[ 33.393610][ T9] device bridge_slave_0 left promiscuous mode [ 33.399643][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.407179][ T9] device veth1_macvtap left promiscuous mode [ 33.413155][ T9] device veth0_vlan left promiscuous mode [ 34.660037][ T9] device bridge_slave_1 left promiscuous mode [ 34.666056][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.673488][ T9] device bridge_slave_0 left promiscuous mode [ 34.679481][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.686802][ T9] device veth1_macvtap left promiscuous mode [ 34.692751][ T9] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.10.37' (ED25519) to the list of known hosts. 2024/12/30 17:04:24 ignoring optional flag "sandboxArg"="0" 2024/12/30 17:04:24 parsed 1 programs [ 51.616310][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 51.616320][ T24] audit: type=1400 audit(1735578265.349:105): avc: denied { unlink } for pid=441 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.660396][ T441] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.130077][ T24] audit: type=1401 audit(1735578265.869:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 52.189172][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.196023][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.203251][ T463] device bridge_slave_0 entered promiscuous mode [ 52.210540][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.217600][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.224834][ T463] device bridge_slave_1 entered promiscuous mode [ 52.253736][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.260607][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.267741][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.274834][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.290301][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.297703][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.304874][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.314249][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.322257][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.329091][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.337225][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.345654][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.352524][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.363467][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.372288][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.385101][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.395302][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.403253][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.410804][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.419448][ T463] device veth0_vlan entered promiscuous mode [ 52.428056][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.436833][ T463] device veth1_macvtap entered promiscuous mode [ 52.446082][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.455660][ T353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.509576][ T24] audit: type=1400 audit(1735578266.249:107): avc: denied { create } for pid=474 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 2024/12/30 17:04:26 executed programs: 0 [ 52.824728][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.831916][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.839178][ T502] device bridge_slave_0 entered promiscuous mode [ 52.848242][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.855194][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.862339][ T502] device bridge_slave_1 entered promiscuous mode [ 52.893968][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.900830][ T502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.907884][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.914726][ T502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.930049][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.937539][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.944826][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.956111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.964190][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.971029][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.979711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.987672][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.994514][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.007565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.017291][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.030091][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.043655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.051736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.059193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.067065][ T502] device veth0_vlan entered promiscuous mode [ 53.076217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.087238][ T502] device veth1_macvtap entered promiscuous mode [ 53.096089][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.108084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.127302][ T508] ================================================================== [ 53.128334][ T24] audit: type=1400 audit(1735578266.859:108): avc: denied { sys_module } for pid=507 comm="syz.0.15" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.135214][ T508] BUG: KASAN: vmalloc-out-of-bounds in load_module+0x2a80/0x5aa0 [ 53.135222][ T508] Read of size 1 at addr ffffc90000bdafff by task syz.0.15/508 [ 53.135224][ T508] [ 53.135235][ T508] CPU: 0 PID: 508 Comm: syz.0.15 Not tainted 5.10.232-syzkaller-1004802-g49e8ba0a684f #0 [ 53.135240][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.135248][ T508] Call Trace: [ 53.135261][ T508] dump_stack_lvl+0x1e2/0x24b [ 53.135269][ T508] ? bfq_pos_tree_add_move+0x43b/0x43b [ 53.135276][ T508] ? panic+0x812/0x812 [ 53.135287][ T508] print_address_description+0x81/0x3b0 [ 53.135296][ T508] kasan_report+0x179/0x1c0 [ 53.135305][ T508] ? load_module+0x2a80/0x5aa0 [ 53.135313][ T508] ? load_module+0x2a80/0x5aa0 [ 53.135323][ T508] __asan_report_load1_noabort+0x14/0x20 [ 53.135332][ T508] load_module+0x2a80/0x5aa0 [ 53.135351][ T508] ? unmap_kernel_range_noflush+0x550/0x550 [ 53.135360][ T508] ? __kmalloc+0x1aa/0x330 [ 53.135370][ T508] ? is_vmalloc_or_module_addr+0xd/0x50 [ 53.135380][ T508] ? __kasan_unpoison_vmalloc+0x6a/0x90 [ 53.135389][ T508] ? cmp_name+0x60/0x60 [ 53.135401][ T508] ? security_kernel_post_load_data+0x8c/0xb0 [ 53.135409][ T508] __se_sys_init_module+0x238/0x2d0 [ 53.135421][ T508] ? set_current_blocked+0x40/0x40 [ 53.135430][ T508] ? __x64_sys_init_module+0x80/0x80 [ 53.135443][ T508] ? debug_smp_processor_id+0x17/0x20 [ 53.135453][ T508] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.135462][ T508] ? irqentry_exit_to_user_mode+0x41/0x80 [ 53.135478][ T508] __x64_sys_init_module+0x76/0x80 [ 53.156964][ T24] audit: type=1400 audit(1735578266.859:109): avc: denied { module_load } for pid=507 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 53.163521][ T508] do_syscall_64+0x34/0x70 [ 53.163533][ T508] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.163541][ T508] RIP: 0033:0x7f2d69ce3f39 [ 53.163558][ T508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.360008][ T508] RSP: 002b:00007f2d69765038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 53.368244][ T508] RAX: ffffffffffffffda RBX: 00007f2d69e9bf80 RCX: 00007f2d69ce3f39 [ 53.376060][ T508] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 53.383872][ T508] RBP: 00007f2d69d56216 R08: 0000000000000000 R09: 0000000000000000 [ 53.391852][ T508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.399838][ T508] R13: 0000000000000001 R14: 00007f2d69e9bf80 R15: 00007ffca64a5c68 [ 53.407655][ T508] [ 53.409820][ T508] [ 53.411982][ T508] Memory state around the buggy address: [ 53.417457][ T508] ffffc90000bdae80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 53.425357][ T508] ffffc90000bdaf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 53.433271][ T508] >ffffc90000bdaf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 53.441261][ T508] ^ [ 53.449067][ T508] ffffc90000bdb000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.456969][ T508] ffffc90000bdb080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.464948][ T508] ================================================================== [ 53.472852][ T508] Disabling lock debugging due to kernel taint [ 53.479973][ T508] BUG: unable to handle page fault for address: ffffc90000bdafff [ 53.487497][ T508] #PF: supervisor read access in kernel mode [ 53.493316][ T508] #PF: error_code(0x0000) - not-present page [ 53.499134][ T508] PGD 100000067 P4D 100000067 PUD 100132067 PMD 10b267067 PTE 0 [ 53.506695][ T508] Oops: 0000 [#1] PREEMPT SMP KASAN [ 53.511832][ T508] CPU: 0 PID: 508 Comm: syz.0.15 Tainted: G B 5.10.232-syzkaller-1004802-g49e8ba0a684f #0 [ 53.522827][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.532749][ T508] RIP: 0010:load_module+0x3f4/0x5aa0 [ 53.537832][ T508] Code: 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 44 24 48 4a 8d 5c 38 ff 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 77 26 00 00 <80> 3b 00 4c 8b 7c 24 70 0f 85 84 14 00 00 48 8d 5e 04 48 89 d8 48 [ 53.557378][ T508] RSP: 0018:ffffc900045efb60 EFLAGS: 00010286 [ 53.563270][ T508] RAX: ffff888117164f01 RBX: ffffc90000bdafff RCX: ffff888117164f00 [ 53.571073][ T508] RDX: dffffc0000000000 RSI: ffffc90000bdb3c2 RDI: 00000000ffffffff [ 53.578886][ T508] RBP: ffffc900045efd50 R08: ffffffff813e2b7b R09: 0000000000000003 [ 53.586695][ T508] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: ffffc900045efdc0 [ 53.594526][ T508] R13: ffffc900045efde8 R14: ffffc90000bdb462 R15: ffffc90000bdb000 [ 53.602325][ T508] FS: 00007f2d697656c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.611265][ T508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.618026][ T508] CR2: ffffc90000bdafff CR3: 0000000117ea5000 CR4: 00000000003506b0 [ 53.625854][ T508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.633647][ T508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.641491][ T508] Call Trace: [ 53.644604][ T508] ? __die_body+0x62/0xb0 [ 53.648764][ T508] ? __die+0x7e/0x90 [ 53.652505][ T508] ? no_context+0x9f9/0xd20 [ 53.656842][ T508] ? is_prefetch+0x5c0/0x5c0 [ 53.661268][ T508] ? release_firmware_map_entry+0x18d/0x18d [ 53.666982][ T508] ? preempt_schedule+0xd9/0xe0 [ 53.671686][ T508] ? __bad_area_nosemaphore+0xc4/0x430 [ 53.676973][ T508] ? schedule_preempt_disabled+0x20/0x20 [ 53.682442][ T508] ? bad_area_nosemaphore+0x2d/0x40 [ 53.687571][ T508] ? do_kern_addr_fault+0x69/0x80 [ 53.692417][ T508] ? exc_page_fault+0x38e/0x5b0 [ 53.697103][ T508] ? asm_exc_page_fault+0x1e/0x30 [ 53.702054][ T508] ? check_panic_on_warn+0x5b/0xb0 [ 53.706994][ T508] ? load_module+0x3f4/0x5aa0 [ 53.711510][ T508] ? unmap_kernel_range_noflush+0x550/0x550 [ 53.717237][ T508] ? __kmalloc+0x1aa/0x330 [ 53.721524][ T508] ? is_vmalloc_or_module_addr+0xd/0x50 [ 53.726880][ T508] ? __kasan_unpoison_vmalloc+0x6a/0x90 [ 53.732254][ T508] ? cmp_name+0x60/0x60 [ 53.736323][ T508] ? security_kernel_post_load_data+0x8c/0xb0 [ 53.742151][ T508] __se_sys_init_module+0x238/0x2d0 [ 53.747183][ T508] ? set_current_blocked+0x40/0x40 [ 53.752125][ T508] ? __x64_sys_init_module+0x80/0x80 [ 53.757263][ T508] ? debug_smp_processor_id+0x17/0x20 [ 53.762460][ T508] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.768359][ T508] ? irqentry_exit_to_user_mode+0x41/0x80 [ 53.773920][ T508] __x64_sys_init_module+0x76/0x80 [ 53.778952][ T508] do_syscall_64+0x34/0x70 [ 53.783315][ T508] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.789012][ T508] RIP: 0033:0x7f2d69ce3f39 [ 53.793262][ T508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.812711][ T508] RSP: 002b:00007f2d69765038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 53.820948][ T508] RAX: ffffffffffffffda RBX: 00007f2d69e9bf80 RCX: 00007f2d69ce3f39 [ 53.828762][ T508] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 53.836567][ T508] RBP: 00007f2d69d56216 R08: 0000000000000000 R09: 0000000000000000 [ 53.844399][ T508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.852199][ T508] R13: 0000000000000001 R14: 00007f2d69e9bf80 R15: 00007ffca64a5c68 [ 53.860001][ T508] Modules linked in: [ 53.863747][ T508] CR2: ffffc90000bdafff [ 53.867743][ T508] ---[ end trace 986b0bdd518f24ef ]--- [ 53.873041][ T508] RIP: 0010:load_module+0x3f4/0x5aa0 [ 53.878148][ T508] Code: 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 44 24 48 4a 8d 5c 38 ff 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 77 26 00 00 <80> 3b 00 4c 8b 7c 24 70 0f 85 84 14 00 00 48 8d 5e 04 48 89 d8 48 [ 53.897689][ T508] RSP: 0018:ffffc900045efb60 EFLAGS: 00010286 [ 53.903590][ T508] RAX: ffff888117164f01 RBX: ffffc90000bdafff RCX: ffff888117164f00 [ 53.911390][ T508] RDX: dffffc0000000000 RSI: ffffc90000bdb3c2 RDI: 00000000ffffffff [ 53.919202][ T508] RBP: ffffc900045efd50 R08: ffffffff813e2b7b R09: 0000000000000003 [ 53.927018][ T508] R10: fffffbfff0e11248 R11: dffffc0000000001 R12: ffffc900045efdc0 [ 53.934824][ T508] R13: ffffc900045efde8 R14: ffffc90000bdb462 R15: ffffc90000bdb000 [ 53.942639][ T508] FS: 00007f2d697656c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.951403][ T508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.957823][ T508] CR2: ffffc90000bdafff CR3: 0000000117ea5000 CR4: 00000000003506b0 [ 53.965648][ T508] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.973442][ T508] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.981261][ T508] Kernel panic - not syncing: Fatal exception [ 53.987493][ T508] Kernel Offset: disabled [ 53.991614][ T508] Rebooting in 86400 seconds..