[ 12.973268][ T28] audit: type=1400 audit(1726938534.886:64): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.975794][ T28] audit: type=1400 audit(1726938534.886:65): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 76.768559][ T333] sftp-server (333) used greatest stack depth: 20328 bytes left Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. 2024/09/21 17:10:05 ignoring optional flag "sandboxArg"="0" 2024/09/21 17:10:05 parsed 1 programs [ 83.746888][ T28] audit: type=1400 audit(1726938605.666:66): avc: denied { node_bind } for pid=349 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.403209][ T28] audit: type=1400 audit(1726938606.326:67): avc: denied { mounton } for pid=355 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 84.404146][ T355] cgroup: Unknown subsys name 'net' [ 84.425673][ T28] audit: type=1400 audit(1726938606.326:68): avc: denied { mount } for pid=355 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.452653][ T28] audit: type=1400 audit(1726938606.356:69): avc: denied { unmount } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 84.452823][ T355] cgroup: Unknown subsys name 'devices' [ 84.590536][ T355] cgroup: Unknown subsys name 'hugetlb' [ 84.596113][ T355] cgroup: Unknown subsys name 'rlimit' [ 84.724803][ T28] audit: type=1400 audit(1726938606.646:70): avc: denied { setattr } for pid=355 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.747783][ T28] audit: type=1400 audit(1726938606.646:71): avc: denied { create } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.767983][ T28] audit: type=1400 audit(1726938606.646:72): avc: denied { write } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.774808][ T361] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 84.788298][ T28] audit: type=1400 audit(1726938606.646:73): avc: denied { read } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.816650][ T28] audit: type=1400 audit(1726938606.646:74): avc: denied { module_request } for pid=355 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.838225][ T28] audit: type=1400 audit(1726938606.646:75): avc: denied { mounton } for pid=355 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 84.866040][ T355] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.462651][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.489563][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.497168][ T371] device bridge_slave_0 entered promiscuous mode [ 85.508690][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.515736][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.523047][ T371] device bridge_slave_1 entered promiscuous mode [ 85.769562][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.776417][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.783562][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.790329][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.828737][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.836811][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.844553][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.851816][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.870421][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.878347][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.885207][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.892626][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.900678][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.907498][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.914748][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.922496][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.933088][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.943715][ T371] device veth0_vlan entered promiscuous mode [ 85.949838][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.957508][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.965076][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 2024/09/21 17:10:07 executed programs: 0 [ 85.979965][ T371] device veth1_macvtap entered promiscuous mode [ 85.989647][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.997901][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.006696][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.124401][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.131423][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.138545][ T425] device bridge_slave_0 entered promiscuous mode [ 86.146885][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.153859][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.161128][ T425] device bridge_slave_1 entered promiscuous mode [ 86.262343][ T431] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.269437][ T431] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.276589][ T431] device bridge_slave_0 entered promiscuous mode [ 86.288715][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.295690][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.302966][ T430] device bridge_slave_0 entered promiscuous mode [ 86.309643][ T431] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.316479][ T431] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.323656][ T431] device bridge_slave_1 entered promiscuous mode [ 86.334109][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.341011][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.348083][ T430] device bridge_slave_1 entered promiscuous mode [ 86.366681][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.373810][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.380933][ T427] device bridge_slave_0 entered promiscuous mode [ 86.403715][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.410751][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.417833][ T427] device bridge_slave_1 entered promiscuous mode [ 86.449781][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.456627][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.463896][ T432] device bridge_slave_0 entered promiscuous mode [ 86.475991][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.483066][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.490441][ T432] device bridge_slave_1 entered promiscuous mode [ 86.705295][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.712167][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.745407][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.753831][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.761201][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.802899][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.810859][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.818025][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.826394][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.834432][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.841271][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.848400][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.856367][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.863213][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.870401][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.877592][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.884879][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.892967][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.900993][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.907812][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.915030][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.923125][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.931127][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.937950][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.945170][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.952958][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.960766][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.968195][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.975503][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.983589][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.991586][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.998410][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.005645][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.013717][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.021687][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.028550][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.035725][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.043977][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.052159][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.059007][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.080949][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.088497][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.096051][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.103541][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.111359][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.131802][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.140622][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.147852][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.155924][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.163782][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.171694][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.179402][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.187455][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.195567][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.202493][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.209714][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.217783][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.225785][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.232632][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.239958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.268404][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.276840][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.285020][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.292949][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.299790][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.306910][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.314616][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.322354][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.330509][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.354319][ T427] device veth0_vlan entered promiscuous mode [ 87.363880][ T425] device veth0_vlan entered promiscuous mode [ 87.372271][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.380487][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.387821][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.395592][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.403406][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.410684][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.418071][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.426331][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.434129][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.441416][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.448583][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.456603][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.473722][ T432] device veth0_vlan entered promiscuous mode [ 87.487581][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.496153][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.504527][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.512685][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.521235][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.529054][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.545902][ T430] device veth0_vlan entered promiscuous mode [ 87.552880][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.560197][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.567357][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.575449][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.585314][ T427] device veth1_macvtap entered promiscuous mode [ 87.594532][ T425] device veth1_macvtap entered promiscuous mode [ 87.607093][ T431] device veth0_vlan entered promiscuous mode [ 87.613483][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.621056][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.629803][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.637760][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.645229][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.652875][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.660826][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.668083][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.691795][ T432] device veth1_macvtap entered promiscuous mode [ 87.705738][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.714253][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.722795][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.730886][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.738973][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.746857][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.754812][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.762711][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.770747][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.778071][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.786123][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.795940][ T430] device veth1_macvtap entered promiscuous mode [ 87.824595][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.836062][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.844238][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.853478][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.861636][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.869786][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.877716][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.885895][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.894157][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.907293][ T431] device veth1_macvtap entered promiscuous mode [ 87.927591][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.948578][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.957314][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.965500][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.975300][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.998182][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.006260][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.015107][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.023266][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.530226][ T8] device bridge_slave_1 left promiscuous mode [ 88.537666][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.546208][ T8] device bridge_slave_0 left promiscuous mode [ 88.552753][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.560721][ T8] device veth1_macvtap left promiscuous mode [ 88.566740][ T8] device veth0_vlan left promiscuous mode 2024/09/21 17:10:12 executed programs: 548 2024/09/21 17:10:18 executed programs: 1530 2024/09/21 17:10:23 executed programs: 2552 [ 103.128051][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.137671][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.146236][ T6385] device bridge_slave_0 entered promiscuous mode [ 103.155654][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.172580][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.181541][ T6385] device bridge_slave_1 entered promiscuous mode [ 103.374873][ T6385] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.381766][ T6385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.388811][ T6385] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.395663][ T6385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.426102][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.434897][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.443057][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.463979][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.473733][ T885] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.480709][ T885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.488647][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.496694][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.503731][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.533441][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.551035][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.586136][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.604021][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.613575][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.622070][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.630947][ T6385] device veth0_vlan entered promiscuous mode [ 103.655774][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.664729][ T6385] device veth1_macvtap entered promiscuous mode [ 103.677291][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.699761][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.848197][ T2481] device bridge_slave_1 left promiscuous mode [ 103.855703][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.864279][ T2481] device bridge_slave_0 left promiscuous mode [ 103.870516][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.881442][ T2481] device veth1_macvtap left promiscuous mode [ 103.887449][ T2481] device veth0_vlan left promiscuous mode [ 104.004479][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.013165][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.021021][ T6580] device bridge_slave_0 entered promiscuous mode [ 104.029473][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.040114][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.047442][ T6580] device bridge_slave_1 entered promiscuous mode [ 104.261595][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.269959][ T818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.296546][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.307118][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.315358][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.322205][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.330934][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.339147][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.347290][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.354134][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.361365][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.375474][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.401306][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.429968][ T579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.445943][ T6580] device veth0_vlan entered promiscuous mode [ 104.457656][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.472272][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.479885][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.517495][ T450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.526089][ T6580] device veth1_macvtap entered promiscuous mode [ 104.550603][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.559215][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.724295][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.732542][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.744830][ T6775] device bridge_slave_0 entered promiscuous mode [ 104.755610][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.763026][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.771055][ T6775] device bridge_slave_1 entered promiscuous mode [ 104.918644][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.925712][ T6775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.933179][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.940086][ T6775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.975214][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.983136][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.994869][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.046200][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.055029][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.078678][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.088578][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.101938][ T6775] device veth0_vlan entered promiscuous mode [ 105.118417][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.126573][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.158345][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.167024][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.174492][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.182775][ T449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.192043][ T6775] device veth1_macvtap entered promiscuous mode [ 105.220613][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.228275][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.236444][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.245364][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.253567][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.440793][ T2481] device bridge_slave_1 left promiscuous mode [ 105.447283][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.457716][ T2481] device bridge_slave_0 left promiscuous mode [ 105.463873][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.471705][ T2481] device veth1_macvtap left promiscuous mode [ 105.477546][ T2481] device veth0_vlan left promiscuous mode [ 105.573011][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.580393][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.587678][ T6942] device bridge_slave_0 entered promiscuous mode [ 105.607539][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.615168][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.622521][ T6942] device bridge_slave_1 entered promiscuous mode [ 105.777234][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.784126][ T6942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.791230][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.798000][ T6942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.868858][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.877813][ T885] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.885826][ T885] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.917319][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.925551][ T885] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.932438][ T885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.941346][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.949392][ T885] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.956351][ T885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.963635][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.971668][ T885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.985060][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.006641][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.016881][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.025089][ T1763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.034743][ T6942] device veth0_vlan entered promiscuous mode [ 106.057528][ T1766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2024/09/21 17:10:28 executed programs: 3290 [ 106.073489][ T6942] device veth1_macvtap entered promiscuous mode [ 106.102126][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.111970][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.120786][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.129148][ T422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.380514][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.387498][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.396016][ T7137] device bridge_slave_0 entered promiscuous mode [ 106.403398][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.411743][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.419533][ T7137] device bridge_slave_1 entered promiscuous mode [ 106.596018][ T7137] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.602918][ T7137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.610020][ T7137] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.616766][ T7137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.676889][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.684511][ T811] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.696803][ T811] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.725492][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.733795][ T811] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.740674][ T811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.749089][ T811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.757170][ T811] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.764204][ T811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.779933][ T2481] device bridge_slave_1 left promiscuous mode [ 106.785990][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.797631][ T2481] device bridge_slave_0 left promiscuous mode [ 106.803684][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.811748][ T2481] device bridge_slave_1 left promiscuous mode [ 106.817699][ T2481] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.825431][ T2481] device bridge_slave_0 left promiscuous mode [ 106.831499][ T2481] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.840082][ T2481] device veth1_macvtap left promiscuous mode [ 106.845968][ T2481] device veth0_vlan left promiscuous mode [ 106.852006][ T2481] device veth1_macvtap left promiscuous mode [ 106.857826][ T2481] device veth0_vlan left promiscuous mode [ 107.021020][ T7273] ================================================================== [ 107.029183][ T7273] BUG: KASAN: use-after-free in cpu_map_enqueue+0xb4/0x370 [ 107.036213][ T7273] Read of size 8 at addr ffff888117457708 by task syz.0.3383/7273 [ 107.044026][ T7273] [ 107.046197][ T7273] CPU: 0 PID: 7273 Comm: syz.0.3383 Not tainted 6.1.93-syzkaller-00019-g3b95e548676f #0 [ 107.055912][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.065816][ T7273] Call Trace: [ 107.068936][ T7273] [ 107.071856][ T7273] dump_stack_lvl+0x151/0x1b7 [ 107.076320][ T7273] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 107.081606][ T7273] ? _printk+0xd1/0x111 [ 107.085597][ T7273] ? __virt_addr_valid+0x242/0x2f0 [ 107.090544][ T7273] print_report+0x158/0x4e0 [ 107.094886][ T7273] ? __virt_addr_valid+0x242/0x2f0 [ 107.100004][ T7273] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 107.106080][ T7273] ? cpu_map_enqueue+0xb4/0x370 [ 107.110853][ T7273] kasan_report+0x13c/0x170 [ 107.115300][ T7273] ? cpu_map_enqueue+0xb4/0x370 [ 107.119976][ T7273] ? __alloc_pages+0x780/0x780 [ 107.124566][ T7273] __asan_report_load8_noabort+0x14/0x20 [ 107.130134][ T7273] cpu_map_enqueue+0xb4/0x370 [ 107.134634][ T7273] xdp_do_redirect+0x5b0/0xc60 [ 107.139238][ T7273] tun_xdp_act+0xdb/0xc00 [ 107.143487][ T7273] ? tun_flow_update+0x560/0x560 [ 107.148261][ T7273] ? copy_page_from_iter+0x23b/0x2b0 [ 107.153470][ T7273] tun_get_user+0xb35/0x3a90 [ 107.157897][ T7273] ? tun_get_user+0x7e6/0x3a90 [ 107.162499][ T7273] ? tun_do_read+0x2000/0x2000 [ 107.167092][ T7273] ? ref_tracker_alloc+0x31d/0x450 [ 107.172064][ T7273] ? avc_policy_seqno+0x1b/0x70 [ 107.176741][ T7273] ? tun_get+0xe9/0x120 [ 107.180725][ T7273] tun_chr_write_iter+0x129/0x210 [ 107.185649][ T7273] vfs_write+0x902/0xeb0 [ 107.189674][ T7273] ? file_end_write+0x1c0/0x1c0 [ 107.194348][ T7273] ? do_futex+0x501/0x9a0 [ 107.198516][ T7273] ? __kasan_check_read+0x11/0x20 [ 107.203372][ T7273] ? __fdget_pos+0x204/0x390 [ 107.207801][ T7273] ksys_write+0x199/0x2c0 [ 107.212159][ T7273] ? __ia32_sys_read+0x90/0x90 [ 107.216755][ T7273] ? debug_smp_processor_id+0x17/0x20 [ 107.221967][ T7273] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 107.227867][ T7273] __x64_sys_write+0x7b/0x90 [ 107.232292][ T7273] x64_sys_call+0x2f/0x9a0 [ 107.236748][ T7273] do_syscall_64+0x3b/0xb0 [ 107.240988][ T7273] ? clear_bhb_loop+0x55/0xb0 [ 107.245581][ T7273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.251302][ T7273] RIP: 0033:0x7f5c35d7c9a0 [ 107.255557][ T7273] Code: 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d a1 fb 18 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 107.275025][ T7273] RSP: 002b:00007ffeed09eef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 107.283245][ T7273] RAX: ffffffffffffffda RBX: 00007f5c35f35f80 RCX: 00007f5c35d7c9a0 [ 107.291054][ T7273] RDX: 0000000000000066 RSI: 0000000020000900 RDI: 00000000000000c8 [ 107.298966][ T7273] RBP: 00007f5c35df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 107.306777][ T7273] R10: 0000000000000066 R11: 0000000000000202 R12: 0000000000000000 [ 107.314588][ T7273] R13: 00007f5c35f35f80 R14: 00007f5c35f35f80 R15: 000000000000131d [ 107.322406][ T7273] [ 107.325265][ T7273] [ 107.327430][ T7273] Allocated by task 7277: [ 107.331689][ T7273] kasan_set_track+0x4b/0x70 [ 107.336110][ T7273] kasan_save_alloc_info+0x1f/0x30 [ 107.341058][ T7273] __kasan_kmalloc+0x9c/0xb0 [ 107.345484][ T7273] __kmalloc_node+0xb4/0x1e0 [ 107.349910][ T7273] bpf_map_kmalloc_node+0xd0/0x2c0 [ 107.354877][ T7273] cpu_map_update_elem+0x28f/0xf50 [ 107.359807][ T7273] bpf_map_update_value+0x1a3/0x410 [ 107.364841][ T7273] map_update_elem+0x500/0x680 [ 107.369524][ T7273] __sys_bpf+0x460/0x7f0 [ 107.373610][ T7273] __x64_sys_bpf+0x7c/0x90 [ 107.377863][ T7273] x64_sys_call+0x87f/0x9a0 [ 107.382198][ T7273] do_syscall_64+0x3b/0xb0 [ 107.386450][ T7273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 107.392192][ T7273] [ 107.394444][ T7273] Freed by task 7278: [ 107.398273][ T7273] kasan_set_track+0x4b/0x70 [ 107.402689][ T7273] kasan_save_free_info+0x2b/0x40 [ 107.407547][ T7273] ____kasan_slab_free+0x131/0x180 [ 107.412496][ T7273] __kasan_slab_free+0x11/0x20 [ 107.417100][ T7273] __kmem_cache_free+0x218/0x3b0 [ 107.421869][ T7273] kfree+0x7a/0xf0 [ 107.425431][ T7273] put_cpu_map_entry+0x6e2/0x760 [ 107.430203][ T7273] cpu_map_kthread_run+0x2463/0x2520 [ 107.435355][ T7273] kthread+0x26d/0x300 [ 107.439331][ T7273] ret_from_fork+0x1f/0x30 [ 107.443589][ T7273] [ 107.445771][ T7273] Last potentially related work creation: [ 107.451486][ T7273] kasan_save_stack+0x3b/0x60 [ 107.456008][ T7273] __kasan_record_aux_stack+0xb4/0xc0 [ 107.461208][ T7273] kasan_record_aux_stack_noalloc+0xb/0x10 [ 107.466935][ T7273] insert_work+0x56/0x310 [ 107.471098][ T7273] __queue_work+0x9b6/0xd70 [ 107.475550][ T7273] queue_work_on+0x105/0x170 [ 107.479978][ T7273] cpu_map_free+0x1e7/0x2c0 [ 107.484316][ T7273] bpf_map_free_deferred+0xf7/0x1b0 [ 107.489530][ T7273] process_one_work+0x73d/0xcb0 [ 107.494211][ T7273] worker_thread+0xa60/0x1260 [ 107.498726][ T7273] kthread+0x26d/0x300 [ 107.502632][ T7273] ret_from_fork+0x1f/0x30 [ 107.506884][ T7273] [ 107.509053][ T7273] Second to last potentially related work creation: [ 107.515478][ T7273] kasan_save_stack+0x3b/0x60 [ 107.520051][ T7273] __kasan_record_aux_stack+0xb4/0xc0 [ 107.525305][ T7273] kasan_record_aux_stack_noalloc+0xb/0x10 [ 107.531032][ T7273] call_rcu+0xee/0x1340 [ 107.535023][ T7273] cpu_map_free+0x109/0x2c0 [ 107.539446][ T7273] bpf_map_free_deferred+0xf7/0x1b0 [ 107.544480][ T7273] process_one_work+0x73d/0xcb0 [ 107.549173][ T7273] worker_thread+0xa60/0x1260 [ 107.553780][ T7273] kthread+0x26d/0x300 [ 107.557759][ T7273] ret_from_fork+0x1f/0x30 [ 107.562011][ T7273] [ 107.564179][ T7273] The buggy address belongs to the object at ffff888117457700 [ 107.564179][ T7273] which belongs to the cache kmalloc-192 of size 192 [ 107.578154][ T7273] The buggy address is located 8 bytes inside of [ 107.578154][ T7273] 192-byte region [ffff888117457700, ffff8881174577c0) [ 107.591095][ T7273] [ 107.593261][ T7273] The buggy address belongs to the physical page: [ 107.599773][ T7273] page:ffffea00045d15c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888117457c00 pfn:0x117457 [ 107.611138][ T7273] flags: 0x4000000000000200(slab|zone=1) [ 107.616704][ T7273] raw: 4000000000000200 0000000000000000 dead000000000001 ffff888100042c00 [ 107.625129][ T7273] raw: ffff888117457c00 000000008010000f 00000001ffffffff 0000000000000000 [ 107.633561][ T7273] page dumped because: kasan: bad access detected [ 107.639913][ T7273] page_owner tracks the page as allocated [ 107.645464][ T7273] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 101, tgid 101 (udevd), ts 4277166597, free_ts 0 [ 107.661851][ T7273] post_alloc_hook+0x213/0x220 [ 107.666449][ T7273] prep_new_page+0x1b/0x110 [ 107.670791][ T7273] get_page_from_freelist+0x27ea/0x2870 [ 107.676170][ T7273] __alloc_pages+0x3a1/0x780 [ 107.680599][ T7273] alloc_slab_page+0x6c/0xf0 [ 107.685024][ T7273] new_slab+0x90/0x3e0 [ 107.688929][ T7273] ___slab_alloc+0x6f9/0xb80 [ 107.693353][ T7273] __slab_alloc+0x5d/0xa0 [ 107.697522][ T7273] __kmem_cache_alloc_node+0x1af/0x250 [ 107.702816][ T7273] kmalloc_trace+0x2a/0xa0 [ 107.707067][ T7273] kernfs_fop_open+0x350/0xb10 [ 107.711668][ T7273] do_dentry_open+0x891/0x1250 [ 107.716271][ T7273] vfs_open+0x73/0x80 [ 107.720089][ T7273] path_openat+0x2532/0x2d60 [ 107.724513][ T7273] do_filp_open+0x230/0x480 [ 107.728863][ T7273] do_sys_openat2+0x151/0x890 [ 107.733370][ T7273] page_owner free stack trace missing [ 107.738590][ T7273] [ 107.740743][ T7273] Memory state around the buggy address: [ 107.746218][ T7273] ffff888117457600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.754210][ T7273] ffff888117457680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.762112][ T7273] >ffff888117457700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.770088][ T7273] ^ [ 107.774255][ T7273] ffff888117457780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.782161][ T7273] ffff888117457800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.790054][ T7273] ================================================================== [ 107.798121][ T7273] Disabling lock debugging due to kernel taint [ 107.804205][ T7273] general protection fault, probably for non-canonical address 0xe0e24d3c3edc0398: 0000 [#1] PREEMPT SMP KASAN [ 107.815661][ T7273] KASAN: maybe wild-memory-access in range [0x071289e1f6e01cc0-0x071289e1f6e01cc7] [ 107.824802][ T7273] CPU: 0 PID: 7273 Comm: syz.0.3383 Tainted: G B 6.1.93-syzkaller-00019-g3b95e548676f #0 [ 107.835791][ T7273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.845698][ T7273] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 107.851068][ T7273] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 96 c9 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 107.870516][ T7273] RSP: 0018:ffffc90000fcf7a8 EFLAGS: 00010203 [ 107.876411][ T7273] RAX: dffffc0000000000 RBX: ffffffff86743880 RCX: ffff888122e45100 [ 107.884234][ T7273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 107.892217][ T7273] RBP: ffffc90000fcf7e0 R08: ffffffff8198105e R09: fffffbfff0f6d8fd [ 107.900106][ T7273] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e00000 [ 107.908108][ T7273] R13: 00e2513c3edc0398 R14: 071289e1f6e01cc6 R15: 0713016000001c6e [ 107.915989][ T7273] FS: 0000555555f1b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 107.924953][ T7273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.931470][ T7273] CR2: 00007ffda120e020 CR3: 0000000114802000 CR4: 00000000003506b0 [ 107.939273][ T7273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.947090][ T7273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.954895][ T7273] Call Trace: [ 107.958021][ T7273] [ 107.960800][ T7273] ? __die_body+0x62/0xb0 [ 107.964963][ T7273] ? die_addr+0x9f/0xd0 [ 107.968953][ T7273] ? exc_general_protection+0x317/0x4c0 [ 107.974338][ T7273] ? __kasan_check_write+0x14/0x20 [ 107.979284][ T7273] ? cpu_map_enqueue+0xb4/0x370 [ 107.983970][ T7273] ? asm_exc_general_protection+0x27/0x30 [ 107.989530][ T7273] ? cpu_map_enqueue+0xce/0x370 [ 107.994213][ T7273] ? cpu_map_enqueue+0x113/0x370 [ 107.998989][ T7273] ? cpu_map_enqueue+0xdc/0x370 [ 108.004020][ T7273] xdp_do_redirect+0x5b0/0xc60 [ 108.008709][ T7273] tun_xdp_act+0xdb/0xc00 [ 108.012882][ T7273] ? tun_flow_update+0x560/0x560 [ 108.017649][ T7273] ? copy_page_from_iter+0x23b/0x2b0 [ 108.022767][ T7273] tun_get_user+0xb35/0x3a90 [ 108.027195][ T7273] ? tun_get_user+0x7e6/0x3a90 [ 108.031795][ T7273] ? tun_do_read+0x2000/0x2000 [ 108.036392][ T7273] ? ref_tracker_alloc+0x31d/0x450 [ 108.041346][ T7273] ? avc_policy_seqno+0x1b/0x70 [ 108.046037][ T7273] ? tun_get+0xe9/0x120 [ 108.050024][ T7273] tun_chr_write_iter+0x129/0x210 [ 108.054883][ T7273] vfs_write+0x902/0xeb0 [ 108.058965][ T7273] ? file_end_write+0x1c0/0x1c0 [ 108.063656][ T7273] ? do_futex+0x501/0x9a0 [ 108.067815][ T7273] ? __kasan_check_read+0x11/0x20 [ 108.072673][ T7273] ? __fdget_pos+0x204/0x390 [ 108.077100][ T7273] ksys_write+0x199/0x2c0 [ 108.081291][ T7273] ? __ia32_sys_read+0x90/0x90 [ 108.085866][ T7273] ? debug_smp_processor_id+0x17/0x20 [ 108.091073][ T7273] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 108.096975][ T7273] __x64_sys_write+0x7b/0x90 [ 108.101401][ T7273] x64_sys_call+0x2f/0x9a0 [ 108.105657][ T7273] do_syscall_64+0x3b/0xb0 [ 108.109910][ T7273] ? clear_bhb_loop+0x55/0xb0 [ 108.114456][ T7273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.120151][ T7273] RIP: 0033:0x7f5c35d7c9a0 [ 108.124403][ T7273] Code: 40 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b7 0f 1f 00 80 3d a1 fb 18 00 00 74 17 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 48 89 [ 108.144367][ T7273] RSP: 002b:00007ffeed09eef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 108.152610][ T7273] RAX: ffffffffffffffda RBX: 00007f5c35f35f80 RCX: 00007f5c35d7c9a0 [ 108.160421][ T7273] RDX: 0000000000000066 RSI: 0000000020000900 RDI: 00000000000000c8 [ 108.168337][ T7273] RBP: 00007f5c35df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 108.176129][ T7273] R10: 0000000000000066 R11: 0000000000000202 R12: 0000000000000000 [ 108.183941][ T7273] R13: 00007f5c35f35f80 R14: 00007f5c35f35f80 R15: 000000000000131d [ 108.191760][ T7273] [ 108.194716][ T7273] Modules linked in: [ 108.198524][ T7273] ---[ end trace 0000000000000000 ]--- [ 108.203756][ T7273] RIP: 0010:cpu_map_enqueue+0x113/0x370 [ 108.209135][ T7273] Code: e8 03 42 80 3c 30 00 74 08 48 89 df e8 96 c9 24 00 4c 8b 23 4f 8d 74 3c 58 4d 89 f5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 44 05 00 84 c0 0f 85 a8 01 00 00 4d 01 fc 41 8b 1e bf 08 [ 108.228602][ T7273] RSP: 0018:ffffc90000fcf7a8 EFLAGS: 00010203 [ 108.234588][ T7273] RAX: dffffc0000000000 RBX: ffffffff86743880 RCX: ffff888122e45100 [ 108.242382][ T7273] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 108.250201][ T7273] RBP: ffffc90000fcf7e0 R08: ffffffff8198105e R09: fffffbfff0f6d8fd [ 108.257990][ T7273] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881f6e00000 [ 108.265833][ T7273] R13: 00e2513c3edc0398 R14: 071289e1f6e01cc6 R15: 0713016000001c6e [ 108.273628][ T7273] FS: 0000555555f1b500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 108.282399][ T7273] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.288798][ T7273] CR2: 00007ffda120e020 CR3: 0000000114802000 CR4: 00000000003506b0 [ 108.296641][ T7273] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.304438][ T7273] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.312252][ T7273] Kernel panic - not syncing: Fatal exception in interrupt [ 108.319481][ T7273] Kernel Offset: disabled [ 108.323693][ T7273] Rebooting in 86400 seconds..