Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. 2023/09/26 01:46:11 ignoring optional flag "sandboxArg"="0" 2023/09/26 01:46:11 parsed 1 programs [ 39.784223][ T23] kauditd_printk_skb: 75 callbacks suppressed [ 39.784226][ T23] audit: type=1400 audit(1695692771.620:151): avc: denied { mounton } for pid=334 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.819632][ T23] audit: type=1400 audit(1695692771.620:152): avc: denied { mount } for pid=334 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.846076][ T23] audit: type=1400 audit(1695692771.630:153): avc: denied { setattr } for pid=334 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 39.872383][ T23] audit: type=1400 audit(1695692771.630:154): avc: denied { read write } for pid=334 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.872481][ T334] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2023/09/26 01:46:11 executed programs: 0 [ 39.900430][ T23] audit: type=1400 audit(1695692771.630:155): avc: denied { open } for pid=334 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.938142][ T23] audit: type=1400 audit(1695692771.660:156): avc: denied { unlink } for pid=334 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.951549][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.964666][ T23] audit: type=1400 audit(1695692771.660:157): avc: denied { relabelto } for pid=335 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.973751][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.001466][ T23] audit: type=1400 audit(1695692771.780:158): avc: denied { mounton } for pid=340 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 40.008816][ T340] device bridge_slave_0 entered promiscuous mode [ 40.039820][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.047030][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.054238][ T340] device bridge_slave_1 entered promiscuous mode [ 40.065707][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.073940][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.083287][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.090820][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.100785][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.108444][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.116807][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.124571][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.135559][ T340] device veth0_vlan entered promiscuous mode [ 40.143655][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.152783][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.162033][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.172150][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.182708][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.193138][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.201485][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.209830][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.218231][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.225586][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.233105][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.241156][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.249929][ T340] device veth1_macvtap entered promiscuous mode [ 40.256895][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.266430][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.276891][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.290752][ T23] audit: type=1400 audit(1695692772.130:159): avc: denied { mounton } for pid=345 comm="syz-executor.0" path="/root/syzkaller-testdir1527223751/syzkaller.5Z06B4/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.345611][ T348] BUG: kernel NULL pointer dereference, address: 0000000000000039 [ 40.353724][ T348] #PF: supervisor read access in kernel mode [ 40.359714][ T348] #PF: error_code(0x0000) - not-present page [ 40.366064][ T348] PGD 109495067 P4D 109495067 PUD 1095ed067 PMD 0 [ 40.374062][ T348] Oops: 0000 [#1] PREEMPT SMP [ 40.379939][ T348] CPU: 0 PID: 348 Comm: syz-executor.0 Not tainted 5.10.194-syzkaller #0 [ 40.392318][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 40.403328][ T348] RIP: 0010:fuse_atomic_open+0x4e/0x130 [ 40.409744][ T348] Code: 00 48 85 db 74 03 48 8b 1b 49 8b 85 50 03 00 00 a8 08 0f 85 d7 00 00 00 45 31 ff 41 f7 04 24 00 00 00 10 75 6d f6 c1 40 74 08 <49> 83 7c 24 30 00 74 1a 4c 89 fe 4c 89 f7 e8 cf 0d eb ff 48 83 c4 [ 40.431454][ T348] RSP: 0018:ffffc9000060fc90 EFLAGS: 00010202 [ 40.439024][ T348] RAX: 0000000000000009 RBX: ffff888111161c00 RCX: 0000000000008241 [ 40.447257][ T348] RDX: ffff888109455c80 RSI: 0000000000000001 RDI: ffff888110857f58 [ 40.456260][ T348] RBP: ffffc9000060fcc0 R08: 0000000000008000 R09: ffff88810b4cb078 [ 40.464482][ T348] R10: ffff8881095b77a0 R11: 0000000000000000 R12: 0000000000000009 [ 40.472829][ T348] R13: ffff888110857c00 R14: ffff88810fdaa280 R15: 0000000000000009 [ 40.481332][ T348] FS: 00007ff676da06c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.490895][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.497752][ T348] CR2: 0000000000000039 CR3: 000000010d3fb000 CR4: 00000000003506b0 [ 40.506056][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.514168][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.522832][ T348] Call Trace: [ 40.526064][ T348] ? show_regs.part.0+0x1e/0x20 [ 40.530826][ T348] ? __die+0x5d/0x9e [ 40.534788][ T348] ? no_context+0x1f2/0x380 [ 40.539982][ T348] ? __bad_area_nosemaphore+0x4b/0x1a0 [ 40.545278][ T348] ? bad_area_nosemaphore+0x11/0x20 [ 40.550546][ T348] ? exc_page_fault+0x2c9/0x5a0 [ 40.555346][ T348] ? avc_has_perm+0x84/0x1a0 [ 40.559877][ T348] ? asm_exc_page_fault+0x1e/0x30 [ 40.565359][ T348] ? fuse_atomic_open+0x4e/0x130 [ 40.570683][ T348] path_openat+0x6d2/0x10d0 [ 40.575798][ T348] do_filp_open+0x9d/0x140 [ 40.580189][ T348] ? _raw_spin_unlock+0x1f/0x40 [ 40.585167][ T348] do_sys_openat2+0x9c/0x210 [ 40.589558][ T348] __x64_sys_creat+0x46/0x60 [ 40.593983][ T348] do_syscall_64+0x32/0x80 [ 40.598316][ T348] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 40.604297][ T348] RIP: 0033:0x7ff67723eb29 [ 40.608638][ T348] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.628920][ T348] RSP: 002b:00007ff676da00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 40.637504][ T348] RAX: ffffffffffffffda RBX: 00007ff67735e050 RCX: 00007ff67723eb29 [ 40.646072][ T348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 40.654545][ T348] RBP: 00007ff67728a47a R08: 0000000000000000 R09: 0000000000000000 [ 40.662908][ T348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.671753][ T348] R13: 000000000000006e R14: 00007ff67735e050 R15: 00007ffdff4c7bc8 [ 40.680473][ T348] Modules linked in: [ 40.684310][ T348] CR2: 0000000000000039 [ 40.688454][ T348] ---[ end trace 580dee1f8255f4f4 ]--- [ 40.693973][ T348] RIP: 0010:fuse_atomic_open+0x4e/0x130 [ 40.699431][ T348] Code: 00 48 85 db 74 03 48 8b 1b 49 8b 85 50 03 00 00 a8 08 0f 85 d7 00 00 00 45 31 ff 41 f7 04 24 00 00 00 10 75 6d f6 c1 40 74 08 <49> 83 7c 24 30 00 74 1a 4c 89 fe 4c 89 f7 e8 cf 0d eb ff 48 83 c4 [ 40.722010][ T348] RSP: 0018:ffffc9000060fc90 EFLAGS: 00010202 [ 40.728160][ T348] RAX: 0000000000000009 RBX: ffff888111161c00 RCX: 0000000000008241 [ 40.737244][ T348] RDX: ffff888109455c80 RSI: 0000000000000001 RDI: ffff888110857f58 [ 40.745887][ T348] RBP: ffffc9000060fcc0 R08: 0000000000008000 R09: ffff88810b4cb078 [ 40.754219][ T348] R10: ffff8881095b77a0 R11: 0000000000000000 R12: 0000000000000009 [ 40.763618][ T348] R13: ffff888110857c00 R14: ffff88810fdaa280 R15: 0000000000000009 [ 40.774822][ T348] FS: 00007ff676da06c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.786040][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.794636][ T348] CR2: 0000000000000039 CR3: 000000010d3fb000 CR4: 00000000003506b0 [ 40.802985][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.811256][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.821020][ T348] Kernel panic - not syncing: Fatal exception [ 40.828099][ T348] Kernel Offset: disabled [ 40.833161][ T348] Rebooting in 86400 seconds..