Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 19.917238][ T24] audit: type=1400 audit(1712187586.830:66): avc: denied { execmem } for pid=279 comm="syz-executor372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.928497][ T24] audit: type=1400 audit(1712187586.840:67): avc: denied { create } for pid=288 comm="syz-executor372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 19.932888][ T24] audit: type=1400 audit(1712187586.840:68): avc: denied { bind } for pid=287 comm="syz-executor372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 19.944323][ T24] audit: type=1400 audit(1712187586.840:69): avc: denied { listen } for pid=287 comm="syz-executor372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 19.974241][ T24] audit: type=1400 audit(1712187586.840:70): avc: denied { connect } for pid=287 comm="syz-executor372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 22.361970][ T325] ================================================================== [ 22.372394][ T325] BUG: KASAN: use-after-free in _raw_spin_lock_bh+0x97/0x1b0 [ 22.380044][ T325] Write of size 4 at addr ffff88811505e788 by task kworker/1:2/325 [ 22.388357][ T325] [ 22.390617][ T325] CPU: 1 PID: 325 Comm: kworker/1:2 Not tainted 5.10.209-syzkaller-00001-ge7daca75b4c3 #0 [ 22.400332][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 22.410238][ T325] Workqueue: vsock-loopback vsock_loopback_work [ 22.416297][ T325] Call Trace: [ 22.419437][ T325] dump_stack_lvl+0x1e2/0x24b [ 22.424047][ T325] ? bfq_pos_tree_add_move+0x43b/0x43b [ 22.429336][ T325] ? panic+0x80b/0x80b [ 22.433248][ T325] print_address_description+0x81/0x3b0 [ 22.438624][ T325] ? __kasan_check_write+0x14/0x20 [ 22.443656][ T325] kasan_report+0x179/0x1c0 [ 22.448009][ T325] ? _raw_spin_lock_bh+0x97/0x1b0 [ 22.452857][ T325] ? _raw_spin_lock_bh+0x97/0x1b0 [ 22.457719][ T325] kasan_check_range+0x293/0x2a0 [ 22.462491][ T325] __kasan_check_write+0x14/0x20 [ 22.467263][ T325] _raw_spin_lock_bh+0x97/0x1b0 [ 22.471961][ T325] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 22.476992][ T325] ? vsock_find_bound_socket+0x2d0/0x330 [ 22.482457][ T325] virtio_transport_recv_pkt+0x665/0x4130 [ 22.488016][ T325] ? virtio_transport_release+0xc00/0xc00 [ 22.493566][ T325] ? stack_trace_save+0x113/0x1c0 [ 22.498426][ T325] ? stack_trace_snprint+0xf0/0xf0 [ 22.503383][ T325] ? kfree+0xc3/0x270 [ 22.507191][ T325] ? kfree+0xc3/0x270 [ 22.511011][ T325] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 22.516480][ T325] ? update_load_avg+0x541/0x1690 [ 22.521349][ T325] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 22.526987][ T325] ? __kasan_check_write+0x14/0x20 [ 22.531943][ T325] ? __switch_to+0x5f6/0x1240 [ 22.536456][ T325] ? sched_clock+0x3a/0x40 [ 22.541044][ T325] ? __kasan_check_write+0x14/0x20 [ 22.546002][ T325] ? virtio_transport_deliver_tap_pkt+0xb0/0xb0 [ 22.552065][ T325] ? virtio_transport_deliver_tap_pkt+0x60/0xb0 [ 22.558234][ T325] vsock_loopback_work+0x37d/0x3f0 [ 22.563192][ T325] ? switch_mm_irqs_off+0x33c/0x9a0 [ 22.568216][ T325] ? vsock_loopback_send_pkt+0x120/0x120 [ 22.573772][ T325] ? read_word_at_a_time+0x12/0x20 [ 22.578720][ T325] ? strscpy+0x9c/0x260 [ 22.582721][ T325] process_one_work+0x6dc/0xbd0 [ 22.587393][ T325] worker_thread+0xaea/0x1510 [ 22.591916][ T325] ? _raw_spin_lock+0x1b0/0x1b0 [ 22.596611][ T325] ? __kasan_check_read+0x11/0x20 [ 22.601535][ T325] kthread+0x34b/0x3d0 [ 22.605457][ T325] ? worker_clr_flags+0x180/0x180 [ 22.610534][ T325] ? kthread_blkcg+0xd0/0xd0 [ 22.614943][ T325] ret_from_fork+0x1f/0x30 [ 22.619191][ T325] [ 22.621366][ T325] Allocated by task 3447: [ 22.625545][ T325] ____kasan_kmalloc+0xdb/0x110 [ 22.630305][ T325] __kasan_kmalloc+0x9/0x10 [ 22.634667][ T325] kmem_cache_alloc_trace+0x18a/0x2e0 [ 22.639858][ T325] virtio_transport_do_socket_init+0x56/0x2d0 [ 22.645764][ T325] vsock_assign_transport+0x324/0x3f0 [ 22.650967][ T325] vsock_stream_connect+0x5cf/0xd30 [ 22.655998][ T325] __sys_connect+0x388/0x410 [ 22.660436][ T325] __x64_sys_connect+0x7a/0x90 [ 22.665028][ T325] do_syscall_64+0x34/0x70 [ 22.669296][ T325] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 22.675014][ T325] [ 22.677168][ T325] Freed by task 3447: [ 22.681013][ T325] kasan_set_track+0x4b/0x70 [ 22.685446][ T325] kasan_set_free_info+0x23/0x40 [ 22.690207][ T325] ____kasan_slab_free+0x121/0x160 [ 22.695318][ T325] __kasan_slab_free+0x11/0x20 [ 22.699957][ T325] slab_free_freelist_hook+0xc0/0x190 [ 22.705680][ T325] kfree+0xc3/0x270 [ 22.709291][ T325] virtio_transport_destruct+0x3b/0x40 [ 22.714585][ T325] vsock_assign_transport+0x266/0x3f0 [ 22.719788][ T325] vsock_stream_connect+0x5cf/0xd30 [ 22.724818][ T325] __sys_connect+0x388/0x410 [ 22.729614][ T325] __x64_sys_connect+0x7a/0x90 [ 22.734195][ T325] do_syscall_64+0x34/0x70 [ 22.738448][ T325] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 22.744174][ T325] [ 22.746344][ T325] The buggy address belongs to the object at ffff88811505e780 [ 22.746344][ T325] which belongs to the cache kmalloc-64 of size 64 [ 22.760155][ T325] The buggy address is located 8 bytes inside of [ 22.760155][ T325] 64-byte region [ffff88811505e780, ffff88811505e7c0) [ 22.773159][ T325] The buggy address belongs to the page: [ 22.778721][ T325] page:ffffea0004541780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11505e [ 22.788920][ T325] flags: 0x4000000000000200(slab) [ 22.793737][ T325] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100043800 [ 22.802342][ T325] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 22.810832][ T325] page dumped because: kasan: bad access detected [ 22.817075][ T325] page_owner tracks the page as allocated [ 22.822815][ T325] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 280, ts 22356318178, free_ts 22340792038 [ 22.839661][ T325] prep_new_page+0x166/0x180 [ 22.844079][ T325] get_page_from_freelist+0x2d8c/0x2f30 [ 22.849460][ T325] __alloc_pages_nodemask+0x435/0xaf0 [ 22.854797][ T325] new_slab+0x80/0x400 [ 22.858694][ T325] ___slab_alloc+0x302/0x4b0 [ 22.863123][ T325] __slab_alloc+0x63/0xa0 [ 22.867467][ T325] __kmalloc+0x204/0x330 [ 22.871547][ T325] ext4_htree_store_dirent+0x7f/0x590 [ 22.876755][ T325] htree_dirblock_to_tree+0x8f7/0x1080 [ 22.882201][ T325] ext4_htree_fill_tree+0x73d/0x13e0 [ 22.887410][ T325] ext4_readdir+0x2dde/0x37c0 [ 22.891924][ T325] iterate_dir+0x265/0x580 [ 22.896157][ T325] __se_sys_getdents64+0x1c1/0x460 [ 22.901126][ T325] __x64_sys_getdents64+0x7b/0x90 [ 22.905986][ T325] do_syscall_64+0x34/0x70 [ 22.910228][ T325] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 22.916202][ T325] page last free stack trace: [ 22.920719][ T325] __free_pages_ok+0x82c/0x850 [ 22.925531][ T325] free_the_page+0x76/0x370 [ 22.929766][ T325] __free_pages+0x67/0xc0 [ 22.933936][ T325] __free_slab+0xcf/0x190 [ 22.938161][ T325] unfreeze_partials+0x15e/0x190 [ 22.942936][ T325] put_cpu_partial+0xbf/0x180 [ 22.947553][ T325] __slab_free+0x2c8/0x3a0 [ 22.951789][ T325] ___cache_free+0x111/0x130 [ 22.956221][ T325] qlink_free+0x50/0x90 [ 22.960428][ T325] qlist_free_all+0x47/0xb0 [ 22.964831][ T325] kasan_quarantine_reduce+0x15a/0x170 [ 22.970306][ T325] __kasan_slab_alloc+0x2f/0xe0 [ 22.975244][ T325] slab_post_alloc_hook+0x61/0x2f0 [ 22.980189][ T325] kmem_cache_alloc+0x168/0x2e0 [ 22.984886][ T325] ext4_alloc_inode+0x21/0x640 [ 22.989568][ T325] new_inode_pseudo+0x64/0x220 [ 22.994165][ T325] [ 22.996326][ T325] Memory state around the buggy address: [ 23.001798][ T325] ffff88811505e680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 23.009875][ T325] ffff88811505e700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 23.017868][ T325] >ffff88811505e780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 23.025848][ T325] ^ [ 23.030094][ T325] ffff88811505e800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 23.037995][ T325] ffff88811505e880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 23.046607][ T325] ================================================================== [ 23.054947][ T325] Disabling lock debugging due to kernel taint executing program executing program