u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 34.213474][ T27] audit: type=1400 audit(1711337787.087:155): avc: denied { siginh } for pid=319 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. 2024/03/25 03:36:33 ignoring optional flag "sandboxArg"="0" 2024/03/25 03:36:33 parsed 1 programs [ 40.897450][ T27] audit: type=1400 audit(1711337793.807:156): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.922497][ T27] audit: type=1400 audit(1711337793.817:157): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/03/25 03:36:33 executed programs: 0 [ 40.954280][ T27] audit: type=1400 audit(1711337793.867:158): avc: denied { unlink } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 40.984931][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.003870][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.010970][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.017916][ T345] device bridge_slave_0 entered promiscuous mode [ 41.024316][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.031260][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.038378][ T345] device bridge_slave_1 entered promiscuous mode [ 41.051310][ T27] audit: type=1400 audit(1711337793.957:159): avc: denied { write } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.071993][ T27] audit: type=1400 audit(1711337793.977:160): avc: denied { read } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.073577][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.099405][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.106459][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.113459][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.122707][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.129805][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.136879][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.144305][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.157289][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.165460][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.172455][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.181575][ T345] device veth0_vlan entered promiscuous mode [ 41.187938][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.196076][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.203804][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.211016][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.218802][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.227140][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.234815][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.242045][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.249853][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.258356][ T345] device veth1_macvtap entered promiscuous mode [ 41.264740][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.276251][ T27] audit: type=1400 audit(1711337794.187:161): avc: denied { mounton } for pid=345 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.276479][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.310242][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.319178][ T27] audit: type=1400 audit(1711337794.207:162): avc: denied { mounton } for pid=349 comm="syz-executor.0" path="/root/syzkaller-testdir2702242136/syzkaller.F2uZkx/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.351311][ T27] audit: type=1400 audit(1711337794.257:163): avc: denied { write } for pid=349 comm="syz-executor.0" name="/" dev="incremental-fs" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.351320][ T351] BUG: kernel NULL pointer dereference, address: 0000000000000030 [ 41.374693][ T27] audit: type=1400 audit(1711337794.257:164): avc: denied { add_name } for pid=349 comm="syz-executor.0" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.382192][ T351] #PF: supervisor read access in kernel mode [ 41.382195][ T351] #PF: error_code(0x0000) - not-present page [ 41.382198][ T351] PGD 11423f067 P4D 11423f067 PUD 114243067 [ 41.406672][ T27] audit: type=1400 audit(1711337794.257:165): avc: denied { link } for pid=349 comm="syz-executor.0" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.412317][ T351] PMD 0 [ 41.412320][ T351] Oops: 0000 [#1] PREEMPT SMP [ 41.412325][ T351] CPU: 1 PID: 351 Comm: syz-executor.0 Not tainted 6.1.68-syzkaller #0 [ 41.463712][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.474320][ T351] RIP: 0010:vfs_link+0x11/0x2b0 [ 41.479412][ T351] Code: ff ff 48 89 df be 9c ff ff ff 48 89 c2 e8 27 fd ff ff 48 98 5b 41 5e 5d c3 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 <4c> 8b 7f 30 41 bd fe ff ff ff 4d 85 ff 0f 84 a9 00 00 00 49 89 d4 [ 41.500428][ T351] RSP: 0018:ffffc9000076fd50 EFLAGS: 00010286 [ 41.506500][ T351] RAX: 000000000c3ae601 RBX: ffff88810c3ae628 RCX: ffff88810d508410 [ 41.514738][ T351] RDX: ffff88810c3ae628 RSI: ffffffff8304fd38 RDI: 0000000000000000 [ 41.522614][ T351] RBP: ffffc9000076fd90 R08: 0000000000000000 R09: ffffffff812600d9 [ 41.530865][ T351] R10: ffff888108cee600 R11: ffff888108f01e40 R12: ffff88810b0f8018 [ 41.538737][ T351] R13: ffff88810d508410 R14: ffff88810c3ae6c8 R15: ffff88810d509a90 [ 41.546722][ T351] FS: 00007f73381776c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 41.555789][ T351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.562439][ T351] CR2: 0000000000000030 CR3: 0000000114066000 CR4: 00000000003506a0 [ 41.570707][ T351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.578595][ T351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.586676][ T351] Call Trace: [ 41.590067][ T351] [ 41.592885][ T351] ? __die_body+0x62/0xb0 [ 41.597095][ T351] ? __die+0x7e/0x90 [ 41.600833][ T351] ? page_fault_oops+0x369/0x3d0 [ 41.605863][ T351] ? audit_log_end+0xe9/0xf0 [ 41.610645][ T351] ? common_lsm_audit+0x494/0x780 [ 41.615671][ T351] ? exc_page_fault+0x4dc/0x670 [ 41.620545][ T351] ? asm_exc_page_fault+0x27/0x30 [ 41.625408][ T351] ? audit_log_end+0xe9/0xf0 [ 41.630166][ T351] ? vfs_link+0x11/0x2b0 [ 41.634520][ T351] ? rwsem_write_trylock+0x47/0xb0 [ 41.639687][ T351] dir_link+0x14b/0x1e0 [ 41.645646][ T351] vfs_link+0x21c/0x2b0 [ 41.649731][ T351] do_linkat+0x132/0x340 [ 41.653802][ T351] __x64_sys_linkat+0x5a/0x70 [ 41.658318][ T351] do_syscall_64+0x3d/0xb0 [ 41.662579][ T351] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.668383][ T351] RIP: 0033:0x7f733747dda9 [ 41.672751][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.692815][ T351] RSP: 002b:00007f73381770c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 41.701347][ T351] RAX: ffffffffffffffda RBX: 00007f73375abf80 RCX: 00007f733747dda9 [ 41.709241][ T351] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000004 [ 41.717142][ T351] RBP: 00007f73374ca47a R08: 0000000000000000 R09: 0000000000000000 [ 41.725147][ T351] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.732945][ T351] R13: 000000000000000b R14: 00007f73375abf80 R15: 00007ffef916b5a8 [ 41.741105][ T351] [ 41.743920][ T351] Modules linked in: [ 41.747654][ T351] CR2: 0000000000000030 [ 41.751650][ T351] ---[ end trace 0000000000000000 ]--- [ 41.757066][ T351] RIP: 0010:vfs_link+0x11/0x2b0 [ 41.761846][ T351] Code: ff ff 48 89 df be 9c ff ff ff 48 89 c2 e8 27 fd ff ff 48 98 5b 41 5e 5d c3 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 <4c> 8b 7f 30 41 bd fe ff ff ff 4d 85 ff 0f 84 a9 00 00 00 49 89 d4 [ 41.781469][ T351] RSP: 0018:ffffc9000076fd50 EFLAGS: 00010286 [ 41.787799][ T351] RAX: 000000000c3ae601 RBX: ffff88810c3ae628 RCX: ffff88810d508410 [ 41.795982][ T351] RDX: ffff88810c3ae628 RSI: ffffffff8304fd38 RDI: 0000000000000000 [ 41.803978][ T351] RBP: ffffc9000076fd90 R08: 0000000000000000 R09: ffffffff812600d9 [ 41.812067][ T351] R10: ffff888108cee600 R11: ffff888108f01e40 R12: ffff88810b0f8018 [ 41.820164][ T351] R13: ffff88810d508410 R14: ffff88810c3ae6c8 R15: ffff88810d509a90 [ 41.827975][ T351] FS: 00007f73381776c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 41.837009][ T351] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.843599][ T351] CR2: 0000000000000030 CR3: 0000000114066000 CR4: 00000000003506a0 [ 41.851627][ T351] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.859895][ T351] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.867780][ T351] Kernel panic - not syncing: Fatal exception [ 41.873983][ T351] Kernel Offset: disabled [ 41.878289][ T351] Rebooting in 86400 seconds..