Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. 2025/08/13 05:17:23 ignoring optional flag "sandboxArg"="0" 2025/08/13 05:17:23 parsed 1 programs [ 60.205507][ T23] kauditd_printk_skb: 29 callbacks suppressed [ 60.205536][ T23] audit: type=1400 audit(1755062243.680:89): avc: denied { unlink } for pid=428 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.262068][ T428] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.758889][ T23] audit: type=1401 audit(1755062244.240:90): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 60.887294][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.894253][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.902402][ T466] device bridge_slave_0 entered promiscuous mode [ 60.911123][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.918015][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.925756][ T466] device bridge_slave_1 entered promiscuous mode [ 60.959393][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.966331][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.973652][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.980631][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.995992][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.003503][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.010794][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.018224][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.027761][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.035872][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.042844][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.051905][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.059925][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.066760][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.078516][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.087385][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.099428][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.110746][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.119289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.126726][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.135058][ T466] device veth0_vlan entered promiscuous mode [ 61.146009][ T466] device veth1_macvtap entered promiscuous mode [ 61.153093][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.163936][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.173526][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/08/13 05:17:24 executed programs: 0 [ 61.225821][ T23] audit: type=1400 audit(1755062244.700:91): avc: denied { create } for pid=477 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.282790][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.290150][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.297847][ T479] device bridge_slave_0 entered promiscuous mode [ 61.304659][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.312379][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.319674][ T479] device bridge_slave_1 entered promiscuous mode [ 61.352183][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.359162][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.366407][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.373422][ T479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.389235][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.397184][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.404676][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.413136][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.421240][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.428197][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.440047][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.448224][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.455246][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.469511][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.478765][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.494405][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.504745][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.513498][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.520780][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.529161][ T479] device veth0_vlan entered promiscuous mode [ 61.542395][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.551285][ T479] device veth1_macvtap entered promiscuous mode [ 61.562878][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.572178][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.590439][ T484] ================================================================== [ 61.590866][ T23] audit: type=1400 audit(1755062245.070:92): avc: denied { sys_module } for pid=483 comm="syz.0.15" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.598459][ T484] BUG: KASAN: vmalloc-out-of-bounds in load_module+0x93be/0xa5c0 [ 61.598468][ T484] Read of size 1 at addr ffffc90000580fff by task syz.0.15/484 [ 61.598474][ T484] [ 61.598483][ T484] CPU: 0 PID: 484 Comm: syz.0.15 Not tainted 5.10.240-syzkaller #0 [ 61.598486][ T484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.598495][ T484] Call Trace: [ 61.598506][ T484] dump_stack_lvl+0x81/0xac [ 61.598513][ T484] print_address_description.constprop.0+0x24/0x160 [ 61.598517][ T484] ? load_module+0x93be/0xa5c0 [ 61.598523][ T484] kasan_report.cold+0x82/0xdb [ 61.598527][ T484] ? load_module+0x93be/0xa5c0 [ 61.598533][ T484] __asan_report_load1_noabort+0x14/0x20 [ 61.598536][ T484] load_module+0x93be/0xa5c0 [ 61.598544][ T484] ? __alloc_pages_nodemask+0x2ae/0x2490 [ 61.598547][ T484] ? kasan_poison+0x60/0x60 [ 61.598555][ T484] ? apply_to_page_range+0xf/0x20 [ 61.598559][ T484] ? kasan_populate_vmalloc+0x66/0x70 [ 61.598565][ T484] ? module_frob_arch_sections+0x20/0x20 [ 61.598571][ T484] ? vm_unmap_ram+0x350/0x350 [ 61.598578][ T484] ? __kmalloc+0x1cd/0x360 [ 61.598581][ T484] ? kasan_poison+0x55/0x60 [ 61.598585][ T484] ? kasan_unpoison+0x46/0x70 [ 61.598589][ T484] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 61.598593][ T484] ? __vmalloc_node_range+0x61c/0x980 [ 61.598599][ T484] ? vfree_atomic+0x90/0x90 [ 61.598604][ T484] ? __kasan_check_write+0x14/0x20 [ 61.598609][ T484] __do_sys_init_module+0x1fb/0x230 [ 61.598613][ T484] ? load_module+0xa5c0/0xa5c0 [ 61.598616][ T484] ? __kasan_check_write+0x14/0x20 [ 61.598627][ T484] ? debug_smp_processor_id+0x17/0x20 [ 61.598634][ T484] ? fpregs_assert_state_consistent+0x3f/0x60 [ 61.598640][ T484] ? exit_to_user_mode_prepare+0x32/0x120 [ 61.598645][ T484] __x64_sys_init_module+0x6e/0xb0 [ 61.598649][ T484] ? exc_page_fault+0x71/0xc0 [ 61.598653][ T484] do_syscall_64+0x32/0x80 [ 61.598660][ T484] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 61.598665][ T484] RIP: 0033:0x7fb2c0ce9f39 [ 61.598671][ T484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.598674][ T484] RSP: 002b:00007fb2c076b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 61.598681][ T484] RAX: ffffffffffffffda RBX: 00007fb2c0ea1f80 RCX: 00007fb2c0ce9f39 [ 61.598684][ T484] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 61.598687][ T484] RBP: 00007fb2c0d5c216 R08: 0000000000000000 R09: 0000000000000000 [ 61.598690][ T484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.598692][ T484] R13: 0000000000000001 R14: 00007fb2c0ea1f80 R15: 00007ffdd032fb58 [ 61.598696][ T484] [ 61.598698][ T484] [ 61.598700][ T484] Memory state around the buggy address: [ 61.598705][ T484] ffffc90000580e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.598713][ T484] ffffc90000580f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.598721][ T484] >ffffc90000580f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 61.621027][ T23] audit: type=1400 audit(1755062245.070:93): avc: denied { module_load } for pid=483 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 61.627999][ T484] ^ [ 61.628007][ T484] ffffc90000581000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.628010][ T484] ffffc90000581080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 61.628011][ T484] ================================================================== [ 61.628026][ T484] Disabling lock debugging due to kernel taint [ 61.628777][ T484] BUG: unable to handle page fault for address: ffffc90000580fff [ 61.639397][ T23] audit: type=1400 audit(1755062245.120:94): avc: denied { read } for pid=73 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.645886][ T484] #PF: supervisor read access in kernel mode [ 61.658261][ T23] audit: type=1400 audit(1755062245.120:95): avc: denied { search } for pid=73 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.658981][ T484] #PF: error_code(0x0000) - not-present page [ 61.663496][ T23] audit: type=1400 audit(1755062245.120:96): avc: denied { write } for pid=73 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.670003][ T484] PGD 100000067 P4D 100000067 PUD 100112067 PMD 102b9a067 PTE 0 [ 61.670015][ T484] Oops: 0000 [#1] PREEMPT SMP KASAN [ 61.670022][ T484] CPU: 0 PID: 484 Comm: syz.0.15 Tainted: G B 5.10.240-syzkaller #0 [ 61.670025][ T484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.670033][ T484] RIP: 0010:load_module+0x376/0xa5c0 [ 61.670038][ T484] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 61.670044][ T484] RSP: 0018:ffffc90000a77a00 EFLAGS: 00010286 [ 61.675104][ T23] audit: type=1400 audit(1755062245.120:97): avc: denied { add_name } for pid=73 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.679201][ T484] [ 61.679204][ T484] RAX: 0000000000000001 RBX: ffffc900005813c2 RCX: 0000000000000578 [ 61.679207][ T484] RDX: ffffc90000581000 RSI: 0000000000000004 RDI: ffffffff856bf9e0 [ 61.679209][ T484] RBP: ffffc90000a77da8 R08: ffffc9000058103c R09: 0000000000000000 [ 61.679212][ T484] R10: fffffbfff0ad7f3c R11: 0000000000000001 R12: ffffc90000580fff [ 61.679214][ T484] R13: ffffc90000581000 R14: 0000000000000000 R15: 0000000000000578 [ 61.679217][ T484] FS: 00007fb2c076b6c0(0000) GS:ffff8881f7400000(0000) knlGS:0000000000000000 [ 61.679224][ T484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.679227][ T484] CR2: ffffc90000580fff CR3: 000000010dc56000 CR4: 00000000003506b0 [ 61.679230][ T484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 61.679232][ T484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 61.679234][ T484] Call Trace: [ 61.679243][ T484] ? __alloc_pages_nodemask+0x2ae/0x2490 [ 61.679248][ T484] ? kasan_poison+0x60/0x60 [ 61.679254][ T484] ? apply_to_page_range+0xf/0x20 [ 61.679258][ T484] ? kasan_populate_vmalloc+0x66/0x70 [ 61.679265][ T484] ? module_frob_arch_sections+0x20/0x20 [ 61.679271][ T484] ? vm_unmap_ram+0x350/0x350 [ 61.679275][ T484] ? __kmalloc+0x1cd/0x360 [ 61.679278][ T484] ? kasan_poison+0x55/0x60 [ 61.679281][ T484] ? kasan_unpoison+0x46/0x70 [ 61.679285][ T484] ? __kasan_unpoison_vmalloc+0x24/0x30 [ 61.679289][ T484] ? __vmalloc_node_range+0x61c/0x980 [ 61.679294][ T484] ? vfree_atomic+0x90/0x90 [ 61.679299][ T484] ? __kasan_check_write+0x14/0x20 [ 61.679302][ T484] __do_sys_init_module+0x1fb/0x230 [ 61.679306][ T484] ? load_module+0xa5c0/0xa5c0 [ 61.679310][ T484] ? __kasan_check_write+0x14/0x20 [ 61.679319][ T484] ? debug_smp_processor_id+0x17/0x20 [ 61.685309][ T23] audit: type=1400 audit(1755062245.120:98): avc: denied { create } for pid=73 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.689485][ T484] ? fpregs_assert_state_consistent+0x3f/0x60 [ 61.689492][ T484] ? exit_to_user_mode_prepare+0x32/0x120 [ 61.689498][ T484] __x64_sys_init_module+0x6e/0xb0 [ 61.689504][ T484] ? exc_page_fault+0x71/0xc0 [ 61.689508][ T484] do_syscall_64+0x32/0x80 [ 61.689514][ T484] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 61.689518][ T484] RIP: 0033:0x7fb2c0ce9f39 [ 61.689524][ T484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.689527][ T484] RSP: 002b:00007fb2c076b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 61.689533][ T484] RAX: ffffffffffffffda RBX: 00007fb2c0ea1f80 RCX: 00007fb2c0ce9f39 [ 61.689536][ T484] RDX: 0000000000000000 RSI: 0000000000000578 RDI: 0000000020000040 [ 61.689539][ T484] RBP: 00007fb2c0d5c216 R08: 0000000000000000 R09: 0000000000000000 [ 61.689541][ T484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.689543][ T484] R13: 0000000000000001 R14: 00007fb2c0ea1f80 R15: 00007ffdd032fb58 [ 61.689547][ T484] Modules linked in: [ 61.689577][ T484] CR2: ffffc90000580fff [ 61.689582][ T484] ---[ end trace fe768b96615c2308 ]--- [ 61.689589][ T484] RIP: 0010:load_module+0x376/0xa5c0 [ 62.454996][ T484] Code: 00 00 00 00 fc ff df 4f 8d 64 0d ff 4c 89 e6 48 c1 ee 03 0f b6 04 06 4c 89 e6 83 e6 07 40 38 f0 7f 08 84 c0 0f 85 24 90 00 00 <41> 80 3c 24 00 0f 85 e8 01 00 00 48 8d 7b 04 48 b8 00 00 00 00 00 [ 62.474508][ T484] RSP: 0018:ffffc90000a77a00 EFLAGS: 00010286 [ 62.480411][ T484] RAX: 0000000000000001 RBX: ffffc900005813c2 RCX: 0000000000000578 [ 62.488222][ T484] RDX: ffffc90000581000 RSI: 0000000000000004 RDI: ffffffff856bf9e0 [ 62.496681][ T484] RBP: ffffc90000a77da8 R08: ffffc9000058103c R09: 0000000000000000 [ 62.504919][ T484] R10: fffffbfff0ad7f3c R11: 0000000000000001 R12: ffffc90000580fff [ 62.513378][ T484] R13: ffffc90000581000 R14: 0000000000000000 R15: 0000000000000578 [ 62.521240][ T484] FS: 00007fb2c076b6c0(0000) GS:ffff8881f7400000(0000) knlGS:0000000000000000 [ 62.530047][ T484] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.536455][ T484] CR2: ffffc90000580fff CR3: 000000010dc56000 CR4: 00000000003506b0 [ 62.544272][ T484] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.552078][ T484] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.560030][ T484] Kernel panic - not syncing: Fatal exception [ 62.566460][ T484] Kernel Offset: disabled [ 62.570694][ T484] Rebooting in 86400 seconds..