[ 48.093178][ T31] audit: type=1400 audit(48.030:58): avc: denied { read write } for pid=3089 comm="sftp-server" name="null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.093702][ T31] audit: type=1400 audit(48.030:59): avc: denied { open } for pid=3089 comm="sftp-server" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Warning: Permanently added '[localhost]:44761' (ED25519) to the list of known hosts. [ 94.312266][ T31] audit: type=1400 audit(94.240:60): avc: denied { execute } for pid=3101 comm="sh" name="syz-executor4150526215" dev="vda" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 94.356311][ T31] audit: type=1400 audit(94.290:61): avc: denied { execute_no_trans } for pid=3101 comm="sh" path="/syz-executor4150526215" dev="vda" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 94.542646][ T31] audit: type=1400 audit(94.480:62): avc: denied { execmem } for pid=3101 comm="syz-executor415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 94.562577][ T31] audit: type=1400 audit(94.500:63): avc: denied { allowed } for pid=3102 comm="syz-executor415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 executing program [ 94.569659][ T31] audit: type=1400 audit(94.500:64): avc: denied { create } for pid=3102 comm="syz-executor415" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.575342][ T31] audit: type=1400 audit(94.510:65): avc: denied { map } for pid=3102 comm="syz-executor415" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.575752][ T31] audit: type=1400 audit(94.510:66): avc: denied { read write } for pid=3102 comm="syz-executor415" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.592013][ T3102] 8<--- cut here --- [ 94.593163][ T3102] Unable to handle kernel NULL pointer dereference at virtual address 0000000e when read [ 94.594294][ T3102] [0000000e] *pgd=84997003, *pmd=df9a9003 [ 94.597054][ T3102] Internal error: Oops: 205 [#1] SMP ARM [ 94.597756][ T3102] Modules linked in: [ 94.598834][ T3102] CPU: 0 UID: 0 PID: 3102 Comm: syz-executor415 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT [ 94.599460][ T3102] Hardware name: ARM-Versatile Express [ 94.600023][ T3102] PC is at io_ring_buffers_peek+0x24/0x258 [ 94.601164][ T31] audit: type=1400 audit(94.530:67): avc: denied { read } for pid=2906 comm="syslogd" name="log" dev="vda" ino=795 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.602069][ T3102] LR is at io_buffers_peek+0x68/0x8c [ 94.602402][ T3102] pc : [<8088956c>] lr : [<80889cb0>] psr: 20000013 [ 94.602749][ T31] audit: type=1400 audit(94.540:68): avc: denied { search } for pid=2906 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.603986][ T3102] sp : df991dc0 ip : df991e08 fp : df991e04 [ 94.604345][ T3102] r10: 00012361 r9 : 00000000 r8 : 8498d740 [ 94.604712][ T3102] r7 : 84498a0c r6 : 84498a00 r5 : df991e44 r4 : 84995000 [ 94.604730][ T31] audit: type=1400 audit(94.540:69): avc: denied { write } for pid=2906 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 94.605897][ T3102] r3 : 00000001 r2 : 84498a0c r1 : df991e44 r0 : 84995000 [ 94.606396][ T3102] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 94.606908][ T3102] Control: 30c5387d Table: 845f43c0 DAC: fffffffd [ 94.607358][ T3102] Register r0 information: slab io_kiocb start 84995000 pointer offset 0 size 192 [ 94.609338][ T3102] Register r1 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 94.610253][ T3102] Register r2 information: slab kmalloc-256 start 84498a00 pointer offset 12 size 256 [ 94.610974][ T3102] Register r3 information: non-paged memory [ 94.611441][ T3102] Register r4 information: slab io_kiocb start 84995000 pointer offset 0 size 192 [ 94.612111][ T3102] Register r5 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 94.612791][ T3102] Register r6 information: slab kmalloc-256 start 84498a00 pointer offset 0 size 256 [ 94.613380][ T3102] Register r7 information: slab kmalloc-256 start 84498a00 pointer offset 12 size 256 [ 94.614099][ T3102] Register r8 information: slab kmalloc-64 start 8498d740 pointer offset 0 size 64 [ 94.614721][ T3102] Register r9 information: NULL pointer [ 94.615089][ T3102] Register r10 information: non-paged memory [ 94.615555][ T3102] Register r11 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 94.616314][ T3102] Register r12 information: 2-page vmalloc region starting at 0xdf990000 allocated at kernel_clone+0xac/0x3e4 [ 94.617172][ T3102] Process syz-executor415 (pid: 3102, stack limit = 0xdf990000) [ 94.617837][ T3102] Stack: (0xdf991dc0 to 0xdf992000) [ 94.618313][ T3102] 1dc0: 81a4be54 8030cb0c 8495d100 00000001 00010000 84498a0c 00000000 84995000 [ 94.619285][ T3102] 1de0: df991e44 84498a00 84498a0c 00000000 80000001 00012361 df991e1c df991e08 [ 94.619909][ T3102] 1e00: 80889cb0 80889554 837e3b80 84995000 df991e84 df991e20 808931e0 80889c54 [ 94.620978][ T3102] 1e20: df991e4c df991e30 8089ec2c 8050a4c4 00010001 00000001 8057abbc 00000000 [ 94.621402][ T3102] 1e40: 00000000 84498a0c 00000000 00000000 00010001 7df2f2e8 80886a40 84995000 [ 94.621914][ T3102] 1e60: 81cf0ca0 00000000 80000001 81cf0b5c 0000001b 83b4ec00 df991ebc df991e88 [ 94.622331][ T3102] 1e80: 80886bd8 80892f38 849953c0 84995480 84995540 8495d000 8499506c 84995000 [ 94.622910][ T3102] 1ea0: 84ae0000 00000000 00000000 83b4ec00 df991f14 df991ec0 808877a8 80886b7c [ 94.623389][ T3102] 1ec0: 8088e164 81a4bdf8 8499bdb8 845f43c8 00000800 00000800 81cf0b5c 00000800 [ 94.623894][ T3102] 1ee0: 8495d000 7df2f2e8 840ae0c0 00000042 8495d000 00003517 840ae0c0 00000000 [ 94.624336][ T3102] 1f00: 83b4ec00 00000000 df991fa4 df991f18 80888250 808875a8 df991f74 8495d040 [ 94.624914][ T3102] 1f20: 00000000 0000173d 840ae000 00000000 df991f94 df991f40 8151ae48 8057a670 [ 94.625345][ T3102] 1f40: df991f60 84404000 00000000 8281d1f0 00000a0f 76f57000 df991fb0 80234108 [ 94.625823][ T3102] 1f60: 20000280 00000000 df991fac df991f78 8023478c 7df2f2e8 00000120 00000000 [ 94.626369][ T3102] 1f80: 00000000 0008e068 000001aa 8020029c 83b4ec00 000001aa 00000000 df991fa8 [ 94.626783][ T3102] 1fa0: 80200060 80888124 00000000 00000000 00000003 00003517 0000173d 00000042 [ 94.627277][ T3102] 1fc0: 00000000 00000000 0008e068 000001aa 20000080 20000280 00000000 00000000 [ 94.627797][ T3102] 1fe0: 7e8b7c70 7e8b7c60 00010874 0002f900 40000010 00000003 00000000 00000000 [ 94.628537][ T3102] Call trace: [ 94.629168][ T3102] [<80889548>] (io_ring_buffers_peek) from [<80889cb0>] (io_buffers_peek+0x68/0x8c) [ 94.629988][ T3102] r10:00012361 r9:80000001 r8:00000000 r7:84498a0c r6:84498a00 r5:df991e44 [ 94.630502][ T3102] r4:84995000 [ 94.630879][ T3102] [<80889c48>] (io_buffers_peek) from [<808931e0>] (io_recv+0x2b4/0x46c) [ 94.631339][ T3102] r5:84995000 r4:837e3b80 [ 94.631616][ T3102] [<80892f2c>] (io_recv) from [<80886bd8>] (io_issue_sqe+0x68/0x658) [ 94.632044][ T3102] r10:83b4ec00 r9:0000001b r8:81cf0b5c r7:80000001 r6:00000000 r5:81cf0ca0 [ 94.632523][ T3102] r4:84995000 [ 94.632778][ T3102] [<80886b70>] (io_issue_sqe) from [<808877a8>] (io_submit_sqes+0x20c/0x938) [ 94.633776][ T3102] r10:83b4ec00 r9:00000000 r8:00000000 r7:84ae0000 r6:84995000 r5:8499506c [ 94.634159][ T3102] r4:8495d000 [ 94.634376][ T3102] [<8088759c>] (io_submit_sqes) from [<80888250>] (sys_io_uring_enter+0x138/0x780) [ 94.635020][ T3102] r10:00000000 r9:83b4ec00 r8:00000000 r7:840ae0c0 r6:00003517 r5:8495d000 [ 94.635606][ T3102] r4:00000042 [ 94.635828][ T3102] [<80888118>] (sys_io_uring_enter) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 94.636443][ T3102] Exception stack(0xdf991fa8 to 0xdf991ff0) [ 94.636904][ T3102] 1fa0: 00000000 00000000 00000003 00003517 0000173d 00000042 [ 94.637295][ T3102] 1fc0: 00000000 00000000 0008e068 000001aa 20000080 20000280 00000000 00000000 [ 94.637848][ T3102] 1fe0: 7e8b7c70 7e8b7c60 00010874 0002f900 [ 94.638227][ T3102] r10:000001aa r9:83b4ec00 r8:8020029c r7:000001aa r6:0008e068 r5:00000000 [ 94.638948][ T3102] r4:00000000 [ 94.639688][ T3102] Code: e1a08002 e5912000 e50b2030 e1a05001 (e1d920be) [ 94.641299][ T3102] ---[ end trace 0000000000000000 ]--- [ 94.642496][ T3102] Kernel panic - not syncing: Fatal exception [ 94.645054][ T3102] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:50:57 Registers: info registers vcpu 0 CPU#0 R00=00000000 R01=82257c34 R02=00000000 R03=81a50408 R04=00000006 R05=828fac48 R06=00000000 R07=828fac40 R08=83b4ec00 R09=00000028 R10=828fac48 R11=df991afc R12=df991b00 R13=df991af0 R14=803481f4 R15=81a50418 PSR=80000193 N--- A S svc32 s00=65702065 s01=73696d72 d00=73696d7265702065 s02=6e6f6373 s03=74786574 d01=747865746e6f6373 s04=6f6f723d s05=79733a74 d02=79733a746f6f723d s06=6d646173 s07=733a725f d03=733a725f6d646173 s08=64617379 s09=20745f6d d04=20745f6d64617379 s10=6e6f6374 s11=74786574 d05=747865746e6f6374 s12=6f6f723d s13=626f3a74 d06=626f3a746f6f723d s14=7463656a s15=733a725f d07=733a725f7463656a s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=00000001 R01=82257c34 R02=ffffffe4 R03=00000000 R04=845f2b00 R05=ddde6478 R06=dde96608 R07=a00f0013 R08=843aa400 R09=61763a72 R10=832db018 R11=ec37db24 R12=ec37dab0 R13=ec37da18 R14=8022be54 R15=8079ab1c PSR=a00f0093 N-C- A S svc32 s00=72656820 s01=2d2d2065 d00=2d2d206572656820 s02=00000000 s03=00000000 d01=0000000000000000 s04=ef0cee00 s05=ef0cee00 d02=ef0cee00ef0cee00 s06=08040200 s07=80402000 d03=8040200008040200 s08=00000c00 s09=c0200c03 d04=c0200c0300000c00 s10=08040201 s11=80402000 d05=8040200008040201 s12=08040201 s13=80402010 d06=8040201008040201 s14=08040201 s15=80402010 d07=8040201008040201 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000