[ 25.235884][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.242901][ T10] device bridge_slave_0 left promiscuous mode [ 25.249103][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.256385][ T10] device veth1_macvtap left promiscuous mode [ 25.262441][ T10] device veth0_vlan left promiscuous mode [ 35.151478][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 35.151481][ T27] audit: type=1400 audit(1711797167.255:152): avc: denied { transition } for pid=321 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.179744][ T27] audit: type=1400 audit(1711797167.265:153): avc: denied { noatsecure } for pid=321 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.199088][ T27] audit: type=1400 audit(1711797167.285:154): avc: denied { rlimitinh } for pid=321 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.218505][ T27] audit: type=1400 audit(1711797167.285:155): avc: denied { siginh } for pid=321 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. 2024/03/30 11:12:53 ignoring optional flag "sandboxArg"="0" 2024/03/30 11:12:53 parsed 1 programs [ 41.879801][ T27] audit: type=1400 audit(1711797173.985:156): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.905754][ T27] audit: type=1400 audit(1711797173.985:157): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.938564][ T27] audit: type=1400 audit(1711797174.045:158): avc: denied { unlink } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/03/30 11:12:54 executed programs: 0 [ 41.989257][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.011564][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.019206][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.026227][ T348] device bridge_slave_0 entered promiscuous mode [ 42.032601][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.039712][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.047092][ T348] device bridge_slave_1 entered promiscuous mode [ 42.058781][ T27] audit: type=1400 audit(1711797174.165:159): avc: denied { write } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.081496][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.088471][ T27] audit: type=1400 audit(1711797174.185:160): avc: denied { read } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.088600][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.117464][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.124371][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.135479][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.142777][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.149734][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.157554][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.165674][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.173861][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.181234][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.190897][ T348] device veth0_vlan entered promiscuous mode [ 42.197987][ T348] device veth1_macvtap entered promiscuous mode [ 42.205106][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.214051][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.221951][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.229463][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.237119][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.245344][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.253680][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.260740][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.268966][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.276687][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.285912][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.294652][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.303565][ T27] audit: type=1400 audit(1711797174.415:161): avc: denied { mounton } for pid=348 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.330421][ T27] audit: type=1400 audit(1711797174.435:162): avc: denied { mounton } for pid=353 comm="syz-executor.0" path="/root/syzkaller-testdir602686211/syzkaller.oEyice/0/file0" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 42.431753][ T358] FAULT_INJECTION: forcing a failure. [ 42.431753][ T358] name failslab, interval 1, probability 0, space 0, times 1 [ 42.444335][ T358] CPU: 0 PID: 358 Comm: syz-executor.0 Not tainted 6.1.68-syzkaller #0 [ 42.452484][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.462666][ T358] Call Trace: [ 42.465892][ T358] [ 42.468677][ T358] dump_stack_lvl+0x68/0x91 [ 42.473638][ T358] dump_stack+0x10/0x19 [ 42.477992][ T358] should_fail_ex+0x13e/0x140 [ 42.483481][ T358] __should_failslab+0x52/0x60 [ 42.489118][ T358] should_failslab+0x9/0x20 [ 42.493636][ T358] __kmem_cache_alloc_node+0x3d/0x240 [ 42.499151][ T358] ? fuse_alloc_forget+0x1a/0x20 [ 42.504232][ T358] ? fuse_file_alloc+0x20/0xd0 [ 42.508865][ T358] kmalloc_trace+0x2a/0xa0 [ 42.513479][ T358] fuse_file_alloc+0x20/0xd0 [ 42.517902][ T358] fuse_create_open+0x342/0xb40 [ 42.522684][ T358] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 42.528438][ T358] ? avc_compute_av+0x242/0x2a0 [ 42.533142][ T358] fuse_atomic_open+0xea/0x140 [ 42.537813][ T358] path_openat+0x3e2/0xb60 [ 42.542241][ T358] do_filp_open+0xad/0x150 [ 42.546485][ T358] do_sys_openat2+0x8e/0x240 [ 42.551033][ T358] ? debug_smp_processor_id+0x17/0x20 [ 42.556500][ T358] __x64_sys_openat+0x79/0xa0 [ 42.561215][ T358] do_syscall_64+0x3d/0xb0 [ 42.565441][ T358] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.571165][ T358] RIP: 0033:0x7f124bc7cae9 [ 42.575653][ T358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.596650][ T358] RSP: 002b:00007f124c9a00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 42.605112][ T358] RAX: ffffffffffffffda RBX: 00007f124bd9c120 RCX: 00007f124bc7cae9 [ 42.613664][ T358] RDX: 0000000000000c41 RSI: 0000000020002000 RDI: ffffffffffffff9c [ 42.621466][ T358] RBP: 00007f124c9a0120 R08: 0000000000000000 R09: 0000000000000000 [ 42.629460][ T358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.638463][ T358] R13: 000000000000006e R14: 00007f124bd9c120 R15: 00007ffe0fb08c98 [ 42.646976][ T358] [ 43.164797][ T27] audit: type=1400 audit(1711797175.265:163): avc: denied { unmount } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 43.291716][ T363] FAULT_INJECTION: forcing a failure. [ 43.291716][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 43.304373][ T363] CPU: 0 PID: 363 Comm: syz-executor.0 Not tainted 6.1.68-syzkaller #0 [ 43.312747][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.322877][ T363] Call Trace: [ 43.326114][ T363] [ 43.328982][ T363] dump_stack_lvl+0x68/0x91 [ 43.333462][ T363] dump_stack+0x10/0x19 [ 43.337707][ T363] should_fail_ex+0x13e/0x140 [ 43.342317][ T363] __should_failslab+0x52/0x60 [ 43.346929][ T363] should_failslab+0x9/0x20 [ 43.351386][ T363] slab_pre_alloc_hook+0x2e/0x1b0 [ 43.356876][ T363] ? __schedule+0x473/0x6e0 [ 43.361334][ T363] kmem_cache_alloc_lru+0x49/0x210 [ 43.366282][ T363] ? fuse_alloc_inode+0x20/0xf0 [ 43.371277][ T363] ? fuse_iget+0x240/0x240 [ 43.375939][ T363] fuse_alloc_inode+0x20/0xf0 [ 43.380540][ T363] alloc_inode+0x1d/0xb0 [ 43.384661][ T363] iget5_locked+0x36/0x90 [ 43.388783][ T363] ? fuse_inode_eq+0x20/0x20 [ 43.393328][ T363] fuse_iget+0xdb/0x240 [ 43.397495][ T363] fuse_create_open+0x686/0xb40 [ 43.402379][ T363] fuse_atomic_open+0xea/0x140 [ 43.407199][ T363] path_openat+0x3e2/0xb60 [ 43.411991][ T363] do_filp_open+0xad/0x150 [ 43.416505][ T363] do_sys_openat2+0x8e/0x240 [ 43.421209][ T363] ? debug_smp_processor_id+0x17/0x20 [ 43.427016][ T363] __x64_sys_openat+0x79/0xa0 [ 43.431933][ T363] do_syscall_64+0x3d/0xb0 [ 43.436527][ T363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.442429][ T363] RIP: 0033:0x7f124bc7cae9 [ 43.446671][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.467312][ T363] RSP: 002b:00007f124c9a00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.475639][ T363] RAX: ffffffffffffffda RBX: 00007f124bd9c120 RCX: 00007f124bc7cae9 [ 43.484055][ T363] RDX: 0000000000000c41 RSI: 0000000020002000 RDI: ffffffffffffff9c [ 43.491958][ T363] RBP: 00007f124c9a0120 R08: 0000000000000000 R09: 0000000000000000 [ 43.500515][ T363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.508516][ T363] R13: 000000000000006e R14: 00007f124bd9c120 R15: 00007ffe0fb08c98 [ 43.516543][ T363] [ 43.519948][ T363] BUG: kernel NULL pointer dereference, address: 0000000000000028 [ 43.528110][ T363] #PF: supervisor read access in kernel mode [ 43.534271][ T363] #PF: error_code(0x0000) - not-present page [ 43.540300][ T363] PGD 10bac5067 P4D 10bac5067 PUD 10cc2e067 PMD 0 [ 43.546859][ T363] Oops: 0000 [#1] PREEMPT SMP [ 43.551365][ T363] CPU: 0 PID: 363 Comm: syz-executor.0 Not tainted 6.1.68-syzkaller #0 [ 43.559714][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.569881][ T363] RIP: 0010:fuse_file_put+0x44/0x590 [ 43.575173][ T363] Code: 04 25 28 00 00 00 48 89 45 d0 4c 8b 76 08 b8 ff ff ff ff f0 0f c1 46 28 83 f8 01 0f 85 ef 00 00 00 41 89 cc 41 89 d5 49 89 ff <48> 8b 47 28 48 8b 80 c8 03 00 00 48 89 85 d8 fd ff ff 48 c7 85 08 [ 43.595747][ T363] RSP: 0018:ffffc9000079f5e0 EFLAGS: 00010246 [ 43.601650][ T363] RAX: 0000000000000001 RBX: ffff88810b9c1900 RCX: 0000000000000000 [ 43.610213][ T363] RDX: 0000000000000001 RSI: ffff88810b9c1900 RDI: 0000000000000000 [ 43.618519][ T363] RBP: ffffc9000079f810 R08: 0000000000000000 R09: ffffc9000079f778 [ 43.627113][ T363] R10: 00000000ffffefff R11: 3e4b5341542f3c20 R12: 0000000000000000 [ 43.635043][ T363] R13: 0000000000000001 R14: ffff88810b9c1a00 R15: 0000000000000000 [ 43.643077][ T363] FS: 00007f124c9a06c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 43.652140][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.659116][ T363] CR2: 0000000000000028 CR3: 0000000115c52000 CR4: 00000000003506b0 [ 43.669072][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.677657][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.687189][ T363] Call Trace: [ 43.690571][ T363] [ 43.693596][ T363] ? __die_body+0x62/0xb0 [ 43.698008][ T363] ? __die+0x7e/0x90 [ 43.702075][ T363] ? page_fault_oops+0x369/0x3d0 [ 43.706992][ T363] ? exc_page_fault+0x4dc/0x670 [ 43.712036][ T363] ? asm_exc_page_fault+0x27/0x30 [ 43.717593][ T363] ? fuse_file_put+0x44/0x590 [ 43.722276][ T363] ? dump_stack_lvl+0x7d/0x91 [ 43.726965][ T363] ? dump_stack_lvl+0x6d/0x91 [ 43.731832][ T363] ? dump_stack+0x10/0x19 [ 43.736258][ T363] ? should_fail_ex+0x13e/0x140 [ 43.741041][ T363] ? __should_failslab+0x52/0x60 [ 43.745899][ T363] ? should_failslab+0x9/0x20 [ 43.750600][ T363] ? slab_pre_alloc_hook+0x2e/0x1b0 [ 43.755793][ T363] ? __schedule+0x473/0x6e0 [ 43.760323][ T363] ? kmem_cache_alloc_lru+0x49/0x210 [ 43.765837][ T363] ? fuse_alloc_inode+0x20/0xf0 [ 43.771022][ T363] ? _raw_spin_lock_irqsave+0x3e/0x90 [ 43.776632][ T363] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 43.782633][ T363] ? __wake_up+0x7e/0xb0 [ 43.787256][ T363] ? fuse_prepare_release+0xb4/0x110 [ 43.792377][ T363] fuse_sync_release+0x2c/0x40 [ 43.797267][ T363] fuse_create_open+0xa4f/0xb40 [ 43.802338][ T363] fuse_atomic_open+0xea/0x140 [ 43.807279][ T363] path_openat+0x3e2/0xb60 [ 43.811631][ T363] do_filp_open+0xad/0x150 [ 43.816243][ T363] do_sys_openat2+0x8e/0x240 [ 43.821455][ T363] ? debug_smp_processor_id+0x17/0x20 [ 43.826749][ T363] __x64_sys_openat+0x79/0xa0 [ 43.831326][ T363] do_syscall_64+0x3d/0xb0 [ 43.835852][ T363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.841582][ T363] RIP: 0033:0x7f124bc7cae9 [ 43.846020][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.866664][ T363] RSP: 002b:00007f124c9a00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 43.875783][ T363] RAX: ffffffffffffffda RBX: 00007f124bd9c120 RCX: 00007f124bc7cae9 [ 43.884255][ T363] RDX: 0000000000000c41 RSI: 0000000020002000 RDI: ffffffffffffff9c [ 43.892577][ T363] RBP: 00007f124c9a0120 R08: 0000000000000000 R09: 0000000000000000 [ 43.900707][ T363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.909775][ T363] R13: 000000000000006e R14: 00007f124bd9c120 R15: 00007ffe0fb08c98 [ 43.918204][ T363] [ 43.921050][ T363] Modules linked in: [ 43.925252][ T363] CR2: 0000000000000028 [ 43.929234][ T363] ---[ end trace 0000000000000000 ]--- [ 43.934560][ T363] RIP: 0010:fuse_file_put+0x44/0x590 [ 43.940554][ T363] Code: 04 25 28 00 00 00 48 89 45 d0 4c 8b 76 08 b8 ff ff ff ff f0 0f c1 46 28 83 f8 01 0f 85 ef 00 00 00 41 89 cc 41 89 d5 49 89 ff <48> 8b 47 28 48 8b 80 c8 03 00 00 48 89 85 d8 fd ff ff 48 c7 85 08 [ 43.961823][ T363] RSP: 0018:ffffc9000079f5e0 EFLAGS: 00010246 [ 43.968195][ T363] RAX: 0000000000000001 RBX: ffff88810b9c1900 RCX: 0000000000000000 [ 43.976818][ T363] RDX: 0000000000000001 RSI: ffff88810b9c1900 RDI: 0000000000000000 [ 43.984625][ T363] RBP: ffffc9000079f810 R08: 0000000000000000 R09: ffffc9000079f778 [ 43.992612][ T363] R10: 00000000ffffefff R11: 3e4b5341542f3c20 R12: 0000000000000000 [ 44.000800][ T363] R13: 0000000000000001 R14: ffff88810b9c1a00 R15: 0000000000000000 [ 44.008930][ T363] FS: 00007f124c9a06c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 44.018314][ T363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.024732][ T363] CR2: 0000000000000028 CR3: 0000000115c52000 CR4: 00000000003506b0 [ 44.033174][ T363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.041408][ T363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.049552][ T363] Kernel panic - not syncing: Fatal exception [ 44.055848][ T363] Kernel Offset: disabled [ 44.059965][ T363] Rebooting in 86400 seconds..