[ 372.833589][ T3157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.138919][ T3157] eql: remember to turn off Van-Jacobson compression on your slave devices Warning: Permanently added '[localhost]:12446' (ED25519) to the list of known hosts. [ 911.926765][ T25] audit: type=1400 audit(911.150:61): avc: denied { execute } for pid=3323 comm="sh" name="syz-execprog" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 911.954979][ T25] audit: type=1400 audit(911.170:62): avc: denied { execute_no_trans } for pid=3323 comm="sh" path="/syz-execprog" dev="vda" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 1970/01/01 00:16:01 parsed 1 programs [ 962.042182][ T25] audit: type=1400 audit(961.260:63): avc: denied { node_bind } for pid=3323 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 982.059393][ T25] audit: type=1400 audit(981.280:64): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/syzcgroup/unified" dev="vda" ino=1870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 982.093855][ T25] audit: type=1400 audit(981.310:65): avc: denied { mount } for pid=3331 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 982.177706][ T3331] cgroup: Unknown subsys name 'net' [ 982.227551][ T25] audit: type=1400 audit(981.450:66): avc: denied { unmount } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 982.611781][ T3331] cgroup: Unknown subsys name 'cpuset' [ 982.707973][ T3331] cgroup: Unknown subsys name 'rlimit' [ 984.008645][ T25] audit: type=1400 audit(983.230:67): avc: denied { setattr } for pid=3331 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 984.036794][ T25] audit: type=1400 audit(983.260:68): avc: denied { create } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 984.056319][ T25] audit: type=1400 audit(983.280:69): avc: denied { write } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 984.083641][ T25] audit: type=1400 audit(983.300:70): avc: denied { module_request } for pid=3331 comm="syz-executor" kmod="net-pf-16-proto-16-family-nl802154" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 984.598214][ T25] audit: type=1400 audit(983.810:71): avc: denied { read } for pid=3331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 984.649802][ T25] audit: type=1400 audit(983.870:72): avc: denied { mounton } for pid=3331 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 984.667973][ T25] audit: type=1400 audit(983.880:73): avc: denied { mount } for pid=3331 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 985.853588][ T3335] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 986.069825][ T3331] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 1013.136223][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 1013.144641][ T25] audit: type=1400 audit(1012.350:78): avc: denied { execmem } for pid=3336 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1013.439384][ T25] audit: type=1400 audit(1012.660:79): avc: denied { read } for pid=3337 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1013.475460][ T25] audit: type=1400 audit(1012.690:80): avc: denied { open } for pid=3337 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1013.554838][ T25] audit: type=1400 audit(1012.780:81): avc: denied { mounton } for pid=3337 comm="syz-executor" path="/" dev="vda" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1014.929153][ T25] audit: type=1400 audit(1014.150:82): avc: denied { mount } for pid=3337 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1014.973893][ T25] audit: type=1400 audit(1014.200:83): avc: denied { mounton } for pid=3337 comm="syz-executor" path="/syzkaller.NxkRfg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1015.018092][ T25] audit: type=1400 audit(1014.240:84): avc: denied { mount } for pid=3337 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1015.094207][ T25] audit: type=1400 audit(1014.310:85): avc: denied { mounton } for pid=3337 comm="syz-executor" path="/syzkaller.NxkRfg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1015.141492][ T25] audit: type=1400 audit(1014.350:86): avc: denied { mounton } for pid=3337 comm="syz-executor" path="/syzkaller.NxkRfg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1015.234363][ T25] audit: type=1400 audit(1014.460:87): avc: denied { unmount } for pid=3337 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1015.673532][ T3337] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1057.039364][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 1057.059841][ T25] audit: type=1400 audit(1056.260:96): avc: denied { sys_module } for pid=3365 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1076.129462][ T3365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.205269][ T3365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.965443][ T3365] hsr_slave_0: entered promiscuous mode [ 1081.993167][ T3365] hsr_slave_1: entered promiscuous mode [ 1085.693888][ T3365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.825732][ T3365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.914256][ T3365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.997096][ T3365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1092.333474][ T3365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1115.128552][ T3365] veth0_vlan: entered promiscuous mode [ 1115.407752][ T3365] veth1_vlan: entered promiscuous mode [ 1116.278958][ T3365] veth0_macvtap: entered promiscuous mode [ 1116.474166][ T3365] veth1_macvtap: entered promiscuous mode [ 1117.506948][ T3367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.623797][ T3367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.627811][ T3367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.642643][ T3367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.759804][ T3228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.828236][ T3228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.574810][ T3228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.997519][ T3228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.444851][ T3228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1141.654841][ T3228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1141.786993][ T3228] bond0 (unregistering): Released all slaves [ 1143.441974][ T3228] hsr_slave_0: left promiscuous mode [ 1143.496519][ T3228] hsr_slave_1: left promiscuous mode [ 1143.864496][ T3228] veth1_macvtap: left promiscuous mode [ 1143.868377][ T3228] veth0_macvtap: left promiscuous mode [ 1143.906082][ T3228] veth1_vlan: left promiscuous mode [ 1143.919337][ T3228] veth0_vlan: left promiscuous mode [ 1186.002143][ T25] audit: type=1400 audit(1185.220:97): avc: denied { create } for pid=3488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1215.754451][ T25] audit: type=1401 audit(1214.970:98): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 1218.705944][ T25] audit: type=1400 audit(1217.930:99): avc: denied { create } for pid=3510 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1218.885945][ T25] audit: type=1400 audit(1218.110:100): avc: denied { sys_admin } for pid=3510 comm="syz-executor" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1221.893156][ T25] audit: type=1400 audit(1221.090:101): avc: denied { sys_chroot } for pid=3511 comm="syz-executor" capability=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 1970/01/01 00:20:41 executed programs: 0 [ 1279.463947][ T3536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.629759][ T3536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.223577][ T3536] hsr_slave_0: entered promiscuous mode [ 1287.261591][ T3536] hsr_slave_1: entered promiscuous mode [ 1291.177613][ T3536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1291.357911][ T3536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1291.445135][ T3536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1291.542540][ T3536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1298.586873][ T3536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.134098][ T3536] veth0_vlan: entered promiscuous mode [ 1329.404754][ T3536] veth1_vlan: entered promiscuous mode [ 1330.278547][ T3536] veth0_macvtap: entered promiscuous mode [ 1330.583088][ T3536] veth1_macvtap: entered promiscuous mode [ 1331.675735][ T3367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.679785][ T3367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.708098][ T3367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.718458][ T3367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:22:13 executed programs: 2 [ 1334.746093][ T25] audit: type=1400 audit(1333.970:102): avc: denied { read } for pid=3630 comm="syz.2.17" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1334.774751][ T25] audit: type=1400 audit(1333.990:103): avc: denied { open } for pid=3630 comm="syz.2.17" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1334.832893][ T25] audit: type=1400 audit(1334.040:104): avc: denied { ioctl } for pid=3630 comm="syz.2.17" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1345.836267][ T3630] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61d0a [ 1345.852504][ T3630] flags: 0x1fff1c000000000(node=0|zone=0|lastcpupid=0x7ff|kasantag=0xc7) [ 1345.868387][ T3630] raw: 01fff1c000000000 ffffc1ffc08742c8 ffffc1ffc07b2488 0000000000000000 [ 1345.881058][ T3630] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1345.887403][ T3630] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 1345.926539][ T3630] ------------[ cut here ]------------ [ 1345.926825][ T3630] kernel BUG at ./include/linux/mm.h:1036! [ 1345.928577][ T3630] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 1345.933581][ T3630] Modules linked in: [ 1345.935627][ T3630] CPU: 0 UID: 0 PID: 3630 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT [ 1345.937251][ T3630] Hardware name: linux,dummy-virt (DT) [ 1345.938447][ T3630] pstate: 61402009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 1345.939688][ T3630] pc : kvm_s2_put_page+0x374/0x3a0 [ 1345.941902][ T3630] lr : kvm_s2_put_page+0x374/0x3a0 [ 1345.942911][ T3630] sp : ffff80008e717450 [ 1345.943663][ T3630] x29: ffff80008e717450 x28: bff000001ec92000 x27: bff000001ec92000 [ 1345.945281][ T3630] x26: 00000000000000ff x25: ffff800087396000 x24: ffffc1ffc0000000 [ 1345.946667][ T3630] x23: ffffc1ffc0874288 x22: 0000000000000000 x21: ffffc1ffc08742b4 [ 1345.948079][ T3630] x20: 0000000000000000 x19: ffffc1ffc0874280 x18: 00000000fb20c077 [ 1345.949335][ T3630] x17: 00000000057d7f34 x16: 00000000fb1a5197 x15: 00000000866b9677 [ 1345.950729][ T3630] x14: ffffffffffffffff x13: fff0000015a39d88 x12: 0000000000000001 [ 1345.952182][ T3630] x11: 0000000000000000 x10: 0000000000ff0100 x9 : a6a806ed1668b300 [ 1345.953684][ T3630] x8 : a6a806ed1668b300 x7 : ffff80008039fbc8 x6 : 0000000000000000 [ 1345.954998][ T3630] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff80008074aff8 [ 1345.956398][ T3630] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 000000000000003e [ 1345.957968][ T3630] Call trace: [ 1345.958861][ T3630] kvm_s2_put_page+0x374/0x3a0 (P) [ 1345.960174][ T3630] stage2_free_walker+0x1b0/0x264 [ 1345.961101][ T3630] __kvm_pgtable_walk+0x7d8/0xa68 [ 1345.962114][ T3630] kvm_pgtable_walk+0x294/0x468 [ 1345.963032][ T3630] kvm_pgtable_stage2_destroy_range+0x60/0xb4 [ 1345.964162][ T3630] kvm_free_stage2_pgd+0x198/0x28c [ 1345.965136][ T3630] kvm_uninit_stage2_mmu+0x20/0x38 [ 1345.966061][ T3630] kvm_arch_flush_shadow_all+0x1a8/0x1e0 [ 1345.967000][ T3630] kvm_mmu_notifier_release+0x48/0xa8 [ 1345.967973][ T3630] __mmu_notifier_release+0x310/0x614 [ 1345.968907][ T3630] exit_mmap+0xb8/0xbb8 [ 1345.969661][ T3630] __mmput+0x10c/0x528 [ 1345.970545][ T3630] mmput+0x70/0xac [ 1345.971428][ T3630] exit_mm+0x158/0x258 [ 1345.972370][ T3630] do_exit+0x788/0x2378 [ 1345.973248][ T3630] do_group_exit+0x1d4/0x2ac [ 1345.974212][ T3630] get_signal+0x1440/0x1554 [ 1345.975163][ T3630] do_signal+0x23c/0x4dd0 [ 1345.976094][ T3630] do_notify_resume+0xb0/0x270 [ 1345.976985][ T3630] el0_svc+0xb8/0x164 [ 1345.977787][ T3630] el0t_64_sync_handler+0x84/0x12c [ 1345.978777][ T3630] el0t_64_sync+0x198/0x19c [ 1345.980265][ T3630] Code: 900377c1 910e9421 aa1303e0 97f9c9f2 (d4210000) [ 1345.984031][ T3630] ---[ end trace 0000000000000000 ]--- [ 1345.985620][ T3630] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 1345.987747][ T3630] Kernel Offset: disabled [ 1345.988561][ T3630] CPU features: 0x000000,0001a300,5f7c67c1,057ffe1f [ 1345.989807][ T3630] Memory Limit: none [ 1345.991497][ T3630] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:02:51 Registers: info registers vcpu 0 CPU#0 PC=ffff800080493464 X00=0000000000000000 X01=0000000000000080 X02=0000000000000001 X03=ffff8000804933b4 X04=ffff8000871b9b8c X05=ffff80008e716e98 X06=ffff800080363394 X07=ffff800080015834 X08=00000000000003c0 X09=0000000000000000 X10=0000000000ff0100 X11=ffff8000877958c8 X12=00000000000000fe X13=000001395fe49d71 X14=0000000000000000 X15=ffff800087fe5a20 X16=0000000000000000 X17=00000000057d7f34 X18=00000000fb20c077 X19=efff800000000000 X20=ffff80008e716f00 X21=00000000000000ff X22=00000000000003c0 X23=00000000ffffe3c6 X24=40000000ffffe3c6 X25=00000000000003c0 X26=0000000000000000 X27=0000000000000000 X28=0000000000000013 X29=ffff80008e716dd0 X30=ffff800080493440 SP=ffff80008e716dc0 PSTATE=604023c9 -ZC- EL2h SVCR=00000000 -- BTYPE=0 FPCR=00000000 FPSR=00000000 P00=0000 P01=0000 P02=0000 P03=0000 P04=0000 P05=0000 P06=0000 P07=0000 P08=0000 P09=0000 P10=0000 P11=0000 P12=0000 P13=0000 P14=0000 P15=0000 FFR=0000 Z00=0000005804000000:0000005804000000 Z01=0000000000000000:0000000000000058 Z02=0000000000000000:0000000000000000 Z03=0000000000000028:0000000000000158 Z04=0000000000000000:0000000000000000 Z05=0000000000000000:0000000000000000 Z06=6edc4d3a2914b135:d8e9c869e2695c88 Z07=b20fae707afde253:388e9c6c4fa85ca0 Z08=0000000000000000:0000000000000000 Z09=0000000000000000:0000000000000000 Z10=0000000000000000:0000000000000000 Z11=0000000000000000:0000000000000000 Z12=0000000000000000:0000000000000000 Z13=0000000000000000:0000000000000000 Z14=0000000000000000:0000000000000000 Z15=0000000000000000:0000000000000000 Z16=0000ffffd4f3b240:0000ffffd4f3b240 Z17=ffffff80ffffffd0:0000ffffd4f3b210 Z18=0000000000000000:0000000000000000 Z19=0000000000000000:0000000000000000 Z20=0000000000000000:0000000000000000 Z21=0000000000000000:0000000000000000 Z22=0000000000000000:0000000000000000 Z23=0000000000000000:0000000000000000 Z24=0000000000000000:0000000000000000 Z25=0000000000000000:0000000000000000 Z26=0000000000000000:0000000000000000 Z27=0000000000000000:0000000000000000 Z28=0000000000000000:0000000000000000 Z29=0000000000000000:0000000000000000 Z30=0000000000000000:0000000000000000 Z31=0000000000000000:0000000000000000