[ 4.138667][ T182] udevd[182]: starting eudev-3.2.10 [ 4.141514][ T181] udevd (181) used greatest stack depth: 22976 bytes left [ 4.348927][ T183] udevadm (183) used greatest stack depth: 22368 bytes left [ 12.106890][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 12.106902][ T30] audit: type=1400 audit(1672248952.910:60): avc: denied { transition } for pid=317 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.118107][ T30] audit: type=1400 audit(1672248952.930:61): avc: denied { write } for pid=317 comm="sh" path="pipe:[211]" dev="pipefs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 13.695710][ T320] scp (320) used greatest stack depth: 22336 bytes left [ 13.700739][ T318] sshd (318) used greatest stack depth: 21320 bytes left [ 569.275723][ T30] audit: type=1400 audit(1672249510.090:62): avc: denied { remove_name } for pid=164 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.298203][ T30] audit: type=1400 audit(1672249510.090:63): avc: denied { rename } for pid=164 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. 2022/12/28 17:54:57 ignoring optional flag "sandboxArg"="0" 2022/12/28 17:54:57 parsed 1 programs [ 1156.516651][ T30] audit: type=1400 audit(1672250097.320:64): avc: denied { integrity } for pid=1537 comm="syz-execprog" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 1156.542199][ T30] audit: type=1400 audit(1672250097.350:65): avc: denied { getattr } for pid=1537 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1156.565783][ T30] audit: type=1400 audit(1672250097.360:66): avc: denied { read } for pid=1537 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1156.567760][ T1543] cgroup: Unknown subsys name 'net' [ 1156.586865][ T30] audit: type=1400 audit(1672250097.360:67): avc: denied { open } for pid=1537 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1156.614918][ T30] audit: type=1400 audit(1672250097.360:68): avc: denied { read } for pid=1537 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1156.615093][ T1543] cgroup: Unknown subsys name 'devices' [ 1156.643102][ T30] audit: type=1400 audit(1672250097.360:69): avc: denied { open } for pid=1537 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1156.666425][ T30] audit: type=1400 audit(1672250097.370:70): avc: denied { mounton } for pid=1543 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1156.689224][ T30] audit: type=1400 audit(1672250097.370:71): avc: denied { mount } for pid=1543 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1156.711518][ T30] audit: type=1400 audit(1672250097.410:72): avc: denied { unmount } for pid=1543 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1156.829490][ T1543] cgroup: Unknown subsys name 'hugetlb' [ 1156.834943][ T1543] cgroup: Unknown subsys name 'rlimit' 2022/12/28 17:54:57 executed programs: 0 [ 1156.929196][ T30] audit: type=1400 audit(1672250097.740:73): avc: denied { mounton } for pid=1543 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 1157.197388][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.204357][ T1547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.211762][ T1547] device bridge_slave_0 entered promiscuous mode [ 1157.218587][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.225943][ T1547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.233201][ T1547] device bridge_slave_1 entered promiscuous mode [ 1157.255380][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.262247][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.269559][ T1560] device bridge_slave_0 entered promiscuous mode [ 1157.275936][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.283018][ T1553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.290450][ T1553] device bridge_slave_0 entered promiscuous mode [ 1157.296836][ T1551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.303879][ T1551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.311168][ T1551] device bridge_slave_0 entered promiscuous mode [ 1157.326264][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.333144][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.340341][ T1560] device bridge_slave_1 entered promiscuous mode [ 1157.346707][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.353740][ T1553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.360945][ T1553] device bridge_slave_1 entered promiscuous mode [ 1157.367333][ T1551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.374173][ T1551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.381431][ T1551] device bridge_slave_1 entered promiscuous mode [ 1157.409735][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.416572][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.423902][ T1558] device bridge_slave_0 entered promiscuous mode [ 1157.446891][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.453744][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.460994][ T1558] device bridge_slave_1 entered promiscuous mode [ 1157.467378][ T1562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.474209][ T1562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.481484][ T1562] device bridge_slave_0 entered promiscuous mode [ 1157.504024][ T1562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.510998][ T1562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.518261][ T1562] device bridge_slave_1 entered promiscuous mode [ 1157.681974][ T1551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.688833][ T1551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.695906][ T1551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.702723][ T1551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.716815][ T1553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.723679][ T1553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.730762][ T1553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.737571][ T1553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.759879][ T1547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.766737][ T1547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.774219][ T1547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.781011][ T1547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.817184][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.824054][ T1560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.831139][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.837941][ T1560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.880970][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.887840][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1157.895004][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.901833][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.920688][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1157.928134][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.935121][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.942400][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.949845][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.956906][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1157.965260][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.972738][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.979828][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1157.987979][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.995122][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.002998][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.037210][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.045399][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.052767][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.060106][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.068942][ T1583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.075781][ T1583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.083062][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.100158][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.108146][ T1583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.114968][ T1583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.144474][ T1551] device veth0_vlan entered promiscuous mode [ 1158.161059][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.183676][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.191968][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.199367][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.206548][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.214337][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.221861][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.229893][ T1583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.236717][ T1583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.243965][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.251959][ T1583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.258800][ T1583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.266066][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.274033][ T1583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.280872][ T1583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.288558][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.296479][ T1583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.303320][ T1583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.310757][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.318555][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.326248][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.333557][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.340795][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.348965][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.356919][ T1583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.363771][ T1583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.370909][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1158.379108][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.387056][ T1583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.393899][ T1583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.401160][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1158.409163][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.417409][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1158.425256][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.433075][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1158.441262][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.449552][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1158.456958][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1158.472713][ T1553] device veth0_vlan entered promiscuous mode [ 1158.491098][ T1551] device veth1_macvtap entered promiscuous mode [ 1158.509426][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.517952][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.525677][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.534211][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.542159][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.549646][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1158.557052][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1158.565209][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1158.573194][ T1583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.580141][ T1583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.587249][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1158.595450][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1158.603437][ T1583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.610310][ T1583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.617498][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1158.625228][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.633123][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.640906][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.648847][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.656611][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.664649][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.671936][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.683140][ T1553] device veth1_macvtap entered promiscuous mode [ 1158.707970][ T1560] device veth0_vlan entered promiscuous mode [ 1158.718447][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.727129][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.735363][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.743451][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1158.751537][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1158.759729][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.768113][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1158.775707][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.783609][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1158.791320][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1158.799503][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1158.808183][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1158.815877][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1158.823977][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1158.835156][ T1562] device veth0_vlan entered promiscuous mode [ 1158.843219][ T1547] device veth0_vlan entered promiscuous mode [ 1158.851989][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.859878][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.867138][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.874622][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.881960][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1158.902448][ T1560] device veth1_macvtap entered promiscuous mode [ 1158.909686][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1158.918198][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1158.926311][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1158.934645][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1158.962654][ T1558] device veth0_vlan entered promiscuous mode [ 1158.972378][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1158.981299][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1158.990792][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1158.998315][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1159.005599][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1159.013994][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.022739][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.031034][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.043732][ T1562] device veth1_macvtap entered promiscuous mode [ 1159.063113][ T1558] device veth1_macvtap entered promiscuous mode [ 1159.072981][ T1547] device veth1_macvtap entered promiscuous mode [ 1159.082782][ T1564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1159.097119][ T1564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1159.113038][ T1564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1159.127701][ T1564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1159.166814][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.178310][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.195086][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1159.205412][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.219497][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1159.242294][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.260374][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.269257][ T1583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1159.290789][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1159.307652][ T1584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2022/12/28 17:55:02 executed programs: 41 2022/12/28 17:55:07 executed programs: 108 2022/12/28 17:55:12 executed programs: 175 2022/12/28 17:55:17 executed programs: 244 2022/12/28 17:55:22 executed programs: 312 2022/12/28 17:55:27 executed programs: 378 2022/12/28 17:55:32 executed programs: 446 2022/12/28 17:55:37 executed programs: 515 2022/12/28 17:55:43 executed programs: 583 2022/12/28 17:55:48 executed programs: 651 2022/12/28 17:55:53 executed programs: 721 2022/12/28 17:55:58 executed programs: 790 2022/12/28 17:56:03 executed programs: 859 2022/12/28 17:56:08 executed programs: 927 2022/12/28 17:56:13 executed programs: 996 2022/12/28 17:56:18 executed programs: 1064 2022/12/28 17:56:23 executed programs: 1133 2022/12/28 17:56:28 executed programs: 1200 2022/12/28 17:56:33 executed programs: 1268 2022/12/28 17:56:38 executed programs: 1337 2022/12/28 17:56:43 executed programs: 1405 2022/12/28 17:56:48 executed programs: 1476 2022/12/28 17:56:54 executed programs: 1546 2022/12/28 17:56:59 executed programs: 1616 2022/12/28 17:57:04 executed programs: 1684 2022/12/28 17:57:09 executed programs: 1753 2022/12/28 17:57:14 executed programs: 1822 2022/12/28 17:57:19 executed programs: 1890 2022/12/28 17:57:24 executed programs: 1958 2022/12/28 17:57:29 executed programs: 2027 2022/12/28 17:57:34 executed programs: 2097 2022/12/28 17:57:39 executed programs: 2165 2022/12/28 17:57:44 executed programs: 2235 2022/12/28 17:57:49 executed programs: 2303 2022/12/28 17:57:54 executed programs: 2373 2022/12/28 17:57:59 executed programs: 2442 2022/12/28 17:58:04 executed programs: 2510 2022/12/28 17:58:09 executed programs: 2577 2022/12/28 17:58:14 executed programs: 2647 2022/12/28 17:58:19 executed programs: 2715 2022/12/28 17:58:24 executed programs: 2783 2022/12/28 17:58:30 executed programs: 2852 [ 1370.676066][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1370.676082][ T30] audit: type=1400 audit(1672250311.480:89): avc: denied { unlink } for pid=164 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2022/12/28 17:58:35 executed programs: 2922 2022/12/28 17:58:40 executed programs: 2991 2022/12/28 17:58:45 executed programs: 3062 2022/12/28 17:58:50 executed programs: 3132 2022/12/28 17:58:55 executed programs: 3201 2022/12/28 17:59:00 executed programs: 3271 2022/12/28 17:59:05 executed programs: 3342 2022/12/28 17:59:10 executed programs: 3412 2022/12/28 17:59:15 executed programs: 3481 2022/12/28 17:59:20 executed programs: 3550 2022/12/28 17:59:25 executed programs: 3620 2022/12/28 17:59:30 executed programs: 3689 2022/12/28 17:59:35 executed programs: 3758 2022/12/28 17:59:40 executed programs: 3829 2022/12/28 17:59:45 executed programs: 3899 2022/12/28 17:59:50 executed programs: 3969 2022/12/28 17:59:55 executed programs: 4038 2022/12/28 18:00:00 executed programs: 4106 2022/12/28 18:00:06 executed programs: 4178 2022/12/28 18:00:11 executed programs: 4247 2022/12/28 18:00:16 executed programs: 4316 [ 1476.210595][T16900] ================================================================== [ 1476.218617][T16900] BUG: KASAN: use-after-free in vma_put_file_ref+0x25/0x90 [ 1476.225806][T16900] Write of size 4 at addr ffff88811c41d1e8 by task syz-executor.2/16900 [ 1476.234049][T16900] [ 1476.236222][T16900] CPU: 0 PID: 16900 Comm: syz-executor.2 Not tainted 5.15.78-syzkaller-00911-gc73b4619ad86 #0 [ 1476.246378][T16900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1476.256372][T16900] Call Trace: [ 1476.259493][T16900] [ 1476.262270][T16900] dump_stack_lvl+0x151/0x1b7 [ 1476.266784][T16900] ? bfq_pos_tree_add_move+0x43e/0x43e [ 1476.272078][T16900] ? panic+0x727/0x727 [ 1476.275984][T16900] ? __set_current_blocked+0xdf/0x2f0 [ 1476.281196][T16900] print_address_description+0x87/0x3d0 [ 1476.286582][T16900] kasan_report+0x1a6/0x1f0 [ 1476.290913][T16900] ? vma_put_file_ref+0x25/0x90 [ 1476.295602][T16900] ? vma_put_file_ref+0x25/0x90 [ 1476.300470][T16900] kasan_check_range+0x2aa/0x2e0 [ 1476.305252][T16900] __kasan_check_write+0x14/0x20 [ 1476.310014][T16900] vma_put_file_ref+0x25/0x90 [ 1476.314527][T16900] do_user_addr_fault+0xb69/0x1220 [ 1476.319500][T16900] ? do_kern_addr_fault+0x80/0x80 [ 1476.324436][T16900] ? debug_smp_processor_id+0x17/0x20 [ 1476.329642][T16900] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1476.335724][T16900] ? exit_to_user_mode_prepare+0x2b/0x40 [ 1476.341190][T16900] exc_page_fault+0x68/0x1a0 [ 1476.345707][T16900] asm_exc_page_fault+0x27/0x30 [ 1476.350389][T16900] RIP: 0033:0x7f0f677ecc1f [ 1476.354923][T16900] Code: 83 f8 04 0f 84 07 02 00 00 0f 87 9f 00 00 00 48 83 f8 01 75 49 48 8b 44 24 20 48 0b 44 24 28 0f 84 99 01 00 00 48 8b 44 24 10 <0f> b6 30 48 8b 04 24 48 85 c0 0f 84 6b 02 00 00 48 83 f8 01 0f 85 [ 1476.374531][T16900] RSP: 002b:00007ffe192301b0 EFLAGS: 00010206 [ 1476.380523][T16900] RAX: 0000000020000599 RBX: 0000000000000000 RCX: 0000000000000000 [ 1476.388501][T16900] RDX: 519bb7535d9ddbdc RSI: 0000000000000000 RDI: 00005555568812e8 [ 1476.396310][T16900] RBP: 00007ffe192302a8 R08: 0000000000000000 R09: 0000000000000003 [ 1476.404131][T16900] R10: 00007f0f673c5990 R11: 0000000000000246 R12: 00007f0f6796d12c [ 1476.411935][T16900] R13: 00007f0f673c1608 R14: 00007f0f6796d120 R15: 0000000000000002 [ 1476.419752][T16900] [ 1476.422609][T16900] [ 1476.424788][T16900] Allocated by task 16901: [ 1476.429035][T16900] __kasan_slab_alloc+0xb2/0xe0 [ 1476.433728][T16900] kmem_cache_alloc+0x189/0x2f0 [ 1476.438408][T16900] vm_area_alloc+0x24/0x130 [ 1476.442753][T16900] mmap_region+0xb80/0x1af0 [ 1476.447091][T16900] do_mmap+0x785/0xe40 [ 1476.451011][T16900] vm_mmap_pgoff+0x1d4/0x420 [ 1476.455417][T16900] ksys_mmap_pgoff+0x15d/0x1e0 [ 1476.460019][T16900] __x64_sys_mmap+0x103/0x120 [ 1476.464528][T16900] do_syscall_64+0x44/0xd0 [ 1476.468784][T16900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1476.474510][T16900] [ 1476.476682][T16900] Freed by task 25: [ 1476.480336][T16900] kasan_set_track+0x4c/0x70 [ 1476.484755][T16900] kasan_set_free_info+0x23/0x40 [ 1476.489526][T16900] ____kasan_slab_free+0x126/0x160 [ 1476.494475][T16900] __kasan_slab_free+0x11/0x20 [ 1476.499072][T16900] slab_free_freelist_hook+0xc9/0x1a0 [ 1476.504468][T16900] kmem_cache_free+0x11a/0x2e0 [ 1476.509162][T16900] __vm_area_free+0x1c/0x20 [ 1476.513497][T16900] rcu_do_batch+0x55b/0xbe0 [ 1476.517840][T16900] rcu_core+0x506/0x1000 [ 1476.521915][T16900] rcu_core_si+0x9/0x10 [ 1476.526008][T16900] __do_softirq+0x27e/0x5dc [ 1476.530356][T16900] [ 1476.532516][T16900] Last potentially related work creation: [ 1476.538161][T16900] kasan_save_stack+0x3b/0x60 [ 1476.542672][T16900] __kasan_record_aux_stack+0xd3/0xf0 [ 1476.547879][T16900] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1476.553516][T16900] call_rcu+0x140/0x1400 [ 1476.557770][T16900] vm_area_free+0x1e7/0x230 [ 1476.562115][T16900] __do_munmap+0x16ea/0x1ad0 [ 1476.566538][T16900] mmap_region+0x9ec/0x1af0 [ 1476.570964][T16900] do_mmap+0x785/0xe40 [ 1476.574879][T16900] vm_mmap_pgoff+0x1d4/0x420 [ 1476.579566][T16900] ksys_mmap_pgoff+0x15d/0x1e0 [ 1476.584256][T16900] __x64_sys_mmap+0x103/0x120 [ 1476.588786][T16900] do_syscall_64+0x44/0xd0 [ 1476.593365][T16900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1476.599099][T16900] [ 1476.601304][T16900] Second to last potentially related work creation: [ 1476.607702][T16900] kasan_save_stack+0x3b/0x60 [ 1476.612202][T16900] __kasan_record_aux_stack+0xd3/0xf0 [ 1476.617511][T16900] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1476.623154][T16900] call_rcu+0x140/0x1400 [ 1476.627279][T16900] vm_area_free+0x1e7/0x230 [ 1476.631657][T16900] __do_munmap+0x16ea/0x1ad0 [ 1476.636084][T16900] mmap_region+0x9ec/0x1af0 [ 1476.640873][T16900] do_mmap+0x785/0xe40 [ 1476.644780][T16900] vm_mmap_pgoff+0x1d4/0x420 [ 1476.649210][T16900] ksys_mmap_pgoff+0x15d/0x1e0 [ 1476.653830][T16900] __x64_sys_mmap+0x103/0x120 [ 1476.658326][T16900] do_syscall_64+0x44/0xd0 [ 1476.662617][T16900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1476.668396][T16900] [ 1476.670555][T16900] The buggy address belongs to the object at ffff88811c41d128 [ 1476.670555][T16900] which belongs to the cache vm_area_struct of size 232 [ 1476.684710][T16900] The buggy address is located 192 bytes inside of [ 1476.684710][T16900] 232-byte region [ffff88811c41d128, ffff88811c41d210) [ 1476.697812][T16900] The buggy address belongs to the page: [ 1476.703393][T16900] page:ffffea0004710740 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c41d [ 1476.713467][T16900] flags: 0x4000000000000200(slab|zone=1) [ 1476.718940][T16900] raw: 4000000000000200 ffffea0004a4e540 0000000300000003 ffff888100274900 [ 1476.727362][T16900] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 1476.735854][T16900] page dumped because: kasan: bad access detected [ 1476.742189][T16900] page_owner tracks the page as allocated [ 1476.747742][T16900] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 318, ts 12946200565, free_ts 12946069531 [ 1476.763541][T16900] post_alloc_hook+0x1ab/0x1b0 [ 1476.768148][T16900] get_page_from_freelist+0x38b/0x400 [ 1476.773349][T16900] __alloc_pages+0x3a8/0x7c0 [ 1476.777771][T16900] allocate_slab+0x62/0x580 [ 1476.782121][T16900] ___slab_alloc+0x2e2/0x6f0 [ 1476.786631][T16900] __slab_alloc+0x4a/0x90 [ 1476.790789][T16900] kmem_cache_alloc+0x205/0x2f0 [ 1476.795478][T16900] vm_area_alloc+0x24/0x130 [ 1476.799816][T16900] mmap_region+0xb80/0x1af0 [ 1476.804244][T16900] do_mmap+0x785/0xe40 [ 1476.808150][T16900] vm_mmap_pgoff+0x1d4/0x420 [ 1476.812575][T16900] ksys_mmap_pgoff+0xed/0x1e0 [ 1476.817087][T16900] __x64_sys_mmap+0x103/0x120 [ 1476.821700][T16900] do_syscall_64+0x44/0xd0 [ 1476.826036][T16900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1476.832116][T16900] page last free stack trace: [ 1476.836624][T16900] free_pcp_prepare+0x448/0x450 [ 1476.841319][T16900] free_unref_page+0x9c/0x370 [ 1476.845825][T16900] __free_pages+0xd8/0x100 [ 1476.850779][T16900] free_pages+0x7c/0x90 [ 1476.854770][T16900] tlb_finish_mmu+0x123/0x1f0 [ 1476.859367][T16900] unmap_region+0x327/0x370 [ 1476.863707][T16900] __do_munmap+0x1468/0x1ad0 [ 1476.868137][T16900] __do_sys_munmap+0x15e/0x280 [ 1476.872736][T16900] __x64_sys_munmap+0x5b/0x70 [ 1476.877242][T16900] do_syscall_64+0x44/0xd0 [ 1476.881510][T16900] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1476.887332][T16900] [ 1476.889485][T16900] Memory state around the buggy address: [ 1476.895134][T16900] ffff88811c41d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 1476.903205][T16900] ffff88811c41d100: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb [ 1476.911279][T16900] >ffff88811c41d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1476.919373][T16900] ^ [ 1476.926955][T16900] ffff88811c41d200: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 1476.934860][T16900] ffff88811c41d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1476.942740][T16900] ================================================================== [ 1476.950641][T16900] Disabling lock debugging due to kernel taint 2022/12/28 18:00:21 executed programs: 4381 2022/12/28 18:00:26 executed programs: 4450