Warning: Permanently added '10.128.10.28' (ED25519) to the list of known hosts. 2024/06/11 04:15:06 ignoring optional flag "sandboxArg"="0" 2024/06/11 04:15:06 parsed 1 programs [ 37.374190][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 37.374195][ T29] audit: type=1400 audit(1718079306.711:96): avc: denied { mounton } for pid=337 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 37.405279][ T29] audit: type=1400 audit(1718079306.711:97): avc: denied { read write } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.431769][ T29] audit: type=1400 audit(1718079306.711:98): avc: denied { open } for pid=337 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/06/11 04:15:06 executed programs: 0 [ 37.521883][ T29] audit: type=1400 audit(1718079306.861:99): avc: denied { unlink } for pid=337 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.546072][ T337] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.548621][ T29] audit: type=1400 audit(1718079306.861:100): avc: denied { relabelto } for pid=338 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.585802][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.592961][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.600102][ T344] device bridge_slave_0 entered promiscuous mode [ 37.606593][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.614593][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.622557][ T344] device bridge_slave_1 entered promiscuous mode [ 37.635709][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.643047][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.650071][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.657009][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.666342][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.673619][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.680831][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.689075][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.697290][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.705804][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.713232][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.720696][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.728645][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.735513][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.743814][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.753170][ T344] device veth0_vlan entered promiscuous mode [ 37.759654][ T344] device veth1_macvtap entered promiscuous mode [ 37.766124][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.774654][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.782663][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.790918][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.798651][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.807459][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.816818][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.825633][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.838510][ T29] audit: type=1400 audit(1718079307.171:101): avc: denied { mounton } for pid=348 comm="syz-executor.0" path="/root/syzkaller-testdir4085906691/syzkaller.Kmdh6M/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.839828][ T350] BUG: kernel NULL pointer dereference, address: 0000000000000030 [ 37.867797][ T29] audit: type=1400 audit(1718079307.171:102): avc: denied { unlink } for pid=348 comm="syz-executor.0" name="#1" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 37.873416][ T350] #PF: supervisor read access in kernel mode [ 37.873422][ T350] #PF: error_code(0x0000) - not-present page [ 37.873426][ T350] PGD 110b91067 P4D 110b91067 PUD 110b95067 PMD 0 [ 37.873445][ T350] Oops: 0000 [#1] PREEMPT SMP [ 37.873449][ T350] CPU: 1 PID: 350 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller #0 [ 37.873454][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 37.873457][ T350] RIP: 0010:security_inode_getattr+0x4/0x40 [ 37.873467][ T350] Code: 85 c0 75 0a 48 8b 1b 48 85 db 75 eb 31 c0 5b 41 5c 41 5d 5d c3 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 47 08 <48> 8b 40 30 f6 40 0d 02 75 2f 55 48 89 e5 41 54 49 89 fc 53 48 8b [ 37.873471][ T350] RSP: 0018:ffffc900003fb850 EFLAGS: 00010246 [ 37.873474][ T350] RAX: 0000000000000000 RBX: ffff88810a907ea0 RCX: 0000000000000000 [ 37.873476][ T350] RDX: 00000000000007ff RSI: ffffc900003fb998 RDI: ffffc900003fb988 [ 37.873478][ T350] RBP: ffffc900003fb878 R08: 0000000000000064 R09: ffff88810a965e80 [ 37.873480][ T350] R10: 000000000000007f R11: 0000000000000000 R12: ffffc900003fb998 [ 37.873482][ T350] R13: 00000000000007ff R14: 0000000000000000 R15: ffffc900003fb988 [ 37.895989][ T29] audit: type=1400 audit(1718079307.171:103): avc: denied { mount } for pid=348 comm="syz-executor.0" name="/" dev="overlay" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.901868][ T350] FS: 00007f9405fb06c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 37.901877][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.901882][ T350] CR2: 0000000000000030 CR3: 0000000110b76000 CR4: 00000000003506a0 [ 37.901884][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.901886][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.901888][ T350] Call Trace: [ 37.901891][ T350] [ 37.901894][ T350] ? show_regs.part.0+0x1e/0x20 [ 37.901904][ T350] ? __die+0x5d/0x9e [ 37.901908][ T350] ? page_fault_oops+0x12d/0x280 [ 37.901917][ T350] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 37.901922][ T350] ? __wake_up_common_lock+0x85/0xb0 [ 37.907797][ T29] audit: type=1400 audit(1718079307.171:104): avc: denied { write } for pid=348 comm="syz-executor.0" name="/" dev="incremental-fs" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.914106][ T350] ? do_user_addr_fault+0x44b/0x730 [ 37.914120][ T350] ? __find_get_block+0xde/0x2d0 [ 37.914127][ T350] ? __crc32c_le_base+0x10/0x20 [ 37.914134][ T350] ? chksum_update+0x12/0x20 [ 37.919134][ T29] audit: type=1400 audit(1718079307.171:105): avc: denied { add_name } for pid=348 comm="syz-executor.0" name="file1" dev="incremental-fs" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.927725][ T350] ? crypto_shash_update+0x13/0x20 [ 37.927742][ T350] ? ext4_inode_csum+0x199/0x210 [ 37.927749][ T350] ? _raw_spin_unlock_irqrestore+0x28/0x40 [ 37.927755][ T350] ? __wake_up_common_lock+0x85/0xb0 [ 37.927762][ T350] ? exc_page_fault+0x67/0x160 [ 38.196539][ T350] ? asm_exc_page_fault+0x27/0x30 [ 38.201599][ T350] ? security_inode_getattr+0x4/0x40 [ 38.206909][ T350] ? vfs_getattr+0x1d/0x40 [ 38.211183][ T350] ovl_copy_up_one+0xaa/0xed0 [ 38.216001][ T350] ? vsnprintf+0x399/0x4d0 [ 38.220588][ T350] ovl_copy_up_flags+0xb6/0x100 [ 38.225601][ T350] ovl_maybe_copy_up+0x8d/0xb0 [ 38.230086][ T350] ovl_open+0x27/0x80 [ 38.234182][ T350] ? ovl_file_accessed.part.0+0x90/0x90 [ 38.239587][ T350] do_dentry_open+0x167/0x410 [ 38.244178][ T350] dentry_open+0x48/0x70 [ 38.248985][ T350] file_open+0xca/0x230 [ 38.253033][ T350] ? read_single_page+0x3f0/0x3f0 [ 38.258192][ T350] do_dentry_open+0x167/0x410 [ 38.262858][ T350] vfs_open+0x28/0x30 [ 38.266681][ T350] path_openat+0xcfa/0x1230 [ 38.271019][ T350] do_filp_open+0xb1/0x150 [ 38.275369][ T350] ? _raw_spin_unlock+0x1f/0x40 [ 38.280130][ T350] do_sys_openat2+0x9c/0x250 [ 38.284906][ T350] __x64_sys_openat+0x51/0x90 [ 38.289629][ T350] do_syscall_64+0x35/0xb0 [ 38.293970][ T350] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.300205][ T350] RIP: 0033:0x7f940642eda9 [ 38.304590][ T350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 38.324585][ T350] RSP: 002b:00007f9405fb00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 38.332830][ T350] RAX: ffffffffffffffda RBX: 00007f940655cf80 RCX: 00007f940642eda9 [ 38.340641][ T350] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 38.348709][ T350] RBP: 00007f940647b47a R08: 0000000000000000 R09: 0000000000000000 [ 38.356526][ T350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.364434][ T350] R13: 000000000000000b R14: 00007f940655cf80 R15: 00007ffc22bce188 [ 38.372246][ T350] [ 38.375184][ T350] Modules linked in: [ 38.379007][ T350] CR2: 0000000000000030 [ 38.383000][ T350] ---[ end trace c518b83826be11d6 ]--- [ 38.388623][ T350] RIP: 0010:security_inode_getattr+0x4/0x40 [ 38.394407][ T350] Code: 85 c0 75 0a 48 8b 1b 48 85 db 75 eb 31 c0 5b 41 5c 41 5d 5d c3 31 c0 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 47 08 <48> 8b 40 30 f6 40 0d 02 75 2f 55 48 89 e5 41 54 49 89 fc 53 48 8b [ 38.413933][ T350] RSP: 0018:ffffc900003fb850 EFLAGS: 00010246 [ 38.419922][ T350] RAX: 0000000000000000 RBX: ffff88810a907ea0 RCX: 0000000000000000 [ 38.427796][ T350] RDX: 00000000000007ff RSI: ffffc900003fb998 RDI: ffffc900003fb988 [ 38.435827][ T350] RBP: ffffc900003fb878 R08: 0000000000000064 R09: ffff88810a965e80 [ 38.443806][ T350] R10: 000000000000007f R11: 0000000000000000 R12: ffffc900003fb998 [ 38.451633][ T350] R13: 00000000000007ff R14: 0000000000000000 R15: ffffc900003fb988 [ 38.459614][ T350] FS: 00007f9405fb06c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 38.468385][ T350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.474808][ T350] CR2: 0000000000000030 CR3: 0000000110b76000 CR4: 00000000003506a0 [ 38.483481][ T350] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.491380][ T350] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.499183][ T350] Kernel panic - not syncing: Fatal exception [ 38.505638][ T350] Kernel Offset: disabled [ 38.509923][ T350] Rebooting in 86400 seconds..