Warning: Permanently added '[localhost]:59073' (ED25519) to the list of known hosts. 1970/01/01 00:07:12 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:07:34 parsed 1 programs [ 459.727972][ T30] audit: type=1400 audit(459.230:92): avc: denied { mount } for pid=3664 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 459.940693][ T30] audit: type=1400 audit(459.460:93): avc: denied { unlink } for pid=3664 comm="syz-executor" name="swap-file" dev="vda" ino=1873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 460.671031][ T3664] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 476.396679][ T30] audit: type=1400 audit(475.920:94): avc: denied { mounton } for pid=3672 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 477.781457][ T30] audit: type=1400 audit(477.300:95): avc: denied { mounton } for pid=3676 comm="syz-executor" path="/syzkaller.N4x8mf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 477.799756][ T30] audit: type=1400 audit(477.320:96): avc: denied { mount } for pid=3676 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 482.996584][ T30] audit: type=1401 audit(482.520:97): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 491.805664][ T3704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.820522][ T3704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.018218][ T3704] hsr_slave_0: entered promiscuous mode [ 494.024104][ T3704] hsr_slave_1: entered promiscuous mode [ 496.540159][ T3704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.598647][ T3704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.646948][ T3704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 496.669514][ T3704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 498.510318][ T3704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.586290][ T3704] veth0_vlan: entered promiscuous mode [ 505.624360][ T3704] veth1_vlan: entered promiscuous mode [ 506.051207][ T3704] veth0_macvtap: entered promiscuous mode [ 506.098069][ T3704] veth1_macvtap: entered promiscuous mode [ 506.396852][ T3704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.397351][ T3704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.400159][ T3704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.402208][ T3704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.856478][ T26] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.231898][ T26] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.531963][ T26] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.932478][ T26] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.260295][ T26] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.356248][ T26] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.418661][ T26] bond0 (unregistering): Released all slaves [ 515.882358][ T26] hsr_slave_0: left promiscuous mode [ 515.900589][ T26] hsr_slave_1: left promiscuous mode 1970/01/01 00:08:35 executed programs: 0 [ 516.034287][ T26] veth1_macvtap: left promiscuous mode [ 516.035705][ T26] veth0_macvtap: left promiscuous mode [ 516.040974][ T26] veth1_vlan: left promiscuous mode [ 516.043212][ T26] veth0_vlan: left promiscuous mode [ 529.856286][ T3836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.896345][ T3836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.119005][ T3836] hsr_slave_0: entered promiscuous mode [ 532.131759][ T3836] hsr_slave_1: entered promiscuous mode [ 534.952234][ T3836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.985162][ T3836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 535.005262][ T3836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 535.037220][ T3836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.911079][ T3836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.865077][ T3836] veth0_vlan: entered promiscuous mode [ 544.005113][ T3836] veth1_vlan: entered promiscuous mode [ 544.361603][ T3836] veth0_macvtap: entered promiscuous mode [ 544.390970][ T3836] veth1_macvtap: entered promiscuous mode [ 544.635237][ T3836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.635779][ T3836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.635937][ T3836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.636090][ T3836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:09:04 executed programs: 2 [ 545.644111][ T30] audit: type=1400 audit(545.160:98): avc: denied { read write } for pid=3969 comm="syz.2.16" name="nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 545.646817][ T30] audit: type=1400 audit(545.170:99): avc: denied { open } for pid=3969 comm="syz.2.16" path="/dev/nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.203627][ T30] audit: type=1400 audit(545.720:100): avc: denied { map } for pid=3969 comm="syz.2.16" path="/dev/nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.207979][ T30] audit: type=1400 audit(545.730:101): avc: denied { execute } for pid=3969 comm="syz.2.16" path="/dev/nullb0" dev="devtmpfs" ino=671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.268130][ T30] audit: type=1400 audit(545.790:102): avc: denied { ioctl } for pid=3969 comm="syz.2.16" path="/dev/nullb0" dev="devtmpfs" ino=671 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 546.304630][ T3970] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff00001ef13300 pfn:0x5ef10 [ 546.307202][ T3970] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 546.308376][ T3970] memcg:ffff000016dda000 [ 546.309272][ T3970] flags: 0x1ffc00000000041(locked|head|node=0|zone=0|lastcpupid=0x7ff) [ 546.312049][ T3970] raw: 01ffc00000000041 0000000000000000 dead000000000122 0000000000000000 [ 546.315066][ T3970] raw: ffff00001ef13300 0000000000000000 00000001ffffffff ffff000016dda000 [ 546.316229][ T3970] head: 01ffc00000000041 0000000000000000 dead000000000122 0000000000000000 [ 546.317178][ T3970] head: ffff00001ef13300 0000000000000000 00000001ffffffff ffff000016dda000 [ 546.318118][ T3970] head: 01ffc00000000202 fffffdffc07bc401 00000000ffffffff 00000000ffffffff [ 546.319064][ T3970] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 546.320273][ T3970] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 546.322050][ T3970] ------------[ cut here ]------------ [ 546.322198][ T3970] kernel BUG at mm/filemap.c:867! [ 546.323584][ T3970] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 546.324471][ T3970] Modules linked in: [ 546.325411][ T3970] CPU: 0 UID: 0 PID: 3970 Comm: syz.2.16 Not tainted 6.15.0-rc6-syzkaller-g172a9d94339c #0 PREEMPT [ 546.325908][ T3970] Hardware name: linux,dummy-virt (DT) [ 546.326791][ T3970] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 546.327508][ T3970] pc : __filemap_add_folio+0xafc/0xd54 [ 546.328705][ T3970] lr : __filemap_add_folio+0xafc/0xd54 [ 546.328926][ T3970] sp : ffff8000a1f96fc0 [ 546.329199][ T3970] x29: ffff8000a1f96fc0 x28: 0000000000112cc0 x27: 0000000000000003 [ 546.329750][ T3970] x26: 0000000000000002 x25: ffff8000a1f97170 x24: 0000000000000110 [ 546.330201][ T3970] x23: ffff00000e49e488 x22: 0000000000000002 x21: fffffdffc07bc400 [ 546.330574][ T3970] x20: 0000000000112cc0 x19: ffff8000a1f97090 x18: 0000000000000000 [ 546.330932][ T3970] x17: 6e697070616d203c x16: 20296f696c6f6628 x15: 726564726f5f6f69 [ 546.331311][ T3970] x14: 6c6f66284f494c4f x13: 0000000000000001 x12: ffff700010e2c105 [ 546.331498][ T30] audit: type=1400 audit(545.840:103): avc: denied { read } for pid=3110 comm="syslogd" name="log" dev="vda" ino=1857 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 546.332361][ T3970] x11: 1ffff00010e2c104 x10: ffff700010e2c104 x9 : dfff800000000000 [ 546.332878][ T3970] x8 : 0000000000000003 x7 : 0000000000000001 x6 : ffff700010e2c104 [ 546.333336][ T3970] x5 : ffff800087160820 x4 : 1fffe000029e1b59 x3 : 0000000000000000 [ 546.333754][ T3970] x2 : 0000000000000000 x1 : ffff000014f0dac0 x0 : 000000000000005b [ 546.334298][ T3970] Call trace: [ 546.334632][ T3970] __filemap_add_folio+0xafc/0xd54 (P) [ 546.334969][ T3970] filemap_add_folio+0x124/0x1d4 [ 546.335197][ T3970] page_cache_ra_order+0x3f4/0x9b8 [ 546.335445][ T3970] filemap_fault+0x1018/0x2320 [ 546.335661][ T3970] __do_fault+0xc8/0x588 [ 546.335854][ T3970] __handle_mm_fault+0x16a8/0x3688 [ 546.336054][ T3970] handle_mm_fault+0x334/0x7ac [ 546.336248][ T3970] do_page_fault+0x2ec/0xca0 [ 546.336459][ T3970] do_translation_fault+0x184/0x1e8 [ 546.336668][ T3970] do_mem_abort+0x68/0x1a4 [ 546.336860][ T3970] el1_abort+0x3c/0x5c [ 546.337070][ T3970] el1h_64_sync_handler+0xa8/0x124 [ 546.337268][ T3970] el1h_64_sync+0x6c/0x70 [ 546.337536][ T3970] fault_in_readable+0x11c/0x234 (P) [ 546.337755][ T3970] fault_in_iov_iter_readable+0xd4/0x22c [ 546.338067][ T3970] generic_perform_write+0x4e4/0x684 [ 546.338375][ T3970] shmem_file_write_iter+0xe0/0x104 [ 546.338605][ T3970] vfs_write+0x4b0/0xad4 [ 546.338806][ T3970] ksys_write+0xec/0x1d8 [ 546.338994][ T3970] __arm64_sys_write+0x6c/0x9c [ 546.339210][ T3970] invoke_syscall+0x6c/0x258 [ 546.339435][ T3970] el0_svc_common.constprop.0+0xac/0x230 [ 546.339665][ T3970] do_el0_svc+0x40/0x58 [ 546.339849][ T3970] el0_svc+0x50/0x180 [ 546.340027][ T3970] el0t_64_sync_handler+0x10c/0x138 [ 546.340226][ T3970] el0t_64_sync+0x198/0x19c [ 546.340682][ T3970] Code: 91040021 aa1503e0 913b0021 94034996 (d4210000) [ 546.341644][ T3970] ---[ end trace 0000000000000000 ]--- [ 546.342103][ T30] audit: type=1400 audit(545.840:104): avc: denied { search } for pid=3110 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 546.342494][ T3970] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 546.343815][ T3970] SMP: stopping secondary CPUs [ 546.344823][ T3970] Kernel Offset: disabled [ 546.345053][ T3970] CPU features: 0x0410,00040068,01000400,0200421b [ 546.345360][ T3970] Memory Limit: none [ 546.345936][ T3970] Rebooting in 86400 seconds..