./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor468589103 <...> Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. execve("./syz-executor468589103", ["./syz-executor468589103"], 0x7fffda97d580 /* 10 vars */) = 0 brk(NULL) = 0x55555b9c7000 brk(0x55555b9c7d00) = 0x55555b9c7d00 arch_prctl(ARCH_SET_FS, 0x55555b9c7380) = 0 set_tid_address(0x55555b9c7650) = 287 set_robust_list(0x55555b9c7660, 24) = 0 rseq(0x55555b9c7ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor468589103", 4096) = 27 getrandom("\xa1\x6a\x68\xa9\x28\x19\x1a\xeb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555b9c7d00 brk(0x55555b9e8d00) = 0x55555b9e8d00 brk(0x55555b9e9000) = 0x55555b9e9000 mprotect(0x7f16af2cb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 [ 22.631872][ T24] audit: type=1400 audit(1727446736.590:66): avc: denied { execmem } for pid=287 comm="syz-executor468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.644997][ T287] ================================================================== [ 22.651138][ T24] audit: type=1400 audit(1727446736.610:67): avc: denied { sys_module } for pid=287 comm="syz-executor468" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 22.658975][ T287] BUG: KASAN: vmalloc-out-of-bounds in load_module+0x2a80/0x5aa0 [ 22.658987][ T287] Read of size 1 at addr ffffc9000009cfff by task syz-executor468/287 [ 22.658989][ T287] [ 22.659002][ T287] CPU: 0 PID: 287 Comm: syz-executor468 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 22.659009][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 22.659019][ T287] Call Trace: [ 22.659036][ T287] dump_stack_lvl+0x1e2/0x24b [ 22.659047][ T287] ? bfq_pos_tree_add_move+0x43b/0x43b [ 22.659057][ T287] ? panic+0x812/0x812 [ 22.659071][ T287] print_address_description+0x81/0x3b0 [ 22.659082][ T287] kasan_report+0x179/0x1c0 [ 22.659094][ T287] ? load_module+0x2a80/0x5aa0 [ 22.659105][ T287] ? load_module+0x2a80/0x5aa0 [ 22.659117][ T287] __asan_report_load1_noabort+0x14/0x20 [ 22.659138][ T287] load_module+0x2a80/0x5aa0 [ 22.680162][ T24] audit: type=1400 audit(1727446736.610:68): avc: denied { module_load } for pid=287 comm="syz-executor468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 22.687655][ T287] ? unmap_kernel_range_noflush+0x550/0x550 [ 22.687683][ T287] ? __kmalloc+0x1aa/0x330 [ 22.793024][ T287] ? is_vmalloc_or_module_addr+0xd/0x50 [ 22.798397][ T287] ? __kasan_unpoison_vmalloc+0x6a/0x90 [ 22.803773][ T287] ? cmp_name+0x60/0x60 [ 22.807766][ T287] ? security_kernel_post_load_data+0x8c/0xb0 [ 22.813670][ T287] __se_sys_init_module+0x238/0x2d0 [ 22.818704][ T287] ? __x64_sys_init_module+0x80/0x80 [ 22.823824][ T287] ? debug_smp_processor_id+0x17/0x20 [ 22.829029][ T287] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 22.834934][ T287] ? irqentry_exit_to_user_mode+0x41/0x80 [ 22.840491][ T287] __x64_sys_init_module+0x76/0x80 [ 22.845520][ T287] do_syscall_64+0x34/0x70 [ 22.849794][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.855512][ T287] RIP: 0033:0x7f16af2582a9 [ 22.859778][ T287] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 22.879298][ T287] RSP: 002b:00007ffc78f18928 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 22.887540][ T287] RAX: ffffffffffffffda RBX: 00007ffc78f18b08 RCX: 00007f16af2582a9 [ 22.895337][ T287] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 22.903327][ T287] RBP: 00007f16af2cb610 R08: 0000000000000000 R09: 0000000000000000 [ 22.911133][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 22.918946][ T287] R13: 00007ffc78f18af8 R14: 0000000000000001 R15: 0000000000000001 [ 22.926754][ T287] [ 22.928918][ T287] [ 22.931090][ T287] Memory state around the buggy address: [ 22.936562][ T287] ffffc9000009ce80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 22.944460][ T287] ffffc9000009cf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 22.952364][ T287] >ffffc9000009cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 22.960622][ T287] ^ [ 22.968422][ T287] ffffc9000009d000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 22.976323][ T287] ffffc9000009d080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 22.984221][ T287] ================================================================== [ 22.992119][ T287] Disabling lock debugging due to kernel taint [ 22.998534][ T287] BUG: unable to handle page fault for address: ffffc9000009cfff [ 23.006052][ T287] #PF: supervisor read access in kernel mode [ 23.011863][ T287] #PF: error_code(0x0000) - not-present page [ 23.017681][ T287] PGD 100000067 P4D 100000067 PUD 10013a067 PMD 10013b067 PTE 0 [ 23.025147][ T287] Oops: 0000 [#1] PREEMPT SMP KASAN [ 23.030376][ T287] CPU: 0 PID: 287 Comm: syz-executor468 Tainted: G B 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 23.041988][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 23.051894][ T287] RIP: 0010:load_module+0x3f4/0x5aa0 [ 23.057003][ T287] Code: 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 44 24 48 4a 8d 5c 38 ff 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 77 26 00 00 <80> 3b 00 4c 8b 7c 24 70 0f 85 84 14 00 00 48 8d 5e 04 48 89 d8 48 [ 23.076528][ T287] RSP: 0018:ffffc90000b47b60 EFLAGS: 00010286 [ 23.082455][ T287] RAX: ffff88812141a701 RBX: ffffc9000009cfff RCX: ffff88812141a780 [ 23.090241][ T287] RDX: dffffc0000000000 RSI: ffffc9000009d3c2 RDI: 00000000ffffffff [ 23.098052][ T287] RBP: ffffc90000b47d50 R08: ffffffff813e2a7b R09: 0000000000000003 [ 23.105867][ T287] R10: fffffbfff0e10c48 R11: dffffc0000000001 R12: ffffc90000b47dc0 [ 23.113774][ T287] R13: ffffc90000b47de8 R14: ffffc9000009d462 R15: ffffc9000009d000 [ 23.121575][ T287] FS: 000055555b9c7380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 23.130345][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.136766][ T287] CR2: ffffc9000009cfff CR3: 0000000120eaa000 CR4: 00000000003506b0 [ 23.144572][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.152383][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.160284][ T287] Call Trace: [ 23.163419][ T287] ? __die_body+0x62/0xb0 [ 23.167572][ T287] ? __die+0x7e/0x90 [ 23.171304][ T287] ? no_context+0x9f9/0xd20 [ 23.175645][ T287] ? is_prefetch+0x5c0/0x5c0 [ 23.180081][ T287] ? release_firmware_map_entry+0x18d/0x18d [ 23.185808][ T287] ? preempt_schedule+0xd9/0xe0 [ 23.190486][ T287] ? __bad_area_nosemaphore+0xc4/0x430 [ 23.195793][ T287] ? schedule_preempt_disabled+0x20/0x20 [ 23.201424][ T287] ? bad_area_nosemaphore+0x2d/0x40 [ 23.206455][ T287] ? do_kern_addr_fault+0x69/0x80 [ 23.211318][ T287] ? exc_page_fault+0x38e/0x5b0 [ 23.216007][ T287] ? asm_exc_page_fault+0x1e/0x30 [ 23.220864][ T287] ? check_panic_on_warn+0x5b/0xb0 [ 23.225814][ T287] ? load_module+0x3f4/0x5aa0 [ 23.230342][ T287] ? unmap_kernel_range_noflush+0x550/0x550 [ 23.236053][ T287] ? __kmalloc+0x1aa/0x330 [ 23.240395][ T287] ? is_vmalloc_or_module_addr+0xd/0x50 [ 23.245788][ T287] ? __kasan_unpoison_vmalloc+0x6a/0x90 [ 23.251159][ T287] ? cmp_name+0x60/0x60 [ 23.255149][ T287] ? security_kernel_post_load_data+0x8c/0xb0 [ 23.261055][ T287] __se_sys_init_module+0x238/0x2d0 [ 23.266088][ T287] ? __x64_sys_init_module+0x80/0x80 [ 23.271215][ T287] ? debug_smp_processor_id+0x17/0x20 [ 23.276416][ T287] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 23.282404][ T287] ? irqentry_exit_to_user_mode+0x41/0x80 [ 23.287969][ T287] __x64_sys_init_module+0x76/0x80 [ 23.292905][ T287] do_syscall_64+0x34/0x70 [ 23.297157][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.302881][ T287] RIP: 0033:0x7f16af2582a9 [ 23.307135][ T287] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 23.326576][ T287] RSP: 002b:00007ffc78f18928 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 23.334820][ T287] RAX: ffffffffffffffda RBX: 00007ffc78f18b08 RCX: 00007f16af2582a9 [ 23.342632][ T287] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 23.350442][ T287] RBP: 00007f16af2cb610 R08: 0000000000000000 R09: 0000000000000000 [ 23.358253][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 23.366074][ T287] R13: 00007ffc78f18af8 R14: 0000000000000001 R15: 0000000000000001 [ 23.373885][ T287] Modules linked in: [ 23.377621][ T287] CR2: ffffc9000009cfff [ 23.381613][ T287] ---[ end trace 7448b2055920de71 ]--- [ 23.386905][ T287] RIP: 0010:load_module+0x3f4/0x5aa0 [ 23.392017][ T287] Code: 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 44 24 48 4a 8d 5c 38 ff 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 77 26 00 00 <80> 3b 00 4c 8b 7c 24 70 0f 85 84 14 00 00 48 8d 5e 04 48 89 d8 48 [ 23.411552][ T287] RSP: 0018:ffffc90000b47b60 EFLAGS: 00010286 [ 23.417447][ T287] RAX: ffff88812141a701 RBX: ffffc9000009cfff RCX: ffff88812141a780 [ 23.425263][ T287] RDX: dffffc0000000000 RSI: ffffc9000009d3c2 RDI: 00000000ffffffff [ 23.433069][ T287] RBP: ffffc90000b47d50 R08: ffffffff813e2a7b R09: 0000000000000003 [ 23.440880][ T287] R10: fffffbfff0e10c48 R11: dffffc0000000001 R12: ffffc90000b47dc0 [ 23.448691][ T287] R13: ffffc90000b47de8 R14: ffffc9000009d462 R15: ffffc9000009d000 [ 23.456594][ T287] FS: 000055555b9c7380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 23.465358][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.471780][ T287] CR2: ffffc9000009cfff CR3: 0000000120eaa000 CR4: 00000000003506b0 [ 23.479594][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.487404][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.495211][ T287] Kernel panic - not syncing: Fatal exception [ 23.501346][ T287] Kernel Offset: disabled [ 23.505559][ T287] Rebooting in 86400 seconds..