Warning: Permanently added '[localhost]:44611' (ED25519) to the list of known hosts. 1970/01/01 00:01:54 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:55 parsed 1 programs [ 115.797120][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 115.797182][ T31] audit: type=1400 audit(115.760:127): avc: denied { mounton } for pid=3536 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 115.799047][ T31] audit: type=1400 audit(115.770:128): avc: denied { mount } for pid=3536 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 1970/01/01 00:01:55 executed programs: 0 [ 116.620824][ T3541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.623478][ T3541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.961520][ T3541] hsr_slave_0: entered promiscuous mode [ 116.963115][ T3541] hsr_slave_1: entered promiscuous mode [ 117.420259][ T3541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.426146][ T3541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.471597][ T3541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.511321][ T3541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.542135][ T3541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.221736][ T3541] veth0_vlan: entered promiscuous mode [ 122.239132][ T3541] veth1_vlan: entered promiscuous mode [ 122.279035][ T3541] veth0_macvtap: entered promiscuous mode [ 122.283525][ T3541] veth1_macvtap: entered promiscuous mode [ 122.321935][ T3541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.322238][ T3541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.322438][ T3541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.322634][ T3541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.672962][ T3943] usercopy: Kernel memory overwrite attempt detected to SLUB object 'task_struct' (offset 80, size 116)! [ 122.677971][ T3943] ------------[ cut here ]------------ [ 122.678536][ T3943] kernel BUG at mm/usercopy.c:102! [ 122.679194][ T3943] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP ARM [ 122.681174][ T3943] Modules linked in: [ 122.684538][ T3943] CPU: 1 PID: 3943 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller #0 [ 122.686088][ T3943] Hardware name: ARM-Versatile Express [ 122.687462][ T3943] PC is at usercopy_abort+0x98/0x9c [ 122.689985][ T3943] LR is at __wake_up_klogd.part.0+0x7c/0xac [ 122.690966][ T3943] pc : [<818d1418>] lr : [<802bb78c>] psr: 60000013 [ 122.692830][ T3943] sp : df97de40 ip : df97dd88 fp : df97de64 [ 122.695563][ T3943] r10: 0000001a r9 : 837c3c00 r8 : 83ef0050 [ 122.698234][ T3943] r7 : dde869c0 r6 : 00000000 r5 : 00000074 r4 : 00000050 [ 122.698569][ T3943] r3 : 837c3c00 r2 : 00000000 r1 : 00000000 r0 : 00000066 [ 122.699543][ T3943] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 122.700238][ T3943] Control: 30c5387d Table: 849671c0 DAC: 00000000 [ 122.701640][ T3943] Register r0 information: non-paged memory [ 122.703379][ T3943] Register r1 information: NULL pointer [ 122.705184][ T3943] Register r2 information: NULL pointer [ 122.705910][ T3943] Register r3 information: slab task_struct start 837c3c00 pointer offset 0 size 3072 [ 122.708506][ T3943] Register r4 information: non-paged memory [ 122.709742][ T3943] Register r5 information: non-paged memory [ 122.711082][ T3943] Register r6 information: NULL pointer [ 122.711426][ T3943] Register r7 information: non-slab/vmalloc memory [ 122.712768][ T3943] Register r8 information: slab task_struct start 83ef0000 pointer offset 80 size 3072 [ 122.715248][ T3943] Register r9 information: slab task_struct start 837c3c00 pointer offset 0 size 3072 [ 122.716761][ T3943] Register r10 information: non-paged memory [ 122.717152][ T3943] Register r11 information: 2-page vmalloc region starting at 0xdf97c000 allocated at kernel_clone+0xac/0x3c8 [ 122.720267][ T3943] Register r12 information: 2-page vmalloc region starting at 0xdf97c000 allocated at kernel_clone+0xac/0x3c8 [ 122.725308][ T3943] Process syz-executor.0 (pid: 3943, stack limit = 0xdf97c000) [ 122.728420][ T3943] Stack: (0xdf97de40 to 0xdf97e000) [ 122.728796][ T3943] de40: 820000c4 81fd28a4 81fe70d0 00000050 00000074 837c3c00 df97de94 df97de68 [ 122.729105][ T3943] de60: 804bce1c 818d138c 00000074 df97de78 80215d90 83ef0050 00000074 00000000 [ 122.729480][ T3943] de80: 83ef00c4 dde869c0 df97decc df97de98 804f3ee0 804bcd50 00000074 00000000 [ 122.729752][ T3943] dea0: df97debc 83ef0050 00000074 00000000 00000000 00000000 837c3c00 0000001a [ 122.730238][ T3943] dec0: df97def4 df97ded0 80209c80 804f3d00 df97def4 df97dee0 818f5bd8 8027daec [ 122.731604][ T3943] dee0: 00000000 0000000c df97df6c df97def8 8020a2bc 80209bfc 00000000 00000000 [ 122.732172][ T3943] df00: df97df1c df97df10 818f5aa4 8027c158 df97df6c df97df20 80281f9c 818f5a80 [ 122.732971][ T3943] df20: df97df54 00000000 8027dc0c 60000013 818a3774 818bab28 df97df54 676db0ab [ 122.733970][ T3943] df40: 83ef0000 0000000f 83ef0000 676db0ab 0000000f 83ef0000 00000000 00000000 [ 122.735231][ T3943] df60: df97dfa4 df97df70 80253810 80209fd4 80202bfc 676db0ab df97dfac 00000000 [ 122.735716][ T3943] df80: 00000000 0014c2c4 0000001a 80200288 837c3c00 0000001a 00000000 df97dfa8 [ 122.737145][ T3943] dfa0: 80200060 802535e4 00000000 00000000 0000000f 00000004 00000000 00000000 [ 122.738268][ T3943] dfc0: 00000000 00000000 0014c2c4 0000001a 7ea9932e 7ea9932f 003d0f00 76bd70fc [ 122.738974][ T3943] dfe0: 76bd6f08 76bd6ef8 000166a0 00050a20 60000010 0000000f 00000000 00000000 [ 122.740479][ T3943] Call trace: [ 122.741195][ T3943] [<818d1380>] (usercopy_abort) from [<804bce1c>] (__check_heap_object+0xd8/0xf4) [ 122.743432][ T3943] [<804bcd44>] (__check_heap_object) from [<804f3ee0>] (__check_object_size+0x1ec/0x30c) [ 122.745138][ T3943] r8:dde869c0 r7:83ef00c4 r6:00000000 r5:00000074 r4:83ef0050 [ 122.745551][ T3943] [<804f3cf4>] (__check_object_size) from [<80209c80>] (fpa_set+0x90/0xfc) [ 122.747033][ T3943] r10:0000001a r9:837c3c00 r8:00000000 r7:00000000 r6:00000000 r5:00000074 [ 122.748452][ T3943] r4:83ef0050 [ 122.748715][ T3943] [<80209bf0>] (fpa_set) from [<8020a2bc>] (arch_ptrace+0x2f4/0x3e4) [ 122.750048][ T3943] r5:0000000c r4:00000000 [ 122.750376][ T3943] [<80209fc8>] (arch_ptrace) from [<80253810>] (sys_ptrace+0x238/0x4e0) [ 122.752327][ T3943] r7:00000000 r6:00000000 r5:83ef0000 r4:0000000f [ 122.752897][ T3943] [<802535d8>] (sys_ptrace) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 122.754365][ T3943] Exception stack(0xdf97dfa8 to 0xdf97dff0) [ 122.755281][ T3943] dfa0: 00000000 00000000 0000000f 00000004 00000000 00000000 [ 122.756603][ T3943] dfc0: 00000000 00000000 0014c2c4 0000001a 7ea9932e 7ea9932f 003d0f00 76bd70fc [ 122.758438][ T3943] dfe0: 76bd6f08 76bd6ef8 000166a0 00050a20 [ 122.759135][ T3943] r10:0000001a r9:837c3c00 r8:80200288 r7:0000001a r6:0014c2c4 r5:00000000 [ 122.760210][ T3943] r4:00000000 [ 122.762261][ T3943] Code: e30000c8 e3480200 e58dc000 ebfff359 (e7f001f2) [ 122.766545][ T3943] ---[ end trace 0000000000000000 ]--- [ 122.768505][ T3943] Kernel panic - not syncing: Fatal exception [ 122.771309][ T3943] Rebooting in 86400 seconds..