Warning: Permanently added '[localhost]:16475' (ED25519) to the list of known hosts. [ 189.803132][ T28] audit: type=1400 audit(189.570:58): avc: denied { execute } for pid=3139 comm="sh" name="syz-execprog" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 189.805294][ T28] audit: type=1400 audit(189.570:59): avc: denied { execute_no_trans } for pid=3139 comm="sh" path="/syz-execprog" dev="vda" ino=1735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 1970/01/01 00:03:10 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:03:13 parsed 1 programs [ 193.675988][ T28] audit: type=1400 audit(193.440:60): avc: denied { getattr } for pid=3139 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.681657][ T28] audit: type=1400 audit(193.440:61): avc: denied { read } for pid=3139 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.682466][ T28] audit: type=1400 audit(193.440:62): avc: denied { open } for pid=3139 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 193.782593][ T28] audit: type=1400 audit(193.550:63): avc: denied { read } for pid=3139 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.783674][ T28] audit: type=1400 audit(193.550:64): avc: denied { open } for pid=3139 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 194.036937][ T28] audit: type=1400 audit(193.800:65): avc: denied { mounton } for pid=3144 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 194.044403][ T28] audit: type=1400 audit(193.810:66): avc: denied { mount } for pid=3144 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 194.070793][ T3144] cgroup: Unknown subsys name 'net' [ 194.096288][ T28] audit: type=1400 audit(193.860:67): avc: denied { unmount } for pid=3144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 194.434656][ T3144] cgroup: Unknown subsys name 'rlimit' [ 195.154054][ T3148] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 195.157659][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 195.157827][ T28] audit: type=1400 audit(194.920:71): avc: denied { relabelto } for pid=3148 comm="mkswap" name="swap-file" dev="vda" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 195.165049][ T28] audit: type=1400 audit(194.920:72): avc: denied { write } for pid=3148 comm="mkswap" path="/swap-file" dev="vda" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 195.224885][ T28] audit: type=1400 audit(194.990:73): avc: denied { read } for pid=3144 comm="syz-executor" name="swap-file" dev="vda" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 195.227723][ T28] audit: type=1400 audit(194.990:74): avc: denied { open } for pid=3144 comm="syz-executor" path="/swap-file" dev="vda" ino=1742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 195.239312][ T3144] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:03:15 executed programs: 0 [ 195.617971][ T28] audit: type=1400 audit(195.380:75): avc: denied { execmem } for pid=3154 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 195.662446][ T28] audit: type=1400 audit(195.420:76): avc: denied { mounton } for pid=3155 comm="syz-executor.1" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 195.663661][ T28] audit: type=1400 audit(195.420:77): avc: denied { mount } for pid=3155 comm="syz-executor.1" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 195.701854][ T28] audit: type=1400 audit(195.460:78): avc: denied { mounton } for pid=3155 comm="syz-executor.1" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 195.721981][ T28] audit: type=1400 audit(195.480:79): avc: denied { module_request } for pid=3155 comm="syz-executor.1" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 195.819754][ T28] audit: type=1400 audit(195.580:80): avc: denied { sys_module } for pid=3155 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 199.458915][ T3155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.485788][ T3155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.993089][ T3156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.024224][ T3156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.585064][ T3155] hsr_slave_0: entered promiscuous mode [ 201.647119][ T3155] hsr_slave_1: entered promiscuous mode [ 202.105293][ T3156] hsr_slave_0: entered promiscuous mode [ 202.144422][ T3156] hsr_slave_1: entered promiscuous mode [ 202.182641][ T3156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.183638][ T3156] Cannot create hsr debugfs directory [ 203.497780][ T28] audit: type=1400 audit(203.260:81): avc: denied { create } for pid=3155 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.524714][ T28] audit: type=1400 audit(203.290:82): avc: denied { write } for pid=3155 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.543360][ T28] audit: type=1400 audit(203.290:83): avc: denied { read } for pid=3155 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 203.548805][ T3155] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.647992][ T3155] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.720576][ T3155] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.808238][ T3155] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.180342][ T3156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.264736][ T3156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.410473][ T3156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.495416][ T3156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.776864][ T3155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.119502][ T3156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.730819][ T3155] veth0_vlan: entered promiscuous mode [ 211.834464][ T3155] veth1_vlan: entered promiscuous mode [ 212.149959][ T3155] veth0_macvtap: entered promiscuous mode [ 212.220726][ T3155] veth1_macvtap: entered promiscuous mode [ 212.345217][ T3156] veth0_vlan: entered promiscuous mode [ 212.454230][ T3156] veth1_vlan: entered promiscuous mode [ 212.590517][ T3155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.592884][ T3155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.593272][ T3155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.593898][ T3155] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.935349][ T28] audit: type=1400 audit(212.700:84): avc: denied { mounton } for pid=3155 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 212.964350][ T3156] veth0_macvtap: entered promiscuous mode [ 212.967796][ T28] audit: type=1400 audit(212.730:85): avc: denied { mount } for pid=3155 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 213.016661][ T3156] veth1_macvtap: entered promiscuous mode [ 213.304681][ T3156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.305257][ T3156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.305714][ T3156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.306053][ T3156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.614066][ T28] audit: type=1400 audit(213.380:86): avc: denied { read write } for pid=3155 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.615166][ T28] audit: type=1400 audit(213.380:87): avc: denied { open } for pid=3155 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.615962][ T28] audit: type=1400 audit(213.380:88): avc: denied { ioctl } for pid=3155 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=641 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.837118][ T28] audit: type=1400 audit(213.590:89): avc: denied { create } for pid=3288 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.880668][ T28] audit: type=1400 audit(213.640:90): avc: denied { write } for pid=3288 comm="syz-executor.1" name="virtual_nci" dev="devtmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 1970/01/01 00:03:33 executed programs: 2 1970/01/01 00:03:39 executed programs: 19 [ 221.245767][ T2959] Unable to handle kernel paging request at virtual address dfff800000000001 [ 221.246607][ T2959] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 221.247026][ T2959] Mem abort info: [ 221.247329][ T2959] ESR = 0x0000000096000005 [ 221.247717][ T2959] EC = 0x25: DABT (current EL), IL = 32 bits [ 221.248087][ T2959] SET = 0, FnV = 0 [ 221.248395][ T2959] EA = 0, S1PTW = 0 [ 221.250131][ T2959] FSC = 0x05: level 1 translation fault [ 221.250549][ T2959] Data abort info: [ 221.252645][ T2959] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 221.253034][ T2959] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 221.253508][ T2959] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 221.253909][ T2959] [dfff800000000001] address between user and kernel address ranges [ 221.254857][ T2959] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 221.255566][ T2959] Modules linked in: [ 221.256575][ T2959] CPU: 0 PID: 2959 Comm: udevd Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 221.257191][ T2959] Hardware name: linux,dummy-virt (DT) [ 221.257914][ T2959] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 221.258394][ T2959] pc : list_lru_add+0x138/0x314 [ 221.259996][ T2959] lr : list_lru_add+0x284/0x314 [ 221.260493][ T2959] sp : ffff80008dd27b80 [ 221.260942][ T2959] x29: ffff80008dd27b80 x28: 0000000000000001 x27: 0000000000000000 [ 221.262046][ T2959] x26: 0000000000000000 x25: ffff00000dd8a778 x24: 1fffe00003843dd9 [ 221.262600][ T2959] x23: ffff00000eece000 x22: 0000000000000000 x21: 0000000000000000 [ 221.263101][ T2959] x20: ffff000013bfd100 x19: ffff00001c21eec8 x18: 0000000000000000 [ 221.263605][ T2959] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 221.264108][ T2959] x14: 0000000000000000 x13: 0000000000000000 x12: 000000000000f1f1 [ 221.264948][ T2959] x11: dfff800000000000 x10: 00000000f3000000 x9 : 00000000f3f3f3f3 [ 221.265662][ T2959] x8 : ffff700011ba4f42 x7 : 00000000f1f1f1f1 x6 : dfff800000000000 [ 221.266366][ T2959] x5 : ffff700011ba4f46 x4 : 00000000f204f1f1 x3 : 1fffe0000d514138 [ 221.267163][ T2959] x2 : 0000000000000000 x1 : 0000000000000008 x0 : dfff800000000000 [ 221.268027][ T2959] Call trace: [ 221.268458][ T2959] list_lru_add+0x138/0x314 [ 221.268864][ T2959] list_lru_add_obj+0xd4/0x13c [ 221.269165][ T2959] d_lru_add+0x180/0x31c [ 221.269468][ T2959] dput.part.0+0x4f8/0x608 [ 221.269845][ T2959] dput+0x14/0x24 [ 221.270103][ T2959] __fput+0x268/0x92c [ 221.270567][ T2959] __fput_sync+0x74/0x84 [ 221.271156][ T2959] __arm64_sys_close+0x6c/0xbc [ 221.271766][ T2959] invoke_syscall+0x6c/0x258 [ 221.272106][ T2959] el0_svc_common.constprop.0+0xac/0x230 [ 221.272439][ T2959] do_el0_svc+0x40/0x58 [ 221.272744][ T2959] el0_svc+0x58/0x140 [ 221.273135][ T2959] el0t_64_sync_handler+0x100/0x12c [ 221.273515][ T2959] el0t_64_sync+0x190/0x194 [ 221.274280][ T2959] Code: d2d00000 f2fbffe0 f90037e1 d343fc3c (38e06b80) [ 221.275961][ T2959] ---[ end trace 0000000000000000 ]--- [ 221.276883][ T2959] Kernel panic - not syncing: Oops: Fatal exception [ 221.277707][ T2959] SMP: stopping secondary CPUs [ 221.278777][ T2959] Kernel Offset: disabled [ 221.279079][ T2959] CPU features: 0x1,10000202,34020000,0100421b [ 221.279897][ T2959] Memory Limit: none [ 221.280565][ T2959] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:08:40 Registers: info registers vcpu 0 CPU#0 PC=ffff800084d8125c X00=ffff800084d81258 X01=0000000000000003 X02=0000000000000000 X03=1fffe000027d1001 X04=1ffff00011ba4e80 X05=0000000000000000 X06=ffff000013e88000 X07=00000000f2f2f2f2 X08=00000000f3f3f300 X09=00000000f2000000 X10=00000000f204f204 X11=00000000f3f3f3f3 X12=00000000f1f1f1f1 X13=205d393539325420 X14=0000000000000000 X15=0000000000000000 X16=0000000000000000 X17=0000000000000000 X18=0000000000000000 X19=ffff8000867d0d70 X20=ffff8000867d0d40 X21=0000000000000000 X22=0000000000000004 X23=0000000000000028 X24=ffff8000867d0d70 X25=ffff800084de0920 X26=1fffe0000d5125f5 X27=0000000000000000 X28=ffff000013e88000 X29=ffff80008dd27450 X30=ffff800084d7fa00 SP=ffff80008dd27450 PSTATE=100000c5 ---V EL1h FPCR=00000000 FPSR=00000000 Q00=2c2c2c2c2c2c2c2c:2c2c2c2c2c2c2c2c Q01=706d6520676e6970:70696b5300657200 Q02=0000000000000000:00000000c000000c Q03=0000000000000000:0000000000000000 Q04=3003300330033003:3003300330033003 Q05=f00ff00ff00ff00f:f00ff00ff00ff00f Q06=000000000000c00c:000000000000c00c Q07=0000aaaae1928790:000002da00000000 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000000000002000:0000000000000000 Q17=000000000000000b:0000000000000000 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000 info registers vcpu 1 CPU#1 PC=ffff8000802c6298 X00=0000000000000001 X01=0000000000000007 X02=ffff80008654f008 X03=1fffe0000d518338 X04=ffff800080201f98 X05=1fffe000015a8e02 X06=ffff800089c078c0 X07=1fffe0000239ddc0 X08=ffff00000f000800 X09=0000ffff82f50000 X10=ffff00000fdd0ff8 X11=1ffff00011380ed0 X12=ffff6000029ebd33 X13=ffff00000ad47020 X14=1ffff00011380e3c X15=ffff00000b35bb80 X16=ffff00000b35bb88 X17=0000000000001540 X18=ffff800089c071f0 X19=ffff800089c078b0 X20=ffff000011ceee00 X21=0000ffff82f4ffff X22=1ffff00011380f1b X23=ffffffffffffffff X24=0000000000000005 X25=ffff000011ceee00 X26=000000000000000c X27=1ffff00011380f19 X28=0000ffff82f4ffff X29=ffff800089c07650 X30=ffff80008015ccd8 SP=ffff800089c07780 PSTATE=60000005 -ZC- EL1h FPCR=00000000 FPSR=00000000 Q00=0100000000000000:0100000000000000 Q01=0000000100000000:0000000000000000 Q02=0000000000000001:0000000000000000 Q03=00d000a800000000:0000000000000000 Q04=0000000000000000:0000000000000002 Q05=0000000000000001:0000000000000002 Q06=6edc4d3a2914b135:d8e9c869e2695c88 Q07=b20fae707afde253:388e9c6c4fa85ca0 Q08=0000000000000000:0000000000000000 Q09=0000000000000000:0000000000000000 Q10=0000000000000000:0000000000000000 Q11=0000000000000000:0000000000000000 Q12=0000000000000000:0000000000000000 Q13=0000000000000000:0000000000000000 Q14=0000000000000000:0000000000000000 Q15=0000000000000000:0000000000000000 Q16=0000ffffe2599d40:0000ffffe2599d40 Q17=ffffff80ffffffd0:0000ffffe2599d10 Q18=0000000000000000:0000000000000000 Q19=0000000000000000:0000000000000000 Q20=0000000000000000:0000000000000000 Q21=0000000000000000:0000000000000000 Q22=0000000000000000:0000000000000000 Q23=0000000000000000:0000000000000000 Q24=0000000000000000:0000000000000000 Q25=0000000000000000:0000000000000000 Q26=0000000000000000:0000000000000000 Q27=0000000000000000:0000000000000000 Q28=0000000000000000:0000000000000000 Q29=0000000000000000:0000000000000000 Q30=0000000000000000:0000000000000000 Q31=0000000000000000:0000000000000000