Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. 2023/07/31 11:48:39 ignoring optional flag "sandboxArg"="0" 2023/07/31 11:48:39 parsed 1 programs 2023/07/31 11:48:39 executed programs: 0 [ 39.093230][ T27] audit: type=1400 audit(1690804119.475:152): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.117842][ T27] audit: type=1400 audit(1690804119.475:153): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.141472][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.148349][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.155366][ T343] device bridge_slave_0 entered promiscuous mode [ 39.161603][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.168341][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.175338][ T343] device bridge_slave_1 entered promiscuous mode [ 39.185471][ T27] audit: type=1400 audit(1690804119.575:154): avc: denied { write } for pid=343 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.186772][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.205857][ T27] audit: type=1400 audit(1690804119.575:155): avc: denied { read } for pid=343 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.212686][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.240053][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.246893][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.255637][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.262496][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.269570][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.276796][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.284219][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.292039][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.298859][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.307504][ T343] device veth0_vlan entered promiscuous mode [ 39.313810][ T343] device veth1_macvtap entered promiscuous mode [ 39.320600][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.328522][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.335990][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.343021][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.350123][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.357887][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.365701][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.372504][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.379632][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.387179][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.395993][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.403925][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.413374][ T27] audit: type=1400 audit(1690804119.795:156): avc: denied { mounton } for pid=343 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.438982][ T27] audit: type=1400 audit(1690804119.825:157): avc: denied { mounton } for pid=349 comm="syz-executor.0" path="/root/syzkaller-testdir787840310/syzkaller.rJlVuZ/0/file0" dev="sda1" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.490266][ T352] BUG: kernel NULL pointer dereference, address: 0000000000000006 [ 39.497882][ T352] #PF: supervisor read access in kernel mode [ 39.503681][ T352] #PF: error_code(0x0000) - not-present page [ 39.509594][ T352] PGD 112cd2067 P4D 112cd2067 PUD 112db6067 PMD 0 [ 39.515919][ T352] Oops: 0000 [#1] PREEMPT SMP [ 39.520432][ T352] CPU: 1 PID: 352 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0 [ 39.528505][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 39.538422][ T352] RIP: 0010:path_openat+0x552/0xb60 [ 39.543518][ T352] Code: 8b 40 18 75 37 48 83 f8 ff 8b 4d b4 0f 84 6f 01 00 00 48 85 c0 74 13 4c 89 f7 e8 59 d2 00 00 8b 4d b4 48 8b 45 a8 4c 8b 70 18 <41> f6 46 02 70 75 17 41 bd fe ff ff ff e9 95 fe ff ff 4c 39 f0 8b [ 39.563219][ T352] RSP: 0018:ffffc9000075fcc0 EFLAGS: 00010246 [ 39.569246][ T352] RAX: ffff88810bf093c0 RBX: 0000000000008000 RCX: 0000000000000000 [ 39.577145][ T352] RDX: 0000000300000000 RSI: 0000000000000000 RDI: ffff888108b1b900 [ 39.584954][ T352] RBP: ffffc9000075fd58 R08: 00000000ffffff9c R09: ffffc9000075fc38 [ 39.592791][ T352] R10: ffff888112cefc00 R11: ffff888100041400 R12: ffffc9000075fe98 [ 39.600575][ T352] R13: 0000000000000000 R14: 0000000000000004 R15: ffffc9000075fd68 [ 39.608388][ T352] FS: 00007fa56f87f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 39.617155][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.623578][ T352] CR2: 0000000000000006 CR3: 0000000112d06000 CR4: 00000000003506a0 [ 39.631423][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.639202][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.647022][ T352] Call Trace: [ 39.650142][ T352] [ 39.652915][ T352] do_filp_open+0xad/0x150 [ 39.657165][ T352] do_sys_openat2+0x8e/0x240 [ 39.661608][ T352] ? debug_smp_processor_id+0x17/0x20 [ 39.666799][ T352] __x64_sys_openat+0x79/0xa0 [ 39.671317][ T352] do_syscall_64+0x3d/0xb0 [ 39.675564][ T352] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.681726][ T352] RIP: 0033:0x7fa56ea7c959 [ 39.685980][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 39.705769][ T352] RSP: 002b:00007fa56f87f0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.714012][ T352] RAX: ffffffffffffffda RBX: 00007fa56eb9c050 RCX: 00007fa56ea7c959 [ 39.721828][ T352] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 39.729643][ T352] RBP: 00007fa56ead8c88 R08: 0000000000000000 R09: 0000000000000000 [ 39.737450][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.745259][ T352] R13: 000000000000006e R14: 00007fa56eb9c050 R15: 00007ffca9044798 [ 39.753073][ T352] [ 39.755934][ T352] Modules linked in: [ 39.759665][ T352] CR2: 0000000000000006 [ 39.763660][ T352] ---[ end trace 0000000000000000 ]--- [ 39.768949][ T352] RIP: 0010:path_openat+0x552/0xb60 [ 39.773985][ T352] Code: 8b 40 18 75 37 48 83 f8 ff 8b 4d b4 0f 84 6f 01 00 00 48 85 c0 74 13 4c 89 f7 e8 59 d2 00 00 8b 4d b4 48 8b 45 a8 4c 8b 70 18 <41> f6 46 02 70 75 17 41 bd fe ff ff ff e9 95 fe ff ff 4c 39 f0 8b [ 39.793428][ T352] RSP: 0018:ffffc9000075fcc0 EFLAGS: 00010246 [ 39.799350][ T352] RAX: ffff88810bf093c0 RBX: 0000000000008000 RCX: 0000000000000000 [ 39.807231][ T352] RDX: 0000000300000000 RSI: 0000000000000000 RDI: ffff888108b1b900 [ 39.815129][ T352] RBP: ffffc9000075fd58 R08: 00000000ffffff9c R09: ffffc9000075fc38 [ 39.822940][ T352] R10: ffff888112cefc00 R11: ffff888100041400 R12: ffffc9000075fe98 [ 39.830747][ T352] R13: 0000000000000000 R14: 0000000000000004 R15: ffffc9000075fd68 [ 39.838558][ T352] FS: 00007fa56f87f6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 39.847454][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.853877][ T352] CR2: 0000000000000006 CR3: 0000000112d06000 CR4: 00000000003506a0 [ 39.861689][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.869499][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.877315][ T352] Kernel panic - not syncing: Fatal exception [ 39.883397][ T352] Kernel Offset: disabled [ 39.887504][ T352] Rebooting in 86400 seconds..