[ 34.535182][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.549835][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 42.305471][ T25] kauditd_printk_skb: 37 callbacks suppressed [ 42.305488][ T25] audit: type=1400 audit(1644501096.793:73): avc: denied { transition } for pid=3387 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 42.334012][ T25] audit: type=1400 audit(1644501096.803:74): avc: denied { write } for pid=3387 comm="sh" path="pipe:[28047]" dev="pipefs" ino=28047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. executing program [ 69.509571][ T25] audit: type=1400 audit(1644501124.003:75): avc: denied { execmem } for pid=3596 comm="syz-executor106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 69.532859][ T25] audit: type=1400 audit(1644501124.023:76): avc: denied { read } for pid=3597 comm="syz-executor106" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.535126][ T3597] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.557123][ T25] audit: type=1400 audit(1644501124.023:77): avc: denied { open } for pid=3597 comm="syz-executor106" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.596056][ T25] audit: type=1400 audit(1644501124.023:78): avc: denied { ioctl } for pid=3597 comm="syz-executor106" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.643261][ T25] audit: type=1400 audit(1644501124.133:79): avc: denied { write } for pid=3597 comm="syz-executor106" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 69.669747][ T25] audit: type=1400 audit(1644501124.163:80): avc: denied { map } for pid=3597 comm="syz-executor106" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 73.415893][ T3678] page:ffffea0001aa0000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a800 [ 73.426735][ T3678] head:ffffea0001aa0000 order:10 compound_mapcount:0 compound_pincount:0 [ 73.435236][ T3678] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 73.443384][ T3678] raw: 00fff00000010200 ffffea0001fe0008 ffffea0001ab0008 ffff888010c43300 [ 73.452439][ T3678] raw: 0000000000000000 ffff88806a800000 0000000100000001 0000000000000000 [ 73.461064][ T3678] page dumped because: VM_BUG_ON_FOLIO(folio_test_slab(folio)) [ 73.468638][ T3678] page_owner tracks the page as allocated [ 73.474354][ T3678] page last allocated via order 10, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 3597, ts 69672883637, free_ts 17391515587 [ 73.493590][ T3678] get_page_from_freelist+0xa72/0x2f50 [ 73.499129][ T3678] __alloc_pages+0x1b2/0x500 [ 73.503829][ T3678] cache_grow_begin+0x75/0x350 [ 73.508638][ T3678] cache_alloc_refill+0x27f/0x380 [ 73.513686][ T3678] __kmalloc+0x3b3/0x4d0 [ 73.518006][ T3678] hcd_buffer_alloc+0x1ed/0x290 [ 73.522881][ T3678] usb_alloc_coherent+0x5d/0x80 [ 73.527782][ T3678] usbdev_mmap+0x207/0x900 [ 73.532210][ T3678] mmap_region+0xd88/0x1630 [ 73.536704][ T3678] do_mmap+0x869/0xfb0 [ 73.540810][ T3678] vm_mmap_pgoff+0x1b7/0x290 [ 73.546026][ T3678] ksys_mmap_pgoff+0x40d/0x5a0 [ 73.550836][ T3678] do_syscall_64+0x35/0xb0 [ 73.555266][ T3678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.561204][ T3678] page last free stack trace: [ 73.565880][ T3678] free_pcp_prepare+0x374/0x870 [ 73.570776][ T3678] free_unref_page+0x19/0x690 [ 73.575465][ T3678] free_contig_range+0xa8/0xf0 [ 73.580296][ T3678] destroy_args+0xa8/0x646 [ 73.584727][ T3678] debug_vm_pgtable+0x298e/0x2a20 [ 73.589800][ T3678] do_one_initcall+0x103/0x650 [ 73.594581][ T3678] kernel_init_freeable+0x6b1/0x73a [ 73.599823][ T3678] kernel_init+0x1a/0x1d0 [ 73.604168][ T3678] ret_from_fork+0x1f/0x30 [ 73.608744][ T3678] ------------[ cut here ]------------ [ 73.614208][ T3678] kernel BUG at include/linux/memcontrol.h:470! [ 73.620501][ T3678] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 73.626580][ T3678] CPU: 0 PID: 3678 Comm: syz-executor106 Not tainted 5.17.0-rc3-syzkaller-00043-gf4bc5bbb5fef #0 [ 73.637066][ T3678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.647121][ T3678] RIP: 0010:workingset_activation+0x4f2/0x5d0 [ 73.653221][ T3678] Code: 48 89 ef e8 50 01 00 00 c6 05 da cf d3 0b 01 0f 0b e9 0e fd ff ff e8 6d 90 cc ff 48 c7 c6 c0 0c b7 89 48 89 ef e8 2e 01 00 00 <0f> 0b e8 57 90 cc ff 0f 0b e9 e6 fb ff ff e8 4b 90 cc ff 48 c7 c6 [ 73.672852][ T3678] RSP: 0018:ffffc90002ac7490 EFLAGS: 00010293 [ 73.678928][ T3678] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 73.686896][ T3678] RDX: ffff8880729940c0 RSI: ffffffff81ab1de2 RDI: 0000000000000003 [ 73.694873][ T3678] RBP: ffffea0001aa0000 R08: 0000000000000018 R09: 00000000ffffffff [ 73.702838][ T3678] R10: ffffffff8908d53c R11: 00000000ffffffff R12: 0000000000000000 [ 73.710805][ T3678] R13: ffff8880b9c34da8 R14: dffffc0000000000 R15: 0000000000000003 [ 73.718773][ T3678] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 73.727700][ T3678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.734285][ T3678] CR2: 00007fa33152f1f0 CR3: 000000001b7f5000 CR4: 00000000003526f0 [ 73.742256][ T3678] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 73.750223][ T3678] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 73.758198][ T3678] Call Trace: [ 73.761568][ T3678] [ 73.764498][ T3678] folio_mark_accessed+0x596/0xdd0 [ 73.769618][ T3678] kvm_set_pfn_accessed+0x1d8/0x220 [ 73.774816][ T3678] handle_changed_spte_acc_track+0x1bc/0x290 [ 73.780807][ T3678] __handle_changed_spte+0xb93/0x13e0 [ 73.786338][ T3678] ? alloc_tdp_mmu_page+0x4a0/0x4a0 [ 73.791548][ T3678] __handle_changed_spte+0xb84/0x13e0 [ 73.796920][ T3678] ? alloc_tdp_mmu_page+0x4a0/0x4a0 [ 73.802117][ T3678] __handle_changed_spte+0xb84/0x13e0 [ 73.807504][ T3678] ? alloc_tdp_mmu_page+0x4a0/0x4a0 [ 73.812701][ T3678] __tdp_mmu_set_spte+0x227/0xa70 [ 73.817728][ T3678] zap_gfn_range+0xd4c/0xe00 [ 73.822318][ T3678] ? zap_collapsible_spte_range+0xb50/0xb50 [ 73.828212][ T3678] __kvm_tdp_mmu_zap_gfn_range+0xdc/0x110 [ 73.834024][ T3678] ? kvm_guest_state+0x100/0x100 [ 73.838961][ T3678] kvm_tdp_mmu_zap_all+0x26/0x70 [ 73.843902][ T3678] kvm_mmu_zap_all+0x27c/0x2c0 [ 73.848664][ T3678] ? kvm_mmu_slot_leaf_clear_dirty+0x4c0/0x4c0 [ 73.854816][ T3678] ? lock_release+0x720/0x720 [ 73.859521][ T3678] ? __khugepaged_exit+0x2b8/0x460 [ 73.864639][ T3678] ? kasan_save_stack+0x2e/0x40 [ 73.869489][ T3678] ? kasan_save_stack+0x1e/0x40 [ 73.874338][ T3678] ? kasan_set_track+0x21/0x30 [ 73.879102][ T3678] ? kasan_set_free_info+0x20/0x30 [ 73.884216][ T3678] ? __kasan_slab_free+0xee/0x130 [ 73.889242][ T3678] ? kvm_guest_state+0x100/0x100 [ 73.894176][ T3678] kvm_mmu_notifier_release+0x5f/0xa0 [ 73.899557][ T3678] ? kvm_guest_state+0x100/0x100 [ 73.904493][ T3678] __mmu_notifier_release+0x1a9/0x600 [ 73.909880][ T3678] ? mmu_notifier_get_locked+0x3e0/0x3e0 [ 73.915516][ T3678] ? debug_check_no_obj_freed+0x20c/0x420 [ 73.921233][ T3678] ? lock_downgrade+0x6e0/0x6e0 [ 73.926084][ T3678] exit_mmap+0x543/0x670 [ 73.930327][ T3678] ? do_raw_spin_unlock+0x171/0x230 [ 73.935528][ T3678] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 73.941509][ T3678] ? debug_check_no_obj_freed+0x20c/0x420 [ 73.947228][ T3678] ? kmem_cache_free.part.0+0xe1/0x200 [ 73.952746][ T3678] ? __khugepaged_exit+0x2b8/0x460 [ 73.957861][ T3678] ? lockdep_hardirqs_on+0x79/0x100 [ 73.963063][ T3678] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 73.969309][ T3678] __mmput+0x122/0x4b0 [ 73.973376][ T3678] mmput+0x56/0x60 [ 73.977093][ T3678] do_exit+0xa3c/0x2a30 [ 73.981247][ T3678] ? lock_downgrade+0x6e0/0x6e0 [ 73.986099][ T3678] ? lock_downgrade+0x6e0/0x6e0 [ 73.990950][ T3678] ? mm_update_next_owner+0x7a0/0x7a0 [ 73.996326][ T3678] do_group_exit+0xd2/0x2f0 [ 74.000920][ T3678] __x64_sys_exit_group+0x3a/0x50 [ 74.005949][ T3678] do_syscall_64+0x35/0xb0 [ 74.010366][ T3678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 74.016262][ T3678] RIP: 0033:0x7fa3314b91f9 [ 74.020680][ T3678] Code: Unable to access opcode bytes at RIP 0x7fa3314b91cf. [ 74.028033][ T3678] RSP: 002b:00007fffac3303d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 74.036545][ T3678] RAX: ffffffffffffffda RBX: 00007fa33152e350 RCX: 00007fa3314b91f9 [ 74.044515][ T3678] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 74.052481][ T3678] RBP: 0000000000000000 R08: ffffffffffffffc0 R09: 0000000000000000 [ 74.060453][ T3678] R10: 0000000000000006 R11: 0000000000000246 R12: 00007fa33152e350 [ 74.068416][ T3678] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 74.076388][ T3678] [ 74.079399][ T3678] Modules linked in: [ 74.083340][ T3678] ---[ end trace 0000000000000000 ]--- [ 74.088806][ T3678] RIP: 0010:workingset_activation+0x4f2/0x5d0 [ 74.094900][ T3678] Code: 48 89 ef e8 50 01 00 00 c6 05 da cf d3 0b 01 0f 0b e9 0e fd ff ff e8 6d 90 cc ff 48 c7 c6 c0 0c b7 89 48 89 ef e8 2e 01 00 00 <0f> 0b e8 57 90 cc ff 0f 0b e9 e6 fb ff ff e8 4b 90 cc ff 48 c7 c6 [ 74.114635][ T3678] RSP: 0018:ffffc90002ac7490 EFLAGS: 00010293 [ 74.120742][ T3678] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 74.128817][ T3678] RDX: ffff8880729940c0 RSI: ffffffff81ab1de2 RDI: 0000000000000003 [ 74.136779][ T3678] RBP: ffffea0001aa0000 R08: 0000000000000018 R09: 00000000ffffffff [ 74.144768][ T3678] R10: ffffffff8908d53c R11: 00000000ffffffff R12: 0000000000000000 [ 74.152761][ T3678] R13: ffff8880b9c34da8 R14: dffffc0000000000 R15: 0000000000000003 [ 74.160747][ T3678] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 74.169695][ T3678] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.176267][ T3678] CR2: 00007fa33152f1f0 CR3: 000000001b7f5000 CR4: 00000000003526f0 [ 74.184264][ T3678] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.192251][ T3678] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.200247][ T3678] Kernel panic - not syncing: Fatal exception [ 74.206511][ T3678] Kernel Offset: disabled [ 74.210825][ T3678] Rebooting in 86400 seconds..