syzkaller login: [ 35.779786][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 35.779865][ T30] audit: type=1400 audit(35.710:68): avc: denied { read write } for pid=2988 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.781138][ T30] audit: type=1400 audit(35.720:69): avc: denied { open } for pid=2988 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:58421' (ED25519) to the list of known hosts. [ 85.488730][ T30] audit: type=1400 audit(85.420:70): avc: denied { execute } for pid=3000 comm="sh" name="syz-executor2918508250" dev="vda" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 85.511886][ T30] audit: type=1400 audit(85.440:71): avc: denied { execute_no_trans } for pid=3000 comm="sh" path="/syz-executor2918508250" dev="vda" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 86.179792][ T30] audit: type=1400 audit(86.110:72): avc: denied { execmem } for pid=3000 comm="syz-executor291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 86.323955][ T30] audit: type=1400 audit(86.260:73): avc: denied { prog_load } for pid=3001 comm="syz-executor291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.324916][ T30] audit: type=1400 audit(86.260:74): avc: denied { bpf } for pid=3001 comm="syz-executor291" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.340678][ T30] audit: type=1400 audit(86.260:75): avc: denied { perfmon } for pid=3001 comm="syz-executor291" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 executing program [ 86.388877][ T30] audit: type=1400 audit(86.330:76): avc: denied { prog_run } for pid=3001 comm="syz-executor291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 86.392090][ T3001] 8<--- cut here --- [ 86.392503][ T3001] Unable to handle kernel paging request at virtual address ffffffe9 when write [ 86.393167][ T3001] [ffffffe9] *pgd=80000080007003, *pmd=deffd003, *pte=00000000 [ 86.394447][ T3001] Internal error: Oops: a07 [#1] PREEMPT SMP ARM [ 86.395946][ T3001] Modules linked in: [ 86.396521][ T3001] CPU: 1 PID: 3001 Comm: syz-executor291 Not tainted 6.9.0-rc1-syzkaller #0 [ 86.397556][ T3001] Hardware name: ARM-Versatile Express [ 86.398052][ T3001] PC is at copy_from_kernel_nofault+0xb8/0x12c [ 86.399343][ T3001] LR is at copy_from_kernel_nofault+0x24/0x12c [ 86.399913][ T3001] pc : [<804361f0>] lr : [<8043615c>] psr: a0000013 [ 86.400567][ T3001] sp : df96dc90 ip : df96dc90 fp : df96dcac [ 86.400906][ T3001] r10: 00000000 r9 : df96dd40 r8 : ffffffe9 [ 86.401214][ T3001] r7 : 83d33c00 r6 : 00000005 r5 : ffffffe9 r4 : ffffffe9 [ 86.401735][ T3001] r3 : fffffff2 r2 : 00000000 r1 : 00000005 r0 : 00000001 [ 86.402308][ T3001] Flags: NzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 86.403213][ T3001] Control: 30c5387d Table: 8434d080 DAC: 00000000 [ 86.403889][ T3001] Register r0 information: non-paged memory [ 86.405224][ T3001] Register r1 information: non-paged memory [ 86.405750][ T3001] Register r2 information: NULL pointer [ 86.406034][ T3001] Register r3 information: non-paged memory [ 86.406348][ T3001] Register r4 information: non-paged memory [ 86.407193][ T3001] Register r5 information: non-paged memory [ 86.407718][ T3001] Register r6 information: non-paged memory [ 86.408363][ T3001] Register r7 information: slab task_struct start 83d33c00 pointer offset 0 size 3072 [ 86.409585][ T3001] Register r8 information: non-paged memory [ 86.409873][ T3001] Register r9 information: 2-page vmalloc region starting at 0xdf96c000 allocated at kernel_clone+0xac/0x3cc [ 86.411039][ T3001] Register r10 information: NULL pointer [ 86.411311][ T3001] Register r11 information: 2-page vmalloc region starting at 0xdf96c000 allocated at kernel_clone+0xac/0x3cc [ 86.412309][ T3001] Register r12 information: 2-page vmalloc region starting at 0xdf96c000 allocated at kernel_clone+0xac/0x3cc [ 86.413391][ T3001] Process syz-executor291 (pid: 3001, stack limit = 0xdf96c000) [ 86.414301][ T3001] Stack: (0xdf96dc90 to 0xdf96e000) [ 86.415219][ T3001] dc80: df96ddb8 ffffffe9 00000005 ffffffff [ 86.415648][ T3001] dca0: df96dccc df96dcb0 8037c428 80436144 df96ddb8 00000000 8037c40c ffffffff [ 86.416843][ T3001] dcc0: df96dd64 df96dcd0 7f011aa0 8037c418 ffffffe9 df96dd40 802ff648 81182b54 [ 86.417358][ T3001] dce0: df96dd64 df96dd30 35702575 00000000 828c0a94 40000013 00000000 00000000 [ 86.417796][ T3001] dd00: df96dcf0 00000000 df96dd74 df96dd18 df96dd2c df96dd20 81182b64 81898a78 [ 86.418723][ T3001] dd20: df96dd64 df96dd30 802ff648 81182b54 ffffffe9 df96dd40 00000005 00000000 [ 86.419130][ T3001] dd40: df96ddb8 00000000 df969000 842879c0 df969030 df96de30 df96ddfc df96dd68 [ 86.419475][ T3001] dd60: 8149c734 7f011a00 804d0184 8089c164 00000000 83d33c00 804b4cdc 804d0124 [ 86.420286][ T3001] dd80: 8260ca3c df96de30 00000001 df96de2c 80468494 00000000 df96ddb8 00000000 [ 86.421067][ T3001] dda0: 00000001 00000000 19df2b20 00000014 00000000 00000000 df969000 00000000 [ 86.421429][ T3001] ddc0: 00000000 00000000 84497800 f655f23e df96ddfc 842879c0 00000000 df96dec0 [ 86.422159][ T3001] dde0: 83f79c00 84497800 00000000 0000000e df96de64 df96de00 8149d6a0 8149c5d0 [ 86.423082][ T3001] de00: df96de30 00000000 00000000 df96de98 20000080 00000000 df969000 00000000 [ 86.423435][ T3001] de20: 828ffe80 82fe0000 8051cdd4 00000000 00000000 f655f23e 80395130 df969000 [ 86.424366][ T3001] de40: 00000028 df96de98 0000000a 20000080 00000028 00000000 df96df8c df96de68 [ 86.425067][ T3001] de60: 8039c858 8149d388 81c66394 84342c0c fcd9275f 00a00000 20000000 83d33c00 [ 86.425473][ T3001] de80: df96dee0 df96dfb0 df96dea4 df96de98 8089c348 df96dee0 20000080 00000000 [ 86.426333][ T3001] dea0: 83d33c00 df96ded0 00000008 00000000 00000008 80426e10 df96deec df96dec8 [ 86.427283][ T3001] dec0: 00000003 02000000 0000000e 00000055 20000140 00000000 20000380 00000000 [ 86.428663][ T3001] dee0: 00000000 04000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 86.429683][ T3001] df00: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 86.430100][ T3001] df20: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 86.430453][ T3001] df40: 00000000 00000000 00000000 00000000 00000000 00000000 20000000 f655f23e [ 86.431076][ T3001] df60: 80216078 ffffffff 00000000 0008e050 00000182 80200288 83d33c00 00000182 [ 86.431913][ T3001] df80: df96dfa4 df96df90 8039dd98 8039b934 20000080 00000000 00000000 df96dfa8 [ 86.432672][ T3001] dfa0: 80200060 8039dd78 ffffffff 00000000 0000000a 20000080 00000028 00000000 [ 86.433028][ T3001] dfc0: ffffffff 00000000 0008e050 00000182 20000100 00000000 00000001 00003a97 [ 86.434059][ T3001] dfe0: 7ec66c70 7ec66c60 00010748 0002e890 00000010 0000000a 00000000 00000000 [ 86.435038][ T3001] Call trace: [ 86.436048][ T3001] [<80436138>] (copy_from_kernel_nofault) from [<8037c428>] (bpf_probe_read_kernel+0x1c/0x44) [ 86.436900][ T3001] r7:ffffffff r6:00000005 r5:ffffffe9 r4:df96ddb8 [ 86.437517][ T3001] [<8037c40c>] (bpf_probe_read_kernel) from [<7f011aa0>] (bpf_prog_244768d4818575ac+0xac/0xc0) [ 86.438882][ T3001] r7:ffffffff r6:8037c40c r5:00000000 r4:df96ddb8 [ 86.439438][ T3001] [<7f0119f4>] (bpf_prog_244768d4818575ac) from [<8149c734>] (bpf_test_run+0x170/0x388) [ 86.439954][ T3001] r9:df96de30 r8:df969030 r7:842879c0 r6:df969000 r5:00000000 r4:df96ddb8 [ 86.440423][ T3001] [<8149c5c4>] (bpf_test_run) from [<8149d6a0>] (bpf_prog_test_run_skb+0x324/0x6cc) [ 86.441650][ T3001] r10:0000000e r9:00000000 r8:84497800 r7:83f79c00 r6:df96dec0 r5:00000000 [ 86.442463][ T3001] r4:842879c0 [ 86.443540][ T3001] [<8149d37c>] (bpf_prog_test_run_skb) from [<8039c858>] (__sys_bpf+0xf30/0x1ef0) [ 86.444128][ T3001] r10:00000000 r9:00000028 r8:20000080 r7:0000000a r6:df96de98 r5:00000028 [ 86.444468][ T3001] r4:df969000 [ 86.444708][ T3001] [<8039b928>] (__sys_bpf) from [<8039dd98>] (sys_bpf+0x2c/0x48) [ 86.445125][ T3001] r10:00000182 r9:83d33c00 r8:80200288 r7:00000182 r6:0008e050 r5:00000000 [ 86.445466][ T3001] r4:ffffffff [ 86.445635][ T3001] [<8039dd6c>] (sys_bpf) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 86.446131][ T3001] Exception stack(0xdf96dfa8 to 0xdf96dff0) [ 86.446408][ T3001] dfa0: ffffffff 00000000 0000000a 20000080 00000028 00000000 [ 86.446836][ T3001] dfc0: ffffffff 00000000 0008e050 00000182 20000100 00000000 00000001 00003a97 [ 86.447182][ T3001] dfe0: 7ec66c70 7ec66c60 00010748 0002e890 [ 86.448638][ T3001] Code: 9a000007 e3a03000 e4942000 e3530000 (e5852000) [ 86.449756][ T3001] ---[ end trace 0000000000000000 ]--- [ 86.450315][ T3001] Kernel panic - not syncing: Fatal exception in interrupt [ 86.452298][ T3001] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:16:04 Registers: info registers vcpu 0 CPU#0 R00=e07ca008 R01=00000008 R02=000021b1 R03=00000000 R04=e07ca008 R05=00000008 R06=60000093 R07=00000000 R08=838da6cc R09=00000000 R10=82858000 R11=82601e44 R12=82601e30 R13=82601e30 R14=808c7598 R15=808c7598 PSR=60000093 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=81fc474c R01=00000000 R02=00000000 R03=00000000 R04=81fc474c R05=83d33c00 R06=827dfea7 R07=60000113 R08=00000001 R09=00000bb9 R10=83d33c00 R11=df96dae4 R12=df96dae8 R13=df96daa0 R14=8184d018 R15=8024390c PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000