[ 11.979322][ T30] audit: type=1400 audit(1674307704.960:60): avc: denied { transition } for pid=316 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.989838][ T30] audit: type=1400 audit(1674307704.970:61): avc: denied { write } for pid=316 comm="sh" path="pipe:[309]" dev="pipefs" ino=309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 13.517023][ T320] scp (320) used greatest stack depth: 22336 bytes left Warning: Permanently added '10.128.0.165' (ECDSA) to the list of known hosts. 2023/01/21 13:32:01 ignoring optional flag "sandboxArg"="0" 2023/01/21 13:32:01 parsed 1 programs [ 228.895741][ T30] audit: type=1400 audit(1674307921.870:62): avc: denied { integrity } for pid=610 comm="syz-execprog" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 228.917956][ T30] audit: type=1400 audit(1674307921.870:63): avc: denied { getattr } for pid=610 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.918630][ T615] cgroup: Unknown subsys name 'net' [ 228.941529][ T30] audit: type=1400 audit(1674307921.870:64): avc: denied { read } for pid=610 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.967159][ T30] audit: type=1400 audit(1674307921.870:65): avc: denied { open } for pid=610 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 228.967344][ T615] cgroup: Unknown subsys name 'devices' [ 228.990156][ T30] audit: type=1400 audit(1674307921.870:66): avc: denied { read } for pid=610 comm="syz-execprog" name="raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.018179][ T30] audit: type=1400 audit(1674307921.870:67): avc: denied { open } for pid=610 comm="syz-execprog" path="/dev/raw-gadget" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.041252][ T30] audit: type=1400 audit(1674307921.870:68): avc: denied { mounton } for pid=615 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 229.063642][ T30] audit: type=1400 audit(1674307921.870:69): avc: denied { mount } for pid=615 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 229.085717][ T30] audit: type=1400 audit(1674307921.920:70): avc: denied { unmount } for pid=615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 229.189001][ T615] cgroup: Unknown subsys name 'hugetlb' [ 229.194490][ T615] cgroup: Unknown subsys name 'rlimit' 2023/01/21 13:32:02 executed programs: 0 [ 229.318321][ T30] audit: type=1400 audit(1674307922.300:71): avc: denied { mounton } for pid=615 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 229.490899][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.497868][ T627] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.504903][ T627] device bridge_slave_0 entered promiscuous mode [ 229.512478][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.519357][ T627] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.526442][ T627] device bridge_slave_1 entered promiscuous mode [ 229.569670][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.576533][ T623] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.583890][ T623] device bridge_slave_0 entered promiscuous mode [ 229.603365][ T628] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.610298][ T628] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.617484][ T628] device bridge_slave_0 entered promiscuous mode [ 229.627036][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.633877][ T623] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.641225][ T623] device bridge_slave_1 entered promiscuous mode [ 229.654609][ T628] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.661591][ T628] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.668816][ T628] device bridge_slave_1 entered promiscuous mode [ 229.708410][ T635] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.715273][ T635] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.722611][ T635] device bridge_slave_0 entered promiscuous mode [ 229.737259][ T633] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.744112][ T633] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.751494][ T633] device bridge_slave_0 entered promiscuous mode [ 229.763439][ T635] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.770341][ T635] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.777505][ T635] device bridge_slave_1 entered promiscuous mode [ 229.789296][ T633] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.796152][ T633] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.803407][ T633] device bridge_slave_1 entered promiscuous mode [ 229.830200][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.837096][ T631] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.844219][ T631] device bridge_slave_0 entered promiscuous mode [ 229.857116][ T631] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.863967][ T631] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.871280][ T631] device bridge_slave_1 entered promiscuous mode [ 230.008684][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.015538][ T623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.022696][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.029544][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.052070][ T628] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.058924][ T628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.066011][ T628] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.072822][ T628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.103057][ T633] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.109932][ T633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.117030][ T633] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.123806][ T633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.135377][ T635] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.142228][ T635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.149450][ T635] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.156278][ T635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.170685][ T627] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.177539][ T627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.184613][ T627] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.191446][ T627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.240389][ T631] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.247372][ T631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.254435][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.261263][ T631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.275493][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.282651][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.289653][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.296592][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.303755][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.310947][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.317982][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.324937][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.331851][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.338829][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.345785][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.352809][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.360818][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.368089][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.375244][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.382480][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.422504][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.431079][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.437938][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.445219][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.453280][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.460252][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.467445][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.475154][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.482955][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.490882][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.497744][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.504863][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.512935][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.519791][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.527368][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.535119][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.557022][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.564255][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.571782][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.580030][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.588098][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.594921][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.602590][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.610675][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.618735][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.625561][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.632827][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.640716][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.660256][ T623] device veth0_vlan entered promiscuous mode [ 230.668239][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.675481][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.682858][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.691330][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.699351][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.706180][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.713484][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.721568][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.729822][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.737624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.753367][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.760760][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.768212][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.775437][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.782849][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.791271][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.799302][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.806124][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.813405][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.821513][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.829588][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.836424][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.843682][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.851835][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.863264][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.871426][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.879503][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.886327][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.897352][ T623] device veth1_macvtap entered promiscuous mode [ 230.907011][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.914940][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.923052][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.931145][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.939278][ T616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.954653][ T628] device veth0_vlan entered promiscuous mode [ 230.969642][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.977589][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.985308][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.993322][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.001178][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.009319][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.017208][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.025034][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.032959][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.040820][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.066371][ T633] device veth0_vlan entered promiscuous mode [ 231.076076][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.084494][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.092742][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.100177][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.107444][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.114600][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.121930][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.129187][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.136358][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.144509][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.152568][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.159412][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.166692][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.174927][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.182927][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.189811][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.196978][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.207075][ T628] device veth1_macvtap entered promiscuous mode [ 231.223106][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.231140][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.251002][ T633] device veth1_macvtap entered promiscuous mode [ 231.265296][ T627] device veth0_vlan entered promiscuous mode [ 231.272762][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.281583][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.290001][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.298352][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.306554][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 231.316462][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.327150][ T635] device veth0_vlan entered promiscuous mode [ 231.343701][ T627] device veth1_macvtap entered promiscuous mode [ 231.363453][ T631] device veth0_vlan entered promiscuous mode [ 231.370078][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.378506][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.387556][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.395449][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.403511][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.410965][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.418397][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.427093][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.434981][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.443247][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.451591][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.463959][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.472354][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.480601][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.488922][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.497282][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.505520][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.515060][ T636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 231.538377][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.546489][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.555881][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.564093][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.574592][ T635] device veth1_macvtap entered promiscuous mode [ 231.601048][ T631] device veth1_macvtap entered promiscuous mode [ 231.612399][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.621472][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.629664][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.637205][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.645201][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.653276][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.685763][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.697059][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.718191][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.750323][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.764258][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.793973][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.809755][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.823352][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2023/01/21 13:32:07 executed programs: 128 2023/01/21 13:32:12 executed programs: 375 2023/01/21 13:32:17 executed programs: 625 2023/01/21 13:32:22 executed programs: 867 2023/01/21 13:32:27 executed programs: 1117 2023/01/21 13:32:32 executed programs: 1360 2023/01/21 13:32:37 executed programs: 1601 2023/01/21 13:32:42 executed programs: 1847 2023/01/21 13:32:47 executed programs: 2090 2023/01/21 13:32:52 executed programs: 2333 2023/01/21 13:32:57 executed programs: 2581 [ 286.888521][T11802] ================================================================== [ 286.896439][T11802] BUG: KASAN: use-after-free in do_handle_mm_fault+0x142f/0x2370 [ 286.903986][T11802] Read of size 8 at addr ffff88811f824000 by task syz-executor.3/11802 [ 286.912057][T11802] [ 286.914227][T11802] CPU: 1 PID: 11802 Comm: syz-executor.3 Not tainted 5.15.80-syzkaller-00318-g72d681a01da5 #0 [ 286.924297][T11802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 286.934195][T11802] Call Trace: [ 286.937321][T11802] [ 286.940093][T11802] dump_stack_lvl+0x151/0x1b7 [ 286.944608][T11802] ? bfq_pos_tree_add_move+0x43e/0x43e [ 286.949902][T11802] ? __wake_up_klogd+0xd9/0x110 [ 286.954598][T11802] ? panic+0x727/0x727 [ 286.958493][T11802] print_address_description+0x87/0x3d0 [ 286.963889][T11802] kasan_report+0x1a6/0x1f0 [ 286.968211][T11802] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 286.973862][T11802] ? do_handle_mm_fault+0x142f/0x2370 [ 286.979061][T11802] ? do_handle_mm_fault+0x142f/0x2370 [ 286.984267][T11802] kasan_check_range+0x2aa/0x2e0 [ 286.989043][T11802] ? do_handle_mm_fault+0x142f/0x2370 [ 286.994248][T11802] memcpy+0x2d/0x70 [ 286.997895][T11802] do_handle_mm_fault+0x142f/0x2370 [ 287.002934][T11802] ? numa_migrate_prep+0xe0/0xe0 [ 287.007706][T11802] ? __set_current_blocked+0xdf/0x2f0 [ 287.012911][T11802] ? __setup_rt_frame+0xa60/0xa60 [ 287.017789][T11802] ? set_current_blocked+0x40/0x40 [ 287.022715][T11802] ? __kasan_check_read+0x11/0x20 [ 287.027580][T11802] ? do_user_addr_fault+0xad2/0x1220 [ 287.032696][T11802] ? access_error+0x140/0x270 [ 287.037214][T11802] do_user_addr_fault+0xb5d/0x1220 [ 287.042163][T11802] ? do_kern_addr_fault+0x80/0x80 [ 287.047025][T11802] ? debug_smp_processor_id+0x17/0x20 [ 287.052226][T11802] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 287.058138][T11802] ? exit_to_user_mode_prepare+0x2b/0x40 [ 287.063598][T11802] exc_page_fault+0x68/0x1a0 [ 287.068021][T11802] asm_exc_page_fault+0x27/0x30 [ 287.072706][T11802] RIP: 0033:0x7fd14e202c1f [ 287.076963][T11802] Code: 83 f8 04 0f 84 07 02 00 00 0f 87 9f 00 00 00 48 83 f8 01 75 49 48 8b 44 24 20 48 0b 44 24 28 0f 84 99 01 00 00 48 8b 44 24 10 <0f> b6 30 48 8b 04 24 48 85 c0 0f 84 6b 02 00 00 48 83 f8 01 0f 85 [ 287.096407][T11802] RSP: 002b:00007fff88f1ae00 EFLAGS: 00010206 [ 287.102302][T11802] RAX: 0000000020000010 RBX: 0000000000000000 RCX: 0000000000000000 [ 287.110118][T11802] RDX: c5d8c15185e84997 RSI: 0000000000000000 RDI: 00005555572042e8 [ 287.116846][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 287.116859][ T30] audit: type=1400 audit(1674307980.070:88): avc: denied { bpf } for pid=11822 comm="syz-executor.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 287.118009][T11802] RBP: 00007fff88f1aef8 R08: 0000000000000000 R09: 0000000000000003 [ 287.118024][T11802] R10: 00007fd14ddd7b68 R11: 0000000000000246 R12: 00007fd14e382f8c [ 287.118038][T11802] R13: 00007fd14ddd7980 R14: 00007fd14e382f80 R15: 0000000000000000 [ 287.118054][T11802] [ 287.170893][T11802] [ 287.173064][T11802] The buggy address belongs to the page: [ 287.178531][T11802] page:ffffea00047e0900 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f824 [ 287.188596][T11802] flags: 0x4000000000000000(zone=1) [ 287.193638][T11802] raw: 4000000000000000 ffffea000430ae88 ffff8881f713b960 0000000000000000 [ 287.202061][T11802] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 287.210468][T11802] page dumped because: kasan: bad access detected [ 287.216729][T11802] page_owner tracks the page as freed [ 287.221926][T11802] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), pid 11803, ts 286888501227, free_ts 286888503341 [ 287.237808][T11802] post_alloc_hook+0x1ab/0x1b0 [ 287.242412][T11802] get_page_from_freelist+0x38b/0x400 [ 287.247616][T11802] __alloc_pages+0x3a8/0x7c0 [ 287.252045][T11802] pte_alloc_one+0x73/0x1b0 [ 287.256380][T11802] handle_pte_fault+0xf33/0x11d0 [ 287.261158][T11802] do_handle_mm_fault+0x2073/0x2370 [ 287.266191][T11802] __get_user_pages+0xb2f/0x1240 [ 287.270977][T11802] __mm_populate+0x372/0x560 [ 287.275563][T11802] vm_mmap_pgoff+0x263/0x420 [ 287.279991][T11802] ksys_mmap_pgoff+0x15d/0x1e0 [ 287.284589][T11802] __x64_sys_mmap+0x103/0x120 [ 287.289104][T11802] do_syscall_64+0x44/0xd0 [ 287.293353][T11802] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.299085][T11802] page last free stack trace: [ 287.303600][T11802] free_pcp_prepare+0x448/0x450 [ 287.308312][T11802] free_unref_page+0x9c/0x370 [ 287.312795][T11802] __free_pages+0xd8/0x100 [ 287.317047][T11802] handle_pte_fault+0xe90/0x11d0 [ 287.321833][T11802] do_handle_mm_fault+0x2073/0x2370 [ 287.326855][T11802] __get_user_pages+0xb2f/0x1240 [ 287.331661][T11802] __mm_populate+0x372/0x560 [ 287.336061][T11802] vm_mmap_pgoff+0x263/0x420 [ 287.340487][T11802] ksys_mmap_pgoff+0x15d/0x1e0 [ 287.345080][T11802] __x64_sys_mmap+0x103/0x120 [ 287.349595][T11802] do_syscall_64+0x44/0xd0 [ 287.353845][T11802] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 287.359578][T11802] [ 287.361747][T11802] Memory state around the buggy address: [ 287.367220][T11802] ffff88811f823f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 287.375118][T11802] ffff88811f823f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 287.383017][T11802] >ffff88811f824000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 287.390910][T11802] ^ [ 287.394816][T11802] ffff88811f824080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 287.402825][T11802] ffff88811f824100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 287.410717][T11802] ================================================================== [ 287.418613][T11802] Disabling lock debugging due to kernel taint 2023/01/21 13:33:02 executed programs: 2801 2023/01/21 13:33:07 executed programs: 3042