netlink: 544 bytes leftover after parsing attributes in process `syz-executor5'.
netlink: 544 bytes leftover after parsing attributes in process `syz-executor5'.
==================================================================
BUG: KASAN: stack-out-of-bounds in atomic_read include/asm-generic/atomic-instrumented.h:21 [inline]
BUG: KASAN: stack-out-of-bounds in refcount_sub_and_test_checked+0x9d/0x310 lib/refcount.c:179
kasan: CONFIG_KASAN_INLINE enabled
Read of size 4 at addr ffff8881da9c0bf0 by task udevd/3717
kasan: GPF could be caused by NULL-ptr deref or user memory access

general protection fault: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 3717 Comm: udevd Not tainted 4.20.0-rc4+ #330
CPU: 0 PID: 28819 Comm: syz-executor2 Not tainted 4.20.0-rc4+ #330
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
RIP: 0010:lookup_object lib/debugobjects.c:157 [inline]
RIP: 0010:debug_object_deactivate+0x191/0x450 lib/debugobjects.c:543
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
Code: 02 00 00 48 8b 1b 41 bf 01 00 00 00 48 85 db 74 46 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 18 41 83 c7 01 48 89 fe 48 c1 ee 03 <80> 3c 06 00 0f 85 04 02 00 00 48 3b 53 18 0f 84 53 01 00 00 48 89
RSP: 0018:ffff8881da3e4d30 EFLAGS: 00010003
RAX: dffffc0000000000 RBX: 000000480002002c RCX: 0000000000000001
RDX: ffff8881dae26620 RSI: 0000000900004008 RDI: 0000004800020044
 print_address_description.cold.7+0x9/0x1ff mm/kasan/report.c:256
RBP: ffff8881da3e4de8 R08: ffffed103b47c993 R09: ffffed103b47c992
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report.cold.8+0x242/0x309 mm/kasan/report.c:412
R10: ffffed103b47c992 R11: 0000000000000003 R12: 1ffff1103b47c9a8
R13: ffffffff8b292fe8 R14: ffffffff895a9020 R15: 0000000000000007
 check_memory_region_inline mm/kasan/kasan.c:260 [inline]
 check_memory_region+0x13e/0x1b0 mm/kasan/kasan.c:267
FS:  00007f95392d2700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
 kasan_check_read+0x11/0x20 mm/kasan/kasan.c:272
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 atomic_read include/asm-generic/atomic-instrumented.h:21 [inline]
 refcount_sub_and_test_checked+0x9d/0x310 lib/refcount.c:179
CR2: 0000000000625208 CR3: 00000001c7a2c000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
Modules linked in:
 refcount_dec_and_test_checked+0x1a/0x20 lib/refcount.c:212
---[ end trace 3e3e3b126eb76d46 ]---
 kref_put include/linux/kref.h:69 [inline]
 aa_put_label security/apparmor/include/label.h:447 [inline]
 aa_free_file_ctx security/apparmor/include/file.h:75 [inline]
 apparmor_file_free_security+0x115/0x1a0 security/apparmor/lsm.c:450
RIP: 0010:lookup_object lib/debugobjects.c:157 [inline]
RIP: 0010:debug_object_deactivate+0x191/0x450 lib/debugobjects.c:543
Code: 02 00 00 48 8b 1b 41 bf 01 00 00 00 48 85 db 74 46 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 18 41 83 c7 01 48 89 fe 48 c1 ee 03 <80> 3c 06 00 0f 85 04 02 00 00 48 3b 53 18 0f 84 53 01 00 00 48 89
 security_file_free+0x4a/0x80 security/security.c:900
RSP: 0018:ffff8881da3e4d30 EFLAGS: 00010003
 file_free fs/file_table.c:54 [inline]
 __fput+0x4e8/0xa30 fs/file_table.c:294
RAX: dffffc0000000000 RBX: 000000480002002c RCX: 0000000000000001
RDX: ffff8881dae26620 RSI: 0000000900004008 RDI: 0000004800020044
RBP: ffff8881da3e4de8 R08: ffffed103b47c993 R09: ffffed103b47c992
R10: ffffed103b47c992 R11: 0000000000000003 R12: 1ffff1103b47c9a8
R13: ffffffff8b292fe8 R14: ffffffff895a9020 R15: 0000000000000007
FS:  00007f95392d2700(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000
 ____fput+0x15/0x20 fs/file_table.c:309
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 task_work_run+0x1e8/0x2a0 kernel/task_work.c:113
CR2: 0000000000625208 CR3: 00000001c7a2c000 CR4: 00000000001406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400