Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts. 2024/01/13 20:07:22 ignoring optional flag "sandboxArg"="0" 2024/01/13 20:07:23 parsed 1 programs [ 40.950109][ T23] kauditd_printk_skb: 72 callbacks suppressed [ 40.950116][ T23] audit: type=1400 audit(1705176443.070:148): avc: denied { mounton } for pid=403 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.981897][ T23] audit: type=1400 audit(1705176443.090:149): avc: denied { mount } for pid=403 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.005515][ T23] audit: type=1400 audit(1705176443.110:150): avc: denied { unlink } for pid=403 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/01/13 20:07:23 executed programs: 0 [ 41.090735][ T403] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.331518][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.338719][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.346167][ T415] device bridge_slave_0 entered promiscuous mode [ 41.355924][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.362938][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.370564][ T415] device bridge_slave_1 entered promiscuous mode [ 41.384207][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.391350][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.399470][ T421] device bridge_slave_0 entered promiscuous mode [ 41.408704][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.416475][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.424652][ T421] device bridge_slave_1 entered promiscuous mode [ 41.458906][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.466043][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.473468][ T425] device bridge_slave_0 entered promiscuous mode [ 41.499753][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.507442][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.516128][ T411] device bridge_slave_0 entered promiscuous mode [ 41.523414][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.530552][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.539189][ T425] device bridge_slave_1 entered promiscuous mode [ 41.561205][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.568183][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.575776][ T411] device bridge_slave_1 entered promiscuous mode [ 41.593925][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.601408][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.609036][ T423] device bridge_slave_0 entered promiscuous mode [ 41.636238][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.643665][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.651059][ T423] device bridge_slave_1 entered promiscuous mode [ 41.733177][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.741082][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.748832][ T413] device bridge_slave_0 entered promiscuous mode [ 41.762201][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.769629][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.777570][ T413] device bridge_slave_1 entered promiscuous mode [ 41.804227][ T23] audit: type=1400 audit(1705176443.930:151): avc: denied { create } for pid=421 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.853318][ T23] audit: type=1400 audit(1705176443.960:152): avc: denied { write } for pid=421 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.866314][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.874229][ T23] audit: type=1400 audit(1705176443.960:153): avc: denied { read } for pid=421 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.881263][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.909344][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.916265][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.939649][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.946541][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.953641][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.960391][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.002179][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.009079][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.016308][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.024488][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.065592][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.073077][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.080354][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.088293][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.097717][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.105380][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.112540][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.120896][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.166356][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.173676][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.180710][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.188170][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.196301][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.204109][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.211526][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.221147][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.229890][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.237542][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.245157][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.277004][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.285032][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.294213][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.301066][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.318467][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.327242][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.335810][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.343130][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.357470][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.365336][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.403690][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.411959][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.421188][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.428926][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.436633][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.445133][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.454003][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.460860][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.468380][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.476904][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.485107][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.492096][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.499811][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.508176][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.516803][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.525402][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.534167][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.541500][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.549202][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.557183][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.565219][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.573462][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.581529][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.588387][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.595681][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.603882][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.612202][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.620155][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.628058][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.636477][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.644956][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.652565][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.660601][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.669010][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.677229][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.684249][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.691795][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.700014][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.723580][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.731756][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.740322][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.750596][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.759599][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.768264][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.803568][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.811421][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.820814][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.829419][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.839319][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.848087][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.856902][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.865593][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.890324][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.898699][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.927306][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.936842][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.945395][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.953847][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.962072][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.970589][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.977998][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.991034][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.999586][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.033372][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.041974][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.051172][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.059372][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.068156][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.076434][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.084540][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.092534][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.099495][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.107054][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.115889][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.125210][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.132570][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.140199][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.148304][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.156285][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.164696][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.188769][ T23] audit: type=1400 audit(1705176445.310:154): avc: denied { mounton } for pid=415 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=10856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.223839][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.231649][ T23] audit: type=1400 audit(1705176445.350:155): avc: denied { append } for pid=448 comm="syz-executor.3" name="loop0" dev="devtmpfs" ino=9326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 43.257552][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.266110][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.274588][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.282700][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.291528][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.299624][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.308069][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.316573][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.324884][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.333433][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.342425][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.351646][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.394647][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.402913][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.412567][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.422642][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.432313][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.440777][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.466020][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.474551][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.482942][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.493159][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.517857][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.527566][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.535695][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.545154][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.559731][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.570044][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.590442][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.598997][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.607808][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.616283][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.653390][ T121] cfg80211: failed to load regulatory.db 2024/01/13 20:08:15 executed programs: 10 [ 94.573333][ T7] device bridge_slave_1 left promiscuous mode [ 94.579322][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.586747][ T7] device bridge_slave_0 left promiscuous mode [ 94.592823][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.736800][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.744057][ T529] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.751222][ T529] device bridge_slave_0 entered promiscuous mode [ 94.759151][ T529] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.766198][ T529] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.773939][ T529] device bridge_slave_1 entered promiscuous mode [ 94.815628][ T529] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.823380][ T529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.831923][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.839497][ T529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.862156][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.870191][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.877899][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.896584][ T77] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.904971][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.911902][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.934465][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.942898][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.952102][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.959741][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.968081][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.976451][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.993397][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.002624][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.015909][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.028787][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.046534][ T529] ================================================================== [ 95.055022][ T529] BUG: KASAN: use-after-free in __mutex_lock+0xcd7/0x1060 [ 95.063413][ T529] Read of size 4 at addr ffff8881ee7a9fb8 by task syz-executor.4/529 [ 95.072165][ T529] [ 95.074951][ T529] CPU: 0 PID: 529 Comm: syz-executor.4 Not tainted 5.4.259-syzkaller-04803-g57a39998c138 #0 [ 95.085783][ T529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 95.097695][ T529] Call Trace: [ 95.100883][ T529] dump_stack+0x1d8/0x241 [ 95.105397][ T529] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 95.112777][ T529] ? printk+0xd1/0x111 [ 95.117775][ T529] ? __mutex_lock+0xcd7/0x1060 [ 95.124054][ T529] print_address_description+0x8c/0x600 [ 95.130237][ T529] ? __unwind_start+0x708/0x890 [ 95.136025][ T529] ? __mutex_lock+0xcd7/0x1060 [ 95.140736][ T529] __kasan_report+0xf3/0x120 [ 95.145512][ T529] ? __mutex_lock+0xcd7/0x1060 [ 95.150456][ T529] kasan_report+0x30/0x60 [ 95.154913][ T529] __mutex_lock+0xcd7/0x1060 [ 95.159761][ T529] ? kobject_get_unless_zero+0x229/0x320 [ 95.165616][ T529] ? __ww_mutex_lock_interruptible_slowpath+0x10/0x10 [ 95.172302][ T529] ? __module_put_and_exit+0x20/0x20 [ 95.177379][ T529] ? up_read+0x6f/0x1b0 [ 95.181711][ T529] mutex_lock_killable+0xd8/0x110 [ 95.186653][ T529] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 95.193253][ T529] ? mutex_lock+0xa5/0x110 [ 95.197602][ T529] ? mutex_trylock+0xa0/0xa0 [ 95.202167][ T529] lo_open+0x18/0xc0 [ 95.205944][ T529] __blkdev_get+0x3c8/0x1160 [ 95.210604][ T529] ? blkdev_get+0x3a0/0x3a0 [ 95.215904][ T529] ? _raw_spin_unlock+0x49/0x60 [ 95.221151][ T529] blkdev_get+0x2de/0x3a0 [ 95.225870][ T529] ? blkdev_open+0x173/0x290 [ 95.231066][ T529] ? block_ioctl+0xe0/0xe0 [ 95.235599][ T529] do_dentry_open+0x964/0x1130 [ 95.240270][ T529] ? finish_open+0xd0/0xd0 [ 95.245110][ T529] ? security_inode_permission+0xad/0xf0 [ 95.250562][ T529] ? memcpy+0x38/0x50 [ 95.254499][ T529] path_openat+0x2992/0x3480 [ 95.259195][ T529] ? do_filp_open+0x450/0x450 [ 95.263699][ T529] ? do_sys_open+0x357/0x810 [ 95.268228][ T529] ? do_syscall_64+0xca/0x1c0 [ 95.272746][ T529] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 95.278924][ T529] do_filp_open+0x20b/0x450 [ 95.283248][ T529] ? vfs_tmpfile+0x280/0x280 [ 95.288153][ T529] ? _raw_spin_unlock+0x49/0x60 [ 95.292864][ T529] ? __alloc_fd+0x4c1/0x560 [ 95.297343][ T529] do_sys_open+0x39c/0x810 [ 95.301728][ T529] ? check_preemption_disabled+0x153/0x320 [ 95.307441][ T529] ? file_open_root+0x490/0x490 [ 95.312281][ T529] do_syscall_64+0xca/0x1c0 [ 95.316960][ T529] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 95.322996][ T529] [ 95.325228][ T529] Allocated by task 467: [ 95.329328][ T529] __kasan_kmalloc+0x171/0x210 [ 95.334030][ T529] kmem_cache_alloc+0xd9/0x250 [ 95.338905][ T529] dup_task_struct+0x4f/0x600 [ 95.343920][ T529] copy_process+0x56d/0x3230 [ 95.348406][ T529] _do_fork+0x197/0x900 [ 95.352893][ T529] __x64_sys_clone3+0x2da/0x300 [ 95.358118][ T529] do_syscall_64+0xca/0x1c0 [ 95.362883][ T529] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 95.368607][ T529] [ 95.370765][ T529] Freed by task 10: [ 95.374568][ T529] __kasan_slab_free+0x1b5/0x270 [ 95.379424][ T529] kmem_cache_free+0x10b/0x2c0 [ 95.384186][ T529] rcu_do_batch+0x492/0xa00 [ 95.388873][ T529] rcu_core+0x4c8/0xcb0 [ 95.392847][ T529] __do_softirq+0x23b/0x6b7 [ 95.397450][ T529] [ 95.400022][ T529] The buggy address belongs to the object at ffff8881ee7a9f80 [ 95.400022][ T529] which belongs to the cache task_struct of size 3904 [ 95.414503][ T529] The buggy address is located 56 bytes inside of [ 95.414503][ T529] 3904-byte region [ffff8881ee7a9f80, ffff8881ee7aaec0) [ 95.428874][ T529] The buggy address belongs to the page: [ 95.434400][ T529] page:ffffea0007b9ea00 refcount:1 mapcount:0 mapping:ffff8881f5cf8a00 index:0x0 compound_mapcount: 0 [ 95.445212][ T529] flags: 0x8000000000010200(slab|head) [ 95.451436][ T529] raw: 8000000000010200 ffffea0007cc7800 0000000200000002 ffff8881f5cf8a00 [ 95.459896][ T529] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 95.468901][ T529] page dumped because: kasan: bad access detected [ 95.475240][ T529] page_owner tracks the page as allocated [ 95.481011][ T529] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 95.498229][ T529] prep_new_page+0x18f/0x370 [ 95.503071][ T529] get_page_from_freelist+0x2d13/0x2d90 [ 95.509541][ T529] __alloc_pages_nodemask+0x393/0x840 [ 95.516252][ T529] alloc_slab_page+0x39/0x3c0 [ 95.522297][ T529] new_slab+0x97/0x440 [ 95.527089][ T529] ___slab_alloc+0x2fe/0x490 [ 95.531945][ T529] __slab_alloc+0x62/0xa0 [ 95.537447][ T529] kmem_cache_alloc+0x109/0x250 [ 95.542206][ T529] dup_task_struct+0x4f/0x600 [ 95.546976][ T529] copy_process+0x56d/0x3230 [ 95.551586][ T529] _do_fork+0x197/0x900 [ 95.555674][ T529] kernel_thread+0x16a/0x1d0 [ 95.560073][ T529] kthreadd+0x3b1/0x4f0 [ 95.564164][ T529] ret_from_fork+0x1f/0x30 [ 95.568615][ T529] page last free stack trace: [ 95.573462][ T529] __free_pages_ok+0x847/0x950 [ 95.578811][ T529] __free_pages+0x91/0x140 [ 95.583163][ T529] put_task_stack+0x212/0x260 [ 95.587939][ T529] finish_task_switch+0x24a/0x590 [ 95.592973][ T529] __schedule+0xb0d/0x1320 [ 95.597474][ T529] schedule_idle+0x50/0x80 [ 95.601835][ T529] do_idle+0x609/0x660 [ 95.606384][ T529] cpu_startup_entry+0x14/0x20 [ 95.611059][ T529] start_kernel+0x6d9/0x81d [ 95.615414][ T529] secondary_startup_64+0xa4/0xb0 [ 95.620254][ T529] [ 95.622415][ T529] Memory state around the buggy address: [ 95.628059][ T529] ffff8881ee7a9e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 95.636264][ T529] ffff8881ee7a9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 95.644255][ T529] >ffff8881ee7a9f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.652232][ T529] ^ [ 95.658119][ T529] ffff8881ee7aa000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.666027][ T529] ffff8881ee7aa080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 95.673926][ T529] ================================================================== [ 95.681949][ T529] Disabling lock debugging due to kernel taint [ 99.547248][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.554215][ T539] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.561366][ T539] device bridge_slave_0 entered promiscuous mode [ 99.576718][ T539] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.583679][ T539] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.590895][ T539] device bridge_slave_1 entered promiscuous mode [ 99.597625][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.604537][ T542] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.612672][ T542] device bridge_slave_0 entered promiscuous mode [ 99.628479][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.635541][ T542] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.642742][ T542] device bridge_slave_1 entered promiscuous mode [ 99.707820][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.715197][ T543] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.722654][ T543] device bridge_slave_0 entered promiscuous mode [ 99.746450][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.753652][ T543] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.760986][ T543] device bridge_slave_1 entered promiscuous mode [ 99.849224][ T539] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.856245][ T539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.863497][ T539] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.870447][ T539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.887789][ T543] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.895136][ T543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.902461][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.909455][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.929049][ T542] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.936218][ T542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.943423][ T542] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.950595][ T542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.995750][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.002857][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.010983][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.019014][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.027684][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.035408][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.043896][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.051837][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.077181][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.086255][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.094426][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.101252][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.108629][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.117144][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.124339][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.132027][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.140673][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.147535][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.155295][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.164216][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.172731][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.179911][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.189859][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.206856][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.217031][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.227062][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.236023][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.245591][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.253081][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.276874][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.285790][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.293565][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.301666][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.321979][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.344493][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.353182][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.368563][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.383304][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.400659][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.409074][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.434908][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.444378][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.453967][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.464464][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.489777][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.498903][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.509987][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.537387][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.547179][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.569270][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.578631][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready