Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. 2025/03/09 06:54:23 ignoring optional flag "sandboxArg"="0" 2025/03/09 06:54:24 parsed 1 programs [ 51.209433][ T30] audit: type=1400 audit(1741503264.255:66): avc: denied { node_bind } for pid=315 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 52.201714][ T30] audit: type=1400 audit(1741503265.255:67): avc: denied { integrity } for pid=324 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 52.225560][ T30] audit: type=1400 audit(1741503265.275:68): avc: denied { mounton } for pid=324 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 52.227145][ T324] cgroup: Unknown subsys name 'net' [ 52.248050][ T30] audit: type=1400 audit(1741503265.275:69): avc: denied { mount } for pid=324 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.274964][ T30] audit: type=1400 audit(1741503265.305:70): avc: denied { unmount } for pid=324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.275169][ T324] cgroup: Unknown subsys name 'devices' [ 52.483486][ T324] cgroup: Unknown subsys name 'hugetlb' [ 52.488979][ T324] cgroup: Unknown subsys name 'rlimit' [ 52.659259][ T30] audit: type=1400 audit(1741503265.705:71): avc: denied { setattr } for pid=324 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.682734][ T30] audit: type=1400 audit(1741503265.705:72): avc: denied { create } for pid=324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.690663][ T329] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 52.703219][ T30] audit: type=1400 audit(1741503265.705:73): avc: denied { write } for pid=324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.731647][ T30] audit: type=1400 audit(1741503265.705:74): avc: denied { read } for pid=324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 52.751836][ T30] audit: type=1400 audit(1741503265.705:75): avc: denied { module_request } for pid=324 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.776917][ T324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.321686][ T336] request_module fs-gadgetfs succeeded, but still no fs? [ 53.321686][ T337] request_module fs-gadgetfs succeeded, but still no fs? [ 53.511810][ T337] syz-executor (337) used greatest stack depth: 21904 bytes left [ 53.823686][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.830543][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.837921][ T373] device bridge_slave_0 entered promiscuous mode [ 53.845865][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.852767][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.859879][ T373] device bridge_slave_1 entered promiscuous mode [ 53.993162][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.000485][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.007614][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.014488][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.051593][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.059598][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.068403][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.083685][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.093444][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.119586][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.135970][ T373] device veth0_vlan entered promiscuous mode [ 54.147933][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.156296][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready 2025/03/09 06:54:27 executed programs: 0 [ 54.164204][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.171742][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.180939][ T373] device veth1_macvtap entered promiscuous mode [ 54.190908][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.201199][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.243745][ T373] syz-executor (373) used greatest stack depth: 20320 bytes left [ 54.383759][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.390616][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.398475][ T393] device bridge_slave_0 entered promiscuous mode [ 54.420610][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.427510][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.434791][ T393] device bridge_slave_1 entered promiscuous mode [ 54.476752][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.483636][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.490879][ T400] device bridge_slave_0 entered promiscuous mode [ 54.500715][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.507589][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.514943][ T398] device bridge_slave_0 entered promiscuous mode [ 54.532424][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.539277][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.546630][ T400] device bridge_slave_1 entered promiscuous mode [ 54.559795][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.566674][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.574261][ T398] device bridge_slave_1 entered promiscuous mode [ 54.601587][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.608522][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.615885][ T399] device bridge_slave_0 entered promiscuous mode [ 54.635811][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.642710][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.649842][ T399] device bridge_slave_1 entered promiscuous mode [ 54.663137][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.669979][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.677360][ T397] device bridge_slave_0 entered promiscuous mode [ 54.696967][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.703851][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.711017][ T397] device bridge_slave_1 entered promiscuous mode [ 54.911254][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.918147][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.925251][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.932024][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.967376][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.974250][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.981357][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.988116][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.996306][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.003173][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.010246][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.017068][ T398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.035509][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.042381][ T397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.049558][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.056366][ T397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.087123][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.095297][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.102425][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.109411][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.116827][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.123955][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.131123][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.138370][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.147177][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.154681][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.181267][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.188617][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.196017][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.204673][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.212877][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.219705][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.227092][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.235477][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.243725][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.250729][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.258091][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.266323][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.273198][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.280330][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.288478][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.295325][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.302608][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.330803][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.338263][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.346432][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.374206][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.382370][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.389203][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.396749][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.404783][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.413229][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.420059][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.427431][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.435419][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.443004][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.450336][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.458421][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.465291][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.472539][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.480533][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.487390][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.522847][ T400] device veth0_vlan entered promiscuous mode [ 55.541813][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.550080][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.558479][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.566147][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.573527][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.581468][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.589235][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.597619][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.605859][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.612746][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.619980][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.627937][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.635724][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.643788][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.651681][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.659799][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.667950][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.675772][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.683837][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.692156][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.700515][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.707555][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.714934][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.722936][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.730666][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.738676][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.746459][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.754770][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.763043][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.770290][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.784478][ T399] device veth0_vlan entered promiscuous mode [ 55.795767][ T393] device veth0_vlan entered promiscuous mode [ 55.810130][ T397] device veth0_vlan entered promiscuous mode [ 55.820166][ T398] device veth0_vlan entered promiscuous mode [ 55.831503][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.840198][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.849104][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.858866][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.869377][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.877571][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.885911][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.894252][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.902446][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.910620][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.919045][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.926789][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.934711][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.942677][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.954344][ T400] device veth1_macvtap entered promiscuous mode [ 55.970700][ T399] device veth1_macvtap entered promiscuous mode [ 55.977970][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.985318][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.992729][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.999963][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.007503][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.014919][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.022713][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.029946][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.037523][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.045705][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.053859][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.061391][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.069300][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.086252][ T398] device veth1_macvtap entered promiscuous mode [ 56.095825][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.104005][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.112183][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.120119][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.128494][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.136841][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.145387][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.156045][ T397] device veth1_macvtap entered promiscuous mode [ 56.164018][ T393] device veth1_macvtap entered promiscuous mode [ 56.174982][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.182640][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.190619][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.198933][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.207296][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.215548][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.223645][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.243722][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.251993][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.260082][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.268562][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.277018][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.285288][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.293940][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.302139][ T371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.330515][ T420] loop3: detected capacity change from 0 to 128 [ 56.342411][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.350191][ T422] loop2: detected capacity change from 0 to 128 [ 56.351943][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.366030][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.375933][ T352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.376820][ T426] loop1: detected capacity change from 0 to 128 [ 56.414905][ T420] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.431782][ T422] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.438881][ T434] loop6: detected capacity change from 0 to 128 [ 56.442974][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 56.442989][ T30] audit: type=1400 audit(1741503269.495:109): avc: denied { mount } for pid=421 comm="syz.2.18" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.449311][ T435] loop5: detected capacity change from 0 to 128 [ 56.455453][ T420] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.476089][ T422] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.482387][ T426] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.505950][ T30] audit: type=1400 audit(1741503269.555:110): avc: denied { write } for pid=419 comm="syz.3.19" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.512365][ T426] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.548528][ T426] EXT4-fs error (device loop1): dx_make_map:1328: inode #2: block 20: comm syz.1.17: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 56.567168][ T30] audit: type=1400 audit(1741503269.585:111): avc: denied { add_name } for pid=419 comm="syz.3.19" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.567649][ T426] EXT4-fs error (device loop1) in do_split:2095: Corrupt filesystem [ 56.615400][ T30] audit: type=1400 audit(1741503269.585:112): avc: denied { create } for pid=419 comm="syz.3.19" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.626054][ T435] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.674271][ T435] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.676966][ T420] EXT4-fs error (device loop3): dx_make_map:1328: inode #2: block 20: comm syz.3.19: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 56.684805][ T30] audit: type=1400 audit(1741503269.585:113): avc: denied { write open } for pid=419 comm="syz.3.19" path="/0/file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.747531][ T434] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 56.759208][ T434] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.769525][ T30] audit: type=1400 audit(1741503269.595:114): avc: denied { mounton } for pid=425 comm="syz.1.17" path="/0/file1/bus" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.774556][ T422] ================================================================== [ 56.791990][ T30] audit: type=1400 audit(1741503269.595:115): avc: denied { map } for pid=425 comm="syz.1.17" path="/0/file1/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.799453][ T422] BUG: KASAN: slab-out-of-bounds in do_split+0x1f31/0x24e0 [ 56.827661][ T30] audit: type=1400 audit(1741503269.595:116): avc: denied { link } for pid=425 comm="syz.1.17" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 56.830100][ T422] Read of size 157024 at addr ffff888120fe5028 by task syz.2.18/422 [ 56.880278][ T422] [ 56.882443][ T422] CPU: 1 PID: 422 Comm: syz.2.18 Not tainted 5.15.178-syzkaller-00013-g7d1f9b5c2ff5 #0 [ 56.891903][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 56.901811][ T422] Call Trace: [ 56.904921][ T422] [ 56.907701][ T422] dump_stack_lvl+0x151/0x1c0 [ 56.912212][ T422] ? io_uring_drop_tctx_refs+0x190/0x190 [ 56.917680][ T422] ? panic+0x760/0x760 [ 56.921583][ T422] print_address_description+0x87/0x3b0 [ 56.926964][ T422] kasan_report+0x179/0x1c0 [ 56.931303][ T422] ? do_split+0x1f31/0x24e0 [ 56.935647][ T422] ? do_split+0x1f31/0x24e0 [ 56.939985][ T422] kasan_check_range+0x293/0x2a0 [ 56.944759][ T422] ? do_split+0x1f31/0x24e0 [ 56.949100][ T422] memmove+0x2d/0x70 [ 56.952831][ T422] do_split+0x1f31/0x24e0 [ 56.956997][ T422] ? ext4_handle_dirty_dx_node+0x580/0x580 [ 56.962636][ T422] ? ext4_handle_dirty_dx_node+0x41c/0x580 [ 56.968277][ T422] make_indexed_dir+0xeb7/0x15a0 [ 56.973055][ T422] ? add_dirent_to_buf+0x7d0/0x7d0 [ 56.977997][ T422] ? add_dirent_to_buf+0x54e/0x7d0 [ 56.982948][ T422] ? ext4_dx_add_entry+0x1620/0x1620 [ 56.988065][ T422] ? __kasan_check_read+0x11/0x20 [ 56.993016][ T422] ? __ext4_read_dirblock+0x6eb/0x8e0 [ 56.998229][ T422] ext4_add_entry+0xde2/0x12b0 [ 57.002824][ T422] ? ext4_inc_count+0x190/0x190 [ 57.007509][ T422] ? atime_needs_update+0x810/0x810 [ 57.012545][ T422] __ext4_link+0x4e9/0x790 [ 57.016798][ T422] ? ext4_update_dx_flag+0x200/0x200 [ 57.021915][ T422] ? rwsem_mark_wake+0x770/0x770 [ 57.026690][ T422] ext4_link+0x1f3/0x290 [ 57.030771][ T422] vfs_link+0x645/0x7f0 [ 57.034763][ T422] do_linkat+0x34d/0x9f0 [ 57.038842][ T422] ? fsnotify_link+0x240/0x240 [ 57.043442][ T422] ? getname_flags+0x1fd/0x520 [ 57.048043][ T422] __x64_sys_link+0x86/0x90 [ 57.052380][ T422] x64_sys_call+0x282/0x9a0 [ 57.056719][ T422] do_syscall_64+0x3b/0xb0 [ 57.060978][ T422] ? clear_bhb_loop+0x35/0x90 [ 57.065484][ T422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.071220][ T422] RIP: 0033:0x7fe4caead169 [ 57.075470][ T422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.094907][ T422] RSP: 002b:00007fe4ca91f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 57.103156][ T422] RAX: ffffffffffffffda RBX: 00007fe4cb0c5fa0 RCX: 00007fe4caead169 [ 57.110965][ T422] RDX: 0000000000000000 RSI: 0000400000000bc0 RDI: 0000400000001240 [ 57.118774][ T422] RBP: 00007fe4caf2e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.126584][ T422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.134398][ T422] R13: 0000000000000000 R14: 00007fe4cb0c5fa0 R15: 00007ffcd95edce8 [ 57.142213][ T422] [ 57.145073][ T422] [ 57.147241][ T422] The buggy address belongs to the page: [ 57.152723][ T422] page:ffffea000483f940 refcount:3 mapcount:1 mapping:ffff88810933db18 index:0x1 pfn:0x120fe5 [ 57.162787][ T422] memcg:ffff888100248000 [ 57.166861][ T422] aops:def_blk_aops ino:700002 [ 57.171459][ T422] flags: 0x400000000032201e(referenced|uptodate|dirty|lru|private|mappedtodisk|unevictable|mlocked|zone=1) [ 57.182667][ T422] raw: 400000000032201e ffffea000475e6c8 ffffea0004b0c5c8 ffff88810933db18 [ 57.191082][ T422] raw: 0000000000000001 ffff888120b6e888 0000000300000000 ffff888100248000 [ 57.199494][ T422] page dumped because: kasan: bad access detected [ 57.205752][ T422] page_owner tracks the page as allocated [ 57.211298][ T422] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 350, ts 56397237840, free_ts 54307091308 [ 57.228307][ T422] post_alloc_hook+0x1a3/0x1b0 [ 57.232909][ T422] prep_new_page+0x1b/0x110 [ 57.237248][ T422] get_page_from_freelist+0x3550/0x35d0 [ 57.242632][ T422] __alloc_pages+0x27e/0x8f0 [ 57.247054][ T422] page_cache_ra_unbounded+0x334/0xa50 [ 57.252351][ T422] force_page_cache_ra+0x3c0/0x420 [ 57.257381][ T422] page_cache_sync_ra+0x2d5/0x4d0 [ 57.262244][ T422] filemap_read+0x7cd/0x2600 [ 57.266668][ T422] generic_file_read_iter+0xae/0x420 [ 57.271790][ T422] blkdev_read_iter+0x135/0x190 [ 57.276479][ T422] vfs_read+0xa81/0xd40 [ 57.280472][ T422] ksys_read+0x199/0x2c0 [ 57.284547][ T422] __x64_sys_read+0x7b/0x90 [ 57.288889][ T422] x64_sys_call+0x28/0x9a0 [ 57.293317][ T422] do_syscall_64+0x3b/0xb0 [ 57.297568][ T422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.303298][ T422] page last free stack trace: [ 57.307808][ T422] free_unref_page_prepare+0x7c8/0x7d0 [ 57.313106][ T422] free_unref_page+0xe8/0x750 [ 57.317615][ T422] __free_pages+0x61/0xf0 [ 57.321781][ T422] __vunmap+0x7c1/0x940 [ 57.325779][ T422] vfree+0x7f/0xb0 [ 57.329340][ T422] kcov_close+0x2b/0x50 [ 57.333327][ T422] __fput+0x228/0x8c0 [ 57.337146][ T422] ____fput+0x15/0x20 [ 57.340965][ T422] task_work_run+0x129/0x190 [ 57.345390][ T422] do_exit+0xc48/0x2ca0 [ 57.349382][ T422] do_group_exit+0x141/0x310 [ 57.353812][ T422] get_signal+0x7a3/0x1630 [ 57.358063][ T422] arch_do_signal_or_restart+0xbd/0x1680 [ 57.363531][ T422] exit_to_user_mode_loop+0xa0/0xe0 [ 57.368564][ T422] exit_to_user_mode_prepare+0x5a/0xa0 [ 57.373857][ T422] syscall_exit_to_user_mode+0x26/0x160 [ 57.379239][ T422] [ 57.381408][ T422] Memory state around the buggy address: [ 57.386966][ T422] ffff888120fe6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.394866][ T422] ffff888120fe6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 57.402764][ T422] >ffff888120fe7000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.410659][ T422] ^ [ 57.414567][ T422] ffff888120fe7080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.422586][ T422] ffff888120fe7100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.430479][ T422] ================================================================== [ 57.438377][ T422] Disabling lock debugging due to kernel taint [ 57.462662][ T399] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 57.464846][ T420] EXT4-fs error (device loop3) in do_split:2095: Corrupt filesystem [ 57.474680][ T399] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 57.495654][ T435] EXT4-fs error (device loop5): dx_make_map:1328: inode #2: block 20: comm syz.5.16: bad entry in directory: inode out of bounds - offset=792, inode=1633771873, rec_len=220, size=1012 fake=0 [ 57.513830][ T399] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 4: comm syz-executor: path /0/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4293793778, rec_len=62303, size=1024 fake=0 [ 57.537880][ T435] EXT4-fs error (device loop5) in do_split:2095: Corrupt filesystem [ 57.541573][ T422] EXT4-fs error (device loop2): ext4_dx_csum_set:531: inode #2: comm syz.2.18: dir seems corrupt? Run e2fsck -D. [ 57.547331][ T398] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz-executor: Unrecognised inode hash code 89 [ 57.558810][ T434] EXT4-fs error (device loop6): __ext4_get_inode_loc:4351: comm syz.6.20: Invalid inode table block 3 in block_group 0 [ 57.570624][ T101] general protection fault, probably for non-canonical address 0x338870778f70c2f8: 0000 [#1] PREEMPT SMP KASAN [ 57.591254][ T422] ------------[ cut here ]------------ [ 57.592733][ T101] CPU: 1 PID: 101 Comm: udevd Tainted: G B 5.15.178-syzkaller-00013-g7d1f9b5c2ff5 #0 [ 57.592758][ T101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.592769][ T101] RIP: 0010:kmem_cache_alloc+0x8a/0x250 [ 57.592800][ T101] Code: 08 48 8b 38 48 85 ff 0f 84 be 00 00 00 48 83 78 10 00 0f 84 b3 00 00 00 41 8b 45 28 48 8d 0c 07 49 8b 9d d8 00 00 00 48 0f c9 <48> 33 1c 07 48 31 cb 48 8d 4a 08 4d 8b 45 00 48 89 f8 65 49 0f c7 [ 57.599506][ T422] kernel BUG at fs/ext4/ext4.h:2399! [ 57.608607][ T101] RSP: 0018:ffffc900009a7bf0 EFLAGS: 00010286 [ 57.608630][ T101] RAX: 0000000000000078 RBX: fb3fdb580ef83d7f RCX: f8c2708f77708833 [ 57.608644][ T101] RDX: 0000000000000b61 RSI: 00000000000000f8 RDI: 338870778f70c280 [ 57.608657][ T101] RBP: ffffc900009a7c30 R08: ffffffff81d34e80 R09: ffffffff81d2e6ad [ 57.608671][ T101] R10: 0000000000000002 R11: ffff88810d2f8000 R12: ffff8881081aa180 [ 57.608684][ T101] R13: ffff8881081aa180 R14: 0000000000000dc0 R15: ffffffff81d350aa [ 57.619189][ T434] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 57.623885][ T101] FS: 00007f45b211cc80(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 57.623908][ T101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.623921][ T101] CR2: 00005555937374e8 CR3: 000000010d8a9000 CR4: 00000000003506a0 [ 57.623938][ T101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.623950][ T101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.623963][ T101] Call Trace: [ 57.623968][ T101] [ 57.623976][ T101] ? __die_body+0x62/0xb0 [ 57.624002][ T101] ? die_addr+0x9f/0xd0 [ 57.624022][ T101] ? exc_general_protection+0x311/0x4b0 [ 57.624049][ T101] ? asm_exc_general_protection+0x27/0x30 [ 57.766697][ T101] ? flock_lock_inode+0x38a/0x14c0 [ 57.771643][ T101] ? locks_lock_inode_wait+0xbd/0x410 [ 57.776845][ T101] ? flock_lock_inode+0x160/0x14c0 [ 57.781794][ T101] ? kmem_cache_alloc+0x8a/0x250 [ 57.786564][ T101] flock_lock_inode+0x38a/0x14c0 [ 57.791339][ T101] ? avc_has_perm_noaudit+0x430/0x430 [ 57.796546][ T101] ? check_conflicting_open+0x270/0x270 [ 57.801928][ T101] locks_lock_inode_wait+0xf3/0x410 [ 57.806971][ T101] ? fcntl_setlease+0x3f0/0x3f0 [ 57.811648][ T101] ? slab_post_alloc_hook+0x72/0x2c0 [ 57.816778][ T101] ? selinux_file_lock+0x4d/0x60 [ 57.821546][ T101] ? security_file_lock+0x7b/0xa0 [ 57.826412][ T101] __se_sys_flock+0x473/0x5a0 [ 57.830927][ T101] __x64_sys_flock+0x5b/0x70 [ 57.835347][ T101] x64_sys_call+0x227/0x9a0 [ 57.839689][ T101] do_syscall_64+0x3b/0xb0 [ 57.843938][ T101] ? clear_bhb_loop+0x35/0x90 [ 57.848483][ T101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.854178][ T101] RIP: 0033:0x7f45b2247fc7 [ 57.858433][ T101] Code: ae 30 fa ff 48 8b 04 24 eb 05 e8 ec 33 00 00 48 83 c4 68 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 49 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 9e 0d 00 f7 d8 64 89 01 48 [ 57.877890][ T101] RSP: 002b:00007ffc40163638 EFLAGS: 00000206 ORIG_RAX: 0000000000000049 [ 57.886113][ T101] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f45b2247fc7 [ 57.894098][ T101] RDX: 00000000000a0800 RSI: 0000000000000006 RDI: 000000000000000c [ 57.901909][ T101] RBP: 0000561221456970 R08: 0000000000000008 R09: 5da852dc6d241da7 [ 57.909720][ T101] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffc40163828 [ 57.917531][ T101] R13: 000000000000000c R14: 00005612049dbfee R15: 0000000000000000 [ 57.925347][ T101] [ 57.928207][ T101] Modules linked in: [ 57.932040][ T439] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 57.940104][ T439] BUG: unable to handle page fault for address: ffffc90000d67578 [ 57.947649][ T439] #PF: supervisor instruction fetch in kernel mode [ 57.953985][ T439] #PF: error_code(0x0011) - permissions violation [ 57.960235][ T439] PGD 100000067 P4D 100000067 PUD 100139067 PMD 120f7c067 PTE 800000012fad5163 [ 57.969007][ T439] Thread overran stack, or stack corrupted [ 57.974648][ T439] Oops: 0011 [#2] PREEMPT SMP KASAN [ 57.979676][ T439] CPU: 0 PID: 439 Comm: syz.2.18 Tainted: G B D 5.15.178-syzkaller-00013-g7d1f9b5c2ff5 #0 [ 57.990536][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 58.000419][ T439] RIP: 0010:0xffffc90000d67578 [ 58.005018][ T439] Code: ff ff fd ce 1a 00 20 f9 ff 1f e0 59 79 22 10 f1 ff 1f 00 00 00 00 00 fc ff df 00 cf ca 13 81 88 ff ff 00 00 00 00 00 00 00 00 <00> 00 00 00 00 fc ff df b0 75 d6 00 00 c9 ff ff ef 58 e6 84 ff ff [ 58.024460][ T439] RSP: 0018:ffffc90000d67480 EFLAGS: 00010046 [ 58.030360][ T439] RAX: ffff88810d3f2780 RBX: ffff8881f7038388 RCX: 1ffff920001ace68 [ 58.038173][ T439] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88810d3f2780 [ 58.045983][ T439] RBP: ffff888113cad420 R08: dffffc0000000000 R09: ffffed1021a7e4f1 [ 58.053794][ T439] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 58.061608][ T439] R13: ffff888113cacf00 R14: 1ffff11022795a85 R15: 00000000000001c8 [ 58.069428][ T439] FS: 00007fe4ca8fe6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 58.078187][ T439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.084605][ T439] CR2: ffffc90000d67578 CR3: 0000000130925000 CR4: 00000000003506b0 [ 58.092421][ T439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.100227][ T439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.108041][ T439] Call Trace: [ 58.111167][ T439] [ 58.113945][ T439] ? __die_body+0x62/0xb0 [ 58.118110][ T439] ? __die+0x7e/0x90 [ 58.121841][ T439] ? page_fault_oops+0x7f9/0xa90 [ 58.126623][ T439] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 58.132001][ T439] ? search_bpf_extables+0x26d/0x2c0 [ 58.137121][ T439] ? is_prefetch+0x47a/0x6d0 [ 58.141544][ T439] ? search_exception_tables+0x54/0x60 [ 58.146875][ T439] ? kernelmode_fixup_or_oops+0xb9/0xd0 [ 58.152224][ T439] ? __bad_area_nosemaphore+0xc2/0x480 [ 58.157525][ T439] ? bad_area_nosemaphore+0x2d/0x40 [ 58.162548][ T439] ? do_kern_addr_fault+0x69/0x80 [ 58.167409][ T439] ? exc_page_fault+0x4dd/0x7f0 [ 58.172092][ T439] ? __kasan_check_write+0x14/0x20 [ 58.177051][ T439] ? __switch_to+0x62a/0x1190 [ 58.181554][ T439] ? compat_start_thread+0x20/0x20 [ 58.186499][ T439] ? kvm_sched_clock_read+0x18/0x40 [ 58.191549][ T439] ? sched_clock+0x9/0x10 [ 58.195701][ T439] ? asm_exc_page_fault+0x27/0x30 [ 58.200568][ T439] ? __schedule+0xccc/0x1590 [ 58.204989][ T439] ? release_firmware_map_entry+0x190/0x190 [ 58.210724][ T439] ? plist_add+0x3e0/0x460 [ 58.214981][ T439] ? schedule+0x11f/0x1e0 [ 58.219136][ T439] ? futex_wait_queue_me+0x306/0x760 [ 58.224256][ T439] ? futex_wait_setup+0x520/0x520 [ 58.229214][ T439] ? futex_wait+0x2e6/0x9a0 [ 58.233551][ T439] ? do_futex+0x37f0/0x37f0 [ 58.237898][ T439] ? unwind_get_return_address+0x4d/0x90 [ 58.243357][ T439] ? arch_stack_walk+0xf3/0x140 [ 58.248044][ T439] ? do_futex+0x1367/0x37f0 [ 58.252392][ T439] ? stack_trace_save+0x113/0x1c0 [ 58.257246][ T439] ? stack_trace_snprint+0xf0/0xf0 [ 58.262199][ T439] ? __stack_depot_save+0x34/0x470 [ 58.267233][ T439] ? futex_exit_release+0x1e0/0x1e0 [ 58.272266][ T439] ? kasan_save_stack+0x4b/0x60 [ 58.276952][ T439] ? kasan_save_stack+0x3b/0x60 [ 58.281638][ T439] ? __kasan_record_aux_stack+0xd3/0xf0 [ 58.287018][ T439] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 58.292835][ T439] ? call_rcu+0x123/0x10b0 [ 58.297086][ T439] ? __fput+0x650/0x8c0 [ 58.301080][ T439] ? ____fput+0x15/0x20 [ 58.305072][ T439] ? task_work_run+0x129/0x190 [ 58.309677][ T439] ? exit_to_user_mode_loop+0xc4/0xe0 [ 58.315005][ T439] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 58.320465][ T439] ? syscall_exit_to_user_mode+0x26/0x160 [ 58.326020][ T439] ? do_syscall_64+0x47/0xb0 [ 58.330444][ T439] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.336354][ T439] ? __kasan_check_read+0x11/0x20 [ 58.341206][ T439] ? call_rcu+0xc4b/0x10b0 [ 58.345461][ T439] ? rcu_gp_kthread_wake+0x90/0x90 [ 58.350405][ T439] ? percpu_counter_add_batch+0x13d/0x160 [ 58.355963][ T439] ? __se_sys_futex+0x37b/0x3e0 [ 58.360651][ T439] ? __x64_sys_futex+0x100/0x100 [ 58.365421][ T439] ? ____fput+0x15/0x20 [ 58.369412][ T439] ? debug_smp_processor_id+0x17/0x20 [ 58.374620][ T439] ? __x64_sys_futex+0xe5/0x100 [ 58.379432][ T439] ? x64_sys_call+0x561/0x9a0 [ 58.383940][ T439] ? do_syscall_64+0x3b/0xb0 [ 58.388360][ T439] ? clear_bhb_loop+0x35/0x90 [ 58.392875][ T439] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 58.398785][ T439] [ 58.401639][ T439] Modules linked in: [ 58.405372][ T439] CR2: ffffc90000d67578 [ 58.409364][ T439] ---[ end trace 88e2fc4a91c9b11a ]--- [ 58.414659][ T439] RIP: 0010:kmem_cache_alloc+0x8a/0x250 [ 58.420038][ T439] Code: 08 48 8b 38 48 85 ff 0f 84 be 00 00 00 48 83 78 10 00 0f 84 b3 00 00 00 41 8b 45 28 48 8d 0c 07 49 8b 9d d8 00 00 00 48 0f c9 <48> 33 1c 07 48 31 cb 48 8d 4a 08 4d 8b 45 00 48 89 f8 65 49 0f c7 [ 58.439479][ T439] RSP: 0018:ffffc900009a7bf0 EFLAGS: 00010286 [ 58.445393][ T439] RAX: 0000000000000078 RBX: fb3fdb580ef83d7f RCX: f8c2708f77708833 [ 58.453208][ T439] RDX: 0000000000000b61 RSI: 00000000000000f8 RDI: 338870778f70c280 [ 58.461095][ T439] RBP: ffffc900009a7c30 R08: ffffffff81d34e80 R09: ffffffff81d2e6ad [ 58.468903][ T439] R10: 0000000000000002 R11: ffff88810d2f8000 R12: ffff8881081aa180 [ 58.476712][ T439] R13: ffff8881081aa180 R14: 0000000000000dc0 R15: ffffffff81d350aa [ 58.484525][ T439] FS: 00007fe4ca8fe6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 58.493296][ T439] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.499719][ T439] CR2: ffffc90000d67578 CR3: 0000000130925000 CR4: 00000000003506b0 [ 58.507526][ T439] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.515422][ T439] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.523241][ T439] Kernel panic - not syncing: Fatal exception [ 59.664842][ T439] Shutting down cpus with NMI [ 59.669694][ T439] Kernel Offset: disabled [ 59.673831][ T439] Rebooting in 86400 seconds..