Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. 2023/12/03 15:35:09 ignoring optional flag "sandboxArg"="0" 2023/12/03 15:35:09 parsed 1 programs [ 120.290716][ T23] audit: type=1400 audit(1701617709.870:66): avc: denied { getattr } for pid=449 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.317691][ T23] audit: type=1400 audit(1701617709.880:67): avc: denied { read } for pid=449 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.322395][ T454] cgroup1: Unknown subsys name 'net' [ 120.338894][ T23] audit: type=1400 audit(1701617709.880:68): avc: denied { open } for pid=449 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 120.344562][ T454] cgroup1: Unknown subsys name 'net_prio' [ 120.367933][ T23] audit: type=1400 audit(1701617709.880:69): avc: denied { read } for pid=449 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.396206][ T23] audit: type=1400 audit(1701617709.880:70): avc: denied { open } for pid=449 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.419481][ T23] audit: type=1400 audit(1701617709.900:71): avc: denied { mounton } for pid=454 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 120.420100][ T454] cgroup1: Unknown subsys name 'devices' [ 120.442132][ T23] audit: type=1400 audit(1701617709.900:72): avc: denied { mount } for pid=454 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.469506][ T23] audit: type=1400 audit(1701617710.000:73): avc: denied { read } for pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 120.491576][ T23] audit: type=1400 audit(1701617710.050:74): avc: denied { unmount } for pid=454 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 120.600694][ T454] cgroup1: Unknown subsys name 'hugetlb' [ 120.606516][ T454] cgroup1: Unknown subsys name 'rlimit' [ 120.729902][ T23] audit: type=1400 audit(1701617710.310:75): avc: denied { mounton } for pid=454 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 120.759010][ T456] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). 2023/12/03 15:35:10 executed programs: 0 [ 120.810176][ T454] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 120.995472][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.002491][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.009825][ T466] device bridge_slave_0 entered promiscuous mode [ 121.019965][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.027202][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.034841][ T466] device bridge_slave_1 entered promiscuous mode [ 121.142332][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.149278][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.156516][ T472] device bridge_slave_0 entered promiscuous mode [ 121.166740][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.173742][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.181286][ T472] device bridge_slave_1 entered promiscuous mode [ 121.191251][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.198150][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.205307][ T473] device bridge_slave_0 entered promiscuous mode [ 121.223823][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.230875][ T476] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.238221][ T476] device bridge_slave_0 entered promiscuous mode [ 121.258571][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.265413][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.272919][ T473] device bridge_slave_1 entered promiscuous mode [ 121.279432][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.286243][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.293608][ T474] device bridge_slave_0 entered promiscuous mode [ 121.300065][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.306887][ T476] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.314136][ T476] device bridge_slave_1 entered promiscuous mode [ 121.336989][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.343952][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.351294][ T474] device bridge_slave_1 entered promiscuous mode [ 121.378525][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.385506][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.393021][ T475] device bridge_slave_0 entered promiscuous mode [ 121.400091][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.406918][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.414392][ T475] device bridge_slave_1 entered promiscuous mode [ 121.584129][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.591003][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.598269][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.605098][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.613300][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.620907][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.628178][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.635250][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.715899][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.722745][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.729954][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.736796][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.752765][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.760074][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.766995][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.774669][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.781994][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.789060][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.796148][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.832732][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.841595][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.848554][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.855676][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.863967][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.870824][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.917037][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.928238][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 121.935943][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.943447][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.952262][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.960555][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 121.969017][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.977105][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.983847][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.990990][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.999250][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.007337][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.014407][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.038687][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.046136][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.053646][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.062888][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.071171][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.078135][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.085455][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.100993][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.109531][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.117417][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.124205][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.132106][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.140519][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.148615][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.155437][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.163603][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.171535][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.184254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.191590][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.198943][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.206967][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.215170][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.222001][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.229554][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.237337][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.275570][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.284341][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.293029][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.302049][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.308998][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.316497][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.324785][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.333327][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.340172][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.347497][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.355080][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.362451][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.370563][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.378739][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.385560][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.393123][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.401141][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.409421][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.417342][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.424443][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.431669][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.439891][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.447628][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.455681][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.463564][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.488181][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.496177][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.504128][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.512418][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.540619][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.549638][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.557733][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.566059][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.574374][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.582453][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.618424][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.626550][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.635448][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.643446][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.651805][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.660020][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.668123][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.675888][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.684350][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.692747][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.701024][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.722396][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.731083][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.740255][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.755101][ T496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.785897][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.802381][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.816020][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.838431][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.846454][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.855235][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.863242][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.871459][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.879663][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.887914][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 122.895905][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.932854][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.941765][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 122.953721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.962504][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.976797][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 122.985422][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 122.994099][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.006266][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.031553][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.039742][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2023/12/03 15:36:02 executed programs: 12 [ 173.079313][ T466] syz-executor.3 (466) used greatest stack depth: 20664 bytes left [ 173.968138][ T180] device bridge_slave_1 left promiscuous mode [ 173.974066][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.981528][ T180] device bridge_slave_0 left promiscuous mode [ 173.987461][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.125843][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.133072][ T578] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.140447][ T578] device bridge_slave_0 entered promiscuous mode [ 174.147154][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.154061][ T578] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.161526][ T578] device bridge_slave_1 entered promiscuous mode [ 174.199795][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.206622][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.214195][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.220960][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.241072][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.248522][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.255503][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.268518][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.276444][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.283290][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.291216][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.299283][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.306359][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.327305][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.335563][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.351154][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.368803][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.376469][ T497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.393786][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.403008][ T509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.406166][ T578] ================================================================== [ 174.418798][ T578] BUG: KASAN: use-after-free in __mutex_lock+0xcd7/0x1060 [ 174.425719][ T578] Read of size 4 at addr ffff8881eda51fb8 by task syz-executor.3/578 [ 174.433652][ T578] [ 174.435956][ T578] CPU: 0 PID: 578 Comm: syz-executor.3 Not tainted 5.4.259-syzkaller-00032-g891e39829ab7 #0 [ 174.445853][ T578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 174.455742][ T578] Call Trace: [ 174.458906][ T578] dump_stack+0x1d8/0x241 [ 174.463061][ T578] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 174.468847][ T578] ? printk+0xd1/0x111 [ 174.472757][ T578] ? __mutex_lock+0xcd7/0x1060 [ 174.477376][ T578] print_address_description+0x8c/0x600 [ 174.482917][ T578] ? __unwind_start+0x708/0x890 [ 174.487600][ T578] ? __mutex_lock+0xcd7/0x1060 [ 174.492193][ T578] __kasan_report+0xf3/0x120 [ 174.496621][ T578] ? __mutex_lock+0xcd7/0x1060 [ 174.501419][ T578] kasan_report+0x30/0x60 [ 174.505585][ T578] __mutex_lock+0xcd7/0x1060 [ 174.510019][ T578] ? kobject_get_unless_zero+0x229/0x320 [ 174.515480][ T578] ? __ww_mutex_lock_interruptible_slowpath+0x10/0x10 [ 174.522088][ T578] ? __module_put_and_exit+0x20/0x20 [ 174.527197][ T578] ? up_read+0x6f/0x1b0 [ 174.531191][ T578] mutex_lock_killable+0xd8/0x110 [ 174.536050][ T578] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 174.542385][ T578] ? mutex_lock+0xa5/0x110 [ 174.546638][ T578] ? mutex_trylock+0xa0/0xa0 [ 174.551066][ T578] lo_open+0x18/0xc0 [ 174.554795][ T578] __blkdev_get+0x3c8/0x1160 [ 174.559258][ T578] ? blkdev_get+0x3a0/0x3a0 [ 174.563560][ T578] ? _raw_spin_unlock+0x49/0x60 [ 174.568252][ T578] blkdev_get+0x2de/0x3a0 [ 174.572409][ T578] ? blkdev_open+0x173/0x290 [ 174.577894][ T578] ? block_ioctl+0xe0/0xe0 [ 174.582144][ T578] do_dentry_open+0x964/0x1130 [ 174.586742][ T578] ? finish_open+0xd0/0xd0 [ 174.590994][ T578] ? security_inode_permission+0xad/0xf0 [ 174.596461][ T578] ? memcpy+0x38/0x50 [ 174.600308][ T578] path_openat+0x2992/0x3480 [ 174.604713][ T578] ? do_filp_open+0x450/0x450 [ 174.609218][ T578] ? do_sys_open+0x357/0x810 [ 174.613645][ T578] ? do_syscall_64+0xca/0x1c0 [ 174.618160][ T578] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 174.624064][ T578] do_filp_open+0x20b/0x450 [ 174.628398][ T578] ? vfs_tmpfile+0x280/0x280 [ 174.633000][ T578] ? _raw_spin_unlock+0x49/0x60 [ 174.637685][ T578] ? __alloc_fd+0x4c1/0x560 [ 174.642026][ T578] do_sys_open+0x39c/0x810 [ 174.646279][ T578] ? check_preemption_disabled+0x153/0x320 [ 174.651920][ T578] ? file_open_root+0x490/0x490 [ 174.656607][ T578] do_syscall_64+0xca/0x1c0 [ 174.660951][ T578] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 174.666850][ T578] [ 174.669014][ T578] Allocated by task 519: [ 174.673100][ T578] __kasan_kmalloc+0x171/0x210 [ 174.677709][ T578] kmem_cache_alloc+0xd9/0x250 [ 174.682313][ T578] dup_task_struct+0x4f/0x600 [ 174.686815][ T578] copy_process+0x56d/0x3230 [ 174.691242][ T578] _do_fork+0x197/0x900 [ 174.695260][ T578] __x64_sys_clone3+0x2da/0x300 [ 174.699920][ T578] do_syscall_64+0xca/0x1c0 [ 174.704256][ T578] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 174.709980][ T578] [ 174.712151][ T578] Freed by task 0: [ 174.715712][ T578] __kasan_slab_free+0x1b5/0x270 [ 174.720594][ T578] kmem_cache_free+0x10b/0x2c0 [ 174.725176][ T578] rcu_do_batch+0x492/0xa00 [ 174.729523][ T578] rcu_core+0x4c8/0xcb0 [ 174.733512][ T578] __do_softirq+0x23b/0x6b7 [ 174.738115][ T578] [ 174.740276][ T578] The buggy address belongs to the object at ffff8881eda51f80 [ 174.740276][ T578] which belongs to the cache task_struct of size 3904 [ 174.754957][ T578] The buggy address is located 56 bytes inside of [ 174.754957][ T578] 3904-byte region [ffff8881eda51f80, ffff8881eda52ec0) [ 174.768047][ T578] The buggy address belongs to the page: [ 174.773610][ T578] page:ffffea0007b69400 refcount:1 mapcount:0 mapping:ffff8881f5cf9900 index:0x0 compound_mapcount: 0 [ 174.784452][ T578] flags: 0x8000000000010200(slab|head) [ 174.789851][ T578] raw: 8000000000010200 0000000000000000 0000000100000001 ffff8881f5cf9900 [ 174.798254][ T578] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 174.806707][ T578] page dumped because: kasan: bad access detected [ 174.813183][ T578] page_owner tracks the page as allocated [ 174.818782][ T578] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 174.833605][ T578] prep_new_page+0x18f/0x370 [ 174.838003][ T578] get_page_from_freelist+0x2d13/0x2d90 [ 174.843385][ T578] __alloc_pages_nodemask+0x393/0x840 [ 174.848686][ T578] alloc_slab_page+0x39/0x3c0 [ 174.853277][ T578] new_slab+0x97/0x440 [ 174.857182][ T578] ___slab_alloc+0x2fe/0x490 [ 174.861609][ T578] __slab_alloc+0x62/0xa0 [ 174.865777][ T578] kmem_cache_alloc+0x109/0x250 [ 174.870552][ T578] dup_task_struct+0x4f/0x600 [ 174.875061][ T578] copy_process+0x56d/0x3230 [ 174.879493][ T578] _do_fork+0x197/0x900 [ 174.883485][ T578] __ia32_sys_vfork+0xbf/0x110 [ 174.888081][ T578] do_syscall_64+0xca/0x1c0 [ 174.892420][ T578] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 174.898144][ T578] page_owner free stack trace missing [ 174.903353][ T578] [ 174.905520][ T578] Memory state around the buggy address: [ 174.911003][ T578] ffff8881eda51e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.918889][ T578] ffff8881eda51f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 174.926880][ T578] >ffff8881eda51f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.934772][ T578] ^ [ 174.940523][ T578] ffff8881eda52000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.948411][ T578] ffff8881eda52080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 174.956296][ T578] ================================================================== [ 174.964191][ T578] Disabling lock debugging due to kernel taint [ 175.878200][ T180] device bridge_slave_1 left promiscuous mode [ 175.884124][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.891438][ T180] device bridge_slave_0 left promiscuous mode [ 175.897354][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.904841][ T180] device bridge_slave_1 left promiscuous mode [ 175.910805][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.917938][ T180] device bridge_slave_0 left promiscuous mode [ 175.923862][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.077924][ T162] udevd[162]: worker [523] /devices/virtual/block/loop1 is taking a long time [ 183.086600][ T162] udevd[162]: worker [465] /devices/virtual/block/loop0 is taking a long time