Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. 2024/03/25 00:02:14 parsed 1 programs [ 41.224406][ T23] kauditd_printk_skb: 57 callbacks suppressed [ 41.224418][ T23] audit: type=1400 audit(1711324934.810:133): avc: denied { mounton } for pid=398 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2024/03/25 00:02:14 executed programs: 0 [ 41.256558][ T23] audit: type=1400 audit(1711324934.810:134): avc: denied { mount } for pid=398 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.310647][ T23] audit: type=1400 audit(1711324934.900:135): avc: denied { mounton } for pid=414 comm="syz-executor.2" path="/syzcgroup/unified" dev="sda1" ino=1950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.312725][ T414] cgroup1: Unknown subsys name 'perf_event' [ 41.337955][ T418] cgroup1: Unknown subsys name 'perf_event' [ 41.339773][ T417] cgroup1: Unknown subsys name 'perf_event' [ 41.345775][ T418] cgroup1: Unknown subsys name 'net_cls' [ 41.351296][ T416] cgroup1: Unknown subsys name 'perf_event' [ 41.358477][ T420] cgroup1: Unknown subsys name 'perf_event' [ 41.363063][ T419] cgroup1: Unknown subsys name 'perf_event' [ 41.373914][ T419] cgroup1: Unknown subsys name 'net_cls' [ 41.373948][ T420] cgroup1: Unknown subsys name 'net_cls' [ 41.379865][ T417] cgroup1: Unknown subsys name 'net_cls' [ 41.385044][ T23] audit: type=1400 audit(1711324934.900:136): avc: denied { mount } for pid=414 comm="syz-executor.2" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.391075][ T416] cgroup1: Unknown subsys name 'net_cls' [ 41.428529][ T414] cgroup1: Unknown subsys name 'net_cls' [ 41.446844][ T23] audit: type=1400 audit(1711324934.930:137): avc: denied { mounton } for pid=418 comm="syz-executor.4" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 41.506581][ T23] audit: type=1400 audit(1711324935.010:138): avc: denied { append } for pid=145 comm="syslogd" name="messages" dev="tmpfs" ino=226 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.528874][ T23] audit: type=1400 audit(1711324935.010:139): avc: denied { open } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=226 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.551793][ T23] audit: type=1400 audit(1711324935.010:140): avc: denied { getattr } for pid=145 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=226 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.681302][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.688189][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.695610][ T417] device bridge_slave_0 entered promiscuous mode [ 41.705111][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.711979][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.719591][ T417] device bridge_slave_1 entered promiscuous mode [ 41.742471][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.749695][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.757251][ T418] device bridge_slave_0 entered promiscuous mode [ 41.772960][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.779896][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.787334][ T419] device bridge_slave_0 entered promiscuous mode [ 41.794405][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.801356][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.808661][ T418] device bridge_slave_1 entered promiscuous mode [ 41.847963][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.854809][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.862784][ T419] device bridge_slave_1 entered promiscuous mode [ 41.885154][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.892070][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.899683][ T420] device bridge_slave_0 entered promiscuous mode [ 41.926258][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.933165][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.940690][ T420] device bridge_slave_1 entered promiscuous mode [ 42.046517][ T23] audit: type=1400 audit(1711324935.630:141): avc: denied { write } for pid=417 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.067060][ T23] audit: type=1400 audit(1711324935.630:142): avc: denied { read } for pid=417 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.086207][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.094131][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.101734][ T414] device bridge_slave_0 entered promiscuous mode [ 42.116128][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.123088][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.130231][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.137076][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.159092][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.166131][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.173768][ T416] device bridge_slave_0 entered promiscuous mode [ 42.180783][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.187820][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.195131][ T414] device bridge_slave_1 entered promiscuous mode [ 42.217938][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.224783][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.232741][ T416] device bridge_slave_1 entered promiscuous mode [ 42.274320][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.281312][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.288455][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.295266][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.321428][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.328293][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.335389][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.342185][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.366712][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.374312][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.382241][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.389516][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.396707][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.403743][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.411177][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.448492][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.457065][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.464666][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.479217][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.487299][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.494113][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.589748][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.598729][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.606946][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.614225][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.621611][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.629740][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.637822][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.644642][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.652115][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.660357][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.667200][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.694149][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.702393][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.710965][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.717945][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.731163][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.739513][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.747744][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.754707][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.783056][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.791267][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.799690][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.808292][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.826594][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.834129][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.841682][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.849981][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.858138][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.864974][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.872269][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.880612][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.888698][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.895537][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.930603][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.938336][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.946414][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.954516][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.962331][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.970909][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.979227][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.987385][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.995307][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.029011][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.037019][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.070279][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.078767][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.087235][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.095746][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.104804][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.113004][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.160709][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.169208][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.177402][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.186940][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.195253][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.203588][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.211523][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.219387][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.227280][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.234546][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.242166][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.250635][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.258954][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.265790][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.273305][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.281672][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.289786][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.296713][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.304064][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.312751][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.320877][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.327713][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.334965][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.343483][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.351592][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.358427][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.365602][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.374791][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.405270][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.413529][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.421361][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.429383][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.437537][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.445719][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.454126][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.462226][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.470455][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.478660][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.487192][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.506527][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.514701][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.523288][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.531697][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.574159][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.583208][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.595059][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.603499][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.611765][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.620158][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.671981][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.680561][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.689816][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.698958][ T126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.721970][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.730423][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.739489][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.747944][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.772842][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.781377][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.789704][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.798239][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.817440][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.825582][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.834087][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.842445][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.904484][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.917231][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.936023][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.944399][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/03/25 00:02:19 executed programs: 98 [ 47.258366][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 47.258379][ T23] audit: type=1400 audit(1711324940.850:144): avc: denied { write } for pid=852 comm="syz-executor.3" path="socket:[13714]" dev="sockfs" ino=13714 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 2024/03/25 00:02:24 executed programs: 258 2024/03/25 00:02:30 executed programs: 426 2024/03/25 00:02:35 executed programs: 601 2024/03/25 00:02:40 executed programs: 754 [ 66.748062][ T74] cfg80211: failed to load regulatory.db 2024/03/25 00:02:45 executed programs: 903 2024/03/25 00:02:50 executed programs: 1066 2024/03/25 00:02:55 executed programs: 1232 2024/03/25 00:03:00 executed programs: 1406 2024/03/25 00:03:05 executed programs: 1565 2024/03/25 00:03:10 executed programs: 1729 2024/03/25 00:03:15 executed programs: 1902 2024/03/25 00:03:20 executed programs: 2072 2024/03/25 00:03:25 executed programs: 2240 2024/03/25 00:03:30 executed programs: 2408 2024/03/25 00:03:35 executed programs: 2573 2024/03/25 00:03:40 executed programs: 2739 2024/03/25 00:03:45 executed programs: 2896 2024/03/25 00:03:50 executed programs: 3045 2024/03/25 00:03:55 executed programs: 3199 2024/03/25 00:04:00 executed programs: 3349 2024/03/25 00:04:05 executed programs: 3504 2024/03/25 00:04:10 executed programs: 3658 2024/03/25 00:04:15 executed programs: 3816 2024/03/25 00:04:21 executed programs: 3981 [ 170.637370][T13958] ================================================================== [ 170.645286][T13958] BUG: KASAN: use-after-free in detach_if_pending+0x188/0x360 [ 170.652558][T13958] Write of size 8 at addr ffff8881dc67f1c8 by task syz-executor.3/13958 [ 170.660721][T13958] [ 170.662882][T13958] CPU: 1 PID: 13958 Comm: syz-executor.3 Not tainted 5.4.265-syzkaller-04853-g43a5ead9254d #0 [ 170.673032][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 170.682942][T13958] Call Trace: [ 170.686263][T13958] dump_stack+0x1d8/0x241 [ 170.690416][T13958] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 170.696148][T13958] ? printk+0xd1/0x111 [ 170.700256][T13958] ? detach_if_pending+0x188/0x360 [ 170.705638][T13958] ? wake_up_klogd+0xb2/0xf0 [ 170.710052][T13958] ? detach_if_pending+0x188/0x360 [ 170.715094][T13958] print_address_description+0x8c/0x600 [ 170.720554][T13958] ? panic+0x896/0x896 [ 170.724459][T13958] ? detach_if_pending+0x188/0x360 [ 170.729400][T13958] __kasan_report+0xf3/0x120 [ 170.734088][T13958] ? detach_if_pending+0x188/0x360 [ 170.739125][T13958] kasan_report+0x30/0x60 [ 170.743288][T13958] detach_if_pending+0x188/0x360 [ 170.748062][T13958] del_timer_sync+0x13c/0x230 [ 170.752589][T13958] ? find_next_bit+0x7b/0x100 [ 170.757091][T13958] ? try_to_del_timer_sync+0x150/0x150 [ 170.762473][T13958] ? pcpu_chunk_relocate+0xdc/0x3a0 [ 170.767511][T13958] tun_flow_uninit+0x2c/0x280 [ 170.772018][T13958] ? free_percpu+0x359/0x910 [ 170.776443][T13958] tun_free_netdev+0x77/0x190 [ 170.780956][T13958] ? tun_xdp+0x3f0/0x3f0 [ 170.785045][T13958] netdev_run_todo+0xb7f/0xdf0 [ 170.789641][T13958] ? netdev_refcnt_read+0x1c0/0x1c0 [ 170.794694][T13958] ? kfree+0x123/0x370 [ 170.798586][T13958] tun_chr_close+0xc1/0x130 [ 170.802913][T13958] ? tun_chr_open+0x500/0x500 [ 170.807426][T13958] __fput+0x262/0x680 [ 170.811248][T13958] task_work_run+0x140/0x170 [ 170.815695][T13958] exit_to_usermode_loop+0x190/0x1a0 [ 170.821066][T13958] prepare_exit_to_usermode+0x199/0x200 [ 170.826450][T13958] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 170.832163][T13958] [ 170.834334][T13958] The buggy address belongs to the page: [ 170.839808][T13958] page:ffffea0007719fc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 170.848741][T13958] flags: 0x8000000000000000() [ 170.853267][T13958] raw: 8000000000000000 0000000000000000 ffffea00076c30c8 0000000000000000 [ 170.861770][T13958] raw: 0000000000000000 00000000000c0000 00000000ffffffff 0000000000000000 [ 170.870262][T13958] page dumped because: kasan: bad access detected [ 170.876511][T13958] page_owner tracks the page as freed [ 170.881895][T13958] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x46dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO) [ 170.896310][T13958] prep_new_page+0x18f/0x370 [ 170.900750][T13958] get_page_from_freelist+0x2d13/0x2d90 [ 170.906225][T13958] __alloc_pages_nodemask+0x393/0x840 [ 170.911428][T13958] kmalloc_order_trace+0x2a/0x100 [ 170.916288][T13958] kvmalloc_node+0x7e/0xf0 [ 170.920538][T13958] alloc_netdev_mqs+0x85/0xc70 [ 170.925141][T13958] tun_set_iff+0x51f/0xdc0 [ 170.929392][T13958] __tun_chr_ioctl+0x8a9/0x1d00 [ 170.934081][T13958] do_vfs_ioctl+0x742/0x1720 [ 170.938504][T13958] __x64_sys_ioctl+0xd4/0x110 [ 170.943019][T13958] do_syscall_64+0xca/0x1c0 [ 170.947357][T13958] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 170.953185][T13958] page last free stack trace: [ 170.957696][T13958] __free_pages_ok+0x847/0x950 [ 170.962295][T13958] __free_pages+0x91/0x140 [ 170.966562][T13958] device_release+0x6b/0x190 [ 170.971189][T13958] kobject_put+0x1e6/0x2f0 [ 170.975510][T13958] netdev_run_todo+0xc44/0xdf0 [ 170.980118][T13958] tun_chr_close+0xc1/0x130 [ 170.984615][T13958] __fput+0x262/0x680 [ 170.988450][T13958] task_work_run+0x140/0x170 [ 170.992871][T13958] exit_to_usermode_loop+0x190/0x1a0 [ 170.997995][T13958] prepare_exit_to_usermode+0x199/0x200 [ 171.003469][T13958] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 171.009205][T13958] [ 171.011374][T13958] Memory state around the buggy address: [ 171.016938][T13958] ffff8881dc67f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 171.025017][T13958] ffff8881dc67f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 171.033022][T13958] >ffff8881dc67f180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 171.041063][T13958] ^ [ 171.047403][T13958] ffff8881dc67f200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 171.055322][T13958] ffff8881dc67f280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 171.063235][T13958] ================================================================== [ 171.071093][T13958] Disabling lock debugging due to kernel taint 2024/03/25 00:04:26 executed programs: 4115 [ 174.346453][ C0] kasan: CONFIG_KASAN_INLINE enabled [ 174.351562][ C0] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 174.359645][ C0] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 174.366415][ C0] CPU: 0 PID: 414 Comm: syz-executor.2 Tainted: G B 5.4.265-syzkaller-04853-g43a5ead9254d #0 [ 174.377778][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 174.387783][ C0] RIP: 0010:__run_timers+0x7b0/0xbe0 [ 174.393087][ C0] Code: 89 e7 e8 73 3a 3f 00 4d 89 2c 24 4d 85 ed 74 2e e8 a5 67 0f 00 49 83 c5 08 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 42 3a 3f 00 4d 89 65 00 eb 05 e8 77 [ 174.412734][ C0] RSP: 0018:ffff8881f6e09d60 EFLAGS: 00010802 [ 174.418657][ C0] RAX: 1bd5a00000000025 RBX: 1ffff1103b8cfe39 RCX: dffffc0000000000 [ 174.426582][ C0] RDX: 0000000080000102 RSI: 0000000000000008 RDI: ffff8881dc67f1c8 [ 174.434386][ C0] RBP: ffff8881f6e09ec8 R08: dffffc0000000000 R09: 0000000000000003 [ 174.442200][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881f6e09e20 [ 174.450107][ C0] R13: dead00000000012a R14: 1ffff1103b8cfe38 R15: ffff8881dc67f1c8 [ 174.458035][ C0] FS: 000000000161f480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 174.466813][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.473228][ C0] CR2: 0000000001628818 CR3: 00000001dcf35000 CR4: 00000000003406b0 [ 174.481144][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.488927][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.496825][ C0] Call Trace: [ 174.499956][ C0] [ 174.502664][ C0] ? __die+0xb4/0x100 [ 174.506557][ C0] ? die+0x26/0x50 [ 174.510128][ C0] ? do_general_protection+0x266/0x3c0 [ 174.515407][ C0] ? do_trap+0x340/0x340 [ 174.519495][ C0] ? check_preemption_disabled+0x9f/0x320 [ 174.525136][ C0] ? round_jiffies+0x99/0xb0 [ 174.529571][ C0] ? general_protection+0x28/0x30 [ 174.534416][ C0] ? __run_timers+0x7b0/0xbe0 [ 174.539018][ C0] ? enqueue_timer+0x300/0x300 [ 174.543624][ C0] ? check_preemption_disabled+0x9f/0x320 [ 174.549220][ C0] ? debug_smp_processor_id+0x20/0x20 [ 174.554375][ C0] ? lapic_next_event+0x5b/0x70 [ 174.559158][ C0] run_timer_softirq+0x63/0xf0 [ 174.563758][ C0] __do_softirq+0x23b/0x6b7 [ 174.568098][ C0] ? sched_clock_cpu+0x18/0x3a0 [ 174.572795][ C0] irq_exit+0x195/0x1c0 [ 174.576865][ C0] smp_apic_timer_interrupt+0x11a/0x460 [ 174.582267][ C0] apic_timer_interrupt+0xf/0x20 [ 174.587269][ C0] [ 174.590064][ C0] ? format_decode+0x104/0x1f10 [ 174.594831][ C0] ? format_decode+0x215/0x1f10 [ 174.599517][ C0] ? vsnprintf+0x1c70/0x1c70 [ 174.604129][ C0] ? __kasan_kmalloc+0x1d9/0x210 [ 174.608891][ C0] ? security_compute_sid+0x11a7/0x1d60 [ 174.614275][ C0] ? __kasan_kmalloc+0x171/0x210 [ 174.619153][ C0] ? context_struct_to_string+0x441/0x8a0 [ 174.624779][ C0] ? context_add_hash+0x141/0x270 [ 174.629725][ C0] ? vsnprintf+0x152/0x1c70 [ 174.634065][ C0] ? ptr_to_hashval+0x60/0x60 [ 174.638576][ C0] ? sprintf+0xd6/0x120 [ 174.642595][ C0] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 174.648731][ C0] ? vsprintf+0x30/0x30 [ 174.652736][ C0] ? context_struct_to_string+0x441/0x8a0 [ 174.658391][ C0] ? context_struct_to_string+0x5c1/0x8a0 [ 174.663946][ C0] ? security_bounded_transition+0x560/0x560 [ 174.669737][ C0] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 174.675639][ C0] ? context_add_hash+0x141/0x270 [ 174.680588][ C0] ? security_sid_to_context_inval+0x40/0x40 [ 174.686412][ C0] ? mls_convert_context+0x6c0/0x6c0 [ 174.691518][ C0] ? mls_context_isvalid+0xa4/0x380 [ 174.696559][ C0] ? policydb_context_isvalid+0x1bc/0x410 [ 174.702112][ C0] ? security_compute_sid+0x11a7/0x1d60 [ 174.707524][ C0] ? sk_prot_alloc+0x14c/0x3e0 [ 174.712113][ C0] ? security_transition_sid+0x90/0x90 [ 174.717401][ C0] ? check_preemption_disabled+0x9f/0x320 [ 174.723117][ C0] ? cgroup_tryget+0x108/0x2c0 [ 174.727841][ C0] ? debug_smp_processor_id+0x20/0x20 [ 174.733037][ C0] ? security_transition_sid+0x78/0x90 [ 174.738333][ C0] ? selinux_socket_post_create+0x37f/0x500 [ 174.744065][ C0] ? percpu_counter_add_batch+0x14d/0x170 [ 174.749708][ C0] ? selinux_socket_create+0x330/0x330 [ 174.755003][ C0] ? tcp_init_sock+0x516/0x7f0 [ 174.759601][ C0] ? __module_put_and_exit+0x20/0x20 [ 174.764722][ C0] ? security_socket_post_create+0x86/0xc0 [ 174.770475][ C0] ? __sock_create+0x46d/0x7a0 [ 174.774966][ C0] ? __sys_socket+0x132/0x370 [ 174.779668][ C0] ? sock_create_kern+0x40/0x40 [ 174.784387][ C0] ? _raw_spin_unlock_irq+0x4a/0x60 [ 174.789658][ C0] ? __x64_sys_socket+0x76/0x80 [ 174.794441][ C0] ? do_syscall_64+0xca/0x1c0 [ 174.798949][ C0] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 174.804946][ C0] Modules linked in: [ 174.808773][ C0] ---[ end trace 4734c5b1c01e0231 ]--- [ 174.814141][ C0] RIP: 0010:__run_timers+0x7b0/0xbe0 [ 174.819258][ C0] Code: 89 e7 e8 73 3a 3f 00 4d 89 2c 24 4d 85 ed 74 2e e8 a5 67 0f 00 49 83 c5 08 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ef e8 42 3a 3f 00 4d 89 65 00 eb 05 e8 77 [ 174.838960][ C0] RSP: 0018:ffff8881f6e09d60 EFLAGS: 00010802 [ 174.844856][ C0] RAX: 1bd5a00000000025 RBX: 1ffff1103b8cfe39 RCX: dffffc0000000000 [ 174.852667][ C0] RDX: 0000000080000102 RSI: 0000000000000008 RDI: ffff8881dc67f1c8 [ 174.860485][ C0] RBP: ffff8881f6e09ec8 R08: dffffc0000000000 R09: 0000000000000003 [ 174.868331][ C0] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881f6e09e20 [ 174.876232][ C0] R13: dead00000000012a R14: 1ffff1103b8cfe38 R15: ffff8881dc67f1c8 [ 174.884027][ C0] FS: 000000000161f480(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 174.893051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.899464][ C0] CR2: 0000000001628818 CR3: 00000001dcf35000 CR4: 00000000003406b0 [ 174.908261][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.916069][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.923876][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 174.931127][ C0] Kernel Offset: disabled [ 174.935258][ C0] Rebooting in 86400 seconds..