[ 60.330063][ T35] audit: type=1400 audit(1644513589.785:158): avc: denied { create } for pid=5410 comm="syz-fuzzer" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.388031][ T35] audit: type=1400 audit(1644513589.855:159): avc: denied { create } for pid=5410 comm="syz-fuzzer" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 60.409734][ T35] audit: type=1400 audit(1644513589.855:160): avc: denied { create } for pid=5410 comm="syz-fuzzer" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.828267][ T35] kauditd_printk_skb: 23 callbacks suppressed [ 64.828278][ T35] audit: type=1400 audit(1644513594.295:184): avc: denied { read } for pid=5685 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1461 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.857136][ T35] audit: type=1400 audit(1644513594.295:185): avc: denied { open } for pid=5685 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1461 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.900111][ T35] audit: type=1400 audit(1644513594.365:186): avc: denied { create } for pid=5682 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.923524][ T35] audit: type=1400 audit(1644513594.365:187): avc: denied { write } for pid=5682 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=1535 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.951727][ T35] audit: type=1400 audit(1644513594.365:188): avc: denied { append } for pid=5682 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=1535 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 64.976959][ T35] audit: type=1400 audit(1644513594.425:189): avc: denied { unlink } for pid=5693 comm="rm" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=1535 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 76.631561][ T5] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. [ 79.519872][ T35] audit: type=1400 audit(1644513608.985:190): avc: denied { ioctl } for pid=5870 comm="syz-executor331" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.520513][ T5870] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.593815][ T35] audit: type=1400 audit(1644513609.065:191): avc: denied { write } for pid=5870 comm="syz-executor331" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.622148][ T35] audit: type=1400 audit(1644513609.095:192): avc: denied { map } for pid=5870 comm="syz-executor331" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 79.632137][ T5870] page:00000000097aa749 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37400 [ 79.657577][ T5870] head:00000000097aa749 order:10 compound_mapcount:0 compound_pincount:0 [ 79.666618][ T5870] flags: 0xfff00000010208(dirty|slab|head) [ 79.673028][ T5870] raw: 00fff00000010208 ffffea0000970008 ffff88800f442450 ffff88800f443300 [ 79.683337][ T5870] raw: 0000000000000000 ffff888037400000 0000000100000001 0000000000000000 [ 79.692480][ T5870] page dumped because: VM_BUG_ON_PAGE(PageSlab(page)) [ 79.700201][ T5870] page_owner tracks the page as allocated [ 79.706029][ T5870] page last allocated via order 10, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5870, ts 79624950900 [ 79.724179][ T5870] post_alloc_hook+0x144/0x1c0 [ 79.730663][ T5870] get_page_from_freelist+0x1c6e/0x3f80 [ 79.736740][ T5870] __alloc_pages_nodemask+0x2d6/0x730 [ 79.742909][ T5870] cache_grow_begin+0x71/0x430 [ 79.747866][ T5870] cache_alloc_refill+0x27f/0x380 [ 79.753245][ T5870] __kmalloc+0x35c/0x440 [ 79.758114][ T5870] usbdev_mmap+0x1e9/0x8f0 [ 79.762945][ T5870] mmap_region+0xa3c/0x14a0 [ 79.768149][ T5870] do_mmap+0x911/0x1030 [ 79.772810][ T5870] vm_mmap_pgoff+0x163/0x220 [ 79.777925][ T5870] ksys_mmap_pgoff+0x3b2/0x5f0 [ 79.783493][ T5870] do_syscall_64+0x2d/0x70 [ 79.788223][ T5870] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 79.794344][ T5870] page last free stack trace: [ 79.799239][ T5870] __free_pages_ok+0x4da/0xed0 [ 79.805231][ T5870] release_pages+0x4b7/0x1400 [ 79.810715][ T5870] tlb_flush_mmu+0xbb/0x590 [ 79.815556][ T5870] unmap_page_range+0x12ef/0x1eb0 [ 79.820733][ T5870] unmap_vmas+0x14c/0x280 [ 79.825107][ T5870] exit_mmap+0x245/0x4c0 [ 79.829508][ T5870] __mmput+0xeb/0x3e0 [ 79.833537][ T5870] do_exit+0x9e9/0x2570 [ 79.837834][ T5870] do_group_exit+0xe7/0x290 [ 79.842387][ T5870] get_signal+0x36c/0x1c30 [ 79.846808][ T5870] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 79.852568][ T5870] exit_to_user_mode_prepare+0x148/0x250 [ 79.858382][ T5870] syscall_exit_to_user_mode+0x19/0x60 [ 79.863918][ T5870] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 79.869869][ T5870] ------------[ cut here ]------------ [ 79.875389][ T5870] kernel BUG at include/linux/memcontrol.h:387! [ 79.881663][ T5870] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 79.887887][ T5870] CPU: 1 PID: 5870 Comm: syz-executor331 Not tainted 5.11.0-syzkaller #0 [ 79.896288][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.906344][ T5870] RIP: 0010:workingset_activation+0x44e/0x600 [ 79.912413][ T5870] Code: df 48 c1 e8 03 80 3c 10 00 0f 85 b5 01 00 00 48 8b 1d 1e 1f a1 0a e9 e5 fd ff ff 48 c7 c6 e0 68 94 88 48 89 ef e8 22 0d 00 00 <0f> 0b 0f 1f 44 00 00 80 3d a9 e5 8c 0a 00 0f 85 b4 fd ff ff 48 c7 [ 79.932279][ T5870] RSP: 0018:ffffc90001d6f848 EFLAGS: 00010283 [ 79.938442][ T5870] RAX: 0000000000000000 RBX: ffffea0000dd0000 RCX: 0000000000000000 [ 79.946406][ T5870] RDX: 0000000000000000 RSI: ffffffff88dd2440 RDI: ffff88801112200a [ 79.954362][ T5870] RBP: ffffea0000dd0000 R08: 0000000000000029 R09: ffff8880b9f4c827 [ 79.962319][ T5870] R10: ffffed10173e9904 R11: 535f7972746e6520 R12: ffffea0000dd0008 [ 79.970785][ T5870] R13: ffffea0000dd0000 R14: ffffea0000dd0034 R15: 0000000000000000 [ 79.978925][ T5870] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 79.987962][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.994632][ T5870] CR2: 00007f8cfa45f1f0 CR3: 000000001f164000 CR4: 00000000003526e0 [ 80.002694][ T5870] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.010648][ T5870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.018612][ T5870] Call Trace: [ 80.021877][ T5870] mmu_spte_clear_track_bits+0x12f/0x240 [ 80.028108][ T5870] drop_spte+0x1c/0x990 [ 80.032246][ T5870] mmu_page_zap_pte+0x267/0x2d0 [ 80.037104][ T5870] ? mmu_zap_unsync_children+0x5a0/0x5a0 [ 80.042776][ T5870] __kvm_mmu_prepare_zap_page+0x16a/0x1220 [ 80.048559][ T5870] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 80.054525][ T5870] ? do_raw_spin_lock+0x120/0x2b0 [ 80.059529][ T5870] ? handle_abnormal_pfn+0x3b0/0x3b0 [ 80.064788][ T5870] ? rwlock_bug.part.0+0x90/0x90 [ 80.069811][ T5870] kvm_mmu_zap_all+0xe0/0x240 [ 80.074565][ T5870] ? kvm_mmu_slot_set_dirty+0x540/0x540 [ 80.080341][ T5870] ? lock_release+0x710/0x710 [ 80.085008][ T5870] ? __lock_acquire+0x1644/0x57d0 [ 80.090180][ T5870] kvm_mmu_notifier_release+0x4b/0x80 [ 80.095651][ T5870] ? kvm_device_ioctl+0x360/0x360 [ 80.100659][ T5870] __mmu_notifier_release+0x183/0x530 [ 80.106120][ T5870] ? mmu_notifier_get_locked+0x350/0x350 [ 80.111728][ T5870] ? __khugepaged_exit+0x2c6/0x3e0 [ 80.116817][ T5870] ? lock_downgrade+0x6d0/0x6d0 [ 80.121642][ T5870] exit_mmap+0x3bd/0x4c0 [ 80.125869][ T5870] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 80.131923][ T5870] ? up_write+0x191/0x560 [ 80.136228][ T5870] ? downgrade_write+0x3a0/0x3a0 [ 80.141228][ T5870] ? down_write_killable_nested+0x170/0x170 [ 80.147293][ T5870] ? __khugepaged_exit+0x2c6/0x3e0 [ 80.152496][ T5870] __mmput+0xeb/0x3e0 [ 80.156467][ T5870] do_exit+0x9e9/0x2570 [ 80.160790][ T5870] ? static_obj+0x71/0xc0 [ 80.165099][ T5870] ? mm_update_next_owner+0x6d0/0x6d0 [ 80.170440][ T5870] ? lock_downgrade+0x6d0/0x6d0 [ 80.175443][ T5870] do_group_exit+0xe7/0x290 [ 80.179928][ T5870] __x64_sys_exit_group+0x35/0x40 [ 80.184938][ T5870] do_syscall_64+0x2d/0x70 [ 80.189333][ T5870] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 80.195208][ T5870] RIP: 0033:0x7f8cfa3e91d9 [ 80.199732][ T5870] Code: Unable to access opcode bytes at RIP 0x7f8cfa3e91af. [ 80.207734][ T5870] RSP: 002b:00007ffc683546f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 80.216380][ T5870] RAX: ffffffffffffffda RBX: 00007f8cfa45e350 RCX: 00007f8cfa3e91d9 [ 80.224854][ T5870] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 80.232827][ T5870] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000 [ 80.240790][ T5870] R10: 0000000000000006 R11: 0000000000000246 R12: 00007f8cfa45e350 [ 80.249188][ T5870] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 80.257286][ T5870] Modules linked in: [ 80.261736][ T5870] ---[ end trace 0a25222621a30c62 ]--- [ 80.267277][ T5870] RIP: 0010:workingset_activation+0x44e/0x600 [ 80.273371][ T5870] Code: df 48 c1 e8 03 80 3c 10 00 0f 85 b5 01 00 00 48 8b 1d 1e 1f a1 0a e9 e5 fd ff ff 48 c7 c6 e0 68 94 88 48 89 ef e8 22 0d 00 00 <0f> 0b 0f 1f 44 00 00 80 3d a9 e5 8c 0a 00 0f 85 b4 fd ff ff 48 c7 [ 80.293348][ T5870] RSP: 0018:ffffc90001d6f848 EFLAGS: 00010283 [ 80.299674][ T5870] RAX: 0000000000000000 RBX: ffffea0000dd0000 RCX: 0000000000000000 [ 80.307891][ T5870] RDX: 0000000000000000 RSI: ffffffff88dd2440 RDI: ffff88801112200a [ 80.316025][ T5870] RBP: ffffea0000dd0000 R08: 0000000000000029 R09: ffff8880b9f4c827 [ 80.324034][ T5870] R10: ffffed10173e9904 R11: 535f7972746e6520 R12: ffffea0000dd0008 [ 80.332022][ T5870] R13: ffffea0000dd0000 R14: ffffea0000dd0034 R15: 0000000000000000 [ 80.340017][ T5870] FS: 0000000000000000(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 80.349739][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.356438][ T5870] CR2: 00007f8cfa45f1f0 CR3: 000000001f164000 CR4: 00000000003526e0 [ 80.364424][ T5870] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.372810][ T5870] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.388738][ T5870] Kernel panic - not syncing: Fatal exception [ 80.398554][ T5870] Kernel Offset: disabled [ 80.403148][ T5870] Rebooting in 86400 seconds..