Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. 2025/01/15 06:26:09 ignoring optional flag "sandboxArg"="0" 2025/01/15 06:26:09 ignoring optional flag "type"="gce" 2025/01/15 06:26:09 parsed 1 programs [ 49.281326][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 49.281342][ T30] audit: type=1400 audit(1736922370.662:106): avc: denied { unlink } for pid=405 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.324953][ T405] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.780670][ T30] audit: type=1401 audit(1736922371.152:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.895104][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.916603][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.928111][ T420] device bridge_slave_0 entered promiscuous mode [ 49.951020][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.957873][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.965221][ T420] device bridge_slave_1 entered promiscuous mode [ 50.167654][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.174544][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.181653][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.188413][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.246070][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.255250][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.262875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.270166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.279243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.287558][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.294425][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.303831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.311933][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.318776][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.331070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.340160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.355066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.366442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.374760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.382326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.390416][ T420] device veth0_vlan entered promiscuous mode 2025/01/15 06:26:11 executed programs: 0 [ 50.401918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.411340][ T420] device veth1_macvtap entered promiscuous mode [ 50.421581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.435582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.615760][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.623095][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.630236][ T471] device bridge_slave_0 entered promiscuous mode [ 50.638560][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.645592][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.653002][ T471] device bridge_slave_1 entered promiscuous mode [ 50.718811][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.726181][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.733811][ T472] device bridge_slave_0 entered promiscuous mode [ 50.755666][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.762702][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.770057][ T472] device bridge_slave_1 entered promiscuous mode [ 50.796423][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.803456][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.810729][ T477] device bridge_slave_0 entered promiscuous mode [ 50.831335][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.838290][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.845637][ T477] device bridge_slave_1 entered promiscuous mode [ 50.938709][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.945746][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.953170][ T474] device bridge_slave_0 entered promiscuous mode [ 50.959658][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.966683][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.974045][ T475] device bridge_slave_0 entered promiscuous mode [ 50.994537][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.001450][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.008861][ T474] device bridge_slave_1 entered promiscuous mode [ 51.019304][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.026203][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.033709][ T475] device bridge_slave_1 entered promiscuous mode [ 51.229609][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.236603][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.243702][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.250459][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.259853][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.267629][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.275660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.283686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.311210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.318781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.326230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.333808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.353709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.362004][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.369954][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.376823][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.384189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.392743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.400986][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.408007][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.415339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.423796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.432163][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.439008][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.446764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.455092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.463228][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.470317][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.477725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.485254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.492917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.532345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.540472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.548815][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.555712][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.564406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.572629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.580438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.588429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.596270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.604379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.632265][ T471] device veth0_vlan entered promiscuous mode [ 51.638749][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.647695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.656183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.663802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.672185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.680278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.687968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.696236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.704435][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.711642][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.718892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.726901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.734738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.748035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.756151][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.763221][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.770699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.778871][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.785740][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.795143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.807151][ T477] device veth0_vlan entered promiscuous mode [ 51.822824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.832088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.839943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.847311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.854980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.863073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.885686][ T471] device veth1_macvtap entered promiscuous mode [ 51.894851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.903084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.912794][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.919646][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.928127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.936356][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.943248][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.950494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.958565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.970020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.978413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.989664][ T477] device veth1_macvtap entered promiscuous mode [ 52.003311][ T474] device veth0_vlan entered promiscuous mode [ 52.009606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.017685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.034231][ T472] device veth0_vlan entered promiscuous mode [ 52.042448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.049774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.057609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.066445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.074908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.082759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.093265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.100902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.108139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.116259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.134024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.142350][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.150477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.159187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.171387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.179414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.196268][ T472] device veth1_macvtap entered promiscuous mode [ 52.207528][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.209640][ T30] audit: type=1400 audit(1736922373.582:108): avc: denied { prog_load } for pid=494 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.215929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.243574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.252109][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.260942][ T30] audit: type=1400 audit(1736922373.622:109): avc: denied { bpf } for pid=494 comm="syz.4.19" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.262420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.293032][ T30] audit: type=1400 audit(1736922373.622:110): avc: denied { perfmon } for pid=494 comm="syz.4.19" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.294661][ T474] device veth1_macvtap entered promiscuous mode [ 52.320871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.329027][ T30] audit: type=1404 audit(1736922373.632:111): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 52.336578][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.346273][ T30] audit: type=1404 audit(1736922373.662:112): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 52.366407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.373754][ T30] audit: type=1400 audit(1736922373.662:113): avc: denied { module_request } for pid=474 comm="syz-executor" kmod="netdev-ipvlan1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.410697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.419659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.427868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.436820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.446162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.454588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.465804][ T475] device veth0_vlan entered promiscuous mode [ 52.493050][ T30] audit: type=1400 audit(1736922373.872:114): avc: denied { mounton } for pid=471 comm="syz-executor" path="/root/syzkaller.wu8hgg/syz-tmp" dev="sda1" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 52.522385][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.522780][ T30] audit: type=1400 audit(1736922373.892:115): avc: denied { mount } for pid=471 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.537405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.573168][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.582456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.591169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.599666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.650484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.659156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.669899][ T475] device veth1_macvtap entered promiscuous mode [ 52.688280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.697470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.705708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.730320][ T502] syz.1.16[502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.730477][ T502] syz.1.16[502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.741594][ T504] syz.2.17[504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.742620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.753254][ T495] syz.4.19[495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.771270][ T504] syz.2.17[504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.782642][ T495] syz.4.19[495] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.783510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.835618][ T508] syz.1.21[508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.835685][ T508] syz.1.21[508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.849168][ T512] syz.2.22[512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.861151][ T513] syz.4.23[513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.895959][ T513] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 52.918963][ T513] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 52.927211][ T513] CPU: 1 PID: 513 Comm: syz.4.23 Not tainted 5.15.176-syzkaller-1078759-g829d9f138569 #0 [ 52.936842][ T513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.946746][ T513] RIP: 0010:bpf_check+0x9530/0x12c60 [ 52.951859][ T513] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 fa cd 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d2 cd 30 00 48 8b 1b 48 85 db 0f 84 [ 52.971305][ T513] RSP: 0018:ffffc90000d074e0 EFLAGS: 00010246 [ 52.977252][ T513] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 52.985011][ T513] RDX: 0000000000000000 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 52.992923][ T513] RBP: ffffc90000d07bb0 R08: ffffffff817c3ddd R09: 0000000000000003 [ 53.000728][ T513] R10: fffff520001a0d68 R11: dffffc0000000001 R12: 1ffff92000013213 [ 53.008538][ T513] R13: ffff88812c578008 R14: ffffffff817bf840 R15: ffffc9000009909c [ 53.016356][ T513] FS: 00007f46423ec6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.025288][ T513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.031713][ T513] CR2: 0000000020002800 CR3: 000000010e80f000 CR4: 00000000003506a0 [ 53.039615][ T513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.047509][ T513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.055330][ T513] Call Trace: [ 53.058447][ T513] [ 53.061311][ T513] ? __die_body+0x62/0xb0 [ 53.065478][ T513] ? die_addr+0x9f/0xd0 [ 53.069471][ T513] ? exc_general_protection+0x311/0x4b0 [ 53.074868][ T513] ? asm_exc_general_protection+0x27/0x30 [ 53.080402][ T513] ? tracing_prog_func_proto+0x300/0x300 [ 53.085871][ T513] ? bpf_tracing_func_proto+0x15d/0x4a0 [ 53.091254][ T513] ? bpf_check+0x9530/0x12c60 [ 53.095790][ T513] ? bpf_get_btf_vmlinux+0x60/0x60 [ 53.100837][ T513] ? arch_stack_walk+0xf3/0x140 [ 53.105579][ T513] ? stack_trace_save+0x113/0x1c0 [ 53.110449][ T513] ? stack_trace_snprint+0xf0/0xf0 [ 53.115475][ T513] ? ____kasan_kmalloc+0xed/0x110 [ 53.120328][ T513] ? ____kasan_kmalloc+0xdb/0x110 [ 53.125384][ T513] ? __kasan_kmalloc+0x9/0x10 [ 53.129881][ T513] ? kmem_cache_alloc_trace+0x11a/0x270 [ 53.135489][ T513] ? selinux_bpf_prog_alloc+0x51/0x140 [ 53.141081][ T513] ? security_bpf_prog_alloc+0x62/0x90 [ 53.146371][ T513] ? bpf_prog_load+0x9ee/0x1b50 [ 53.151060][ T513] ? __sys_bpf+0x4bc/0x760 [ 53.155339][ T513] ? __x64_sys_bpf+0x7c/0x90 [ 53.159738][ T513] ? x64_sys_call+0x87f/0x9a0 [ 53.164251][ T513] ? do_syscall_64+0x3b/0xb0 [ 53.168781][ T513] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.174702][ T513] ? __kasan_kmalloc+0x9/0x10 [ 53.179448][ T513] ? memset+0x35/0x40 [ 53.183268][ T513] ? bpf_obj_name_cpy+0x196/0x1e0 [ 53.188113][ T513] bpf_prog_load+0x12ac/0x1b50 [ 53.192794][ T513] ? map_freeze+0x370/0x370 [ 53.197164][ T513] ? selinux_bpf+0xcb/0x100 [ 53.201597][ T513] ? security_bpf+0x82/0xb0 [ 53.206017][ T513] __sys_bpf+0x4bc/0x760 [ 53.210095][ T513] ? bpf_link_show_fdinfo+0x300/0x300 [ 53.215319][ T513] __x64_sys_bpf+0x7c/0x90 [ 53.219549][ T513] x64_sys_call+0x87f/0x9a0 [ 53.223889][ T513] do_syscall_64+0x3b/0xb0 [ 53.228144][ T513] ? clear_bhb_loop+0x35/0x90 [ 53.232659][ T513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.238509][ T513] RIP: 0033:0x7f46429649f9 [ 53.242750][ T513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.262274][ T513] RSP: 002b:00007f46423ec048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.270520][ T513] RAX: ffffffffffffffda RBX: 00007f4642af2f80 RCX: 00007f46429649f9 [ 53.278612][ T513] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 53.286404][ T513] RBP: 00007f46429d28ee R08: 0000000000000000 R09: 0000000000000000 [ 53.294214][ T513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.302127][ T513] R13: 000000000000000b R14: 00007f4642af2f80 R15: 00007ffca7b393f8 [ 53.310116][ T513] [ 53.312970][ T513] Modules linked in: [ 53.316792][ T512] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN [ 53.328337][ T512] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 53.336587][ T512] CPU: 0 PID: 512 Comm: syz.2.22 Tainted: G D 5.15.176-syzkaller-1078759-g829d9f138569 #0 [ 53.347605][ T512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.357613][ T512] RIP: 0010:bpf_check+0x9530/0x12c60 [ 53.362740][ T512] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 fa cd 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d2 cd 30 00 48 8b 1b 48 85 db 0f 84 [ 53.382192][ T512] RSP: 0018:ffffc90000cf74e0 EFLAGS: 00010246 [ 53.388192][ T512] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 53.396125][ T512] RDX: 0000000000000000 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 53.404012][ T512] RBP: ffffc90000cf7bb0 R08: ffffffff817c3ddd R09: 0000000000000015 [ 53.411821][ T512] R10: ffffc90000cf6bb0 R11: dffffc0000000001 R12: 1ffff92000040213 [ 53.419634][ T512] R13: ffff88811b3a0008 R14: ffffffff817bf840 R15: ffffc9000020109c [ 53.427455][ T512] FS: 00007f3842b7e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.436218][ T512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.442631][ T512] CR2: 00007f3842b5dd58 CR3: 000000011b44d000 CR4: 00000000003506b0 [ 53.450448][ T512] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.458257][ T512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.466075][ T512] Call Trace: [ 53.469194][ T512] [ 53.471975][ T512] ? __die_body+0x62/0xb0 [ 53.476132][ T512] ? die_addr+0x9f/0xd0 [ 53.480128][ T512] ? exc_general_protection+0x311/0x4b0 [ 53.485512][ T512] ? asm_exc_general_protection+0x27/0x30 [ 53.491062][ T512] ? tracing_prog_func_proto+0x300/0x300 [ 53.496554][ T512] ? bpf_tracing_func_proto+0x15d/0x4a0 [ 53.501912][ T512] ? bpf_check+0x9530/0x12c60 [ 53.506523][ T512] ? bpf_get_btf_vmlinux+0x60/0x60 [ 53.511460][ T512] ? arch_stack_walk+0xf3/0x140 [ 53.516149][ T512] ? stack_trace_save+0x113/0x1c0 [ 53.521045][ T512] ? stack_trace_snprint+0xf0/0xf0 [ 53.525958][ T512] ? ____kasan_kmalloc+0xed/0x110 [ 53.530814][ T512] ? ____kasan_kmalloc+0xdb/0x110 [ 53.535676][ T512] ? __kasan_kmalloc+0x9/0x10 [ 53.540186][ T512] ? kmem_cache_alloc_trace+0x11a/0x270 [ 53.545568][ T512] ? selinux_bpf_prog_alloc+0x51/0x140 [ 53.550864][ T512] ? security_bpf_prog_alloc+0x62/0x90 [ 53.556159][ T512] ? bpf_prog_load+0x9ee/0x1b50 [ 53.561065][ T512] ? __sys_bpf+0x4bc/0x760 [ 53.565314][ T512] ? __x64_sys_bpf+0x7c/0x90 [ 53.569739][ T512] ? x64_sys_call+0x87f/0x9a0 [ 53.574253][ T512] ? do_syscall_64+0x3b/0xb0 [ 53.578680][ T512] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.584587][ T512] ? __kasan_kmalloc+0x9/0x10 [ 53.589095][ T512] ? memset+0x35/0x40 [ 53.592924][ T512] ? bpf_obj_name_cpy+0x196/0x1e0 [ 53.597772][ T512] bpf_prog_load+0x12ac/0x1b50 [ 53.602373][ T512] ? map_freeze+0x370/0x370 [ 53.606713][ T512] ? selinux_bpf+0xcb/0x100 [ 53.611057][ T512] ? security_bpf+0x82/0xb0 [ 53.615485][ T512] __sys_bpf+0x4bc/0x760 [ 53.619673][ T512] ? bpf_link_show_fdinfo+0x300/0x300 [ 53.624886][ T512] __x64_sys_bpf+0x7c/0x90 [ 53.629141][ T512] x64_sys_call+0x87f/0x9a0 [ 53.633477][ T512] do_syscall_64+0x3b/0xb0 [ 53.637725][ T512] ? clear_bhb_loop+0x35/0x90 [ 53.642238][ T512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.647968][ T512] RIP: 0033:0x7f38430f69f9 [ 53.652257][ T512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.671661][ T512] RSP: 002b:00007f3842b7e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.679906][ T512] RAX: ffffffffffffffda RBX: 00007f3843284f80 RCX: 00007f38430f69f9 [ 53.687719][ T512] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 53.695528][ T512] RBP: 00007f38431648ee R08: 0000000000000000 R09: 0000000000000000 [ 53.703426][ T512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.711238][ T512] R13: 000000000000000b R14: 00007f3843284f80 R15: 00007ffc2a8346b8 [ 53.719226][ T512] [ 53.722088][ T512] Modules linked in: [ 53.731141][ T513] ---[ end trace 149bb81cd7dc2644 ]--- [ 53.736442][ T513] RIP: 0010:bpf_check+0x9530/0x12c60 [ 53.745810][ T512] ---[ end trace 149bb81cd7dc2645 ]--- [ 53.758301][ T513] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 fa cd 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d2 cd 30 00 48 8b 1b 48 85 db 0f 84 [ 53.770816][ T512] RIP: 0010:bpf_check+0x9530/0x12c60 [ 53.795937][ T512] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 fa cd 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 d2 cd 30 00 48 8b 1b 48 85 db 0f 84 [ 53.804525][ T513] RSP: 0018:ffffc90000d074e0 EFLAGS: 00010246 [ 53.816976][ T512] RSP: 0018:ffffc90000d074e0 EFLAGS: 00010246 [ 53.829543][ T513] [ 53.833502][ T513] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 53.852548][ T513] RDX: 0000000000000000 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 53.865537][ T513] RBP: ffffc90000d07bb0 R08: ffffffff817c3ddd R09: 0000000000000003 [ 53.876100][ T512] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 53.891945][ T513] R10: fffff520001a0d68 R11: dffffc0000000001 R12: 1ffff92000013213 [ 53.908377][ T512] RDX: 0000000000000000 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 53.916581][ T513] R13: ffff88812c578008 R14: ffffffff817bf840 R15: ffffc9000009909c [ 53.957984][ T512] RBP: ffffc90000d07bb0 R08: ffffffff817c3ddd R09: 0000000000000003 [ 53.966021][ T512] R10: fffff520001a0d68 R11: dffffc0000000001 R12: 1ffff92000013213 [ 53.976039][ T513] FS: 00007f46423ec6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.985592][ T512] R13: ffff88812c578008 R14: ffffffff817bf840 R15: ffffc9000009909c [ 54.017917][ T513] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.025876][ T512] FS: 00007f3842b7e6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 54.042411][ T513] CR2: 00007fff5b0e3d38 CR3: 000000010e80f000 CR4: 00000000003506a0 [ 54.055672][ T512] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.075558][ T513] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.088498][ T513] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.090414][ T512] CR2: 00007f92a115efa8 CR3: 000000011b44d000 CR4: 00000000003506a0 [ 54.104681][ T513] Kernel panic - not syncing: Fatal exception [ 54.104926][ T513] Kernel Offset: disabled [ 54.114966][ T513] Rebooting in 86400 seconds..