Warning: Permanently added '[localhost]:13480' (ED25519) to the list of known hosts. 1970/01/01 00:03:23 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:03:26 parsed 1 programs [ 208.208029][ T31] audit: type=1400 audit(208.140:100): avc: denied { unlink } for pid=4158 comm="syz-executor" name="swap-file" dev="vda" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 216.291813][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.548281][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.557803][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.454263][ T4281] hsr_slave_0: entered promiscuous mode [ 220.456249][ T4281] hsr_slave_1: entered promiscuous mode [ 220.977867][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.985006][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.991207][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.997848][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.496303][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.468458][ T4281] veth0_vlan: entered promiscuous mode [ 231.515476][ T4281] veth1_vlan: entered promiscuous mode [ 231.787776][ T4281] veth0_macvtap: entered promiscuous mode [ 231.816283][ T4281] veth1_macvtap: entered promiscuous mode [ 232.001396][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.003884][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.004170][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.004415][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.115216][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.288939][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.435712][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.770855][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.594209][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.655687][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.685065][ T11] bond0 (unregistering): Released all slaves [ 234.839696][ T11] hsr_slave_0: left promiscuous mode [ 234.845339][ T11] hsr_slave_1: left promiscuous mode [ 234.853056][ T11] veth1_macvtap: left promiscuous mode [ 234.853464][ T11] veth0_macvtap: left promiscuous mode [ 234.853798][ T11] veth1_vlan: left promiscuous mode [ 234.854074][ T11] veth0_vlan: left promiscuous mode 1970/01/01 00:03:55 executed programs: 0 [ 242.036316][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.041947][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.116153][ T4727] hsr_slave_0: entered promiscuous mode [ 245.124782][ T4727] hsr_slave_1: entered promiscuous mode [ 246.367568][ T4727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.389308][ T4727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.407609][ T4727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.420026][ T4727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.834769][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.820263][ T4727] veth0_vlan: entered promiscuous mode [ 256.838933][ T4727] veth1_vlan: entered promiscuous mode [ 256.888664][ T4727] veth0_macvtap: entered promiscuous mode [ 256.896950][ T4727] veth1_macvtap: entered promiscuous mode [ 256.945127][ T4727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.945695][ T4727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.946050][ T4727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.946404][ T4727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.160822][ T5120] 8<--- cut here --- [ 257.161292][ T5120] Unable to handle kernel NULL pointer dereference at virtual address 00000018 when write [ 257.161737][ T5120] [00000018] *pgd=84c29003, *pmd=feaad003 [ 257.165636][ T5120] Internal error: Oops: a05 [#1] PREEMPT SMP ARM [ 257.166198][ T5120] Modules linked in: [ 257.166906][ T5120] CPU: 1 UID: 0 PID: 5120 Comm: syz-executor.0 Not tainted 6.11.0-syzkaller #0 [ 257.167383][ T5120] Hardware name: ARM-Versatile Express [ 257.167790][ T5120] PC is at do_pagemap_scan+0x2ac/0x6f8 [ 257.168692][ T5120] LR is at do_pagemap_scan+0x278/0x6f8 [ 257.168927][ T5120] pc : [<805afef8>] lr : [<805afec4>] psr: 20000013 [ 257.169222][ T5120] sp : dfa0de18 ip : dfa0de18 fp : dfa0df04 [ 257.169489][ T5120] r10: 00000000 r9 : 00000000 r8 : 00000000 [ 257.169806][ T5120] r7 : dfa0de50 r6 : 8445a400 r5 : 20165000 r4 : 840a6d00 [ 257.170112][ T5120] r3 : 20ffb000 r2 : 00000000 r1 : 00000000 r0 : 00000010 [ 257.170547][ T5120] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 257.170898][ T5120] Control: 30c5387d Table: 84d35680 DAC: 00000000 [ 257.171225][ T5120] Register r0 information: zero-size pointer [ 257.171922][ T5120] Register r1 information: NULL pointer [ 257.172194][ T5120] Register r2 information: NULL pointer [ 257.172465][ T5120] Register r3 information: non-paged memory [ 257.172748][ T5120] Register r4 information: slab mm_struct start 840a6d00 pointer offset 0 size 712 [ 257.173668][ T5120] Register r5 information: non-paged memory [ 257.173932][ T5120] Register r6 information: slab task_struct start 8445a400 pointer offset 0 size 3072 [ 257.174370][ T5120] Register r7 information: 2-page vmalloc region starting at 0xdfa0c000 allocated at kernel_clone+0xac/0x3e4 [ 257.174964][ T5120] Register r8 information: NULL pointer [ 257.175238][ T5120] Register r9 information: NULL pointer [ 257.175506][ T5120] Register r10 information: NULL pointer [ 257.175776][ T5120] Register r11 information: 2-page vmalloc region starting at 0xdfa0c000 allocated at kernel_clone+0xac/0x3e4 [ 257.176205][ T5120] Register r12 information: 2-page vmalloc region starting at 0xdfa0c000 allocated at kernel_clone+0xac/0x3e4 [ 257.176655][ T5120] Process syz-executor.0 (pid: 5120, stack limit = 0xdfa0c000) [ 257.177269][ T5120] Stack: (0xdfa0de18 to 0xdfa0e000) [ 257.177927][ T5120] de00: 00000000 00000000 [ 257.178496][ T5120] de20: 00000000 00000000 200004c0 00000001 20165000 00000000 00000000 00000000 [ 257.178878][ T5120] de40: 00000000 00000000 00000000 00000000 00000060 00000000 00000000 00000000 [ 257.179244][ T5120] de60: 20165000 00000000 20ffb000 00000000 00000000 00000000 20000000 00000000 [ 257.179648][ T5120] de80: 00000000 10000000 ffffffff 00000000 00000000 00000000 00000000 00000000 [ 257.180018][ T5120] dea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000010 00000000 [ 257.180409][ T5120] dec0: 00000000 00000000 20000000 00000000 845f4a81 352c46c4 845f4a80 c0606610 [ 257.180792][ T5120] dee0: 00000000 845f4a81 200004c0 845f4a80 00000003 8445a400 dfa0df14 dfa0df08 [ 257.181159][ T5120] df00: 805b036c 805afc58 dfa0dfa4 dfa0df18 80520e5c 805b0350 8445a400 00000001 [ 257.181545][ T5120] df20: ecac8b10 8445a400 dfa0df44 dfa0df38 8197c76c 8197c63c dfa0df5c dfa0df48 [ 257.181927][ T5120] df40: 8024bb58 8027b56c 40000000 dfa0dfb0 dfa0df84 dfa0df60 80202dd8 8024bb14 [ 257.182588][ T5120] df60: 8261c9cc dfa0dfb0 0006bf00 ecac8b10 80202cc0 352c46c4 dfa0dfac 00000000 [ 257.183241][ T5120] df80: 00000000 001542c8 00000036 8020029c 8445a400 00000036 00000000 dfa0dfa8 [ 257.183625][ T5120] dfa0: 80200060 80520d34 00000000 00000000 00000003 c0606610 200004c0 00000000 [ 257.184001][ T5120] dfc0: 00000000 00000000 001542c8 00000036 7ed67336 7ed67337 003d0f00 76b3c0fc [ 257.184377][ T5120] dfe0: 76b3bf08 76b3bef8 00016f30 000516d0 60000010 00000003 00000000 00000000 [ 257.184817][ T5120] Call trace: [ 257.185239][ T5120] [<805afc4c>] (do_pagemap_scan) from [<805b036c>] (do_pagemap_cmd+0x28/0x34) [ 257.185912][ T5120] r10:8445a400 r9:00000003 r8:845f4a80 r7:200004c0 r6:845f4a81 r5:00000000 [ 257.186288][ T5120] r4:c0606610 [ 257.186576][ T5120] [<805b0344>] (do_pagemap_cmd) from [<80520e5c>] (sys_ioctl+0x134/0xda4) [ 257.186970][ T5120] [<80520d28>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 257.187370][ T5120] Exception stack(0xdfa0dfa8 to 0xdfa0dff0) [ 257.187646][ T5120] dfa0: 00000000 00000000 00000003 c0606610 200004c0 00000000 [ 257.188005][ T5120] dfc0: 00000000 00000000 001542c8 00000036 7ed67336 7ed67337 003d0f00 76b3c0fc [ 257.188411][ T5120] dfe0: 76b3bf08 76b3bef8 00016f30 000516d0 [ 257.188703][ T5120] r10:00000036 r9:8445a400 r8:8020029c r7:00000036 r6:001542c8 r5:00000000 [ 257.189046][ T5120] r4:00000000 [ 257.189615][ T5120] Code: e51b309c e51b108c e50b103c e3a01000 (e1c080f8) [ 257.191630][ T5120] ---[ end trace 0000000000000000 ]--- [ 257.192729][ T5120] Kernel panic - not syncing: Fatal exception [ 257.195680][ T5120] Rebooting in 86400 seconds..