Warning: Permanently added '[localhost]:28527' (ED25519) to the list of known hosts. 1970/01/01 00:03:54 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:03:57 parsed 1 programs [ 238.700504][ T31] audit: type=1400 audit(238.640:100): avc: denied { unlink } for pid=4058 comm="syz-executor" name="swap-file" dev="vda" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 247.273721][ T4058] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 251.486628][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.503517][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.328360][ T4184] hsr_slave_0: entered promiscuous mode [ 252.334337][ T4184] hsr_slave_1: entered promiscuous mode [ 252.907169][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.914987][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.923703][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.931239][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.885542][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.434757][ T4184] veth0_vlan: entered promiscuous mode [ 264.461368][ T4184] veth1_vlan: entered promiscuous mode [ 264.577819][ T4184] veth0_macvtap: entered promiscuous mode [ 264.587106][ T4184] veth1_macvtap: entered promiscuous mode [ 264.896295][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.896925][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.897270][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.897583][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.813196][ T1057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.901480][ T1057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.003994][ T1057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.268523][ T1057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:04:26 executed programs: 0 [ 267.202386][ T1057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.238362][ T1057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.245425][ T1057] bond0 (unregistering): Released all slaves [ 267.347764][ T1057] hsr_slave_0: left promiscuous mode [ 267.361938][ T1057] hsr_slave_1: left promiscuous mode [ 267.367881][ T1057] veth1_macvtap: left promiscuous mode [ 267.368390][ T1057] veth0_macvtap: left promiscuous mode [ 267.368789][ T1057] veth1_vlan: left promiscuous mode [ 267.369150][ T1057] veth0_vlan: left promiscuous mode [ 272.841575][ T4623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.846731][ T4623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.275179][ T4623] hsr_slave_0: entered promiscuous mode [ 275.280566][ T4623] hsr_slave_1: entered promiscuous mode [ 276.734584][ T4623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.754881][ T4623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.784604][ T4623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.812549][ T4623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.821085][ T4623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.426780][ T4623] veth0_vlan: entered promiscuous mode [ 287.447227][ T4623] veth1_vlan: entered promiscuous mode [ 287.508847][ T4623] veth0_macvtap: entered promiscuous mode [ 287.518869][ T4623] veth1_macvtap: entered promiscuous mode [ 287.574310][ T4623] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.574828][ T4623] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.575180][ T4623] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.575512][ T4623] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.798531][ T5020] 8<--- cut here --- [ 287.799044][ T5020] Unable to handle kernel NULL pointer dereference at virtual address 00000018 when write [ 287.806371][ T5020] [00000018] *pgd=8461f003, *pmd=fe158003 [ 287.808014][ T5020] Internal error: Oops: a05 [#1] PREEMPT SMP ARM [ 287.808615][ T5020] Modules linked in: [ 287.809141][ T5020] CPU: 1 PID: 5020 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller #0 [ 287.809903][ T5020] Hardware name: ARM-Versatile Express [ 287.810449][ T5020] PC is at do_pagemap_scan+0x2ac/0x6f8 [ 287.811481][ T5020] LR is at do_pagemap_scan+0x278/0x6f8 [ 287.811799][ T5020] pc : [<805a7844>] lr : [<805a7810>] psr: 20000013 [ 287.812201][ T5020] sp : df9bde18 ip : df9bde18 fp : df9bdf04 [ 287.812652][ T5020] r10: 00000000 r9 : 00000000 r8 : 00000000 [ 287.812949][ T5020] r7 : df9bde50 r6 : 8395ec00 r5 : 20165000 r4 : 8414bc00 [ 287.813335][ T5020] r3 : 20ffb000 r2 : 00000000 r1 : 00000000 r0 : 00000010 [ 287.813889][ T5020] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 287.814279][ T5020] Control: 30c5387d Table: 846150c0 DAC: 00000000 [ 287.814634][ T5020] Register r0 information: zero-size pointer [ 287.815355][ T5020] Register r1 information: NULL pointer [ 287.815662][ T5020] Register r2 information: NULL pointer [ 287.816325][ T5020] Register r3 information: non-paged memory [ 287.816665][ T5020] Register r4 information: slab mm_struct start 8414bc00 pointer offset 0 size 712 [ 287.817737][ T5020] Register r5 information: non-paged memory [ 287.818066][ T5020] Register r6 information: slab task_struct start 8395ec00 pointer offset 0 size 3072 [ 287.818590][ T5020] Register r7 information: 2-page vmalloc region starting at 0xdf9bc000 allocated at kernel_clone+0xac/0x3e4 [ 287.819337][ T5020] Register r8 information: NULL pointer [ 287.821700][ T5020] Register r9 information: NULL pointer [ 287.823357][ T5020] Register r10 information: NULL pointer [ 287.823844][ T5020] Register r11 information: 2-page vmalloc region starting at 0xdf9bc000 allocated at kernel_clone+0xac/0x3e4 [ 287.824583][ T5020] Register r12 information: 2-page vmalloc region starting at 0xdf9bc000 allocated at kernel_clone+0xac/0x3e4 [ 287.825131][ T5020] Process syz-executor (pid: 5020, stack limit = 0xdf9bc000) [ 287.825796][ T5020] Stack: (0xdf9bde18 to 0xdf9be000) [ 287.826244][ T5020] de00: 00000000 00000000 [ 287.826655][ T5020] de20: 00000000 00000000 200004c0 00000001 20165000 00000000 00000000 00000000 [ 287.827074][ T5020] de40: 00000000 00000000 00000000 00000000 00000060 00000000 00000000 00000000 [ 287.827458][ T5020] de60: 20165000 00000000 20ffb000 00000000 00000000 00000000 20000000 00000000 [ 287.827831][ T5020] de80: 00000000 10000000 ffffffff 00000000 00000000 00000000 00000000 00000000 [ 287.828246][ T5020] dea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000010 00000000 [ 287.829583][ T5020] dec0: 00000000 00000000 20000000 00000000 c0606610 26b635ba df9bdef4 c0606610 [ 287.829974][ T5020] dee0: 00000000 84408c01 200004c0 84408c00 00000003 8395ec00 df9bdf14 df9bdf08 [ 287.832381][ T5020] df00: 805a7cb8 805a75a4 df9bdfa4 df9bdf18 8051a5a8 805a7c9c 8395ec00 00000001 [ 287.834017][ T5020] df20: ecac8b10 8395ec00 df9bdf44 df9bdf38 818f3c94 818f3b64 df9bdf5c df9bdf48 [ 287.835244][ T5020] df40: 8024d2a4 8027cc9c 40000000 df9bdfb0 df9bdf84 df9bdf60 80202dc4 8024d260 [ 287.836769][ T5020] df60: 8261c90c df9bdfb0 0006bf00 ecac8b10 80202cac 26b635ba df9bdfac 00000000 [ 287.838453][ T5020] df80: 00000000 001542c8 00000036 8020029c 8395ec00 00000036 00000000 df9bdfa8 [ 287.838853][ T5020] dfa0: 80200060 8051a480 00000000 00000000 00000003 c0606610 200004c0 00000000 [ 287.839597][ T5020] dfc0: 00000000 00000000 001542c8 00000036 7ed4a336 7ed4a337 003d0f00 76b0b0fc [ 287.840013][ T5020] dfe0: 76b0af08 76b0aef8 00016f30 000516d0 60000010 00000003 00000000 00000000 [ 287.840523][ T5020] Call trace: [ 287.840965][ T5020] [<805a7598>] (do_pagemap_scan) from [<805a7cb8>] (do_pagemap_cmd+0x28/0x34) [ 287.841603][ T5020] r10:8395ec00 r9:00000003 r8:84408c00 r7:200004c0 r6:84408c01 r5:00000000 [ 287.842009][ T5020] r4:c0606610 [ 287.842274][ T5020] [<805a7c90>] (do_pagemap_cmd) from [<8051a5a8>] (sys_ioctl+0x134/0xda4) [ 287.842685][ T5020] [<8051a474>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 287.843108][ T5020] Exception stack(0xdf9bdfa8 to 0xdf9bdff0) [ 287.843394][ T5020] dfa0: 00000000 00000000 00000003 c0606610 200004c0 00000000 [ 287.843882][ T5020] dfc0: 00000000 00000000 001542c8 00000036 7ed4a336 7ed4a337 003d0f00 76b0b0fc [ 287.844280][ T5020] dfe0: 76b0af08 76b0aef8 00016f30 000516d0 [ 287.844562][ T5020] r10:00000036 r9:8395ec00 r8:8020029c r7:00000036 r6:001542c8 r5:00000000 [ 287.844920][ T5020] r4:00000000 [ 287.845446][ T5020] Code: e51b309c e51b108c e50b103c e3a01000 (e1c080f8) [ 287.857563][ T5020] ---[ end trace 0000000000000000 ]--- [ 287.860491][ T5020] Kernel panic - not syncing: Fatal exception [ 287.863820][ T5020] Rebooting in 86400 seconds..