Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. 2025/05/26 19:47:46 ignoring optional flag "sandboxArg"="0" 2025/05/26 19:47:46 parsed 1 programs [ 51.910163][ T23] kauditd_printk_skb: 30 callbacks suppressed [ 51.910168][ T23] audit: type=1400 audit(1748288867.190:90): avc: denied { unlink } for pid=425 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.960962][ T425] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.346804][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.353920][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.361012][ T442] device bridge_slave_0 entered promiscuous mode [ 52.367533][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.374446][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.381537][ T442] device bridge_slave_1 entered promiscuous mode [ 52.411487][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.418342][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.425545][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.432319][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.447109][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.454636][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.461521][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.470715][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.478843][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.485736][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.494079][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.501990][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.508733][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.519865][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.528132][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.539564][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.549958][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.557645][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.564910][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.573234][ T442] device veth0_vlan entered promiscuous mode [ 52.581847][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.590395][ T442] device veth1_macvtap entered promiscuous mode [ 52.598595][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.608533][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.700399][ T23] audit: type=1401 audit(1748288867.980:91): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/05/26 19:47:48 executed programs: 0 [ 52.886378][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.893214][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.900572][ T474] device bridge_slave_0 entered promiscuous mode [ 52.907117][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.914151][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.921377][ T474] device bridge_slave_1 entered promiscuous mode [ 52.956527][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.963355][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.970475][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.977255][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.996736][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.004087][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.011002][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.024453][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.032348][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.039117][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.054252][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.062364][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.070285][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.077121][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.084705][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.092358][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.106788][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.114567][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.121654][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.129652][ T474] device veth0_vlan entered promiscuous mode [ 53.139879][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.148426][ T474] device veth1_macvtap entered promiscuous mode [ 53.156604][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.169707][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.188296][ T23] audit: type=1400 audit(1748288868.470:92): avc: denied { sys_module } for pid=479 comm="syz.0.15" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.204260][ T480] ================================================================== [ 53.209095][ T23] audit: type=1400 audit(1748288868.490:93): avc: denied { module_load } for pid=479 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 53.216574][ T480] BUG: KASAN: vmalloc-out-of-bounds in load_module+0x93be/0xa5c0 [ 53.216587][ T480] Read of size 1 at addr ffffc90000230fff by task syz.0.15/480 [ 53.216588][ T480] [ 53.216599][ T480] CPU: 0 PID: 480 Comm: syz.0.15 Not tainted 5.10.237-syzkaller #0 [ 53.260573][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.270475][ T480] Call Trace: [ 53.273595][ T480] dump_stack_lvl+0x81/0xac [ 53.278110][ T480] print_address_description.constprop.0+0x24/0x160 [ 53.284528][ T480] ? load_module+0x93be/0xa5c0 [ 53.289129][ T480] kasan_report.cold+0x82/0xdb [ 53.293727][ T480] ? load_module+0x93be/0xa5c0 [ 53.298330][ T480] __asan_report_load1_noabort+0x14/0x20 [ 53.303796][ T480] load_module+0x93be/0xa5c0 [ 53.308232][ T480] ? __alloc_pages_nodemask+0x2ae/0x23e0 [ 53.313692][ T480] ? kasan_poison+0x60/0x60 [ 53.318035][ T480] ? apply_to_page_range+0xf/0x20 [ 53.322892][ T480] ? kasan_populate_vmalloc+0x66/0x70 [ 53.328099][ T480] ? module_frob_arch_sections+0x20/0x20 [ 53.333568][ T480] ? vm_unmap_ram+0x350/0x350 [ 53.338080][ T480] ? __kmalloc+0x1cd/0x360 [ 53.342330][ T480] ? kasan_poison+0x55/0x60 [ 53.346677][ T480] ? kasan_unpoison+0x46/0x70 [ 53.351182][ T480] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 53.356566][ T480] ? __vmalloc_node_range+0x61c/0x980 [ 53.361779][ T480] ? vfree_atomic+0x90/0x90 [ 53.366117][ T480] ? __kasan_check_write+0x14/0x20 [ 53.371090][ T480] __do_sys_init_module+0x1fb/0x230 [ 53.376096][ T480] ? load_module+0xa5c0/0xa5c0 [ 53.380701][ T480] ? __kasan_check_write+0x14/0x20 [ 53.385646][ T480] ? debug_smp_processor_id+0x17/0x20 [ 53.390849][ T480] ? fpregs_assert_state_consistent+0x3f/0x60 [ 53.396752][ T480] ? exit_to_user_mode_prepare+0x32/0x120 [ 53.402306][ T480] __x64_sys_init_module+0x6e/0xb0 [ 53.407254][ T480] ? exc_page_fault+0x71/0xc0 [ 53.411764][ T480] do_syscall_64+0x32/0x80 [ 53.416022][ T480] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.421748][ T480] RIP: 0033:0x7f7ccd67ef39 [ 53.426006][ T480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.445447][ T480] RSP: 002b:00007f7ccd100038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 53.453690][ T480] RAX: ffffffffffffffda RBX: 00007f7ccd836f80 RCX: 00007f7ccd67ef39 [ 53.461497][ T480] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 53.469316][ T480] RBP: 00007f7ccd6f1216 R08: 0000000000000000 R09: 0000000000000000 [ 53.477123][ T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.484931][ T480] R13: 0000000000000001 R14: 00007f7ccd836f80 R15: 00007ffec779c338 [ 53.492840][ T480] [ 53.495007][ T480] [ 53.497172][ T480] Memory state around the buggy address: [ 53.502644][ T480] ffffc90000230e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 53.510552][ T480] ffffc90000230f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 53.518434][ T480] >ffffc90000230f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 53.526333][ T480] ^ [ 53.534142][ T480] ffffc90000231000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.542040][ T480] ffffc90000231080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.549938][ T480] ================================================================== [ 53.557852][ T480] Disabling lock debugging due to kernel taint [ 53.564642][ T480] BUG: unable to handle page fault for address: ffffc90000230fff [ 53.572161][ T480] #PF: supervisor read access in kernel mode [ 53.578321][ T480] #PF: error_code(0x0000) - not-present page [ 53.584146][ T480] PGD 100000067 P4D 100000067 PUD 100112067 PMD 1083d8067 PTE 0 [ 53.591600][ T480] Oops: 0000 [#1] PREEMPT SMP KASAN [ 53.596635][ T480] CPU: 1 PID: 480 Comm: syz.0.15 Tainted: G B 5.10.237-syzkaller #0 [ 53.605748][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.615652][ T480] RIP: 0010:load_module+0x376/0xa5c0 [ 53.620763][ T480] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 53.640205][ T480] RSP: 0018:ffffc90000ad7a00 EFLAGS: 00010286 [ 53.646114][ T480] RAX: 0000000000000001 RBX: ffffc900002313c2 RCX: 0000000000000578 [ 53.653917][ T480] RDX: ffffc90000231000 RSI: 0000000000000004 RDI: ffffffff856bc9e0 [ 53.661727][ T480] RBP: ffffc90000ad7da8 R08: ffffc9000023103c R09: 0000000000000000 [ 53.669552][ T480] R10: fffffbfff0ad793c R11: 0000000000000001 R12: ffffc90000230fff [ 53.677353][ T480] R13: ffffc90000231000 R14: 0000000000000000 R15: 0000000000000578 [ 53.685173][ T480] FS: 00007f7ccd1006c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000 [ 53.693944][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.700359][ T480] CR2: ffffc90000230fff CR3: 000000010f5e6000 CR4: 00000000003506a0 [ 53.708169][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.715982][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.723788][ T480] Call Trace: [ 53.726915][ T480] ? __alloc_pages_nodemask+0x2ae/0x23e0 [ 53.732390][ T480] ? kasan_poison+0x60/0x60 [ 53.736719][ T480] ? apply_to_page_range+0xf/0x20 [ 53.741579][ T480] ? kasan_populate_vmalloc+0x66/0x70 [ 53.746789][ T480] ? module_frob_arch_sections+0x20/0x20 [ 53.752253][ T480] ? vm_unmap_ram+0x350/0x350 [ 53.756769][ T480] ? __kmalloc+0x1cd/0x360 [ 53.761020][ T480] ? kasan_poison+0x55/0x60 [ 53.765370][ T480] ? kasan_unpoison+0x46/0x70 [ 53.769871][ T480] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 53.775256][ T480] ? __vmalloc_node_range+0x61c/0x980 [ 53.780464][ T480] ? vfree_atomic+0x90/0x90 [ 53.784806][ T480] ? __kasan_check_write+0x14/0x20 [ 53.789840][ T480] __do_sys_init_module+0x1fb/0x230 [ 53.794870][ T480] ? load_module+0xa5c0/0xa5c0 [ 53.799471][ T480] ? __kasan_check_write+0x14/0x20 [ 53.804443][ T480] ? debug_smp_processor_id+0x17/0x20 [ 53.809625][ T480] ? fpregs_assert_state_consistent+0x3f/0x60 [ 53.815528][ T480] ? exit_to_user_mode_prepare+0x32/0x120 [ 53.821089][ T480] __x64_sys_init_module+0x6e/0xb0 [ 53.826029][ T480] ? exc_page_fault+0x71/0xc0 [ 53.830548][ T480] do_syscall_64+0x32/0x80 [ 53.834798][ T480] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.840957][ T480] RIP: 0033:0x7f7ccd67ef39 [ 53.845214][ T480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.864741][ T480] RSP: 002b:00007f7ccd100038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 53.872983][ T480] RAX: ffffffffffffffda RBX: 00007f7ccd836f80 RCX: 00007f7ccd67ef39 [ 53.880881][ T480] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 53.888693][ T480] RBP: 00007f7ccd6f1216 R08: 0000000000000000 R09: 0000000000000000 [ 53.896502][ T480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.904315][ T480] R13: 0000000000000001 R14: 00007f7ccd836f80 R15: 00007ffec779c338 [ 53.912127][ T480] Modules linked in: [ 53.915873][ T480] CR2: ffffc90000230fff [ 53.919855][ T480] ---[ end trace 1c61ce06741b921a ]--- [ 53.925150][ T480] RIP: 0010:load_module+0x376/0xa5c0 [ 53.930271][ T480] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 53.949708][ T480] RSP: 0018:ffffc90000ad7a00 EFLAGS: 00010286 [ 53.955609][ T480] RAX: 0000000000000001 RBX: ffffc900002313c2 RCX: 0000000000000578 [ 53.963421][ T480] RDX: ffffc90000231000 RSI: 0000000000000004 RDI: ffffffff856bc9e0 [ 53.971234][ T480] RBP: ffffc90000ad7da8 R08: ffffc9000023103c R09: 0000000000000000 [ 53.979245][ T480] R10: fffffbfff0ad793c R11: 0000000000000001 R12: ffffc90000230fff [ 53.987058][ T480] R13: ffffc90000231000 R14: 0000000000000000 R15: 0000000000000578 [ 53.994869][ T480] FS: 00007f7ccd1006c0(0000) GS:ffff8881f7500000(0000) knlGS:0000000000000000 [ 54.003662][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.010063][ T480] CR2: ffffc90000230fff CR3: 000000010f5e6000 CR4: 00000000003506a0 [ 54.017881][ T480] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.025689][ T480] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.033494][ T480] Kernel panic - not syncing: Fatal exception [ 54.039649][ T480] Kernel Offset: disabled [ 54.043770][ T480] Rebooting in 86400 seconds..