Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts. 2024/09/17 22:17:02 ignoring optional flag "sandboxArg"="0" 2024/09/17 22:17:02 parsed 1 programs [ 50.162985][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 50.162989][ T27] audit: type=1400 audit(1726611422.580:95): avc: denied { unlink } for pid=364 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/09/17 22:17:02 executed programs: 0 [ 50.213362][ T364] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.233603][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.241522][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.248886][ T370] device bridge_slave_0 entered promiscuous mode [ 50.255300][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.262287][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.269442][ T370] device bridge_slave_1 entered promiscuous mode [ 50.284258][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.291469][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.299004][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.305997][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.315768][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.322688][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.330128][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.337429][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.347541][ T370] device veth0_vlan entered promiscuous mode [ 50.353786][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.362095][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.370045][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.377293][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.385095][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.393092][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.399887][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.407076][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.414962][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.421755][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.428849][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.436535][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.445019][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.453518][ T370] device veth1_macvtap entered promiscuous mode [ 50.463142][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.463167][ T27] audit: type=1400 audit(1726611422.880:96): avc: denied { mounton } for pid=370 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.471863][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.506153][ T27] audit: type=1400 audit(1726611422.920:97): avc: denied { read write } for pid=374 comm="syz-executor.0" name="fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.530533][ T27] audit: type=1400 audit(1726611422.920:98): avc: denied { open } for pid=374 comm="syz-executor.0" path="/dev/fuse" dev="devtmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 50.554042][ T27] audit: type=1400 audit(1726611422.920:99): avc: denied { mounton } for pid=374 comm="syz-executor.0" path="/root/syzkaller-testdir1301141240/syzkaller.YMtGG4/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.581948][ T378] BUG: kernel NULL pointer dereference, address: 0000000000000038 [ 50.589797][ T378] #PF: supervisor read access in kernel mode [ 50.595712][ T378] #PF: error_code(0x0000) - not-present page [ 50.601905][ T378] PGD 10edf7067 P4D 10edf7067 PUD 10f632067 PMD 0 [ 50.608336][ T378] Oops: 0000 [#1] PREEMPT SMP [ 50.612951][ T378] CPU: 0 PID: 378 Comm: syz-executor.0 Not tainted 6.1.93-syzkaller #0 [ 50.621360][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 50.631272][ T378] RIP: 0010:do_rmdir+0x100/0x1c0 [ 50.636160][ T378] Code: 8b 7e 30 b8 a0 00 00 00 48 01 c7 e8 ca a5 b9 00 48 8d 7d b0 4c 89 f6 44 89 e2 e8 fb c6 ff ff 49 89 c7 48 3d 00 f0 ff ff 77 2d <49> 83 7f 30 00 74 15 49 8b 7d 18 49 8b 76 30 4c 89 fa e8 e9 fa ff [ 50.655771][ T378] RSP: 0018:ffffc900007cbea0 EFLAGS: 00010203 [ 50.661682][ T378] RAX: 0000000000000008 RBX: ffffc900007cbf01 RCX: 0000000000000003 [ 50.669481][ T378] RDX: 00000000ffffff9c RSI: 0000000300000000 RDI: ffff888108ae1300 [ 50.677291][ T378] RBP: ffffc900007cbf00 R08: ffff88810f8c6680 R09: ffffffff815499d0 [ 50.685282][ T378] R10: ffff88810f8c6680 R11: ffff888100041400 R12: 0000000000000000 [ 50.693089][ T378] R13: ffff888108cc6320 R14: ffff88810cc111a0 R15: 0000000000000008 [ 50.700901][ T378] FS: 00007fc13cd676c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 50.709908][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.716946][ T378] CR2: 0000000000000038 CR3: 000000010d299000 CR4: 00000000003506b0 [ 50.726021][ T378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.734143][ T378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.742103][ T378] Call Trace: [ 50.745498][ T378] [ 50.748249][ T378] ? __die_body+0x62/0xb0 [ 50.753130][ T378] ? __die+0x7e/0x90 [ 50.757410][ T378] ? page_fault_oops+0x369/0x3d0 [ 50.762607][ T378] ? exc_page_fault+0x4ce/0x630 [ 50.768704][ T378] ? asm_exc_page_fault+0x27/0x30 [ 50.774134][ T378] ? fuse_lookup_name+0x380/0x420 [ 50.779256][ T378] ? do_rmdir+0x100/0x1c0 [ 50.783659][ T378] __x64_sys_rmdir+0x1e/0x30 [ 50.788344][ T378] x64_sys_call+0x274/0x9a0 [ 50.792955][ T378] do_syscall_64+0x3b/0xb0 [ 50.797199][ T378] ? clear_bhb_loop+0x55/0xb0 [ 50.802007][ T378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.807824][ T378] RIP: 0033:0x7fc13c07dde9 [ 50.812068][ T378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.831897][ T378] RSP: 002b:00007fc13cd670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 50.840162][ T378] RAX: ffffffffffffffda RBX: 00007fc13c1ac050 RCX: 00007fc13c07dde9 [ 50.847962][ T378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000200 [ 50.855858][ T378] RBP: 00007fc13c0ca47a R08: 0000000000000000 R09: 0000000000000000 [ 50.864269][ T378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.872247][ T378] R13: 000000000000006e R14: 00007fc13c1ac050 R15: 00007ffc818cf138 [ 50.880230][ T378] [ 50.883113][ T378] Modules linked in: [ 50.886837][ T378] CR2: 0000000000000038 [ 50.890815][ T378] ---[ end trace 0000000000000000 ]--- [ 50.896216][ T378] RIP: 0010:do_rmdir+0x100/0x1c0 [ 50.901091][ T378] Code: 8b 7e 30 b8 a0 00 00 00 48 01 c7 e8 ca a5 b9 00 48 8d 7d b0 4c 89 f6 44 89 e2 e8 fb c6 ff ff 49 89 c7 48 3d 00 f0 ff ff 77 2d <49> 83 7f 30 00 74 15 49 8b 7d 18 49 8b 76 30 4c 89 fa e8 e9 fa ff [ 50.920718][ T378] RSP: 0018:ffffc900007cbea0 EFLAGS: 00010203 [ 50.926618][ T378] RAX: 0000000000000008 RBX: ffffc900007cbf01 RCX: 0000000000000003 [ 50.934431][ T378] RDX: 00000000ffffff9c RSI: 0000000300000000 RDI: ffff888108ae1300 [ 50.942241][ T378] RBP: ffffc900007cbf00 R08: ffff88810f8c6680 R09: ffffffff815499d0 [ 50.950161][ T378] R10: ffff88810f8c6680 R11: ffff888100041400 R12: 0000000000000000 [ 50.958126][ T378] R13: ffff888108cc6320 R14: ffff88810cc111a0 R15: 0000000000000008 [ 50.965958][ T378] FS: 00007fc13cd676c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 50.975049][ T378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.981561][ T378] CR2: 0000000000000038 CR3: 000000010d299000 CR4: 00000000003506b0 [ 50.989694][ T378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.997661][ T378] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.005680][ T378] Kernel panic - not syncing: Fatal exception [ 51.012114][ T378] Kernel Offset: disabled [ 51.016241][ T378] Rebooting in 86400 seconds..