Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. 2025/04/23 02:28:36 ignoring optional flag "sandboxArg"="0" 2025/04/23 02:28:36 parsed 1 programs [ 47.336418][ T23] kauditd_printk_skb: 26 callbacks suppressed [ 47.336424][ T23] audit: type=1400 audit(1745375317.100:102): avc: denied { module_request } for pid=403 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 47.366187][ T23] audit: type=1400 audit(1745375317.100:103): avc: denied { read write } for pid=403 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.393214][ T23] audit: type=1400 audit(1745375317.100:104): avc: denied { open } for pid=403 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.419521][ T23] audit: type=1400 audit(1745375317.130:105): avc: denied { unlink } for pid=403 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.419779][ T403] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.445860][ T23] audit: type=1400 audit(1745375317.130:106): avc: denied { relabelto } for pid=408 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.923149][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.931124][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.938406][ T427] device bridge_slave_0 entered promiscuous mode [ 47.945244][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.952298][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.959620][ T427] device bridge_slave_1 entered promiscuous mode [ 47.990776][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.997734][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.004950][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.012254][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.027810][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.035331][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.042450][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.052203][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.060228][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.067272][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.076077][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.084518][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.091456][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.101978][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.111437][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.123737][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.134130][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.142214][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.150005][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.157985][ T427] device veth0_vlan entered promiscuous mode [ 48.167809][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.176831][ T427] device veth1_macvtap entered promiscuous mode [ 48.185117][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.194790][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.307537][ T23] audit: type=1401 audit(1745375318.070:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/04/23 02:28:38 executed programs: 0 [ 48.418488][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.425673][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.433455][ T452] device bridge_slave_0 entered promiscuous mode [ 48.440624][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.448424][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.455977][ T452] device bridge_slave_1 entered promiscuous mode [ 48.486489][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.493681][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.501045][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.508283][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.524738][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.532319][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.539429][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.548002][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.556085][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.563382][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.571774][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.579946][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.586792][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.597712][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.606445][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.624147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.634313][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.642803][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.650114][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.658780][ T452] device veth0_vlan entered promiscuous mode [ 48.673157][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.682201][ T452] device veth1_macvtap entered promiscuous mode [ 48.690900][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.700167][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.725277][ T458] ================================================================== [ 48.726342][ T23] audit: type=1400 audit(1745375318.480:108): avc: denied { sys_module } for pid=457 comm="syz.0.15" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.733510][ T458] BUG: KASAN: vmalloc-out-of-bounds in load_module+0x93be/0xa5c0 [ 48.754623][ T23] audit: type=1400 audit(1745375318.480:109): avc: denied { module_load } for pid=457 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 48.761902][ T458] Read of size 1 at addr ffffc90000108fff by task syz.0.15/458 [ 48.761904][ T458] [ 48.761911][ T458] CPU: 0 PID: 458 Comm: syz.0.15 Not tainted 5.10.236-syzkaller #0 [ 48.761914][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.761923][ T458] Call Trace: [ 48.761938][ T458] dump_stack_lvl+0x81/0xac [ 48.816881][ T458] print_address_description.constprop.0+0x24/0x160 [ 48.823931][ T458] ? load_module+0x93be/0xa5c0 [ 48.828712][ T458] kasan_report.cold+0x82/0xdb [ 48.833473][ T458] ? load_module+0x93be/0xa5c0 [ 48.838430][ T458] __asan_report_load1_noabort+0x14/0x20 [ 48.844281][ T458] load_module+0x93be/0xa5c0 [ 48.848695][ T458] ? __alloc_pages_nodemask+0x2ae/0x23e0 [ 48.854456][ T458] ? kasan_poison+0x60/0x60 [ 48.858808][ T458] ? apply_to_page_range+0xf/0x20 [ 48.863655][ T458] ? kasan_populate_vmalloc+0x66/0x70 [ 48.868908][ T458] ? module_frob_arch_sections+0x20/0x20 [ 48.874682][ T458] ? vm_unmap_ram+0x350/0x350 [ 48.879380][ T458] ? __kmalloc+0x1cd/0x360 [ 48.883628][ T458] ? kasan_poison+0x55/0x60 [ 48.887980][ T458] ? kasan_unpoison+0x46/0x70 [ 48.892483][ T458] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 48.897895][ T458] ? __vmalloc_node_range+0x61c/0x980 [ 48.903520][ T458] ? vfree_atomic+0x90/0x90 [ 48.907972][ T458] ? __kasan_check_write+0x14/0x20 [ 48.913073][ T458] __do_sys_init_module+0x1fb/0x230 [ 48.918184][ T458] ? load_module+0xa5c0/0xa5c0 [ 48.923041][ T458] ? __kasan_check_write+0x14/0x20 [ 48.928088][ T458] ? debug_smp_processor_id+0x17/0x20 [ 48.933295][ T458] ? fpregs_assert_state_consistent+0x3f/0x60 [ 48.939362][ T458] ? exit_to_user_mode_prepare+0x32/0x120 [ 48.944917][ T458] __x64_sys_init_module+0x6e/0xb0 [ 48.950299][ T458] ? exc_page_fault+0x71/0xc0 [ 48.954911][ T458] do_syscall_64+0x32/0x80 [ 48.959327][ T458] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.965242][ T458] RIP: 0033:0x7fd00a7f8f39 [ 48.969506][ T458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.989360][ T458] RSP: 002b:00007fd00a27a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 48.997776][ T458] RAX: ffffffffffffffda RBX: 00007fd00a9b0f80 RCX: 00007fd00a7f8f39 [ 49.005689][ T458] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 49.013493][ T458] RBP: 00007fd00a86b216 R08: 0000000000000000 R09: 0000000000000000 [ 49.021508][ T458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.029563][ T458] R13: 0000000000000001 R14: 00007fd00a9b0f80 R15: 00007ffd067f74c8 [ 49.037645][ T458] [ 49.040153][ T458] [ 49.042321][ T458] Memory state around the buggy address: [ 49.048140][ T458] ffffc90000108e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 49.056745][ T458] ffffc90000108f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 49.064799][ T458] >ffffc90000108f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 49.073009][ T458] ^ [ 49.080800][ T458] ffffc90000109000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.088784][ T458] ffffc90000109080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.096745][ T458] ================================================================== [ 49.104785][ T458] Disabling lock debugging due to kernel taint [ 49.112958][ T458] BUG: unable to handle page fault for address: ffffc90000108fff [ 49.120498][ T458] #PF: supervisor read access in kernel mode [ 49.126309][ T458] #PF: error_code(0x0000) - not-present page [ 49.132139][ T458] PGD 100000067 P4D 100000067 PUD 100112067 PMD 100113067 PTE 0 [ 49.140021][ T458] Oops: 0000 [#1] PREEMPT SMP KASAN [ 49.145056][ T458] CPU: 1 PID: 458 Comm: syz.0.15 Tainted: G B 5.10.236-syzkaller #0 [ 49.154183][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.164180][ T458] RIP: 0010:load_module+0x376/0xa5c0 [ 49.169419][ T458] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 49.189030][ T458] RSP: 0018:ffffc90000a57a00 EFLAGS: 00010286 [ 49.194935][ T458] RAX: 0000000000000001 RBX: ffffc900001093c2 RCX: 0000000000000578 [ 49.202762][ T458] RDX: ffffc90000109000 RSI: 0000000000000004 RDI: ffffffff856bc9e0 [ 49.210643][ T458] RBP: ffffc90000a57da8 R08: ffffc9000010903c R09: 0000000000000000 [ 49.218810][ T458] R10: fffffbfff0ad793c R11: 0000000000000001 R12: ffffc90000108fff [ 49.226857][ T458] R13: ffffc90000109000 R14: 0000000000000000 R15: 0000000000000578 [ 49.234937][ T458] FS: 00007fd00a27a6c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000 [ 49.244044][ T458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.250457][ T458] CR2: ffffc90000108fff CR3: 00000001100fe000 CR4: 00000000003506a0 [ 49.258268][ T458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.266426][ T458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.274575][ T458] Call Trace: [ 49.277711][ T458] ? __alloc_pages_nodemask+0x2ae/0x23e0 [ 49.283342][ T458] ? kasan_poison+0x60/0x60 [ 49.287685][ T458] ? apply_to_page_range+0xf/0x20 [ 49.292632][ T458] ? kasan_populate_vmalloc+0x66/0x70 [ 49.298279][ T458] ? module_frob_arch_sections+0x20/0x20 [ 49.303927][ T458] ? vm_unmap_ram+0x350/0x350 [ 49.308766][ T458] ? __kmalloc+0x1cd/0x360 [ 49.313241][ T458] ? kasan_poison+0x55/0x60 [ 49.317762][ T458] ? kasan_unpoison+0x46/0x70 [ 49.322293][ T458] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 49.327674][ T458] ? __vmalloc_node_range+0x61c/0x980 [ 49.333036][ T458] ? vfree_atomic+0x90/0x90 [ 49.337489][ T458] ? __kasan_check_write+0x14/0x20 [ 49.342614][ T458] __do_sys_init_module+0x1fb/0x230 [ 49.348179][ T458] ? load_module+0xa5c0/0xa5c0 [ 49.353133][ T458] ? __kasan_check_write+0x14/0x20 [ 49.358178][ T458] ? debug_smp_processor_id+0x17/0x20 [ 49.363680][ T458] ? fpregs_assert_state_consistent+0x3f/0x60 [ 49.369807][ T458] ? exit_to_user_mode_prepare+0x32/0x120 [ 49.375362][ T458] __x64_sys_init_module+0x6e/0xb0 [ 49.380492][ T458] ? exc_page_fault+0x71/0xc0 [ 49.385077][ T458] do_syscall_64+0x32/0x80 [ 49.389517][ T458] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.395416][ T458] RIP: 0033:0x7fd00a7f8f39 [ 49.399678][ T458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.419883][ T458] RSP: 002b:00007fd00a27a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 49.428480][ T458] RAX: ffffffffffffffda RBX: 00007fd00a9b0f80 RCX: 00007fd00a7f8f39 [ 49.436378][ T458] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 49.444278][ T458] RBP: 00007fd00a86b216 R08: 0000000000000000 R09: 0000000000000000 [ 49.452819][ T458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.460877][ T458] R13: 0000000000000001 R14: 00007fd00a9b0f80 R15: 00007ffd067f74c8 [ 49.468808][ T458] Modules linked in: [ 49.472523][ T458] CR2: ffffc90000108fff [ 49.476504][ T458] ---[ end trace cd1dcf3055fc2bec ]--- [ 49.481973][ T458] RIP: 0010:load_module+0x376/0xa5c0 [ 49.487187][ T458] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 49.506985][ T458] RSP: 0018:ffffc90000a57a00 EFLAGS: 00010286 [ 49.513116][ T458] RAX: 0000000000000001 RBX: ffffc900001093c2 RCX: 0000000000000578 [ 49.521012][ T458] RDX: ffffc90000109000 RSI: 0000000000000004 RDI: ffffffff856bc9e0 [ 49.528983][ T458] RBP: ffffc90000a57da8 R08: ffffc9000010903c R09: 0000000000000000 [ 49.536815][ T458] R10: fffffbfff0ad793c R11: 0000000000000001 R12: ffffc90000108fff [ 49.544961][ T458] R13: ffffc90000109000 R14: 0000000000000000 R15: 0000000000000578 [ 49.553163][ T458] FS: 00007fd00a27a6c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000 [ 49.562154][ T458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.568598][ T458] CR2: ffffc90000108fff CR3: 00000001100fe000 CR4: 00000000003506a0 [ 49.576394][ T458] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.584474][ T458] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.592382][ T458] Kernel panic - not syncing: Fatal exception [ 49.598695][ T458] Kernel Offset: disabled [ 49.603250][ T458] Rebooting in 86400 seconds..