Warning: Permanently added '[localhost]:26810' (ED25519) to the list of known hosts. 1970/01/01 00:02:43 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:02:46 parsed 1 programs [ 166.607254][ T29] audit: type=1400 audit(166.550:131): avc: denied { mounton } for pid=3516 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 166.610593][ T29] audit: type=1400 audit(166.550:132): avc: denied { mount } for pid=3516 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 166.665703][ T29] audit: type=1400 audit(166.610:133): avc: denied { unlink } for pid=3516 comm="syz-executor" name="swap-file" dev="vda" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 174.793274][ T3516] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:02:54 executed programs: 0 [ 176.469498][ T3521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.487707][ T3521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.078077][ T3521] hsr_slave_0: entered promiscuous mode [ 177.079966][ T3521] hsr_slave_1: entered promiscuous mode [ 177.639860][ T3521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.659252][ T3521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.675542][ T3521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.684347][ T3521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.989822][ T3521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.973861][ T3521] veth0_vlan: entered promiscuous mode [ 187.021407][ T3521] veth1_vlan: entered promiscuous mode [ 187.156513][ T3521] veth0_macvtap: entered promiscuous mode [ 187.177379][ T3521] veth1_macvtap: entered promiscuous mode [ 187.265605][ T3521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.266046][ T3521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.266309][ T3521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.266552][ T3521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.967865][ T3920] usercopy: Kernel memory overwrite attempt detected to SLUB object 'task_struct' (offset 80, size 140)! [ 187.970165][ T3920] ------------[ cut here ]------------ [ 187.970809][ T3920] kernel BUG at mm/usercopy.c:102! [ 187.971208][ T3920] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM [ 187.972256][ T3920] Modules linked in: [ 187.973912][ T3920] CPU: 0 PID: 3920 Comm: syz-executor.0 Not tainted 6.8.0-rc7-syzkaller #0 [ 187.976043][ T3920] Hardware name: ARM-Versatile Express [ 187.976609][ T3920] PC is at usercopy_abort+0x98/0x9c [ 187.977656][ T3920] LR is at __wake_up_klogd.part.0+0x7c/0xac [ 187.977946][ T3920] pc : [<8183e740>] lr : [<802b7f34>] psr: 60000013 [ 187.978212][ T3920] sp : df9e9e50 ip : df9e9d98 fp : df9e9e74 [ 187.978412][ T3920] r10: 0000001a r9 : 840c9800 r8 : 83735450 [ 187.978683][ T3920] r7 : dde752c0 r6 : 00000000 r5 : 0000008c r4 : 00000050 [ 187.978898][ T3920] r3 : 840c9800 r2 : 00000000 r1 : 00000000 r0 : 00000066 [ 187.979207][ T3920] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 187.979814][ T3920] Control: 30c5387d Table: 84841ec0 DAC: fffffffd [ 187.980173][ T3920] Register r0 information: non-paged memory [ 187.980972][ T3920] Register r1 information: NULL pointer [ 187.981198][ T3920] Register r2 information: NULL pointer [ 187.981403][ T3920] Register r3 information: slab task_struct start 840c9800 pointer offset 0 size 3072 [ 187.982417][ T3920] Register r4 information: non-paged memory [ 187.982796][ T3920] Register r5 information: non-paged memory [ 187.982995][ T3920] Register r6 information: NULL pointer [ 187.983181][ T3920] Register r7 information: non-slab/vmalloc memory [ 187.983466][ T3920] Register r8 information: slab task_struct start 83735400 pointer offset 80 size 3072 [ 187.983908][ T3920] Register r9 information: slab task_struct start 840c9800 pointer offset 0 size 3072 [ 187.984341][ T3920] Register r10 information: non-paged memory [ 187.984557][ T3920] Register r11 information: 2-page vmalloc region starting at 0xdf9e8000 allocated at kernel_clone+0xac/0x3c8 [ 187.985109][ T3920] Register r12 information: 2-page vmalloc region starting at 0xdf9e8000 allocated at kernel_clone+0xac/0x3c8 [ 187.985470][ T3920] Process syz-executor.0 (pid: 3920, stack limit = 0xdf9e8000) [ 187.986231][ T3920] Stack: (0xdf9e9e50 to 0xdf9ea000) [ 187.986569][ T3920] 9e40: 81fda684 81fadca8 81fc2424 00000050 [ 187.986874][ T3920] 9e60: 0000008c 840c9800 df9e9ea4 df9e9e78 804a922c 8183e6b4 0000008c df9e9e88 [ 187.987186][ T3920] 9e80: 80216278 83735450 0000008c 00000000 837354dc dde752c0 df9e9edc df9e9ea8 [ 187.987462][ T3920] 9ea0: 804e1c20 804a9160 0000008c 00000001 df9e9ecc 83735450 0000008c 00000001 [ 187.987749][ T3920] 9ec0: 00000000 00000000 840c9800 0000001a df9e9ef4 df9e9ee0 8020a090 804e1a40 [ 187.988036][ T3920] 9ee0: 00000000 0000000c df9e9f6c df9e9ef8 8020a680 8020a01c 00000000 00000000 [ 187.988438][ T3920] 9f00: df9e9f1c df9e9f10 81862d34 802798b0 df9e9f6c df9e9f20 8027f524 81862d10 [ 187.988767][ T3920] 9f20: df9e9f54 00000000 8027b25c 60000013 818110f0 81827f88 df9e9f54 553a7b00 [ 187.989052][ T3920] 9f40: 0000000f 83735400 0000000f 553a7b00 83735400 0000000f 00000001 00000000 [ 187.989366][ T3920] 9f60: df9e9fa4 df9e9f70 80253494 8020a398 8020301c 553a7b00 df9e9fac 00000000 [ 187.989714][ T3920] 9f80: 00000000 0014c2cc 0000001a 80200288 840c9800 0000001a 00000000 df9e9fa8 [ 187.990012][ T3920] 9fa0: 80200060 80253268 00000000 00000000 0000000f 00000004 00000001 00000000 [ 187.990640][ T3920] 9fc0: 00000000 00000000 0014c2cc 0000001a 7e859326 7e859327 003d0f00 76bd60fc [ 187.991241][ T3920] 9fe0: 76bd5f08 76bd5ef8 000167e8 00050bd0 60000010 0000000f 00000000 00000000 [ 187.991760][ T3920] Backtrace: [ 187.992214][ T3920] [<8183e6a8>] (usercopy_abort) from [<804a922c>] (__check_heap_object+0xd8/0xf4) [ 187.992941][ T3920] [<804a9154>] (__check_heap_object) from [<804e1c20>] (__check_object_size+0x1ec/0x30c) [ 187.993311][ T3920] r8:dde752c0 r7:837354dc r6:00000000 r5:0000008c r4:83735450 [ 187.993561][ T3920] [<804e1a34>] (__check_object_size) from [<8020a090>] (fpa_set+0x80/0xa0) [ 187.993869][ T3920] r10:0000001a r9:840c9800 r8:00000000 r7:00000000 r6:00000001 r5:0000008c [ 187.994167][ T3920] r4:83735450 [ 187.994311][ T3920] [<8020a010>] (fpa_set) from [<8020a680>] (arch_ptrace+0x2f4/0x3e4) [ 187.994615][ T3920] r5:0000000c r4:00000000 [ 187.994759][ T3920] [<8020a38c>] (arch_ptrace) from [<80253494>] (sys_ptrace+0x238/0x4dc) [ 187.995155][ T3920] r7:00000000 r6:00000001 r5:0000000f r4:83735400 [ 187.995330][ T3920] [<8025325c>] (sys_ptrace) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 187.995614][ T3920] Exception stack(0xdf9e9fa8 to 0xdf9e9ff0) [ 187.995834][ T3920] 9fa0: 00000000 00000000 0000000f 00000004 00000001 00000000 [ 187.996119][ T3920] 9fc0: 00000000 00000000 0014c2cc 0000001a 7e859326 7e859327 003d0f00 76bd60fc [ 187.996467][ T3920] 9fe0: 76bd5f08 76bd5ef8 000167e8 00050bd0 [ 187.996827][ T3920] r10:0000001a r9:840c9800 r8:80200288 r7:0000001a r6:0014c2cc r5:00000000 [ 187.997186][ T3920] r4:00000000 [ 187.997680][ T3920] Code: e30a0688 e34801fd e58dc000 ebfff35b (e7f001f2) [ 187.998967][ T3920] ---[ end trace 0000000000000000 ]--- [ 187.999455][ T3920] Kernel panic - not syncing: Fatal exception [ 188.000004][ C1] CPU1: stopping [ 188.000535][ C1] CPU: 1 PID: 3922 Comm: rm Tainted: G D 6.8.0-rc7-syzkaller #0 [ 188.000609][ C1] Hardware name: ARM-Versatile Express [ 188.000666][ C1] Backtrace: frame pointer underflow [ 188.000761][ C1] [<8183864c>] (dump_backtrace) from [<81838748>] (show_stack+0x18/0x1c) [ 188.000890][ C1] r7:00000014 r6:81b0f9f8 r5:600001d3 r4:81fbd958 [ 188.000922][ C1] [<81838730>] (show_stack) from [<81855c64>] (dump_stack_lvl+0x48/0x54) [ 188.000979][ C1] [<81855c1c>] (dump_stack_lvl) from [<81855c88>] (dump_stack+0x18/0x1c) [ 188.001030][ C1] r5:00000001 r4:00000004 [ 188.001052][ C1] [<81855c70>] (dump_stack) from [<8020fb18>] (do_handle_IPI+0x2ac/0x2d8) [ 188.001102][ C1] [<8020f86c>] (do_handle_IPI) from [<8020fb64>] (ipi_handler+0x20/0x28) [ 188.001161][ C1] r9:83733c00 r8:df805f78 r7:00000014 r6:81b0f9f8 r5:82c0cc80 r4:82c96d00 [ 188.001174][ C1] [<8020fb44>] (ipi_handler) from [<802c4fcc>] (handle_percpu_devid_irq+0x9c/0x2cc) [ 188.001223][ C1] [<802c4f30>] (handle_percpu_devid_irq) from [<802be758>] (generic_handle_domain_irq+0x30/0x40) [ 188.001287][ C1] r10:00000000 r9:83733c00 r8:00000000 r7:df80a00c r6:824b0bc0 r5:df80a000 [ 188.001319][ C1] r4:8260cd28 r3:00010000 [ 188.001331][ C1] [<802be728>] (generic_handle_domain_irq) from [<802011c4>] (gic_handle_irq+0x68/0x7c) [ 188.001377][ C1] [<8020115c>] (gic_handle_irq) from [<81856528>] (generic_handle_arch_irq+0x60/0x80) [ 188.001431][ C1] r7:dfde5cc8 r6:8213d0ec r5:82178d04 r4:824b2224 [ 188.001445][ C1] [<818564c8>] (generic_handle_arch_irq) from [<818086c0>] (call_with_stack+0x1c/0x20) [ 188.001508][ C1] r9:83733c00 r8:00000001 r7:dfde5cfc r6:ffffffff r5:20000013 r4:802d0c50 [ 188.001535][ C1] [<818086a4>] (call_with_stack) from [<80200b84>] (__irq_svc+0x84/0xac) [ 188.001580][ C1] Exception stack(0xdfde5cc8 to 0xdfde5d10) [ 188.001618][ C1] 5cc0: 00000000 5b932000 000012ec 824b0a80 00000000 00000005 [ 188.001651][ C1] 5ce0: dfde5e6c 00000000 00000001 00000000 00000000 dfde5d24 20000013 dfde5d18 [ 188.001677][ C1] 5d00: 806eeb6c 802d0c50 20000013 ffffffff [ 188.001696][ C1] [<802d0c14>] (__srcu_read_lock) from [<806eeb6c>] (tomoyo_path_perm+0xd8/0x204) [ 188.001755][ C1] [<806eea94>] (tomoyo_path_perm) from [<806f2e30>] (tomoyo_inode_getattr+0x1c/0x20) [ 188.001820][ C1] r8:82edb000 r7:000007ff r6:dfde5eb0 r5:dfde5e6c r4:82191ff0 [ 188.001835][ C1] [<806f2e14>] (tomoyo_inode_getattr) from [<806b95b8>] (security_inode_getattr+0x44/0x60) [ 188.001891][ C1] [<806b9574>] (security_inode_getattr) from [<804f06c4>] (vfs_getattr+0x24/0x7c) [ 188.001961][ C1] r5:dfde5e6c r4:00001800 [ 188.001975][ C1] [<804f06a0>] (vfs_getattr) from [<804f0efc>] (vfs_statx+0x90/0x168) [ 188.002054][ C1] r7:00000003 r6:00004001 r5:00001800 r4:dfde5eb0 [ 188.002069][ C1] [<804f0e6c>] (vfs_statx) from [<804f16ac>] (do_statx+0x74/0xb4) [ 188.002139][ C1] r10:0000018d r9:83733c00 r8:82edb000 r7:00000003 r6:7ebeee80 r5:00001800 [ 188.002156][ C1] r4:000007ff [ 188.002169][ C1] [<804f1638>] (do_statx) from [<804f1754>] (sys_statx+0x68/0x80) [ 188.002230][ C1] r8:80200288 r7:000007ff r6:00000003 r5:82edb000 r4:00001800 [ 188.002245][ C1] [<804f16ec>] (sys_statx) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 188.002291][ C1] Exception stack(0xdfde5fa8 to 0xdfde5ff0) [ 188.002323][ C1] 5fa0: 7ebeee80 7ebef058 00000003 76f3d1e1 00001800 000007ff [ 188.002357][ C1] 5fc0: 7ebeee80 7ebef058 00000001 0000018d 00000000 00000000 00000010 7ebef0f4 [ 188.002381][ C1] 5fe0: 00000008 7ebeee68 76f23648 76f38d94 [ 188.002408][ C1] r7:0000018d r6:00000001 r5:7ebef058 r4:7ebeee80 [ 188.009733][ T3920] Rebooting in 86400 seconds..