bisecting cause commit starting from 8fe31e0995f048d16b378b90926793a0aa4af1e5
building syzkaller on 0c5d9412d774262384cbdbe9d672b077364ed776
testing commit 8fe31e0995f048d16b378b90926793a0aa4af1e5
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: d3ea5340f2b46537a1855e13867d39ca0ab0be7b7ffc02a7526b08511aaf18fe
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.14
testing commit 7d2a07b769330c34b4deabeed939325c77a7ec2f
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: de5d0644639cc5c360c5e4129b2c3253ccb03fa29846cb1eb6936ee1da8e68ac
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.13
testing commit 62fb9874f5da54fdb243003b386128037319b219
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: f0d89eb8f9d4c9864735171e2eb3e5feeaf7d26439e5a7bae1ef45fb8f9578ab
run #0: crashed: BUG: sleeping function called from invalid context in lock_sock_nested
run #1: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #2: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #3: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #4: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #5: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #6: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #7: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #8: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #9: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.12
testing commit 9f4ad9e425a1d3b6a34617b8ea226d56a119a717
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: f3685dd148c0d7f62ec2c26b6ccd338a86cdce80e434ce6a225cc94922f0c2db
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.11
testing commit f40ddce88593482919761f74910f42f4b84c004b
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 1f5c2551444cc5a9717d44acd7d59dea64de831f0ec6d140c76c393b1a8be7b9
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.10
testing commit 2c85ebc57b3e1817b6ce1a6b703928e113a90442
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 6fadf1b92bad0f2eefaa047034d1044e5b34f9c1872d7811646aed5049f137a7
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.9
testing commit bbf5c979011a099af5dc76498918ed7df445635b
compiler: gcc (GCC) 10.2.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 79f11e7a8eed3e447672927cef5561c2ba920551ad72927757519c7fec1a8d58
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.8
testing commit bcf876870b95592b52519ed4aafcf9d95999bc9c
compiler: gcc (GCC) 8.4.1 20210217, GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 3a10be75bbfb45817efdf085ef0d7bb7934a9655779dbb5140e82be0f1d7e80e
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.7
testing commit 3d77e6a8804abcc0504c904bd6e5cdf3a5cf8162
compiler: gcc version 8.4.1 20210217 (GCC), GNU ld (GNU Binutils for Debian) 2.35.2
kernel signature: 6c15458155203600f9eead46349048b82bfa958d35a9c08152de83a646393e6d
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.6
testing commit 7111951b8d4973bda27ff663f2cf18b663d15b48
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 3ec8f747eafa1b5378a4cc37ea09f1a8798bfd8f4ee7c3e4b1f24c42b3888ba2
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.5
testing commit d5226fa6dbae0569ee43ecfc08bdcd6770fc4755
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 1e50721387abc6962be73a376a0e25993de05554e109369a0cf0059deb740472
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.4
testing commit 219d54332a09e8d8741c1e1982f5eae56099de85
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 9746f3b655633436e9e0647dfbf6f8cc6036487689cc04d539ee7143aa30fdd9
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.3
testing commit 4d856f72c10ecb060868ed10ff1b1453943fc6c8
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 54920ccfe5023ac1310b5de92553c4d02e1b7ef19a40c59ae996f8f35d0795ad
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.2
testing commit 0ecfebd2b52404ae0c54a878c872bb93363ada36
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 63727acb5f1a8479cf00e4aeaeb8b93f969f620cc11da3adce5ab8324955b755
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.1
testing commit e93c9c99a629c61837d5a7fc2120cd2b6c70dbdd
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 7050ee04822f2db21ebf0899802481c3b2ef8a9ecc304d7dd18796d74cadf966
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v5.0
testing commit 1c163f4c7b3f621efff9b28a47abb36f7378d783
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: 74b9cbc5d612f13207febb901e714d31acb8cf018ab074f1a6cc514f3f821600
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v4.20
testing commit 8fe28cb58bcb235034b64cbbb7550a8a43fd88be
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: f5396d8ff65d6b788ee031a0afc0c7f427381421f24394833c6d341ab89138fd
run #0: basic kernel testing failed: general protection fault in batadv_iv_ogm_queue_add
run #1: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #2: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #3: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #4: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #5: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #6: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #7: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #8: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
run #9: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v4.19
testing commit 84df9525b0c27f3ebc2ebb1864fa62a97fdedb7d
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: ba71c2e18931322036aea2d1a8d9f2f2445d7001bdcd3eef6b91554a505bc90c
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v4.18
testing commit 94710cac0ef4ee177a63b5227664b38c95bbf703
compiler: gcc version 8.4.1 20210217 (GCC)
kernel signature: ad5fc4c408ac8bd16b827f9ba8113c35facb936cc1abacddd639e55aa03d60cb
all runs: crashed: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
testing release v4.17
testing commit 29dcea88779c856c7dc92040a0c01233263101d4
compiler: gcc (GCC) 8.4.1 20210217
failed to run ["make" "-j" "64" "ARCH=x86_64" "CC=/syzkaller/shared/bisect_bin/gcc-8.1.0/bin/gcc" "bzImage"]: exit status 2
testing release v4.16
testing commit 0adb32858b0bddf4ada5f364a84ed60b196dbcda
compiler: gcc (GCC) 8.4.1 20210217
orc_dump.c:106:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
orc_dump.c:111:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
elf.c:135:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:140:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
testing release v4.15
testing commit d8a5b80568a9cb66810e75b182018e9edb68e8ff
compiler: gcc (GCC) 8.4.1 20210217
orc_dump.c:106:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
orc_dump.c:111:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
elf.c:135:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:140:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
pager.c:36:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
testing release v4.14
testing commit bebc6082da0a9f5d47a1ea2edc099bf671058bd4
compiler: gcc (GCC) 8.4.1 20210217
orc_dump.c:105:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
orc_dump.c:110:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
pager.c:36:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
elf.c:134:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:139:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
testing release v4.13
testing commit 569dbb88e80deb68974ef6fdd6a13edb9d686261
compiler: gcc (GCC) 8.4.1 20210217
pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
elf.c:144:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:149:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
testing release v4.12
testing commit 6f7da290413ba713f0cdd9ff1a2a9bb129ef4f6c
compiler: gcc (GCC) 8.4.1 20210217
pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
elf.c:141:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:146:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
testing release v4.11
testing commit a351e9b9fc24e982ec2f0e76379a49826036da12
compiler: gcc (GCC) 7.5.0
elf.c:141:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:146:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
testing release v4.10
testing commit c470abd4fde40ea6a0846a2beab642a578c0b8cd
compiler: gcc (GCC) 5.5.0
tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes]
elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
testing release v4.9
testing commit 69973b830859bc6529a7a0468ba0d80ee5117826
compiler: gcc (GCC) 5.5.0
tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes]
elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
pager.c:35:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
testing release v4.8
testing commit c8d2bc9bc39ebea8437fd974fdbc21847bb897a3
compiler: gcc (GCC) 5.5.0
tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes]
elf.c:129:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:134:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
testing release v4.7
testing commit 523d939ef98fd712632d93a5a2b588e477a7565e
compiler: gcc (GCC) 5.5.0
tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes]
elf.c:122:2: error: 'elf_getshnum' is deprecated [-Werror=deprecated-declarations]
elf.c:127:2: error: 'elf_getshstrndx' is deprecated [-Werror=deprecated-declarations]
pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
testing release v4.6
testing commit 2dcd0af568b0cf583645c8a317dd12e344b1c72a
compiler: gcc (GCC) 5.5.0
tools/include/linux/log2.h:19:1: error: ignoring attribute 'noreturn' because it conflicts with attribute 'const' [-Werror=attributes]
pager.c:33:12: error: passing argument 2 to 'restrict'-qualified parameter aliases with argument 4 [-Werror=restrict]
revisions tested: 19, total time: 3h18m23.075577352s (build: 2h11m58.647638591s, test: 1h1m6.559014573s)
the crash already happened on the oldest tested release
commit msg: Linux 4.18
crash: KASAN: use-after-free Read in snd_mixer_oss_get_volume1
IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
==================================================================
BUG: KASAN: use-after-free in snd_mixer_oss_get_volume1+0x4ba/0x570 sound/core/oss/mixer_oss.c:608
Read of size 4 at addr ffff8800a482f604 by task syz-executor.5/10061

CPU: 0 PID: 10061 Comm: syz-executor.5 Not tainted 4.18.0-syzkaller #0
IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x15a/0x20d lib/dump_stack.c:113
 print_address_description.cold.6+0x9/0x244 mm/kasan/report.c:256
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report mm/kasan/report.c:412 [inline]
 kasan_report.cold.7+0x242/0x305 mm/kasan/report.c:396
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report.c:432
 snd_mixer_oss_get_volume1+0x4ba/0x570 sound/core/oss/mixer_oss.c:608
 snd_mixer_oss_get_volume sound/core/oss/mixer_oss.c:272 [inline]
 snd_mixer_oss_ioctl1+0x1eb/0x1610 sound/core/oss/mixer_oss.c:372
 snd_mixer_oss_ioctl_compat+0x38/0x60 sound/core/oss/mixer_oss.c:405
 __do_compat_sys_ioctl fs/compat_ioctl.c:1459 [inline]
 __se_compat_sys_ioctl+0x7bd/0x2610 fs/compat_ioctl.c:1405
 __ia32_compat_sys_ioctl+0x6b/0xa0 fs/compat_ioctl.c:1405
 do_syscall_32_irqs_on arch/x86/entry/common.c:326 [inline]
 do_fast_syscall_32+0x23f/0xad4 arch/x86/entry/common.c:397
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
RIP: 0023:0xf7045c89
IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
Code: 85 
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
d2 
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 0c 24 c3 8b 1c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 
RSP: 002b:00000000f67055fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080254d18
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000

Allocated by task 10051:
 save_stack mm/kasan/kasan.c:448 [inline]
 set_track mm/kasan/kasan.c:460 [inline]
 kasan_kmalloc.part.1+0x62/0xf0 mm/kasan/kasan.c:553
 kasan_kmalloc+0xaf/0xc0 mm/kasan/kasan.c:538
 kmem_cache_alloc_trace+0x142/0x350 mm/slub.c:2735
IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
 kmalloc include/linux/slab.h:513 [inline]
 snd_mixer_oss_build_input+0x56f/0xc40 sound/core/oss/mixer_oss.c:1092
 snd_mixer_oss_proc_write+0x30c/0x4a0 sound/core/oss/mixer_oss.c:1232
 snd_info_text_entry_release+0xe3/0x240 sound/core/info.c:425
 close_pdeo.part.0+0xd8/0x2e0 fs/proc/inode.c:174
 close_pdeo+0xf6/0x150 fs/proc/inode.c:166
 proc_reg_release+0xff/0x170 fs/proc/inode.c:393
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
 __fput+0x232/0x780 fs/file_table.c:209
 ____fput+0x9/0x10 fs/file_table.c:243
 task_work_run+0x111/0x180 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:192 [inline]
 exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_32_irqs_on arch/x86/entry/common.c:341 [inline]
 do_fast_syscall_32+0x8cb/0xad4 arch/x86/entry/common.c:397
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139

Freed by task 10049:
 save_stack mm/kasan/kasan.c:448 [inline]
 set_track mm/kasan/kasan.c:460 [inline]
 __kasan_slab_free+0x167/0x240 mm/kasan/kasan.c:521
 kasan_slab_free+0xe/0x10 mm/kasan/kasan.c:528
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
 slab_free_hook mm/slub.c:1373 [inline]
 slab_free_freelist_hook mm/slub.c:1400 [inline]
 slab_free mm/slub.c:2955 [inline]
 kfree+0x130/0x3b0 mm/slub.c:3908
 snd_mixer_oss_slot_free+0xcf/0x110 sound/core/oss/mixer_oss.c:955
 mixer_slot_clear+0x53/0xa0 sound/core/oss/mixer_oss.c:963
 snd_mixer_oss_build_input+0x702/0xc40 sound/core/oss/mixer_oss.c:1100
 snd_mixer_oss_proc_write+0x30c/0x4a0 sound/core/oss/mixer_oss.c:1232
 snd_info_text_entry_release+0xe3/0x240 sound/core/info.c:425
 close_pdeo.part.0+0xd8/0x2e0 fs/proc/inode.c:174
 close_pdeo+0xf6/0x150 fs/proc/inode.c:166
 proc_reg_release+0xff/0x170 fs/proc/inode.c:393
 __fput+0x232/0x780 fs/file_table.c:209
IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
 ____fput+0x9/0x10 fs/file_table.c:243
 task_work_run+0x111/0x180 kernel/task_work.c:113
 tracehook_notify_resume include/linux/tracehook.h:192 [inline]
 exit_to_usermode_loop+0x180/0x1e0 arch/x86/entry/common.c:166
 prepare_exit_to_usermode arch/x86/entry/common.c:197 [inline]
 syscall_return_slowpath arch/x86/entry/common.c:268 [inline]
 do_syscall_32_irqs_on arch/x86/entry/common.c:341 [inline]
 do_fast_syscall_32+0x8cb/0xad4 arch/x86/entry/common.c:397
 entry_SYSENTER_compat+0x70/0x7f arch/x86/entry/entry_64_compat.S:139

The buggy address belongs to the object at ffff8800a482f600
 which belongs to the cache kmalloc-96 of size 96
The buggy address is located 4 bytes inside of
 96-byte region [ffff8800a482f600, ffff8800a482f660)
The buggy address belongs to the page:
IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
page:ffffea0002920bc0 count:1 mapcount:0 mapping:ffff8800b6003400 index:0x0
wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
flags: 0xfff00000000100(slab)
wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
raw: 00fff00000000100 ffffea0002915340 0000000800000008 ffff8800b6003400
raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page allocated via order 0, migratetype Unmovable, gfp_mask 0x6012c0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY)
 set_page_owner include/linux/page_owner.h:31 [inline]
 post_alloc_hook mm/page_alloc.c:1906 [inline]
 prep_new_page mm/page_alloc.c:1914 [inline]
 get_page_from_freelist+0x2f35/0x46b0 mm/page_alloc.c:3345
 __alloc_pages_nodemask+0x39e/0x2780 mm/page_alloc.c:4369
 alloc_pages_current+0xd6/0x1b0 mm/mempolicy.c:2093
 alloc_pages include/linux/gfp.h:492 [inline]
 alloc_slab_page mm/slub.c:1440 [inline]
 allocate_slab mm/slub.c:1585 [inline]
 new_slab+0x4a9/0x850 mm/slub.c:1656
 new_slab_objects mm/slub.c:2419 [inline]
 ___slab_alloc+0x609/0x940 mm/slub.c:2571
 __slab_alloc.isra.22+0x78/0xe0 mm/slub.c:2611
 slab_alloc_node mm/slub.c:2674 [inline]
 slab_alloc mm/slub.c:2716 [inline]
 kmem_cache_alloc_trace+0x295/0x350 mm/slub.c:2733
 kmalloc include/linux/slab.h:513 [inline]
 kzalloc include/linux/slab.h:707 [inline]
 aa_alloc_file_ctx security/apparmor/include/file.h:60 [inline]
 apparmor_file_alloc_security+0x394/0x900 security/apparmor/lsm.c:438
 security_file_alloc+0x3a/0x70 security/security.c:879
 get_empty_filp+0x127/0x390 fs/file_table.c:128
 path_openat+0xb5/0x2290 fs/namei.c:3516
IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
 do_filp_open+0x177/0x250 fs/namei.c:3574
 do_sys_open+0x1dc/0x360 fs/open.c:1101
 __do_sys_open fs/open.c:1119 [inline]
 __se_sys_open fs/open.c:1114 [inline]
 __x64_sys_open+0x79/0xb0 fs/open.c:1114
 do_syscall_64+0xda/0x540 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe

Memory state around the buggy address:
 ffff8800a482f500: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
 ffff8800a482f580: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
>ffff8800a482f600: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
                   ^
 ffff8800a482f680: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
 ffff8800a482f700: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
==================================================================