[ 7.652840][ T23] audit: type=1400 audit(1738758064.330:28): avc: denied { write open } for pid=185 comm="dbus-daemon" path="/run/messagebus.pid" dev="tmpfs" ino=11234 scontext=system_u:system_r:system_dbusd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 7.661250][ T23] audit: type=1400 audit(1738758064.330:29): avc: denied { getattr } for pid=185 comm="dbus-daemon" path="/run/messagebus.pid" dev="tmpfs" ino=11234 scontext=system_u:system_r:system_dbusd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 7.804687][ T23] audit: type=1400 audit(1738758064.510:30): avc: denied { search } for pid=199 comm="dhcpcd" name="/" dev="tmpfs" ino=9676 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 18.765715][ T23] kauditd_printk_skb: 30 callbacks suppressed
[ 18.765725][ T23] audit: type=1400 audit(1738758075.470:61): avc: denied { transition } for pid=291 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 18.776296][ T23] audit: type=1400 audit(1738758075.470:62): avc: denied { noatsecure } for pid=291 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 18.780991][ T23] audit: type=1400 audit(1738758075.470:63): avc: denied { write } for pid=291 comm="sh" path="pipe:[10126]" dev="pipefs" ino=10126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 18.792806][ T23] audit: type=1400 audit(1738758075.470:64): avc: denied { rlimitinh } for pid=291 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 18.796151][ T289] sshd (289) used greatest stack depth: 22200 bytes left
[ 18.812805][ T23] audit: type=1400 audit(1738758075.470:65): avc: denied { siginh } for pid=291 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts.
[ 27.781501][ T23] audit: type=1400 audit(1738758084.480:66): avc: denied { execmem } for pid=354 comm="syz-executor127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 27.806060][ T23] audit: type=1400 audit(1738758084.510:67): avc: denied { mounton } for pid=354 comm="syz-executor127" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 27.807687][ T354] cgroup1: Unknown subsys name 'net'
[ 27.834311][ T23] audit: type=1400 audit(1738758084.510:68): avc: denied { mount } for pid=354 comm="syz-executor127" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.834834][ T354] cgroup1: Unknown subsys name 'net_prio'
[ 27.862469][ T354] cgroup1: Unknown subsys name 'devices'
[ 27.868808][ T23] audit: type=1400 audit(1738758084.570:69): avc: denied { unmount } for pid=354 comm="syz-executor127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.974768][ T354] cgroup1: Unknown subsys name 'hugetlb'
[ 27.980570][ T354] cgroup1: Unknown subsys name 'rlimit'
[ 28.194354][ T23] audit: type=1400 audit(1738758084.900:70): avc: denied { mounton } for pid=354 comm="syz-executor127" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 28.219462][ T23] audit: type=1400 audit(1738758084.900:71): avc: denied { mount } for pid=354 comm="syz-executor127" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 28.225882][ T357] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 28.243332][ T23] audit: type=1400 audit(1738758084.900:72): avc: denied { setattr } for pid=354 comm="syz-executor127" name="raw-gadget" dev="devtmpfs" ino=9552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 28.275276][ T23] audit: type=1400 audit(1738758084.950:73): avc: denied { relabelto } for pid=357 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 28.300468][ T23] audit: type=1400 audit(1738758084.950:74): avc: denied { write } for pid=357 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 28.330129][ T23] audit: type=1400 audit(1738758085.030:75): avc: denied { read } for pid=354 comm="syz-executor127" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 28.359784][ T354] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 28.509728][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.517345][ T366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.525325][ T366] device bridge_slave_0 entered promiscuous mode
[ 28.535525][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.542727][ T366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.550075][ T366] device bridge_slave_1 entered promiscuous mode
[ 28.621772][ T368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.628756][ T368] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.636201][ T368] device bridge_slave_0 entered promiscuous mode
[ 28.651417][ T367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.658702][ T367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.666260][ T367] device bridge_slave_0 entered promiscuous mode
[ 28.676484][ T367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.683541][ T367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.691210][ T367] device bridge_slave_1 entered promiscuous mode
[ 28.697921][ T368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.705001][ T368] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.712330][ T368] device bridge_slave_1 entered promiscuous mode
[ 28.718651][ T369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.726447][ T369] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.734105][ T369] device bridge_slave_0 entered promiscuous mode
[ 28.764866][ T369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.781891][ T369] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.789278][ T369] device bridge_slave_1 entered promiscuous mode
[ 28.810013][ T365] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.817531][ T365] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.825511][ T365] device bridge_slave_0 entered promiscuous mode
[ 28.859216][ T365] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.866493][ T365] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.874262][ T365] device bridge_slave_1 entered promiscuous mode
[ 29.047202][ T368] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.054061][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.061167][ T368] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.068673][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.089506][ T369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.096370][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.103547][ T369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.110910][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.123190][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.130035][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.137199][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.144124][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.176691][ T367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.183740][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.190836][ T367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.197739][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.207511][ T365] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.214738][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.221854][ T365] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.228607][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.270231][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.277618][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.285217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.292785][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.299862][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.307038][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.314071][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.321396][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.329026][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.336193][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.343934][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.375050][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.384288][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.391118][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.398461][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.407295][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.414233][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.421449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.428928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.437167][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.444129][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.452881][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.461318][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.468183][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.488417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.495916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.504002][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.511277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.519778][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.526624][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.553542][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.561730][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.568593][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.576757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.585149][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.592004][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.599263][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.607152][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.615358][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.623757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.632092][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.639132][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.646448][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.654584][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.662857][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.671056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.699510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.707986][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.716466][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.725523][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.733612][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.742052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.762169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.770263][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.778358][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.787048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.807310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.815764][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.823344][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.832890][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.840852][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.847736][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.855337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.863579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.871515][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.878673][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.896205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.904553][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.913830][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.922573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.930959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 29.940024][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 29.959326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 29.967399][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 29.975885][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.002216][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 30.010194][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.018456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.027177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.035274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 30.043702][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.054531][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.063647][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.084055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.093172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.102686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.111201][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.120495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.129006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.137278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.146417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.163689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.172598][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.180964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.189948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.211505][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.219709][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.227756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.245793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.254308][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
executing program
[ 30.278760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.287413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.287558][ T367] request_module fs-gadgetfs succeeded, but still no fs?
[ 30.296096][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.313934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
executing program
[ 30.323269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.332614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.340879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.349180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.357772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.366115][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
executing program
[ 30.410349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.729243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.761830][ C1] hrtimer: interrupt took 13135 ns
[ 30.797132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.913387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
executing program
[ 31.272187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 44.819636][ T603] ==================================================================
[ 44.827662][ T603] BUG: KASAN: slab-out-of-bounds in detach_if_pending+0x160/0x360
[ 44.835345][ T603] Write of size 8 at addr ffff8881d6d3b1c0 by task syz-executor127/603
[ 44.843600][ T603]
[ 44.845782][ T603] CPU: 0 PID: 603 Comm: syz-executor127 Not tainted 5.4.289-syzkaller-00030-gcb850525fc3e #0
[ 44.856023][ T603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 44.866076][ T603] Call Trace:
[ 44.869210][ T603] dump_stack+0x1d8/0x241
[ 44.873543][ T603] ? nf_ct_l4proto_log_invalid+0x258/0x258
[ 44.879290][ T603] ? printk+0xd1/0x111
[ 44.883303][ T603] ? detach_if_pending+0x160/0x360
[ 44.888239][ T603] ? wake_up_klogd+0xb2/0xf0
[ 44.892802][ T603] ? detach_if_pending+0x160/0x360
[ 44.897763][ T603] print_address_description+0x8c/0x600
[ 44.903110][ T603] ? panic+0x89d/0x89d
[ 44.907019][ T603] ? detach_if_pending+0x160/0x360
[ 44.912093][ T603] __kasan_report+0xf3/0x120
[ 44.916628][ T603] ? detach_if_pending+0x160/0x360
[ 44.921565][ T603] kasan_report+0x30/0x60
[ 44.925722][ T603] detach_if_pending+0x160/0x360
[ 44.930495][ T603] del_timer_sync+0x13c/0x230
[ 44.935009][ T603] ? find_next_bit+0x7b/0x100
[ 44.939522][ T603] ? try_to_del_timer_sync+0x150/0x150
[ 44.944818][ T603] ? pcpu_chunk_relocate+0xdc/0x3a0
[ 44.949862][ T603] tun_flow_uninit+0x2c/0x280
[ 44.954799][ T603] ? free_percpu+0x359/0x910
[ 44.959329][ T603] tun_free_netdev+0x77/0x190
[ 44.964021][ T603] ? tun_xdp+0x3f0/0x3f0
[ 44.968087][ T603] netdev_run_todo+0xb7f/0xdf0
[ 44.972700][ T603] ? netdev_refcnt_read+0x1c0/0x1c0
[ 44.977717][ T603] ? kfree+0x123/0x370
[ 44.981693][ T603] tun_chr_close+0xc1/0x130
[ 44.985994][ T603] ? tun_chr_open+0x500/0x500
[ 44.990472][ T603] __fput+0x262/0x680
[ 44.994306][ T603] task_work_run+0x140/0x170
[ 44.998727][ T603] exit_to_usermode_loop+0x190/0x1a0
[ 45.003941][ T603] prepare_exit_to_usermode+0x199/0x200
[ 45.009323][ T603] entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[ 45.015051][ T603] RIP: 0033:0x7fd4ce249fca
[ 45.019336][ T603] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 83 82 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 e3 82 02 00 8b 44 24
[ 45.038922][ T603] RSP: 002b:00007ffd87544b50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 45.047163][ T603] RAX: 0000000000000000 RBX: 000000000000000a RCX: 00007fd4ce249fca
[ 45.055147][ T603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[ 45.063044][ T603] RBP: 0000000000000032 R08: 0000000000000000 R09: 00000010ce29b2f5
[ 45.070856][ T603] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000ac90
[ 45.078757][ T603] R13: 000000000000acc2 R14: 00007ffd87544c20 R15: 00007ffd87544bb0
[ 45.086918][ T603]
[ 45.089064][ T603] Allocated by task 0:
[ 45.093078][ T603] (stack is not available)
[ 45.097355][ T603]
[ 45.099518][ T603] Freed by task 0:
[ 45.103157][ T603] (stack is not available)
[ 45.107419][ T603]
[ 45.109794][ T603] The buggy address belongs to the object at ffff8881d6d3af80
[ 45.109794][ T603] which belongs to the cache signal_cache of size 1088
[ 45.124084][ T603] The buggy address is located 576 bytes inside of
[ 45.124084][ T603] 1088-byte region [ffff8881d6d3af80, ffff8881d6d3b3c0)
[ 45.137274][ T603] The buggy address belongs to the page:
[ 45.142752][ T603] page:ffffea00075b4e00 refcount:1 mapcount:0 mapping:ffff8881f5cf1b80 index:0x0 compound_mapcount: 0
[ 45.153505][ T603] flags: 0x8000000000010200(slab|head)
[ 45.158895][ T603] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5cf1b80
[ 45.167417][ T603] raw: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000
[ 45.175936][ T603] page dumped because: kasan: bad access detected
[ 45.182187][ T603] page_owner tracks the page as allocated
[ 45.187851][ T603] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL)
[ 45.204324][ T603] prep_new_page+0x18f/0x370
[ 45.208749][ T603] get_page_from_freelist+0x2d13/0x2d90
[ 45.214318][ T603] __alloc_pages_nodemask+0x393/0x840
[ 45.220143][ T603] alloc_slab_page+0x39/0x3c0
[ 45.224635][ T603] new_slab+0x97/0x440
[ 45.228540][ T603] ___slab_alloc+0x2fe/0x490
[ 45.232969][ T603] __slab_alloc+0x62/0xa0
[ 45.237148][ T603] kmem_cache_alloc+0x109/0x250
[ 45.241821][ T603] copy_signal+0x51/0x5d0
[ 45.246090][ T603] copy_process+0x1265/0x3230
[ 45.250593][ T603] _do_fork+0x197/0x900
[ 45.254589][ T603] __x64_sys_clone+0x26b/0x2c0
[ 45.259246][ T603] do_syscall_64+0xca/0x1c0
[ 45.263533][ T603] entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[ 45.269255][ T603] page last free stack trace:
[ 45.274124][ T603] __free_pages_ok+0x847/0x950
[ 45.278772][ T603] __free_pages+0x91/0x140
[ 45.283003][ T603] device_release+0x6b/0x190
[ 45.287519][ T603] kobject_put+0x1e6/0x2f0
[ 45.291769][ T603] tun_set_iff+0x870/0xdc0
[ 45.296025][ T603] __tun_chr_ioctl+0x8a9/0x1d00
[ 45.300808][ T603] do_vfs_ioctl+0x742/0x1720
[ 45.305222][ T603] __x64_sys_ioctl+0xd4/0x110
[ 45.309826][ T603] do_syscall_64+0xca/0x1c0
[ 45.314170][ T603] entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[ 45.319909][ T603]
[ 45.322070][ T603] Memory state around the buggy address:
[ 45.327530][ T603] ffff8881d6d3b080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 45.335424][ T603] ffff8881d6d3b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 45.343327][ T603] >ffff8881d6d3b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 45.351220][ T603] ^
[ 45.357303][ T603] ffff8881d6d3b200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 45.365201][ T603] ffff8881d6d3b280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 45.373182][ T603] ==================================================================
[ 45.381196][ T603] Disabling lock debugging due to kernel taint
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 48.241860][ C0] BUG: kernel NULL pointer dereference, address: 0000000000000000
[ 48.249624][ C0] #PF: supervisor instruction fetch in kernel mode
[ 48.255946][ C0] #PF: error_code(0x0010) - not-present page
[ 48.261765][ C0] PGD 0 P4D 0
[ 48.265157][ C0] Oops: 0010 [#1] PREEMPT SMP KASAN
[ 48.270190][ C0] CPU: 0 PID: 692 Comm: syz-executor127 Tainted: G B 5.4.289-syzkaller-00030-gcb850525fc3e #0
[ 48.281640][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[ 48.291539][ C0] RIP: 0010:0x0
[ 48.294836][ C0] Code: Bad RIP value.
[ 48.298740][ C0] RSP: 0018:ffff8881f6e09d18 EFLAGS: 00010202
[ 48.304661][ C0] RAX: ffffffff8154e8aa RBX: 0000000000000101 RCX: ffff8881e9ab2f40
[ 48.312458][ C0] RDX: 0000000000000101 RSI: 0000000000000000 RDI: ffff8881d6d3b1c0
[ 48.320262][ C0] RBP: ffff8881f6e09ec8 R08: ffffffff8154e4ee R09: 0000000000000003
[ 48.328080][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 00000000ffff9cd0
[ 48.335888][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881d6d3b1c0
[ 48.343703][ C0] FS: 00007fd4ce1fb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 48.352562][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.358980][ C0] CR2: ffffffffffffffd6 CR3: 00000001d6873000 CR4: 00000000003406b0
[ 48.366894][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 48.374963][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 48.383085][ C0] Call Trace:
[ 48.386277][ C0]
[ 48.388958][ C0] ? __die+0xb4/0x100
[ 48.392864][ C0] ? no_context+0xac7/0xd20
[ 48.397214][ C0] ? is_prefetch+0x4b0/0x4b0
[ 48.401642][ C0] ? __do_page_fault+0xa72/0xbb0
[ 48.406677][ C0] ? cpus_share_cache+0x110/0x110
[ 48.411974][ C0] ? _raw_spin_lock+0xa4/0x1b0
[ 48.416571][ C0] ? __bad_area_nosemaphore+0xc0/0x470
[ 48.421855][ C0] ? page_fault+0x2f/0x40
[ 48.426108][ C0] ? __run_timers+0x84e/0xbe0
[ 48.430628][ C0] ? call_timer_fn+0x2a/0x390
[ 48.435145][ C0] call_timer_fn+0x36/0x390
[ 48.439475][ C0] __run_timers+0x879/0xbe0
[ 48.443821][ C0] ? enqueue_timer+0x300/0x300
[ 48.448418][ C0] ? check_preemption_disabled+0x9f/0x320
[ 48.454070][ C0] ? debug_smp_processor_id+0x20/0x20
[ 48.459263][ C0] ? lapic_next_event+0x5b/0x70
[ 48.463950][ C0] run_timer_softirq+0x63/0xf0
[ 48.468553][ C0] __do_softirq+0x23b/0x6b7
[ 48.473165][ C0] ? sched_clock_cpu+0x18/0x3a0
[ 48.477840][ C0] irq_exit+0x195/0x1c0
[ 48.481831][ C0] smp_apic_timer_interrupt+0x11a/0x490
[ 48.487304][ C0] apic_timer_interrupt+0xf/0x20
[ 48.492080][ C0]
[ 48.494858][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x1b/0x50
[ 48.500837][ C0] Code: c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 04 24 65 48 8b 0d 04 43 9e 7e 65 8b 15 09 43 9e 7e f7 c2 00 01 1f 00 74 01 8b 91 00 0a 00 00 83 fa 02 75 f4 48 8b 91 08 0a 00 00 48 8b 32
[ 48.520379][ C0] RSP: 0018:ffff8881d6a37950 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13
[ 48.528613][ C0] RAX: ffffffff820d744d RBX: 0000000000000000 RCX: ffff8881e9ab2f40
[ 48.536426][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 48.544330][ C0] RBP: ffff8881ede50008 R08: ffffffff820d743f R09: ffffffff82111646
[ 48.552154][ C0] R10: ffff8881e9ab2f40 R11: 000000000000003a R12: 000000000000006c
[ 48.559949][ C0] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000000
[ 48.567768][ C0] ? security_is_socket_class+0x16/0x240
[ 48.573236][ C0] ? sidtab_search_core+0x1cf/0x410
[ 48.578309][ C0] ? sidtab_search_core+0x1dd/0x410
[ 48.583478][ C0] sidtab_search_core+0x1dd/0x410
[ 48.588334][ C0] security_compute_sid+0x3f1/0x1d60
[ 48.593460][ C0] ? __kasan_kmalloc+0x171/0x210
[ 48.598226][ C0] ? selinux_sk_alloc_security+0x71/0x190
[ 48.603947][ C0] ? sk_alloc+0x35/0x2f0
[ 48.608216][ C0] ? unix_create+0x12c/0x1b0
[ 48.612620][ C0] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[ 48.618541][ C0] ? security_transition_sid+0x90/0x90
[ 48.623825][ C0] ? cgroup_tryget+0x108/0x2c0
[ 48.628417][ C0] ? __module_get+0x130/0x130
[ 48.632957][ C0] ? cgroup_kn_lock_live+0x160/0x160
[ 48.638148][ C0] security_transition_sid+0x78/0x90
[ 48.643372][ C0] selinux_socket_post_create+0x37f/0x500
[ 48.648926][ C0] ? selinux_socket_create+0x330/0x330
[ 48.654227][ C0] security_socket_post_create+0x86/0xc0
[ 48.659691][ C0] __sock_create+0x46d/0x7a0
[ 48.664117][ C0] __sys_socketpair+0x308/0x6e0
[ 48.668800][ C0] ? __ia32_sys_socket+0x80/0x80
[ 48.673580][ C0] ? switch_fpu_return+0x1d4/0x410
[ 48.678531][ C0] ? fpu__clear+0x3c0/0x3c0
[ 48.682866][ C0] ? __fdget+0x189/0x200
[ 48.687219][ C0] __x64_sys_socketpair+0x97/0xb0
[ 48.692067][ C0] do_syscall_64+0xca/0x1c0
[ 48.696408][ C0] entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[ 48.702155][ C0] RIP: 0033:0x7fd4ce24b009
[ 48.706389][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 48.725928][ C0] RSP: 002b:00007fd4ce1fb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 48.734165][ C0] RAX: ffffffffffffffda RBX: 00007fd4ce2cf3e8 RCX: 00007fd4ce24b009
[ 48.742063][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001
[ 48.750312][ C0] RBP: 00007fd4ce2cf3e0 R08: 00007fd4ce1fb6c0 R09: 0000000000000000
[ 48.758115][ C0] R10: 0000200000000200 R11: 0000000000000246 R12: 00007fd4ce2cf3ec
[ 48.766043][ C0] R13: 0000000000000016 R14: 00007ffd875449a0 R15: 00007ffd87544a88
[ 48.774025][ C0] Modules linked in:
[ 48.777756][ C0] CR2: 0000000000000000
[ 48.781753][ C0] ---[ end trace bb51bd2b1bae68aa ]---
[ 48.787063][ C0] RIP: 0010:0x0
[ 48.790352][ C0] Code: Bad RIP value.
[ 48.794252][ C0] RSP: 0018:ffff8881f6e09d18 EFLAGS: 00010202
[ 48.800152][ C0] RAX: ffffffff8154e8aa RBX: 0000000000000101 RCX: ffff8881e9ab2f40
[ 48.807968][ C0] RDX: 0000000000000101 RSI: 0000000000000000 RDI: ffff8881d6d3b1c0
[ 48.815784][ C0] RBP: ffff8881f6e09ec8 R08: ffffffff8154e4ee R09: 0000000000000003
[ 48.823588][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: 00000000ffff9cd0
[ 48.831574][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8881d6d3b1c0
[ 48.839475][ C0] FS: 00007fd4ce1fb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 48.848240][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.854662][ C0] CR2: ffffffffffffffd6 CR3: 00000001d6873000 CR4: 00000000003406b0
[ 48.862653][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 48.870461][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 48.878361][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 48.885574][ C0] Kernel Offset: disabled
[ 48.889698][ C0] Rebooting in 86400 seconds..