Warning: Permanently added '[localhost]:51850' (ED25519) to the list of known hosts. 1970/01/01 00:02:02 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:02:04 parsed 1 programs [ 125.011879][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 125.011966][ T30] audit: type=1400 audit(124.960:131): avc: denied { mounton } for pid=3532 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 125.014404][ T30] audit: type=1400 audit(124.960:132): avc: denied { mount } for pid=3532 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 125.075040][ T30] audit: type=1400 audit(125.030:133): avc: denied { unlink } for pid=3532 comm="syz-executor" name="swap-file" dev="vda" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 131.086593][ T3532] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 1970/01/01 00:02:11 executed programs: 0 [ 132.329183][ T3538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.331771][ T3538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.704339][ T3538] hsr_slave_0: entered promiscuous mode [ 132.705285][ T3538] hsr_slave_1: entered promiscuous mode [ 133.196060][ T3538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 133.207306][ T3538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 133.214877][ T3538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 133.221991][ T3538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 134.604117][ T3538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.685570][ T3538] veth0_vlan: entered promiscuous mode [ 139.704155][ T3538] veth1_vlan: entered promiscuous mode [ 139.760456][ T3538] veth0_macvtap: entered promiscuous mode [ 139.799226][ T3538] veth1_macvtap: entered promiscuous mode [ 139.934899][ T3538] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.935337][ T3538] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.935598][ T3538] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.935912][ T3538] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.328006][ T3939] 8<--- cut here --- [ 140.329336][ T3939] Unable to handle kernel NULL pointer dereference at virtual address 00000018 when write [ 140.329854][ T3939] [00000018] *pgd=84e37003, *pmd=fecd0003 [ 140.331750][ T3939] Internal error: Oops: a07 [#1] PREEMPT SMP ARM [ 140.332890][ T3939] Modules linked in: [ 140.334033][ T3939] CPU: 1 PID: 3939 Comm: syz-executor.0 Not tainted 6.9.0-rc3-syzkaller #0 [ 140.339261][ T3939] Hardware name: ARM-Versatile Express [ 140.342702][ T3939] PC is at do_pagemap_scan+0x294/0x6b4 [ 140.343503][ T3939] LR is at do_pagemap_scan+0x260/0x6b4 [ 140.343696][ T3939] pc : [<8059cdd8>] lr : [<8059cda4>] psr: 20000013 [ 140.343925][ T3939] sp : e0069e18 ip : 00000000 fp : e0069f04 [ 140.344119][ T3939] r10: e0069e50 r9 : 83e92400 r8 : 00000000 [ 140.344308][ T3939] r7 : 00000000 r6 : 00000000 r5 : 20ffb000 r4 : 84112400 [ 140.344526][ T3939] r3 : 20ffc000 r2 : 00000000 r1 : 00000000 r0 : 00000010 [ 140.344809][ T3939] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment none [ 140.345292][ T3939] Control: 30c5387d Table: 84e36500 DAC: 00000000 [ 140.345577][ T3939] Register r0 information: zero-size pointer [ 140.346250][ T3939] Register r1 information: NULL pointer [ 140.346406][ T3939] Register r2 information: NULL pointer [ 140.346566][ T3939] Register r3 information: non-paged memory [ 140.346789][ T3939] Register r4 information: slab mm_struct start 84112400 pointer offset 0 size 712 [ 140.347360][ T3939] Register r5 information: non-paged memory [ 140.347510][ T3939] Register r6 information: NULL pointer [ 140.347785][ T3939] Register r7 information: NULL pointer [ 140.347959][ T3939] Register r8 information: NULL pointer [ 140.348114][ T3939] Register r9 information: slab task_struct start 83e92400 pointer offset 0 size 3072 [ 140.348384][ T3939] Register r10 information: 2-page vmalloc region starting at 0xe0068000 allocated at kernel_clone+0xac/0x3cc [ 140.348743][ T3939] Register r11 information: 2-page vmalloc region starting at 0xe0068000 allocated at kernel_clone+0xac/0x3cc [ 140.349065][ T3939] Register r12 information: NULL pointer [ 140.349232][ T3939] Process syz-executor.0 (pid: 3939, stack limit = 0xe0068000) [ 140.349638][ T3939] Stack: (0xe0069e18 to 0xe006a000) [ 140.349879][ T3939] 9e00: 00000000 00000000 [ 140.350152][ T3939] 9e20: 10000000 20000200 00000001 00000000 00000000 20ffb000 00000000 00000000 [ 140.350365][ T3939] 9e40: 00000000 00000000 00000000 00000000 00000060 00000000 00000000 00000000 [ 140.350909][ T3939] 9e60: 20ffb000 00000000 20ffc000 00000000 00000000 00000000 20000140 00000000 [ 140.351173][ T3939] 9e80: 00000000 10000000 ffffffff 00000000 00000000 00000000 00000000 00000000 [ 140.351391][ T3939] 9ea0: 00000000 00000000 00000000 00000000 00000000 00000000 00000010 00000000 [ 140.351662][ T3939] 9ec0: 00000000 00000000 20000140 00000000 c0606610 d6a1a6db e0069ef4 c0606610 [ 140.351942][ T3939] 9ee0: 00000000 834480c1 20000200 00000003 83e92400 834480c0 e0069f14 e0069f08 [ 140.352162][ T3939] 9f00: 8059d220 8059cb50 e0069fa4 e0069f18 8050fcbc 8059d204 83e92400 00000001 [ 140.353052][ T3939] 9f20: ecac8b10 83e92400 e0069f44 e0069f38 818c04dc 818c03a8 e0069f5c e0069f48 [ 140.353297][ T3939] 9f40: 8024c880 8027b0a4 40000000 e0069fb0 e0069f84 e0069f60 8020316c 8024c83c [ 140.354090][ T3939] 9f60: 8261ca0c e0069fb0 0006b3e0 ecac8b10 80203054 d6a1a6db e0069fac 00000000 [ 140.354323][ T3939] 9f80: 00000000 0014c2c8 00000036 80200288 83e92400 00000036 00000000 e0069fa8 [ 140.354555][ T3939] 9fa0: 80200060 8050fbb0 00000000 00000000 00000003 c0606610 20000200 00000000 [ 140.354797][ T3939] 9fc0: 00000000 00000000 0014c2c8 00000036 7e9b032e 7e9b032f 003d0f00 76bf90fc [ 140.355036][ T3939] 9fe0: 76bf8f08 76bf8ef8 000167e8 00050bb0 60000010 00000003 00000000 00000000 [ 140.355311][ T3939] Call trace: [ 140.355589][ T3939] [<8059cb44>] (do_pagemap_scan) from [<8059d220>] (do_pagemap_cmd+0x28/0x34) [ 140.355964][ T3939] r10:834480c0 r9:83e92400 r8:00000003 r7:20000200 r6:834480c1 r5:00000000 [ 140.356185][ T3939] r4:c0606610 [ 140.356330][ T3939] [<8059d1f8>] (do_pagemap_cmd) from [<8050fcbc>] (sys_ioctl+0x118/0xc24) [ 140.356576][ T3939] [<8050fba4>] (sys_ioctl) from [<80200060>] (ret_fast_syscall+0x0/0x1c) [ 140.356798][ T3939] Exception stack(0xe0069fa8 to 0xe0069ff0) [ 140.356947][ T3939] 9fa0: 00000000 00000000 00000003 c0606610 20000200 00000000 [ 140.357155][ T3939] 9fc0: 00000000 00000000 0014c2c8 00000036 7e9b032e 7e9b032f 003d0f00 76bf90fc [ 140.357351][ T3939] 9fe0: 76bf8f08 76bf8ef8 000167e8 00050bb0 [ 140.357495][ T3939] r10:00000036 r9:83e92400 r8:80200288 r7:00000036 r6:0014c2c8 r5:00000000 [ 140.357697][ T3939] r4:00000000 [ 140.357976][ T3939] Code: e51b309c e51b208c e50b203c e3a02000 (e1c060f8) [ 140.359228][ T3939] ---[ end trace 0000000000000000 ]--- [ 140.359681][ T3939] Kernel panic - not syncing: Fatal exception [ 140.360988][ T3939] Rebooting in 86400 seconds..