Warning: Permanently added '[localhost]:43833' (ED25519) to the list of known hosts. 1970/01/01 00:06:25 parsed 1 programs [ 394.288487][ T3690] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 411.377940][ T3706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.396449][ T3706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.025221][ T3706] hsr_slave_0: entered promiscuous mode [ 413.037045][ T3706] hsr_slave_1: entered promiscuous mode [ 414.772054][ T3706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.816009][ T3706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.835654][ T3706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.862126][ T3706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.418375][ T3706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.247514][ T3706] veth0_vlan: entered promiscuous mode [ 421.305083][ T3706] veth1_vlan: entered promiscuous mode [ 421.479628][ T3706] veth0_macvtap: entered promiscuous mode [ 421.517312][ T3706] veth1_macvtap: entered promiscuous mode [ 421.725144][ T1027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.725692][ T1027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.754686][ T1027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.755117][ T1027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.434701][ T1027] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.712349][ T1027] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.925674][ T1027] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.035046][ T1027] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.994951][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.069843][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.117309][ T1027] bond0 (unregistering): Released all slaves [ 425.361245][ T1027] hsr_slave_0: left promiscuous mode [ 425.367627][ T1027] hsr_slave_1: left promiscuous mode [ 425.435019][ T1027] veth1_macvtap: left promiscuous mode [ 425.437938][ T1027] veth0_macvtap: left promiscuous mode [ 425.447676][ T1027] veth1_vlan: left promiscuous mode [ 425.454679][ T1027] veth0_vlan: left promiscuous mode 1970/01/01 00:07:18 executed programs: 0 [ 442.338866][ T3922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.373998][ T3922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.836165][ T3922] hsr_slave_0: entered promiscuous mode [ 443.844803][ T3922] hsr_slave_1: entered promiscuous mode [ 445.197349][ T3922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.219632][ T3922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.245492][ T3922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.265900][ T3922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.682473][ T3922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.931973][ T3922] veth0_vlan: entered promiscuous mode [ 450.981681][ T3922] veth1_vlan: entered promiscuous mode [ 451.243031][ T3922] veth0_macvtap: entered promiscuous mode [ 451.291152][ T3922] veth1_macvtap: entered promiscuous mode [ 451.555784][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.556228][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.556641][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.556973][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:07:31 executed programs: 2 [ 452.532189][ T4041] ================================================================== [ 452.535637][ T4041] BUG: KASAN: invalid-access in __kvm_pgtable_walk+0x110/0x2d0 [ 452.537460][ T4041] Read at addr f0f0000007d02000 by task syz.2.17/4041 [ 452.537885][ ** replaying previous printk message ** [ 452.537885][ T4041] Pointer tag: [f0], memory tag: [fe] [ 452.537971][ T4041] [ 452.538515][ T4041] CPU: 1 UID: 0 PID: 4041 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT [ 452.538872][ T4041] Hardware name: linux,dummy-virt (DT) [ 452.539106][ T4041] Call trace: [ 452.539430][ T4041] show_stack+0x18/0x24 (C) [ 452.539671][ T4041] dump_stack_lvl+0x78/0x90 [ 452.539842][ T4041] print_report+0x108/0x61c [ 452.539966][ T4041] kasan_report+0x88/0xac [ 452.540089][ T4041] __do_kernel_fault+0x170/0x1c8 [ 452.540207][ T4041] do_bad_area+0x68/0x78 [ 452.540321][ T4041] do_tag_check_fault+0x34/0x44 [ 452.540436][ T4041] do_mem_abort+0x44/0x94 [ 452.540550][ T4041] el1_abort+0x40/0x60 [ 452.540700][ T4041] el1h_64_sync_handler+0x50/0xac [ 452.540855][ T4041] el1h_64_sync+0x6c/0x70 [ 452.541065][ T4041] __kvm_pgtable_walk+0x110/0x2d0 (P) [ 452.541243][ T4041] kvm_pgtable_walk+0xd0/0x164 [ 452.541359][ T4041] kvm_pgtable_stage2_destroy_range+0x3c/0x70 [ 452.541476][ T4041] kvm_stage2_destroy+0x74/0xd0 [ 452.541630][ T4041] kvm_free_stage2_pgd+0x5c/0xc0 [ 452.541748][ T4041] kvm_uninit_stage2_mmu+0x1c/0x34 [ 452.541863][ T4041] kvm_arch_flush_shadow_all+0x6c/0x84 [ 452.541981][ T4041] kvm_mmu_notifier_release+0x30/0x84 [ 452.542100][ T4041] mmu_notifier_unregister+0x5c/0x11c [ 452.542267][ T4041] kvm_destroy_vm+0x148/0x2b0 [ 452.542438][ T4041] kvm_vm_release+0x80/0xb0 [ 452.542554][ T4041] __fput+0xcc/0x2dc [ 452.542671][ T4041] ____fput+0x14/0x20 [ 452.542784][ T4041] task_work_run+0x78/0xd4 [ 452.542902][ T4041] do_notify_resume+0x13c/0x16c [ 452.543021][ T4041] el0_svc+0x108/0x10c [ 452.543136][ T4041] el0t_64_sync_handler+0xa0/0xe4 [ 452.543293][ T4041] el0t_64_sync+0x1a4/0x1a8 [ 452.543552][ T4041] [ 452.543693][ T4041] The buggy address belongs to the physical page: [ 452.544012][ T4041] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xfaf0000007d026c0 pfn:0x47d02 [ 452.544320][ T4041] flags: 0x1fffc0000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0xf) [ 452.545111][ T4041] raw: 01fffc0000000000 ffffc1ffc0375788 ffffc1ffc0374788 0000000000000000 [ 452.545218][ T4041] raw: faf0000007d026c0 0000000000000000 00000000ffffffff 0000000000000000 [ 452.545334][ T4041] page dumped because: kasan: bad access detected [ 452.545393][ T4041] [ 452.545440][ T4041] Memory state around the buggy address: [ 452.545674][ T4041] fff0000007d01e00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 fa fa [ 452.545786][ T4041] fff0000007d01f00: fa fa fa fa fa fc fc fc fc fc fc fc fe fe fe fe [ 452.545937][ T4041] >fff0000007d02000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 452.546033][ T4041] ^ [ 452.546231][ T4041] fff0000007d02100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 452.546301][ T4041] fff0000007d02200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 452.546395][ T4041] ================================================================== [ 452.547535][ T4041] Disabling lock debugging due to kernel taint [ 452.552761][ T4041] Unable to handle kernel paging request at virtual address fff6011cc11c0000 [ 452.552858][ T4041] Mem abort info: [ 452.552926][ T4041] ESR = 0x000000009600002b [ 452.553068][ T4041] EC = 0x25: DABT (current EL), IL = 32 bits [ 452.553226][ T4041] SET = 0, FnV = 0 [ 452.553326][ T4041] EA = 0, S1PTW = 0 [ 452.553416][ T4041] FSC = 0x2b: level -1 translation fault [ 452.553486][ T4041] Data abort info: [ 452.553532][ T4041] ISV = 0, ISS = 0x0000002b, ISS2 = 0x00000000 [ 452.553590][ T4041] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 452.553674][ T4041] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 452.553802][ T4041] swapper pgtable: 4k pages, 52-bit VAs, pgdp=0000000042978000 [ 452.554057][ T4041] [fff6011cc11c0000] pgd=0000000000000000 [ 452.555216][ T4041] Internal error: Oops: 000000009600002b [#1] SMP [ 452.580005][ T4041] Modules linked in: [ 452.580864][ T4041] CPU: 1 UID: 0 PID: 4041 Comm: syz.2.17 Tainted: G B syzkaller #0 PREEMPT [ 452.581645][ T4041] Tainted: [B]=BAD_PAGE [ 452.582009][ T4041] Hardware name: linux,dummy-virt (DT) [ 452.582603][ T4041] pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 452.583209][ T4041] pc : __kvm_pgtable_walk+0x110/0x2d0 [ 452.583672][ T4041] lr : __kvm_pgtable_walk+0xb4/0x2d0 [ 452.584073][ T4041] sp : ffff8000897ab910 [ 452.584432][ T4041] x29: ffff8000897ab910 x28: f9f0000012c1dc80 x27: 0000000000000000 [ 452.585403][ T4041] x26: 0000000000000003 x25: 0000000000000004 x24: fffffffffffff000 [ 452.586097][ T4041] x23: 0000000000001000 x22: ffff80008292e9c8 x21: fff6011cc11c1000 [ 452.586746][ T4041] x20: ffff8000897abbd8 x19: fff6011cc11c0000 x18: 00000000ffffffff [ 452.587394][ T4041] x17: 0000000000000000 x16: 0000000000000000 x15: ffff800081b63cd0 [ 452.588014][ T4041] x14: fbf0000003145d00 x13: 0000000000000001 x12: 0000000000000001 [ 452.588645][ T4041] x11: 00000042f216d964 x10: fbf0000003145d00 x9 : 0000000000000005 [ 452.589414][ T4041] x8 : 0000000000000070 x7 : 0000000000000000 x6 : 0000000000000000 [ 452.590304][ T4041] x5 : 0000004e80000000 x4 : fff6011cc11c0008 x3 : 0000004ec0000000 [ 452.591360][ T4041] x2 : ffff8000897abc10 x1 : 0000004e80800000 x0 : 000000000000000c [ 452.591920][ T4041] Call trace: [ 452.592193][ T4041] __kvm_pgtable_walk+0x110/0x2d0 (P) [ 452.592563][ T4041] __kvm_pgtable_walk+0xb4/0x2d0 [ 452.592886][ T4041] __kvm_pgtable_walk+0xb4/0x2d0 [ 452.593416][ T4041] __kvm_pgtable_walk+0xb4/0x2d0 [ 452.594203][ T4041] kvm_pgtable_walk+0xd0/0x164 [ 452.594650][ T4041] kvm_pgtable_stage2_destroy_range+0x3c/0x70 [ 452.595132][ T4041] kvm_stage2_destroy+0x74/0xd0 [ 452.595598][ T4041] kvm_free_stage2_pgd+0x5c/0xc0 [ 452.596026][ T4041] kvm_uninit_stage2_mmu+0x1c/0x34 [ 452.596611][ T4041] kvm_arch_flush_shadow_all+0x6c/0x84 [ 452.597068][ T4041] kvm_mmu_notifier_release+0x30/0x84 [ 452.597648][ T4041] mmu_notifier_unregister+0x5c/0x11c [ 452.598139][ T4041] kvm_destroy_vm+0x148/0x2b0 [ 452.598545][ T4041] kvm_vm_release+0x80/0xb0 [ 452.598942][ T4041] __fput+0xcc/0x2dc [ 452.599357][ T4041] ____fput+0x14/0x20 [ 452.599806][ T4041] task_work_run+0x78/0xd4 [ 452.600507][ T4041] do_notify_resume+0x13c/0x16c [ 452.600917][ T4041] el0_svc+0x108/0x10c [ 452.601309][ T4041] el0t_64_sync_handler+0xa0/0xe4 [ 452.601901][ T4041] el0t_64_sync+0x1a4/0x1a8 [ 452.602671][ T4041] Code: f9400e83 eb01007f 54000789 a9401682 (f9400260) [ 452.603429][ T4041] ---[ end trace 0000000000000000 ]--- [ 452.604015][ T4041] Kernel panic - not syncing: Oops: Fatal exception [ 452.604524][ T4041] SMP: stopping secondary CPUs [ 452.605414][ T4041] Kernel Offset: disabled [ 452.605685][ T4041] CPU features: 0x000000,0000d198,2fbe33e0,557ffebf [ 452.606185][ T4041] Memory Limit: none [ 452.607198][ T4041] Rebooting in 86400 seconds..