[ 36.603905][ T9] device bridge_slave_0 left promiscuous mode [ 36.610276][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.617581][ T9] device veth1_macvtap left promiscuous mode [ 36.623688][ T9] device veth0_vlan left promiscuous mode [ 37.980302][ T9] device bridge_slave_1 left promiscuous mode [ 37.986214][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.993566][ T9] device bridge_slave_0 left promiscuous mode [ 37.999566][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.007009][ T9] device veth1_macvtap left promiscuous mode [ 38.012865][ T9] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. 2024/10/27 19:44:18 ignoring optional flag "sandboxArg"="0" 2024/10/27 19:44:18 parsed 1 programs [ 54.518998][ T23] kauditd_printk_skb: 26 callbacks suppressed [ 54.519003][ T23] audit: type=1400 audit(1730058258.720:102): avc: denied { module_request } for pid=417 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.547386][ T23] audit: type=1400 audit(1730058258.720:103): avc: denied { read write } for pid=417 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.574013][ T23] audit: type=1400 audit(1730058258.720:104): avc: denied { open } for pid=417 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.574247][ T417] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.601250][ T23] audit: type=1400 audit(1730058258.760:105): avc: denied { unlink } for pid=417 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 54.636080][ T23] audit: type=1400 audit(1730058258.760:106): avc: denied { relabelto } for pid=423 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 55.010701][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.017540][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.025029][ T438] device bridge_slave_0 entered promiscuous mode [ 55.032304][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.039415][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.046634][ T438] device bridge_slave_1 entered promiscuous mode [ 55.072027][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.078985][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.086185][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.092959][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.106184][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.113480][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.120712][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.129161][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.137133][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.143957][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.152717][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.160621][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.167358][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.177487][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.186457][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.198032][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.207859][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.215924][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.223286][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.231856][ T438] device veth0_vlan entered promiscuous mode [ 55.240365][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.249115][ T438] device veth1_macvtap entered promiscuous mode [ 55.257138][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.266840][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.338112][ T23] audit: type=1401 audit(1730058259.540:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2024/10/27 19:44:19 executed programs: 0 [ 55.501512][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.508455][ T467] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.515999][ T467] device bridge_slave_0 entered promiscuous mode [ 55.523700][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.530776][ T467] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.537823][ T467] device bridge_slave_1 entered promiscuous mode [ 55.562726][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.569567][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.576691][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.583552][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.596213][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.603841][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.610836][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.619195][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.627518][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.634372][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.642763][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.650777][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.657587][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.667657][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.676338][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.691449][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.701689][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.709671][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.717264][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.725497][ T467] device veth0_vlan entered promiscuous mode [ 55.737229][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.745979][ T467] device veth1_macvtap entered promiscuous mode [ 55.754305][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.764046][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.783289][ T23] audit: type=1400 audit(1730058259.990:108): avc: denied { sys_module } for pid=471 comm="syz.0.15" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.783333][ T472] ================================================================== [ 55.812676][ T472] BUG: KASAN: vmalloc-out-of-bounds in load_module+0x93be/0xa5c0 [ 55.819843][ T23] audit: type=1400 audit(1730058259.990:109): avc: denied { module_load } for pid=471 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 55.820386][ T472] Read of size 1 at addr ffffc90000222fff by task syz.0.15/472 [ 55.847290][ T472] [ 55.849456][ T472] CPU: 0 PID: 472 Comm: syz.0.15 Not tainted 5.10.226-syzkaller #0 [ 55.857264][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.867173][ T472] Call Trace: [ 55.870285][ T472] dump_stack_lvl+0x81/0xac [ 55.874733][ T472] print_address_description.constprop.0+0x24/0x160 [ 55.881211][ T472] ? load_module+0x93be/0xa5c0 [ 55.885810][ T472] kasan_report.cold+0x82/0xdb [ 55.890418][ T472] ? load_module+0x93be/0xa5c0 [ 55.895011][ T472] __asan_report_load1_noabort+0x14/0x20 [ 55.900479][ T472] load_module+0x93be/0xa5c0 [ 55.904928][ T472] ? __alloc_pages_nodemask+0x2ae/0x23d0 [ 55.910559][ T472] ? kasan_poison+0x60/0x60 [ 55.914903][ T472] ? apply_to_page_range+0xf/0x20 [ 55.919757][ T472] ? kasan_populate_vmalloc+0x66/0x70 [ 55.924955][ T472] ? module_frob_arch_sections+0x20/0x20 [ 55.930437][ T472] ? vm_unmap_ram+0x350/0x350 [ 55.934940][ T472] ? __kmalloc+0x1cd/0x360 [ 55.939207][ T472] ? kasan_poison+0x55/0x60 [ 55.943766][ T472] ? kasan_unpoison+0x46/0x70 [ 55.948395][ T472] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 55.953710][ T472] ? __vmalloc_node_range+0x61c/0x980 [ 55.958903][ T472] ? vfree_atomic+0x90/0x90 [ 55.963324][ T472] ? __kasan_check_write+0x14/0x20 [ 55.968602][ T472] __do_sys_init_module+0x1fb/0x230 [ 55.973631][ T472] ? load_module+0xa5c0/0xa5c0 [ 55.978223][ T472] ? __kasan_check_write+0x14/0x20 [ 55.983165][ T472] ? debug_smp_processor_id+0x17/0x20 [ 55.988507][ T472] ? fpregs_assert_state_consistent+0x3f/0x60 [ 55.994463][ T472] ? exit_to_user_mode_prepare+0x32/0x120 [ 56.000008][ T472] __x64_sys_init_module+0x6e/0xb0 [ 56.004978][ T472] ? exc_page_fault+0x71/0xc0 [ 56.009542][ T472] do_syscall_64+0x32/0x80 [ 56.013821][ T472] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.019794][ T472] RIP: 0033:0x7f7b872d9f39 [ 56.024073][ T472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.043653][ T472] RSP: 002b:00007f7b86d5b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 56.052133][ T472] RAX: ffffffffffffffda RBX: 00007f7b87491f80 RCX: 00007f7b872d9f39 [ 56.060106][ T472] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 56.068309][ T472] RBP: 00007f7b8734c216 R08: 0000000000000000 R09: 0000000000000000 [ 56.076209][ T472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.084442][ T472] R13: 0000000000000001 R14: 00007f7b87491f80 R15: 00007ffdebfa1c48 [ 56.092547][ T472] [ 56.094705][ T472] [ 56.096886][ T472] Memory state around the buggy address: [ 56.102536][ T472] ffffc90000222e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 56.110654][ T472] ffffc90000222f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 56.118803][ T472] >ffffc90000222f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 56.126874][ T472] ^ [ 56.134781][ T472] ffffc90000223000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.142926][ T472] ffffc90000223080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.150800][ T472] ================================================================== [ 56.158706][ T472] Disabling lock debugging due to kernel taint [ 56.166565][ T472] BUG: unable to handle page fault for address: ffffc90000222fff [ 56.174270][ T472] #PF: supervisor read access in kernel mode [ 56.180203][ T472] #PF: error_code(0x0000) - not-present page [ 56.186013][ T472] PGD 100000067 P4D 100000067 PUD 100119067 PMD 1083d7067 PTE 0 [ 56.193483][ T472] Oops: 0000 [#1] PREEMPT SMP KASAN [ 56.198516][ T472] CPU: 0 PID: 472 Comm: syz.0.15 Tainted: G B 5.10.226-syzkaller #0 [ 56.207773][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.217930][ T472] RIP: 0010:load_module+0x376/0xa5c0 [ 56.223046][ T472] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 56.243618][ T472] RSP: 0018:ffffc90000af7a00 EFLAGS: 00010286 [ 56.249532][ T472] RAX: 0000000000000001 RBX: ffffc900002233c2 RCX: 0000000000000578 [ 56.257340][ T472] RDX: ffffc90000223000 RSI: 0000000000000004 RDI: ffffffff856b99e0 [ 56.265513][ T472] RBP: ffffc90000af7da8 R08: ffffc9000022303c R09: 0000000000000000 [ 56.273335][ T472] R10: fffffbfff0ad733c R11: 0000000000000001 R12: ffffc90000222fff [ 56.281311][ T472] R13: ffffc90000223000 R14: 0000000000000000 R15: 0000000000000578 [ 56.289209][ T472] FS: 00007f7b86d5b6c0(0000) GS:ffff8881f7400000(0000) knlGS:0000000000000000 [ 56.297975][ T472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.304585][ T472] CR2: ffffc90000222fff CR3: 00000001102d8000 CR4: 00000000003506b0 [ 56.312471][ T472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.320375][ T472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.328178][ T472] Call Trace: [ 56.331307][ T472] ? show_regs.part.0+0x1e/0x20 [ 56.336005][ T472] ? __die+0x5d/0x9e [ 56.339833][ T472] ? no_context.constprop.0+0x304/0x6a0 [ 56.345223][ T472] ? is_prefetch.constprop.0+0x330/0x330 [ 56.350866][ T472] ? __schedule+0x707/0x19d0 [ 56.355667][ T472] ? wake_up_klogd.part.0+0x71/0xa0 [ 56.361567][ T472] ? io_schedule_timeout+0x150/0x150 [ 56.366774][ T472] ? __bad_area_nosemaphore+0x6a/0x330 [ 56.372245][ T472] ? __kasan_check_read+0x11/0x20 [ 56.377105][ T472] ? preempt_schedule_common+0x5e/0xe0 [ 56.382394][ T472] ? bad_area_nosemaphore+0x11/0x20 [ 56.387457][ T472] ? do_kern_addr_fault+0x30/0x40 [ 56.392377][ T472] ? exc_page_fault+0xb1/0xc0 [ 56.396917][ T472] ? asm_exc_page_fault+0x1e/0x30 [ 56.401856][ T472] ? load_module+0x376/0xa5c0 [ 56.406362][ T472] ? __alloc_pages_nodemask+0x2ae/0x23d0 [ 56.411833][ T472] ? kasan_poison+0x60/0x60 [ 56.416174][ T472] ? apply_to_page_range+0xf/0x20 [ 56.421052][ T472] ? kasan_populate_vmalloc+0x66/0x70 [ 56.426315][ T472] ? module_frob_arch_sections+0x20/0x20 [ 56.431827][ T472] ? vm_unmap_ram+0x350/0x350 [ 56.436303][ T472] ? __kmalloc+0x1cd/0x360 [ 56.440630][ T472] ? kasan_poison+0x55/0x60 [ 56.444968][ T472] ? kasan_unpoison+0x46/0x70 [ 56.449593][ T472] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 56.454962][ T472] ? __vmalloc_node_range+0x61c/0x980 [ 56.460180][ T472] ? vfree_atomic+0x90/0x90 [ 56.464503][ T472] ? __kasan_check_write+0x14/0x20 [ 56.469467][ T472] __do_sys_init_module+0x1fb/0x230 [ 56.474582][ T472] ? load_module+0xa5c0/0xa5c0 [ 56.479282][ T472] ? __kasan_check_write+0x14/0x20 [ 56.484218][ T472] ? debug_smp_processor_id+0x17/0x20 [ 56.489438][ T472] ? fpregs_assert_state_consistent+0x3f/0x60 [ 56.495589][ T472] ? exit_to_user_mode_prepare+0x32/0x120 [ 56.501225][ T472] __x64_sys_init_module+0x6e/0xb0 [ 56.506168][ T472] ? exc_page_fault+0x71/0xc0 [ 56.510691][ T472] do_syscall_64+0x32/0x80 [ 56.514958][ T472] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.520663][ T472] RIP: 0033:0x7f7b872d9f39 [ 56.525044][ T472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.544973][ T472] RSP: 002b:00007f7b86d5b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 56.553439][ T472] RAX: ffffffffffffffda RBX: 00007f7b87491f80 RCX: 00007f7b872d9f39 [ 56.561260][ T472] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 56.569178][ T472] RBP: 00007f7b8734c216 R08: 0000000000000000 R09: 0000000000000000 [ 56.577056][ T472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.585128][ T472] R13: 0000000000000001 R14: 00007f7b87491f80 R15: 00007ffdebfa1c48 [ 56.592953][ T472] Modules linked in: [ 56.596693][ T472] CR2: ffffc90000222fff [ 56.601044][ T472] ---[ end trace c25082402628a70b ]--- [ 56.606624][ T472] RIP: 0010:load_module+0x376/0xa5c0 [ 56.612085][ T472] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 56.631863][ T472] RSP: 0018:ffffc90000af7a00 EFLAGS: 00010286 [ 56.637762][ T472] RAX: 0000000000000001 RBX: ffffc900002233c2 RCX: 0000000000000578 [ 56.645828][ T472] RDX: ffffc90000223000 RSI: 0000000000000004 RDI: ffffffff856b99e0 [ 56.653858][ T472] RBP: ffffc90000af7da8 R08: ffffc9000022303c R09: 0000000000000000 [ 56.661628][ T472] R10: fffffbfff0ad733c R11: 0000000000000001 R12: ffffc90000222fff [ 56.669432][ T472] R13: ffffc90000223000 R14: 0000000000000000 R15: 0000000000000578 [ 56.677843][ T472] FS: 00007f7b86d5b6c0(0000) GS:ffff8881f7400000(0000) knlGS:0000000000000000 [ 56.686703][ T472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.693120][ T472] CR2: ffffc90000222fff CR3: 00000001102d8000 CR4: 00000000003506b0 [ 56.700931][ T472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.708756][ T472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.717021][ T472] Kernel panic - not syncing: Fatal exception [ 56.723161][ T472] Kernel Offset: disabled [ 56.727442][ T472] Rebooting in 86400 seconds..