[ 27.695510][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.708704][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.725519][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.739879][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.751081][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.875202][ T371] syz-executor.0 (371) used greatest stack depth: 19352 bytes left [ 28.554523][ T103] device bridge_slave_1 left promiscuous mode [ 28.560633][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.568463][ T103] device bridge_slave_0 left promiscuous mode [ 28.574749][ T103] bridge0: port 1(bridge_slave_0) entered disabled state Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. 2024/11/07 04:29:43 ignoring optional flag "sandboxArg"="0" 2024/11/07 04:29:43 ignoring optional flag "type"="gce" 2024/11/07 04:29:43 parsed 1 programs 2024/11/07 04:29:43 executed programs: 0 [ 45.644724][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 45.651889][ T419] cgroup1: Unknown subsys name 'perf_event' [ 45.668263][ T419] cgroup1: Unknown subsys name 'net_cls' [ 45.668839][ T23] audit: type=1400 audit(1730953783.470:88): avc: denied { mounton } for pid=419 comm="syz-executor.3" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 45.689674][ T423] cgroup1: Unknown subsys name 'perf_event' [ 45.714098][ T425] cgroup1: Unknown subsys name 'perf_event' [ 45.715168][ T426] cgroup1: Unknown subsys name 'perf_event' [ 45.715603][ T423] cgroup1: Unknown subsys name 'net_cls' [ 45.721521][ T426] cgroup1: Unknown subsys name 'net_cls' [ 45.738412][ T425] cgroup1: Unknown subsys name 'net_cls' [ 45.744598][ T427] cgroup1: Unknown subsys name 'perf_event' [ 45.750803][ T427] cgroup1: Unknown subsys name 'net_cls' [ 45.751486][ T428] cgroup1: Unknown subsys name 'perf_event' [ 45.764199][ T428] cgroup1: Unknown subsys name 'net_cls' [ 46.000021][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.007132][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.014778][ T423] device bridge_slave_0 entered promiscuous mode [ 46.023023][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.030213][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.037679][ T423] device bridge_slave_1 entered promiscuous mode [ 46.050388][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.057387][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.064775][ T425] device bridge_slave_0 entered promiscuous mode [ 46.086899][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.093886][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.101341][ T425] device bridge_slave_1 entered promiscuous mode [ 46.114342][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.121191][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.128978][ T419] device bridge_slave_0 entered promiscuous mode [ 46.138028][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.145414][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.152983][ T419] device bridge_slave_1 entered promiscuous mode [ 46.239145][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.246024][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.253465][ T428] device bridge_slave_0 entered promiscuous mode [ 46.286528][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.293390][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.301168][ T428] device bridge_slave_1 entered promiscuous mode [ 46.323804][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.330645][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.338266][ T427] device bridge_slave_0 entered promiscuous mode [ 46.349069][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.356208][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.364043][ T427] device bridge_slave_1 entered promiscuous mode [ 46.429948][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.437257][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.444800][ T426] device bridge_slave_0 entered promiscuous mode [ 46.485413][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.492445][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.500207][ T426] device bridge_slave_1 entered promiscuous mode [ 46.608610][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.615664][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.622770][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.629655][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.674699][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.681556][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.688810][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.696071][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.707193][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.714059][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.721333][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.728325][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.737429][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.744474][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.752316][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.759324][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.788002][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.794952][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.802341][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.809182][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.855167][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.862721][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.869921][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.876939][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.884187][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.891413][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.899309][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.906376][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.913712][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.920737][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.929086][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.936728][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.982624][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.991495][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.998451][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.006365][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.015251][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.022204][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.029734][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.037774][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.059797][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.067430][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.075116][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.084929][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.093088][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.100604][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.108518][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.117801][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.126144][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.133171][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.171695][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.180209][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.189397][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.196793][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.205709][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.215271][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.223959][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.230913][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.238624][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.246908][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.255384][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.263906][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.272360][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.280589][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.289021][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.297685][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.305915][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.312735][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.320051][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.328900][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.337496][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.344346][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.374454][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.382164][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.389741][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.398851][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.408080][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.417016][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.425278][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.433214][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.465414][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.473792][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.482113][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.492937][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.502538][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.511331][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.519500][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.526354][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.534134][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.542352][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.551115][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.558468][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.565952][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.574258][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.582385][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.614662][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.625040][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.632580][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.640694][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.649509][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.658341][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.665218][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.672734][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.681614][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.690118][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.697263][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.705205][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.713397][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.744699][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.754755][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.763083][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.772556][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.780977][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.789693][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.798477][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.811703][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.820338][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.857135][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.866506][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.875363][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.883432][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.916827][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.926793][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.936090][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.944625][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.950150][ T23] audit: type=1400 audit(1730953785.780:89): avc: denied { mounton } for pid=450 comm="syz-executor.5" path="/root/syzkaller-testdir1621179787/syzkaller.cPTFXG/0/file0" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 47.980634][ T23] audit: type=1400 audit(1730953785.780:90): avc: denied { mount } for pid=450 comm="syz-executor.5" name="/" dev="incremental-fs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.994447][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.013797][ T23] audit: type=1400 audit(1730953785.840:91): avc: denied { unmount } for pid=450 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.014363][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.042627][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.051405][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.092846][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.105070][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.114939][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.124394][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.134398][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.143281][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.152951][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.163911][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.215928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.224695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.235279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.244105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.253859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.262613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.313353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.324222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.333461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.343008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.352682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.364467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.372931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.381885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.417988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.427700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.437156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.446127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.622374][ T23] audit: type=1400 audit(1730953786.450:92): avc: denied { read } for pid=484 comm="syz-executor.4" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.649440][ T23] audit: type=1400 audit(1730953786.450:93): avc: denied { open } for pid=484 comm="syz-executor.4" path="/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 2024/11/07 04:29:48 executed programs: 141 2024/11/07 04:29:53 executed programs: 469 2024/11/07 04:29:58 executed programs: 801 2024/11/07 04:30:03 executed programs: 1130 [ 66.480159][ T122] cfg80211: failed to load regulatory.db 2024/11/07 04:30:08 executed programs: 1463 [ 71.305679][ T5656] ================================================================== [ 71.313763][ T5656] BUG: KASAN: use-after-free in selinux_inode_permission+0x59d/0x6a0 [ 71.321871][ T5656] Read of size 4 at addr ffff8881f45d0024 by task syz-executor.0/5656 [ 71.329961][ T5656] [ 71.332473][ T5656] CPU: 1 PID: 5656 Comm: syz-executor.0 Not tainted 5.4.284-syzkaller-04988-g137306201ec6 #0 [ 71.343214][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.353731][ T5656] Call Trace: [ 71.357182][ T5656] dump_stack+0x1d8/0x241 [ 71.361479][ T5656] ? is_mmconf_reserved+0x430/0x430 [ 71.366459][ T5656] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 71.372181][ T5656] ? printk+0xd1/0x111 [ 71.376078][ T5656] ? selinux_inode_permission+0x59d/0x6a0 [ 71.381641][ T5656] print_address_description+0x8c/0x600 [ 71.387282][ T5656] ? check_memory_region+0x15d/0x280 [ 71.392571][ T5656] ? selinux_inode_permission+0x59d/0x6a0 [ 71.398126][ T5656] __kasan_report+0xf3/0x120 [ 71.402560][ T5656] ? selinux_inode_permission+0x59d/0x6a0 [ 71.408319][ T5656] kasan_report+0x30/0x60 [ 71.412422][ T5656] selinux_inode_permission+0x59d/0x6a0 [ 71.417861][ T5656] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 71.423760][ T5656] ? generic_permission+0x141/0x3e0 [ 71.429215][ T5656] ? __fget+0x407/0x490 [ 71.433285][ T5656] security_inode_permission+0x9d/0xf0 [ 71.438663][ T5656] link_path_walk+0x1d1/0x1040 [ 71.443366][ T5656] ? fput_many+0x15e/0x1b0 [ 71.447861][ T5656] ? handle_lookup_down+0x5b0/0x5b0 [ 71.453034][ T5656] ? path_init+0xafe/0xee0 [ 71.457362][ T5656] path_openat+0x1a3/0x34b0 [ 71.461828][ T5656] ? stack_trace_save+0x118/0x1c0 [ 71.466846][ T5656] ? stack_trace_snprint+0x170/0x170 [ 71.472029][ T5656] ? futex_wait+0x890/0x890 [ 71.476362][ T5656] ? __kasan_kmalloc+0x1d9/0x210 [ 71.481314][ T5656] ? do_filp_open+0x450/0x450 [ 71.485994][ T5656] ? do_sys_open+0x357/0x810 [ 71.490505][ T5656] ? do_syscall_64+0xca/0x1c0 [ 71.495254][ T5656] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.501308][ T5656] do_filp_open+0x20b/0x450 [ 71.505641][ T5656] ? vfs_tmpfile+0x2c0/0x2c0 [ 71.510068][ T5656] ? _raw_spin_unlock+0x49/0x60 [ 71.514764][ T5656] ? __alloc_fd+0x4c5/0x570 [ 71.519096][ T5656] do_sys_open+0x39c/0x810 [ 71.523380][ T5656] ? file_open_root+0x490/0x490 [ 71.528037][ T5656] ? switch_fpu_return+0x1d4/0x410 [ 71.533092][ T5656] ? ksys_mount+0xe0/0xf0 [ 71.537419][ T5656] do_syscall_64+0xca/0x1c0 [ 71.541838][ T5656] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.547755][ T5656] RIP: 0033:0x456e69 [ 71.551556][ T5656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b4 ff ff ff f7 d8 64 89 01 48 [ 71.571215][ T5656] RSP: 002b:00007f1c298f10d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 71.579576][ T5656] RAX: ffffffffffffffda RBX: 000000000055c038 RCX: 0000000000456e69 [ 71.587569][ T5656] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 71.595491][ T5656] RBP: 00000000004b0cab R08: 0000000000000000 R09: 0000000000000000 [ 71.603534][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004b02b7 [ 71.612426][ T5656] R13: 000000000000006e R14: 000000000055c038 R15: 00007ffd9714da28 [ 71.621071][ T5656] [ 71.623247][ T5656] Allocated by task 5656: [ 71.627420][ T5656] __kasan_kmalloc+0x171/0x210 [ 71.632010][ T5656] alloc_inode+0x43/0x70 [ 71.636242][ T5656] iget5_locked+0x9c/0x260 [ 71.640616][ T5656] fetch_regular_inode+0x256/0x320 [ 71.645692][ T5656] incfs_mount_fs+0x5c3/0xa00 [ 71.650454][ T5656] legacy_get_tree+0xdf/0x170 [ 71.654958][ T5656] vfs_get_tree+0x85/0x260 [ 71.659210][ T5656] do_new_mount+0x292/0x570 [ 71.663547][ T5656] do_mount+0x688/0xe10 [ 71.667637][ T5656] ksys_mount+0xc2/0xf0 [ 71.671848][ T5656] __x64_sys_mount+0xb1/0xc0 [ 71.676355][ T5656] do_syscall_64+0xca/0x1c0 [ 71.680896][ T5656] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.686738][ T5656] [ 71.688985][ T5656] Freed by task 5644: [ 71.692740][ T5656] __kasan_slab_free+0x1b5/0x270 [ 71.697578][ T5656] kfree+0x123/0x370 [ 71.701745][ T5656] evict+0x80c/0x960 [ 71.705891][ T5656] evict_inodes+0x5e1/0x660 [ 71.710229][ T5656] generic_shutdown_super+0x94/0x2a0 [ 71.715532][ T5656] kill_anon_super+0x37/0x60 [ 71.720047][ T5656] incfs_kill_sb+0x4c/0x200 [ 71.724371][ T5656] deactivate_locked_super+0xa8/0x110 [ 71.729671][ T5656] deactivate_super+0x1e2/0x2a0 [ 71.734446][ T5656] cleanup_mnt+0x44e/0x500 [ 71.738831][ T5656] task_work_run+0x140/0x170 [ 71.743378][ T5656] exit_to_usermode_loop+0x190/0x1a0 [ 71.748590][ T5656] prepare_exit_to_usermode+0x199/0x200 [ 71.754270][ T5656] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 71.760073][ T5656] [ 71.762241][ T5656] The buggy address belongs to the object at ffff8881f45d0000 [ 71.762241][ T5656] which belongs to the cache kmalloc-1k of size 1024 [ 71.776526][ T5656] The buggy address is located 36 bytes inside of [ 71.776526][ T5656] 1024-byte region [ffff8881f45d0000, ffff8881f45d0400) [ 71.790969][ T5656] The buggy address belongs to the page: [ 71.796830][ T5656] page:ffffea0007d17400 refcount:1 mapcount:0 mapping:ffff8881f5c02280 index:0x0 compound_mapcount: 0 [ 71.807834][ T5656] flags: 0x8000000000010200(slab|head) [ 71.813447][ T5656] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5c02280 [ 71.822149][ T5656] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 71.831184][ T5656] page dumped because: kasan: bad access detected [ 71.837791][ T5656] page_owner tracks the page as allocated [ 71.843433][ T5656] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 71.858371][ T5656] prep_new_page+0x18f/0x370 [ 71.862795][ T5656] get_page_from_freelist+0x2d13/0x2d90 [ 71.868161][ T5656] __alloc_pages_nodemask+0x393/0x840 [ 71.873374][ T5656] alloc_slab_page+0x39/0x3c0 [ 71.877910][ T5656] new_slab+0x97/0x440 [ 71.881791][ T5656] ___slab_alloc+0x2fe/0x490 [ 71.886217][ T5656] __slab_alloc+0x62/0xa0 [ 71.890379][ T5656] __kmalloc_track_caller+0x16d/0x2b0 [ 71.895591][ T5656] __alloc_skb+0xb4/0x4d0 [ 71.900248][ T5656] alloc_uevent_skb+0x74/0x220 [ 71.905600][ T5656] kobject_uevent_net_broadcast+0x176/0x560 [ 71.912683][ T5656] kobject_uevent_env+0x54d/0x710 [ 71.918843][ T5656] device_add+0x797/0xbb0 [ 71.923478][ T5656] netdev_register_kobject+0x176/0x310 [ 71.930010][ T5656] register_netdevice+0xbc5/0x12a0 [ 71.935527][ T5656] __ip_tunnel_create+0x2b0/0x370 [ 71.945765][ T5656] page last free stack trace: [ 71.950361][ T5656] __free_pages_ok+0x847/0x950 [ 71.955032][ T5656] __free_pages+0x91/0x140 [ 71.959293][ T5656] __free_slab+0x221/0x2e0 [ 71.963537][ T5656] unfreeze_partials+0x14e/0x180 [ 71.968399][ T5656] put_cpu_partial+0x44/0x180 [ 71.973048][ T5656] __slab_free+0x297/0x360 [ 71.977261][ T5656] qlist_free_all+0x43/0xb0 [ 71.981675][ T5656] quarantine_reduce+0x1d9/0x210 [ 71.986446][ T5656] __kasan_kmalloc+0x41/0x210 [ 71.991118][ T5656] kmem_cache_alloc+0xd9/0x250 [ 71.995831][ T5656] create_new_namespaces+0x31/0x570 [ 72.000851][ T5656] unshare_nsproxy_namespaces+0x119/0x170 [ 72.006448][ T5656] ksys_unshare+0x544/0x990 [ 72.010750][ T5656] __x64_sys_unshare+0x34/0x40 [ 72.015545][ T5656] do_syscall_64+0xca/0x1c0 [ 72.019880][ T5656] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 72.025781][ T5656] [ 72.027941][ T5656] Memory state around the buggy address: [ 72.033459][ T5656] ffff8881f45cff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.041327][ T5656] ffff8881f45cff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.049297][ T5656] >ffff8881f45d0000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.057205][ T5656] ^ [ 72.062268][ T5656] ffff8881f45d0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.070198][ T5656] ffff8881f45d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 72.078192][ T5656] ================================================================== [ 72.086165][ T5656] Disabling lock debugging due to kernel taint 2024/11/07 04:30:13 executed programs: 1737 2024/11/07 04:30:18 executed programs: 2071