T52] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. 2024/11/16 09:57:24 ignoring optional flag "sandboxArg"="0" 2024/11/16 09:57:24 ignoring optional flag "type"="gce" 2024/11/16 09:57:24 parsed 1 programs [ 43.293374][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 43.293378][ T29] audit: type=1400 audit(1731751044.804:96): avc: denied { mounton } for pid=343 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.323808][ T29] audit: type=1400 audit(1731751044.804:97): avc: denied { read write } for pid=343 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.349723][ T29] audit: type=1400 audit(1731751044.804:98): avc: denied { open } for pid=343 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/11/16 09:57:24 executed programs: 0 [ 43.375532][ T29] audit: type=1400 audit(1731751044.874:99): avc: denied { unlink } for pid=343 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.401145][ T29] audit: type=1400 audit(1731751044.874:100): avc: denied { relabelto } for pid=344 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.401499][ T343] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.445403][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.452334][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.459430][ T349] device bridge_slave_0 entered promiscuous mode [ 43.465677][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.472445][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.479365][ T349] device bridge_slave_1 entered promiscuous mode [ 43.491805][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.498631][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.505716][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.513187][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.522109][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.529140][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.535997][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.543037][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.550546][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.558348][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.565186][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.572534][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.580524][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.587479][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.595541][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.603509][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.612097][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.620598][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.628087][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.635165][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.642502][ T349] device veth0_vlan entered promiscuous mode [ 43.648929][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.656951][ T349] device veth1_macvtap entered promiscuous mode [ 43.663605][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.671931][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.684808][ T29] audit: type=1400 audit(1731751045.204:101): avc: denied { read write } for pid=353 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 43.708120][ T29] audit: type=1400 audit(1731751045.204:102): avc: denied { open } for pid=353 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 43.731393][ T29] audit: type=1400 audit(1731751045.204:103): avc: denied { mounton } for pid=353 comm="syz-executor.0" path="/root/syzkaller-testdir1501364617/syzkaller.JRq2mo/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 43.837110][ T358] BUG: kernel NULL pointer dereference, address: 000000000000003c [ 43.844729][ T358] #PF: supervisor read access in kernel mode [ 43.850534][ T358] #PF: error_code(0x0000) - not-present page [ 43.856470][ T358] PGD 10e094067 P4D 10e094067 PUD 10e099067 PMD 0 [ 43.862807][ T358] Oops: 0000 [#1] PREEMPT SMP [ 43.867310][ T358] CPU: 1 PID: 358 Comm: syz-executor.0 Not tainted 5.15.167-syzkaller #0 [ 43.875556][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.885453][ T358] RIP: 0010:vfs_rename+0x2f/0xad0 [ 43.890317][ T358] Code: 57 41 56 41 55 41 54 45 31 e4 53 48 83 c4 80 4c 8b 77 10 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 4c 8b 6f 28 49 8b 76 30 <49> 8b 45 30 48 89 b5 78 ff ff ff 48 39 c6 48 89 45 90 0f 84 07 01 [ 43.909752][ T358] RSP: 0018:ffffc90000403d58 EFLAGS: 00010246 [ 43.915782][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 43.923609][ T358] RDX: ffff8881019cd031 RSI: ffff888108f6b400 RDI: ffffc90000403e90 [ 43.931403][ T358] RBP: ffffc90000403e00 R08: 0000000000000006 R09: 000000000000000c [ 43.939220][ T358] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 43.947030][ T358] R13: 000000000000000c R14: ffff888109d498f0 R15: 00000000ffffffd9 [ 43.954840][ T358] FS: 00007feea3c8f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 43.963624][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.970030][ T358] CR2: 000000000000003c CR3: 000000010b876000 CR4: 00000000003506a0 [ 43.977842][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.985843][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.993636][ T358] Call Trace: [ 43.996764][ T358] [ 43.999540][ T358] ? show_regs.part.0+0x1e/0x20 [ 44.004405][ T358] ? __die+0x5d/0x9e [ 44.008159][ T358] ? page_fault_oops+0x12d/0x280 [ 44.012913][ T358] ? fuse_lookup+0x264/0x720 [ 44.017333][ T358] ? do_user_addr_fault+0x43d/0x6e0 [ 44.022368][ T358] ? debug_smp_processor_id+0x17/0x20 [ 44.027575][ T358] ? get_nohz_timer_target+0x25/0x220 [ 44.032780][ T358] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 44.038422][ T358] ? __mod_timer+0x251/0x3a0 [ 44.042848][ T358] ? exc_page_fault+0x67/0x160 [ 44.047538][ T358] ? asm_exc_page_fault+0x27/0x30 [ 44.052397][ T358] ? vfs_rename+0x2f/0xad0 [ 44.056654][ T358] ? dentry_free+0x3d/0x60 [ 44.060909][ T358] ? __dentry_kill+0x148/0x1c0 [ 44.065532][ T358] ? dput+0x62/0x3d0 [ 44.069236][ T358] ? lookup_one_qstr_excl+0x76/0xa0 [ 44.074270][ T358] do_renameat2+0x3ad/0x590 [ 44.078611][ T358] __x64_sys_rename+0x40/0x50 [ 44.083124][ T358] x64_sys_call+0x744/0x990 [ 44.087463][ T358] do_syscall_64+0x33/0xb0 [ 44.091722][ T358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.097536][ T358] RIP: 0033:0x7feea414fda9 [ 44.101873][ T358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.121415][ T358] RSP: 002b:00007feea3c8f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 44.129751][ T358] RAX: ffffffffffffffda RBX: 00007feea427e120 RCX: 00007feea414fda9 [ 44.137670][ T358] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000020000100 [ 44.145735][ T358] RBP: 00007feea419c47a R08: 0000000000000000 R09: 0000000000000000 [ 44.153633][ T358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.161442][ T358] R13: 000000000000006e R14: 00007feea427e120 R15: 00007ffcf54e7f98 [ 44.169254][ T358] [ 44.172200][ T358] Modules linked in: [ 44.175939][ T358] CR2: 000000000000003c [ 44.179933][ T358] ---[ end trace 6ec462fd47cb3f9b ]--- [ 44.185395][ T358] RIP: 0010:vfs_rename+0x2f/0xad0 [ 44.190254][ T358] Code: 57 41 56 41 55 41 54 45 31 e4 53 48 83 c4 80 4c 8b 77 10 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 4c 8b 6f 28 49 8b 76 30 <49> 8b 45 30 48 89 b5 78 ff ff ff 48 39 c6 48 89 45 90 0f 84 07 01 [ 44.209896][ T358] RSP: 0018:ffffc90000403d58 EFLAGS: 00010246 [ 44.215795][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 44.223607][ T358] RDX: ffff8881019cd031 RSI: ffff888108f6b400 RDI: ffffc90000403e90 [ 44.231504][ T358] RBP: ffffc90000403e00 R08: 0000000000000006 R09: 000000000000000c [ 44.239319][ T358] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 44.247129][ T358] R13: 000000000000000c R14: ffff888109d498f0 R15: 00000000ffffffd9 [ 44.254942][ T358] FS: 00007feea3c8f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 44.263716][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.270134][ T358] CR2: 000000000000003c CR3: 000000010b876000 CR4: 00000000003506a0 [ 44.278038][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.285841][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.293770][ T358] Kernel panic - not syncing: Fatal exception [ 44.299898][ T358] Kernel Offset: disabled [ 44.304009][ T358] Rebooting in 86400 seconds..