[ 21.010481][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.029819][ T8] device bridge_slave_0 left promiscuous mode [ 21.040079][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.049645][ T8] device veth1_macvtap left promiscuous mode [ 21.055565][ T8] device veth0_vlan left promiscuous mode [ 32.000991][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 32.001007][ T28] audit: type=1400 audit(1713021656.844:152): avc: denied { transition } for pid=320 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.029591][ T28] audit: type=1400 audit(1713021656.844:153): avc: denied { noatsecure } for pid=320 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.048721][ T28] audit: type=1400 audit(1713021656.844:154): avc: denied { rlimitinh } for pid=320 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.067833][ T28] audit: type=1400 audit(1713021656.844:155): avc: denied { siginh } for pid=320 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. 2024/04/13 15:21:04 ignoring optional flag "sandboxArg"="0" 2024/04/13 15:21:05 parsed 1 programs [ 40.165181][ T28] audit: type=1400 audit(1713021665.014:156): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.190119][ T28] audit: type=1400 audit(1713021665.014:157): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/04/13 15:21:05 executed programs: 0 [ 40.233886][ T28] audit: type=1400 audit(1713021665.084:158): avc: denied { unlink } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 40.260913][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.322306][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.329546][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.337004][ T348] device bridge_slave_0 entered promiscuous mode [ 40.343938][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.350862][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.358441][ T348] device bridge_slave_1 entered promiscuous mode [ 40.408500][ T28] audit: type=1400 audit(1713021665.254:159): avc: denied { write } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.414917][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.428903][ T28] audit: type=1400 audit(1713021665.254:160): avc: denied { read } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.435788][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.435902][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.470075][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.491186][ T301] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.498426][ T301] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.506721][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.514146][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.524270][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.532415][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.539445][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.548289][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.556490][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.563456][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.575958][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.594292][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.602708][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.610943][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.618716][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.626464][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.635668][ T348] device veth0_vlan entered promiscuous mode [ 40.646665][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.655994][ T348] device veth1_macvtap entered promiscuous mode [ 40.666307][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.678546][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.691930][ T28] audit: type=1400 audit(1713021665.544:161): avc: denied { mounton } for pid=348 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.724494][ T28] audit: type=1400 audit(1713021665.564:162): avc: denied { mounton } for pid=352 comm="syz-executor.0" path="/root/syzkaller-testdir4049968889/syzkaller.nIRecz/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.776245][ T356] general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN [ 40.789172][ T356] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 40.797411][ T356] CPU: 0 PID: 356 Comm: syz-executor.0 Not tainted 6.1.75-syzkaller-1150975-gcfa154389a65 #0 [ 40.807721][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 40.817602][ T356] RIP: 0010:do_unlinkat+0x3e1/0x920 [ 40.823040][ T356] Code: de e8 83 d6 ac ff 31 c0 81 fb 00 00 20 00 0f 94 c0 41 be ec ff ff ff 41 29 c6 e9 bd 00 00 00 49 8d 7d 30 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 83 9a f3 ff 49 8b 45 30 48 89 44 24 38 4c [ 40.842453][ T356] RSP: 0018:ffffc90002eafd80 EFLAGS: 00010206 [ 40.848659][ T356] RAX: 0000000000000009 RBX: 0000000000000000 RCX: ffff8881109f9440 [ 40.856464][ T356] RDX: ffff8881109f9440 RSI: 0000000000000000 RDI: 0000000000000049 [ 40.864279][ T356] RBP: ffffc90002eaff08 R08: ffffffff81c888a2 R09: fffff520005d5f91 [ 40.872347][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 40.880156][ T356] R13: 0000000000000019 R14: dffffc0000000000 R15: 1ffff110200b3cf4 [ 40.888071][ T356] FS: 00007f0571fde6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.897022][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.903628][ T356] CR2: 000055c79412de78 CR3: 000000011ef3d000 CR4: 00000000003506b0 [ 40.911455][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.919262][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.927325][ T356] Call Trace: [ 40.930527][ T356] [ 40.933465][ T356] ? __die_body+0x62/0xb0 [ 40.937558][ T356] ? die_addr+0x9f/0xd0 [ 40.941633][ T356] ? exc_general_protection+0x317/0x4c0 [ 40.947284][ T356] ? asm_exc_general_protection+0x27/0x30 [ 40.952833][ T356] ? do_unlinkat+0x362/0x920 [ 40.957259][ T356] ? do_unlinkat+0x3e1/0x920 [ 40.961772][ T356] ? kasan_save_alloc_info+0x1f/0x30 [ 40.966914][ T356] ? fsnotify_link_count+0x100/0x100 [ 40.972008][ T356] ? getname_flags+0x1fd/0x520 [ 40.976604][ T356] ? switch_fpu_return+0xe/0x10 [ 40.981291][ T356] __x64_sys_unlink+0x49/0x50 [ 40.985910][ T356] do_syscall_64+0x3d/0xb0 [ 40.990239][ T356] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.996115][ T356] RIP: 0033:0x7f057247dda9 [ 41.000512][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.020099][ T356] RSP: 002b:00007f0571fde0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 41.028627][ T356] RAX: ffffffffffffffda RBX: 00007f05725ac050 RCX: 00007f057247dda9 [ 41.036541][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 41.044334][ T356] RBP: 00007f05724ca47a R08: 0000000000000000 R09: 0000000000000000 [ 41.052316][ T356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.060219][ T356] R13: 000000000000006e R14: 00007f05725ac050 R15: 00007ffe172f1ad8 [ 41.068130][ T356] [ 41.071063][ T356] Modules linked in: [ 41.076095][ T356] ---[ end trace 0000000000000000 ]--- [ 41.081470][ T356] RIP: 0010:do_unlinkat+0x3e1/0x920 [ 41.086702][ T356] Code: de e8 83 d6 ac ff 31 c0 81 fb 00 00 20 00 0f 94 c0 41 be ec ff ff ff 41 29 c6 e9 bd 00 00 00 49 8d 7d 30 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 83 9a f3 ff 49 8b 45 30 48 89 44 24 38 4c [ 41.106243][ T356] RSP: 0018:ffffc90002eafd80 EFLAGS: 00010206 [ 41.112171][ T356] RAX: 0000000000000009 RBX: 0000000000000000 RCX: ffff8881109f9440 [ 41.120179][ T356] RDX: ffff8881109f9440 RSI: 0000000000000000 RDI: 0000000000000049 [ 41.127934][ T356] RBP: ffffc90002eaff08 R08: ffffffff81c888a2 R09: fffff520005d5f91 [ 41.135924][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 41.144253][ T356] R13: 0000000000000019 R14: dffffc0000000000 R15: 1ffff110200b3cf4 [ 41.152213][ T356] FS: 00007f0571fde6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.161239][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.167990][ T356] CR2: 000055c79412de78 CR3: 000000011ef3d000 CR4: 00000000003506b0 [ 41.175986][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.184246][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.192307][ T356] Kernel panic - not syncing: Fatal exception [ 41.198668][ T356] Kernel Offset: disabled [ 41.203011][ T356] Rebooting in 86400 seconds..