Warning: Permanently added '[localhost]:16305' (ED25519) to the list of known hosts. 1970/01/01 00:01:58 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:59 parsed 1 programs [ 119.916080][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 119.916125][ T31] audit: type=1400 audit(119.870:131): avc: denied { mounton } for pid=3537 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 119.917224][ T31] audit: type=1400 audit(119.870:132): avc: denied { mount } for pid=3537 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 119.972175][ T31] audit: type=1400 audit(119.920:133): avc: denied { unlink } for pid=3537 comm="syz-executor" name="swap-file" dev="vda" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 124.041229][ T3537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:02:04 executed programs: 0 [ 124.756775][ T3541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.759154][ T3541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.059517][ T3541] hsr_slave_0: entered promiscuous mode [ 125.060670][ T3541] hsr_slave_1: entered promiscuous mode [ 125.399915][ T3541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.407284][ T3541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.410106][ T3541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.445763][ T3541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.246015][ T3541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.084749][ T3541] veth0_vlan: entered promiscuous mode [ 130.090937][ T3541] veth1_vlan: entered promiscuous mode [ 130.175111][ T3541] veth0_macvtap: entered promiscuous mode [ 130.178688][ T3541] veth1_macvtap: entered promiscuous mode [ 130.235777][ T3541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.236159][ T3541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.236349][ T3541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.236576][ T3541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.626832][ T3939] usercopy: Kernel memory overwrite attempt detected to SLUB object 'task_struct' (offset 80, size 116)! [ 130.627932][ T3939] ------------[ cut here ]------------ [ 130.628249][ T3939] kernel BUG at mm/usercopy.c:102! [ 130.628461][ T3939] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM [ 130.628862][ T3939] Modules linked in: [ 130.629163][ T3939] CPU: 0 PID: 3939 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller #0 [ 130.629539][ T3939] Hardware name: ARM-Versatile Express [ 130.629892][ T3939] PC is at usercopy_abort+0x98/0x9c [ 130.631218][ T3939] LR is at __wake_up_klogd.part.0+0x7c/0xac [ 130.631677][ T3939] pc : [<818d1418>] lr : [<802bb78c>] psr: 60000013 [ 130.632081][ T3939] sp : dfc31e40 ip : dfc31d88 fp : dfc31e64 [ 130.632366][ T3939] r10: 0000001a r9 : 8378b000 r8 : 8378d450 [ 130.632530][ T3939] r7 : dde75f20 r6 : 00000000 r5 : 00000074 r4 : 00000050 [ 130.632769][ T3939] r3 : 8378b000 r2 : 00000000 r1 : 00000000 r0 : 00000066 [ 130.633007][ T3939] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 130.633642][ T3939] Control: 30c5387d Table: 846d18c0 DAC: fffffffd [ 130.637960][ T3939] Register r0 information: non-paged memory [ 130.642212][ T3939] Register r1 information: NULL pointer [ 130.642457][ T3939] Register r2 information: NULL pointer [ 130.642610][ T3939] Register r3 information: slab task_struct start 8378b000 pointer offset 0 size 3072 [ 130.643280][ T3939] Register r4 information: non-paged memory [ 130.643501][ T3939] Register r5 information: non-paged memory [ 130.643745][ T3939] Register r6 information: NULL pointer [ 130.643965][ T3939] Register r7 information: non-slab/vmalloc memory [ 130.644230][ T3939] Register r8 information: slab task_struct start 8378d400 pointer offset 80 size 3072 [ 130.644578][ T3939] Register r9 information: slab task_struct start 8378b000 pointer offset 0 size 3072 [ 130.644978][ T3939] Register r10 information: non-paged memory [ 130.645276][ T3939] Register r11 information: 2-page vmalloc region starting at 0xdfc30000 allocated at kernel_clone+0xac/0x3c8 [ 130.645896][ T3939] Register r12 information: 2-page vmalloc region starting at 0xdfc30000 allocated at kernel_clone+0xac/0x3c8 [ 130.646210][ T3939] Process syz-executor.0 (pid: 3939, stack limit = 0xdfc30000) [ 130.646614][ T3939] Stack: (0xdfc31e40 to 0xdfc32000) [ 130.646920][ T3939] 1e40: 820000c4 81fd28a4 81fe70d0 00000050 00000074 8378b000 dfc31e94 dfc31e68 [ 130.647224][ T3939] 1e60: 804bce1c 818d138c 00000074 dfc31e78 80215d90 8378d450 00000074 00000000 [ 130.647532][ T3939] 1e80: 8378d4c4 dde75f20 dfc31ecc dfc31e98 804f3ee0 804bcd50 00000074 00000000 [ 130.647880][ T3939] 1ea0: dfc31ebc 8378d450 00000074 00000000 00000000 00000000 8378b000 0000001a [ 130.648102][ T3939] 1ec0: dfc31ef4 dfc31ed0 80209c80 804f3d00 dfc31ef4 dfc31ee0 818f5bd8 8027daec [ 130.648303][ T3939] 1ee0: 00000000 0000000c dfc31f6c dfc31ef8 8020a2bc 80209bfc 00000000 00000000 [ 130.648508][ T3939] 1f00: dfc31f1c dfc31f10 818f5aa4 8027c158 dfc31f6c dfc31f20 80281f9c 818f5a80 [ 130.648718][ T3939] 1f20: 80253a34 00000000 8378b000 60000013 dfc31f5c dfc31f40 818ed60c 4760af04 [ 130.648925][ T3939] 1f40: 0000000f 0000000f 8378d400 4760af04 0000000f 8378d400 00000000 00000000 [ 130.649141][ T3939] 1f60: dfc31fa4 dfc31f70 80253810 80209fd4 80202bfc 4760af04 dfc31fac 00000000 [ 130.649433][ T3939] 1f80: 00000000 0014c2c4 0000001a 80200288 8378b000 0000001a 00000000 dfc31fa8 [ 130.649652][ T3939] 1fa0: 80200060 802535e4 00000000 00000000 0000000f 00000004 00000000 00000000 [ 130.649879][ T3939] 1fc0: 00000000 00000000 0014c2c4 0000001a 7ee4832e 7ee4832f 003d0f00 76bde0fc [ 130.650203][ T3939] 1fe0: 76bddf08 76bddef8 00016680 000509d0 60000010 0000000f 00000000 00000000 [ 130.650482][ T3939] Call trace: [ 130.650785][ T3939] [<818d1380>] (usercopy_abort) from [<804bce1c>] (__check_heap_object+0xd8/0xf4) [ 130.651411][ T3939] [<804bcd44>] (__check_heap_object) from [<804f3ee0>] (__check_object_size+0x1ec/0x30c) [ 130.651762][ T3939] r8:dde75f20 r7:8378d4c4 r6:00000000 r5:00000074 r4:8378d450 [ 130.652216][ T3939] [<804f3cf4>] (__check_object_size) from [<80209c80>] (fpa_set+0x90/0xfc) [ 130.655101][ T3939] r10:0000001a r9:8378b000 r8:00000000 r7:00000000 r6:00000000 r5:00000074 [ 130.659020][ T3939] r4:8378d450 [ 130.661876][ T3939] [<80209bf0>] (fpa_set) from [<8020a2bc>] (arch_ptrace+0x2f4/0x3e4) [ 130.662383][ T3939] r5:0000000c r4:00000000 [ 130.662498][ T3939] [<80209fc8>] (arch_ptrace) from [<80253810>] (sys_ptrace+0x238/0x4e0) [ 130.662753][ T3939] r7:00000000 r6:00000000 r5:8378d400 r4:0000000f [ 130.662910][ T3939] [<802535d8>] (sys_ptrace) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 130.663142][ T3939] Exception stack(0xdfc31fa8 to 0xdfc31ff0) [ 130.663308][ T3939] 1fa0: 00000000 00000000 0000000f 00000004 00000000 00000000 [ 130.663515][ T3939] 1fc0: 00000000 00000000 0014c2c4 0000001a 7ee4832e 7ee4832f 003d0f00 76bde0fc [ 130.663711][ T3939] 1fe0: 76bddf08 76bddef8 00016680 000509d0 [ 130.663955][ T3939] r10:0000001a r9:8378b000 r8:80200288 r7:0000001a r6:0014c2c4 r5:00000000 [ 130.664222][ T3939] r4:00000000 [ 130.664585][ T3939] Code: e30000c8 e3480200 e58dc000 ebfff359 (e7f001f2) [ 130.665157][ T3939] ---[ end trace 0000000000000000 ]--- [ 130.665625][ T3939] Kernel panic - not syncing: Fatal exception [ 130.667547][ T3939] Rebooting in 86400 seconds..