[ 31.492667][ T27] audit: type=1400 audit(1704632135.871:154): avc: denied { rlimitinh } for pid=318 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.511503][ T27] audit: type=1400 audit(1704632135.871:155): avc: denied { siginh } for pid=318 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. 2024/01/07 12:55:43 ignoring optional flag "sandboxArg"="0" 2024/01/07 12:55:43 parsed 1 programs [ 39.236391][ T27] audit: type=1400 audit(1704632143.661:156): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.261963][ T27] audit: type=1400 audit(1704632143.661:157): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/01/07 12:55:43 executed programs: 0 [ 39.320230][ T27] audit: type=1400 audit(1704632143.751:158): avc: denied { unlink } for pid=339 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.330816][ T339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.366284][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.373248][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.380640][ T346] device bridge_slave_0 entered promiscuous mode [ 39.387003][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.394433][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.401607][ T346] device bridge_slave_1 entered promiscuous mode [ 39.414221][ T27] audit: type=1400 audit(1704632143.841:159): avc: denied { write } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.421667][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.435165][ T27] audit: type=1400 audit(1704632143.851:160): avc: denied { read } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.442096][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.442114][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.477573][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.486862][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.494232][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.501310][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.508920][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.516653][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.524654][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.531614][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.540253][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.548145][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.555096][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.562155][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.569788][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.578629][ T346] device veth0_vlan entered promiscuous mode [ 39.584646][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.592631][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.600356][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.607322][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.615197][ T346] device veth1_macvtap entered promiscuous mode [ 39.621741][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.631120][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.639208][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.648161][ T27] audit: type=1400 audit(1704632144.071:161): avc: denied { mounton } for pid=346 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.674994][ T27] audit: type=1400 audit(1704632144.101:162): avc: denied { mounton } for pid=350 comm="syz-executor.0" path="/root/syzkaller-testdir48813107/syzkaller.vnlpke/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.775557][ T355] FAULT_INJECTION: forcing a failure. [ 39.775557][ T355] name failslab, interval 1, probability 0, space 0, times 1 [ 39.788364][ T355] CPU: 1 PID: 355 Comm: syz-executor.0 Not tainted 6.1.57-syzkaller #0 [ 39.796465][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 39.806970][ T355] Call Trace: [ 39.810297][ T355] [ 39.813085][ T355] dump_stack_lvl+0x68/0x91 [ 39.817939][ T355] dump_stack+0x10/0x12 [ 39.822331][ T355] should_fail_ex+0x13e/0x140 [ 39.827439][ T355] __should_failslab+0x52/0x60 [ 39.832042][ T355] should_failslab+0x9/0x20 [ 39.836370][ T355] __kmem_cache_alloc_node+0x3d/0x240 [ 39.841662][ T355] ? fuse_file_alloc+0x20/0xd0 [ 39.846591][ T355] ? fuse_file_alloc+0x45/0xd0 [ 39.851152][ T355] kmalloc_trace+0x2a/0xa0 [ 39.855406][ T355] fuse_file_alloc+0x45/0xd0 [ 39.859921][ T355] fuse_create_open+0x342/0xb40 [ 39.865247][ T355] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 39.870860][ T355] ? avc_compute_av+0x242/0x2a0 [ 39.875792][ T355] fuse_atomic_open+0xea/0x140 [ 39.880315][ T355] path_openat+0x3e2/0xb60 [ 39.884568][ T355] do_filp_open+0xad/0x150 [ 39.888993][ T355] do_sys_openat2+0x8e/0x240 [ 39.893705][ T355] ? debug_smp_processor_id+0x17/0x20 [ 39.899275][ T355] __x64_sys_openat+0x79/0xa0 [ 39.904572][ T355] do_syscall_64+0x3d/0xb0 [ 39.908820][ T355] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.914896][ T355] RIP: 0033:0x7fa48307cae9 [ 39.919153][ T355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 39.939253][ T355] RSP: 002b:00007fa483e320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.947912][ T355] RAX: ffffffffffffffda RBX: 00007fa48319c120 RCX: 00007fa48307cae9 [ 39.955813][ T355] RDX: 0000000000000c41 RSI: 0000000020002000 RDI: ffffffffffffff9c [ 39.963937][ T355] RBP: 00007fa483e32120 R08: 0000000000000000 R09: 0000000000000000 [ 39.971832][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.980513][ T355] R13: 000000000000006e R14: 00007fa48319c120 R15: 00007ffe033872e8 [ 39.988330][ T355] [ 40.509096][ T27] audit: type=1400 audit(1704632144.931:163): avc: denied { unmount } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 40.633373][ T360] FAULT_INJECTION: forcing a failure. [ 40.633373][ T360] name failslab, interval 1, probability 0, space 0, times 0 [ 40.645952][ T360] CPU: 1 PID: 360 Comm: syz-executor.0 Not tainted 6.1.57-syzkaller #0 [ 40.654263][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 40.664472][ T360] Call Trace: [ 40.667598][ T360] [ 40.670367][ T360] dump_stack_lvl+0x68/0x91 [ 40.674825][ T360] dump_stack+0x10/0x12 [ 40.679405][ T360] should_fail_ex+0x13e/0x140 [ 40.683858][ T360] __should_failslab+0x52/0x60 [ 40.688545][ T360] should_failslab+0x9/0x20 [ 40.692968][ T360] slab_pre_alloc_hook+0x2e/0x1b0 [ 40.697827][ T360] ? kvm_sched_clock_read+0x18/0x40 [ 40.703258][ T360] kmem_cache_alloc_lru+0x49/0x210 [ 40.708197][ T360] ? fuse_alloc_inode+0x20/0xf0 [ 40.712973][ T360] ? fuse_iget+0x240/0x240 [ 40.717323][ T360] fuse_alloc_inode+0x20/0xf0 [ 40.721910][ T360] alloc_inode+0x1d/0xb0 [ 40.725987][ T360] iget5_locked+0x36/0x90 [ 40.730154][ T360] ? fuse_inode_eq+0x20/0x20 [ 40.734671][ T360] fuse_iget+0xdb/0x240 [ 40.738660][ T360] fuse_create_open+0x686/0xb40 [ 40.743670][ T360] fuse_atomic_open+0xea/0x140 [ 40.748350][ T360] path_openat+0x3e2/0xb60 [ 40.752908][ T360] do_filp_open+0xad/0x150 [ 40.757243][ T360] do_sys_openat2+0x8e/0x240 [ 40.761748][ T360] ? debug_smp_processor_id+0x17/0x20 [ 40.766956][ T360] __x64_sys_openat+0x79/0xa0 [ 40.771641][ T360] do_syscall_64+0x3d/0xb0 [ 40.775896][ T360] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.781625][ T360] RIP: 0033:0x7fa48307cae9 [ 40.785978][ T360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.805925][ T360] RSP: 002b:00007fa483e320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 40.814311][ T360] RAX: ffffffffffffffda RBX: 00007fa48319c120 RCX: 00007fa48307cae9 [ 40.822288][ T360] RDX: 0000000000000c41 RSI: 0000000020002000 RDI: ffffffffffffff9c [ 40.830355][ T360] RBP: 00007fa483e32120 R08: 0000000000000000 R09: 0000000000000000 [ 40.838677][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.846856][ T360] R13: 000000000000006e R14: 00007fa48319c120 R15: 00007ffe033872e8 [ 40.855212][ T360] [ 40.858405][ T360] BUG: kernel NULL pointer dereference, address: 0000000000000028 [ 40.866093][ T360] #PF: supervisor read access in kernel mode [ 40.871994][ T360] #PF: error_code(0x0000) - not-present page [ 40.877984][ T360] PGD 10ce79067 P4D 10ce79067 PUD 10ced4067 PMD 0 [ 40.884601][ T360] Oops: 0000 [#1] PREEMPT SMP [ 40.889093][ T360] CPU: 0 PID: 360 Comm: syz-executor.0 Not tainted 6.1.57-syzkaller #0 [ 40.897164][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 40.907343][ T360] RIP: 0010:fuse_file_put+0x44/0x590 [ 40.912472][ T360] Code: 04 25 28 00 00 00 48 89 45 d0 4c 8b 76 08 b8 ff ff ff ff f0 0f c1 46 28 83 f8 01 0f 85 ef 00 00 00 41 89 cc 41 89 d5 49 89 ff <48> 8b 47 28 48 8b 80 c8 03 00 00 48 89 85 d8 fd ff ff 48 c7 85 08 [ 40.932164][ T360] RSP: 0018:ffffc900007b75e0 EFLAGS: 00010246 [ 40.938161][ T360] RAX: 0000000000000001 RBX: ffff88810cf35d00 RCX: 0000000000000000 [ 40.945966][ T360] RDX: 0000000000000001 RSI: ffff88810cf35d00 RDI: 0000000000000000 [ 40.953953][ T360] RBP: ffffc900007b7810 R08: 0000000000000000 R09: ffffc900007b7778 [ 40.961761][ T360] R10: 00000000ffffefff R11: 3e4b5341542f3c20 R12: 0000000000000000 [ 40.969920][ T360] R13: 0000000000000001 R14: ffff88810cf35200 R15: 0000000000000000 [ 40.977731][ T360] FS: 00007fa483e326c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 40.986765][ T360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.993344][ T360] CR2: 0000000000000028 CR3: 000000010bcc1000 CR4: 00000000003506b0 [ 41.001365][ T360] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.009241][ T360] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.017196][ T360] Call Trace: [ 41.020346][ T360] [ 41.023096][ T360] ? __die_body+0x62/0xb0 [ 41.027350][ T360] ? __die+0x7e/0x90 [ 41.031080][ T360] ? page_fault_oops+0x369/0x3d0 [ 41.035860][ T360] ? exc_page_fault+0x4dc/0x670 [ 41.040628][ T360] ? asm_exc_page_fault+0x27/0x30 [ 41.045486][ T360] ? fuse_file_put+0x44/0x590 [ 41.050545][ T360] ? dump_stack_lvl+0x7d/0x91 [ 41.055067][ T360] ? dump_stack_lvl+0x6d/0x91 [ 41.059674][ T360] ? dump_stack+0x10/0x12 [ 41.063834][ T360] ? should_fail_ex+0x13e/0x140 [ 41.068691][ T360] ? __should_failslab+0x52/0x60 [ 41.073487][ T360] ? should_failslab+0x9/0x20 [ 41.078241][ T360] ? slab_pre_alloc_hook+0x2e/0x1b0 [ 41.083271][ T360] ? kvm_sched_clock_read+0x18/0x40 [ 41.088669][ T360] ? kmem_cache_alloc_lru+0x49/0x210 [ 41.094035][ T360] ? fuse_alloc_inode+0x20/0xf0 [ 41.098723][ T360] ? _raw_spin_lock_irqsave+0x3e/0x90 [ 41.103969][ T360] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 41.109748][ T360] ? __wake_up+0x7e/0xb0 [ 41.114001][ T360] ? fuse_prepare_release+0xb4/0x110 [ 41.119133][ T360] fuse_sync_release+0x2c/0x40 [ 41.123902][ T360] fuse_create_open+0xa4f/0xb40 [ 41.128684][ T360] fuse_atomic_open+0xea/0x140 [ 41.133266][ T360] path_openat+0x3e2/0xb60 [ 41.137543][ T360] do_filp_open+0xad/0x150 [ 41.141775][ T360] do_sys_openat2+0x8e/0x240 [ 41.146202][ T360] ? debug_smp_processor_id+0x17/0x20 [ 41.151601][ T360] __x64_sys_openat+0x79/0xa0 [ 41.156209][ T360] do_syscall_64+0x3d/0xb0 [ 41.160460][ T360] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.166564][ T360] RIP: 0033:0x7fa48307cae9 [ 41.171189][ T360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.191354][ T360] RSP: 002b:00007fa483e320c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.200101][ T360] RAX: ffffffffffffffda RBX: 00007fa48319c120 RCX: 00007fa48307cae9 [ 41.208181][ T360] RDX: 0000000000000c41 RSI: 0000000020002000 RDI: ffffffffffffff9c [ 41.216070][ T360] RBP: 00007fa483e32120 R08: 0000000000000000 R09: 0000000000000000 [ 41.223980][ T360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.231784][ T360] R13: 000000000000006e R14: 00007fa48319c120 R15: 00007ffe033872e8 [ 41.239798][ T360] [ 41.242656][ T360] Modules linked in: [ 41.246560][ T360] CR2: 0000000000000028 [ 41.250625][ T360] ---[ end trace 0000000000000000 ]--- [ 41.256010][ T360] RIP: 0010:fuse_file_put+0x44/0x590 [ 41.261128][ T360] Code: 04 25 28 00 00 00 48 89 45 d0 4c 8b 76 08 b8 ff ff ff ff f0 0f c1 46 28 83 f8 01 0f 85 ef 00 00 00 41 89 cc 41 89 d5 49 89 ff <48> 8b 47 28 48 8b 80 c8 03 00 00 48 89 85 d8 fd ff ff 48 c7 85 08 [ 41.281007][ T360] RSP: 0018:ffffc900007b75e0 EFLAGS: 00010246 [ 41.286905][ T360] RAX: 0000000000000001 RBX: ffff88810cf35d00 RCX: 0000000000000000 [ 41.294727][ T360] RDX: 0000000000000001 RSI: ffff88810cf35d00 RDI: 0000000000000000 [ 41.302530][ T360] RBP: ffffc900007b7810 R08: 0000000000000000 R09: ffffc900007b7778 [ 41.310542][ T360] R10: 00000000ffffefff R11: 3e4b5341542f3c20 R12: 0000000000000000 [ 41.318448][ T360] R13: 0000000000000001 R14: ffff88810cf35200 R15: 0000000000000000 [ 41.326259][ T360] FS: 00007fa483e326c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 41.335218][ T360] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.341754][ T360] CR2: 0000000000000028 CR3: 000000010bcc1000 CR4: 00000000003506b0 [ 41.349544][ T360] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.357449][ T360] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.365635][ T360] Kernel panic - not syncing: Fatal exception [ 41.372129][ T360] Kernel Offset: disabled [ 41.376543][ T360] Rebooting in 86400 seconds..