Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. 2024/07/09 00:19:50 ignoring optional flag "sandboxArg"="0" 2024/07/09 00:19:50 parsed 1 programs [ 53.620456][ T23] audit: type=1400 audit(1720484390.790:94): avc: denied { mounton } for pid=421 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 53.655399][ T23] audit: type=1400 audit(1720484390.830:95): avc: denied { read write } for pid=431 comm="syz-executor" name="swap-file" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.682120][ T23] audit: type=1400 audit(1720484390.830:96): avc: denied { open } for pid=431 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.708806][ T431] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.708911][ T23] audit: type=1400 audit(1720484390.830:97): avc: denied { unlink } for pid=431 comm="syz-executor" name="swap-file" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.744331][ T23] audit: type=1400 audit(1720484390.840:98): avc: denied { relabelto } for pid=434 comm="mkswap" name="swap-file" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 53.771842][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.778830][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.786442][ T451] device bridge_slave_0 entered promiscuous mode [ 53.792740][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.799806][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.807002][ T451] device bridge_slave_1 entered promiscuous mode [ 53.818349][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.825201][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.832328][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.839406][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.848566][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.856118][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.863359][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.870921][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.878629][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.887252][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.894157][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.902038][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.909936][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.916780][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.925693][ T451] device veth0_vlan entered promiscuous mode [ 53.931953][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.940048][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.947713][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.954950][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.962098][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.969765][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.978646][ T451] device veth1_macvtap entered promiscuous mode [ 53.985782][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.995109][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.003276][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/07/09 00:19:51 executed programs: 0 [ 54.077884][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.085061][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.092226][ T478] device bridge_slave_0 entered promiscuous mode [ 54.098550][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.105527][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.112584][ T478] device bridge_slave_1 entered promiscuous mode [ 54.124851][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.131837][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.138972][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.146024][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.155539][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.162801][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.170187][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.179582][ T478] device veth0_vlan entered promiscuous mode [ 54.185923][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.193994][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.201754][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.209212][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.216370][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.224218][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.231081][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.238312][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.246501][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.253674][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.261096][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.269059][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.277884][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.286528][ T478] device veth1_macvtap entered promiscuous mode [ 54.293791][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.302186][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.314754][ T23] audit: type=1400 audit(1720484391.490:99): avc: denied { mounton } for pid=482 comm="syz-executor" path="/root/syzkaller-testdir3002113763/syzkaller.LAps73/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 54.315463][ T483] BUG: kernel NULL pointer dereference, address: 0000000000000008 [ 54.341591][ T23] audit: type=1400 audit(1720484391.490:100): avc: denied { mounton } for pid=482 comm="syz-executor" path="/root/syzkaller-testdir3002113763/syzkaller.LAps73/0/file0" dev="incremental-fs" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.349058][ T483] #PF: supervisor read access in kernel mode [ 54.376979][ T23] audit: type=1400 audit(1720484391.490:101): avc: denied { write } for pid=482 comm="syz-executor" name="/" dev="incremental-fs" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.382546][ T483] #PF: error_code(0x0000) - not-present page [ 54.382548][ T483] PGD 111cf9067 P4D 111cf9067 PUD 111db7067 PMD 0 [ 54.382565][ T483] Oops: 0000 [#1] PREEMPT SMP [ 54.382570][ T483] CPU: 1 PID: 483 Comm: syz-executor Not tainted 5.10.218-syzkaller #0 [ 54.405470][ T23] audit: type=1400 audit(1720484391.490:102): avc: denied { add_name } for pid=482 comm="syz-executor" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.411195][ T483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 54.418357][ T23] audit: type=1400 audit(1720484391.490:103): avc: denied { create } for pid=482 comm="syz-executor" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 54.422482][ T483] RIP: 0010:dir_rename_wrap+0x7c/0x220 [ 54.422486][ T483] Code: 84 95 01 00 00 4c 3b 6b 18 0f 84 8b 01 00 00 4c 3b 6b 28 0f 84 81 01 00 00 48 8b 45 d0 48 85 c0 0f 84 8c 01 00 00 48 8b 40 78 <48> 8b 40 08 49 8d 7d 58 49 89 c6 48 89 45 c0 e8 f0 68 11 00 4d 85 [ 54.422488][ T483] RSP: 0018:ffffc900006b3d40 EFLAGS: 00010286 [ 54.422494][ T483] RAX: 0000000000000000 RBX: ffff888111d78800 RCX: ffff888109c09ea0 [ 54.520241][ T483] RDX: ffff88810d6a4a00 RSI: ffff888109de8270 RDI: ffff888111d78860 [ 54.528255][ T483] RBP: ffffc900006b3d88 R08: 0000000000000002 R09: 0000000000000000 [ 54.536152][ T483] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888111d79418 [ 54.543963][ T483] R13: ffff888109c09750 R14: 0000000000000000 R15: ffff888111d78860 [ 54.551776][ T483] FS: 00007fde3205a6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 54.560550][ T483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.567049][ T483] CR2: 0000000000000008 CR3: 0000000111c1f000 CR4: 00000000003506a0 [ 54.574964][ T483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.582767][ T483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.590582][ T483] Call Trace: [ 54.593718][ T483] ? show_regs.part.0+0x1e/0x20 [ 54.598465][ T483] ? __die+0x5d/0x9e [ 54.602214][ T483] ? no_context+0x1f2/0x380 [ 54.606663][ T483] ? __bad_area_nosemaphore+0x4b/0x1a0 [ 54.612024][ T483] ? avc_denied+0x5d/0x80 [ 54.616209][ T483] ? bad_area_nosemaphore+0x11/0x20 [ 54.621224][ T483] ? exc_page_fault+0x2c9/0x5a0 [ 54.625908][ T483] ? asm_exc_page_fault+0x1e/0x30 [ 54.630771][ T483] ? dir_rename_wrap+0x7c/0x220 [ 54.635565][ T483] vfs_rename+0x78a/0xae0 [ 54.639710][ T483] ? dir_lookup+0x70/0x260 [ 54.643970][ T483] ? __lookup_hash+0x65/0xa0 [ 54.648394][ T483] do_renameat2+0x33f/0x4f0 [ 54.652726][ T483] __x64_sys_renameat2+0x4c/0x60 [ 54.657589][ T483] do_syscall_64+0x32/0x80 [ 54.661838][ T483] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 54.667568][ T483] RIP: 0033:0x7fde324d7ee9 [ 54.671815][ T483] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.691598][ T483] RSP: 002b:00007fde3205a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 54.699863][ T483] RAX: ffffffffffffffda RBX: 00007fde32606f80 RCX: 00007fde324d7ee9 [ 54.707644][ T483] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 0000000000000004 [ 54.715458][ T483] RBP: 00007fde3252449e R08: 0000000000000002 R09: 0000000000000000 [ 54.723264][ T483] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 54.731096][ T483] R13: 000000000000000b R14: 00007fde32606f80 R15: 00007ffdb8e53e88 [ 54.738886][ T483] Modules linked in: [ 54.742616][ T483] CR2: 0000000000000008 [ 54.746611][ T483] ---[ end trace 915bdb74f0127b18 ]--- [ 54.752219][ T483] RIP: 0010:dir_rename_wrap+0x7c/0x220 [ 54.757575][ T483] Code: 84 95 01 00 00 4c 3b 6b 18 0f 84 8b 01 00 00 4c 3b 6b 28 0f 84 81 01 00 00 48 8b 45 d0 48 85 c0 0f 84 8c 01 00 00 48 8b 40 78 <48> 8b 40 08 49 8d 7d 58 49 89 c6 48 89 45 c0 e8 f0 68 11 00 4d 85 [ 54.777108][ T483] RSP: 0018:ffffc900006b3d40 EFLAGS: 00010286 [ 54.783021][ T483] RAX: 0000000000000000 RBX: ffff888111d78800 RCX: ffff888109c09ea0 [ 54.790923][ T483] RDX: ffff88810d6a4a00 RSI: ffff888109de8270 RDI: ffff888111d78860 [ 54.798735][ T483] RBP: ffffc900006b3d88 R08: 0000000000000002 R09: 0000000000000000 [ 54.806918][ T483] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888111d79418 [ 54.814728][ T483] R13: ffff888109c09750 R14: 0000000000000000 R15: ffff888111d78860 [ 54.822780][ T483] FS: 00007fde3205a6c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 54.831637][ T483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.838031][ T483] CR2: 0000000000000008 CR3: 0000000111c1f000 CR4: 00000000003506a0 [ 54.846064][ T483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.854042][ T483] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.862525][ T483] Kernel panic - not syncing: Fatal exception [ 54.868724][ T483] Kernel Offset: disabled [ 54.872891][ T483] Rebooting in 86400 seconds..