Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. 2026/02/14 04:42:07 parsed 1 programs [ 46.872357][ T30] audit: type=1400 audit(1771044128.068:105): avc: denied { unlink } for pid=396 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.945871][ T396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.529308][ T30] audit: type=1401 audit(1771044128.718:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 47.987778][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.995211][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.003190][ T441] device bridge_slave_0 entered promiscuous mode [ 48.011096][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.018895][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.026760][ T441] device bridge_slave_1 entered promiscuous mode [ 48.124223][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.131340][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.138931][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.146434][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.176239][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.184763][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.192487][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.209402][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.217893][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.225205][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.232967][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.241189][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.248270][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.258373][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.267986][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.281800][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.293587][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.302089][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.310440][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.319197][ T441] device veth0_vlan entered promiscuous mode 2026/02/14 04:42:09 executed programs: 0 [ 48.329442][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.338628][ T441] device veth1_macvtap entered promiscuous mode [ 48.348126][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.358489][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.578152][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.585373][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.592953][ T468] device bridge_slave_0 entered promiscuous mode [ 48.600123][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.607513][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.615117][ T468] device bridge_slave_1 entered promiscuous mode [ 48.643957][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.651292][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.658905][ T471] device bridge_slave_0 entered promiscuous mode [ 48.667472][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.675188][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.682738][ T471] device bridge_slave_1 entered promiscuous mode [ 48.728590][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.735837][ T469] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.743313][ T469] device bridge_slave_0 entered promiscuous mode [ 48.750020][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.757195][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.764997][ T465] device bridge_slave_0 entered promiscuous mode [ 48.784331][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.791463][ T469] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.798979][ T469] device bridge_slave_1 entered promiscuous mode [ 48.809372][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.816647][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.824237][ T465] device bridge_slave_1 entered promiscuous mode [ 48.868979][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.876121][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.884482][ T466] device bridge_slave_0 entered promiscuous mode [ 48.899214][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.906817][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.914580][ T466] device bridge_slave_1 entered promiscuous mode [ 49.119407][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.126527][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.133852][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.140893][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.165315][ T469] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.172499][ T469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.179781][ T469] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.187136][ T469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.209784][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.216980][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.224520][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.231649][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.254837][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.261941][ T468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.269242][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.276587][ T468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.300193][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.307313][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.314889][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.321974][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.330883][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.338733][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.346366][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.354033][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.362031][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.369615][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.378543][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.386185][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.393795][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.401112][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.408797][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.417549][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.425375][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.453380][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.462349][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.469527][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.477197][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.485656][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.492722][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.516073][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.524271][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.531626][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.539697][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.547630][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.555193][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.563365][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.592412][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.600813][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.609387][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.616561][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.624810][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.634421][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.642764][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.649891][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.657526][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.665867][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.674032][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.682195][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.690118][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.698633][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.723788][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.732222][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.740530][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.749136][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.756739][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.765405][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.773853][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.781127][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.788811][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.796321][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.804069][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.812595][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.820719][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.827837][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.835375][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.843941][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.852151][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.859173][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.866586][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.874916][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.883257][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.890305][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.898067][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.906228][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.925846][ T471] device veth0_vlan entered promiscuous mode [ 49.938772][ T469] device veth0_vlan entered promiscuous mode [ 49.958953][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.967285][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.975512][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.984355][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.993226][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.002503][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.010845][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.019430][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.028181][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.036263][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.044322][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.052506][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.060406][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.068745][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.077118][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.085030][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.092808][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.100282][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.117309][ T469] device veth1_macvtap entered promiscuous mode [ 50.129526][ T468] device veth0_vlan entered promiscuous mode [ 50.146299][ T466] device veth0_vlan entered promiscuous mode [ 50.153427][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.162687][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.170965][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.178651][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.187273][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.195186][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.203936][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.212556][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.220505][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.229047][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.237891][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.246455][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.254091][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.267470][ T471] device veth1_macvtap entered promiscuous mode [ 50.282893][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.291348][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.305402][ T465] device veth0_vlan entered promiscuous mode [ 50.316791][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.325116][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.333203][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.340691][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.349330][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.358186][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.366728][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.375433][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.384114][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.395371][ T468] device veth1_macvtap entered promiscuous mode [ 50.411040][ T466] device veth1_macvtap entered promiscuous mode [ 50.430072][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.439024][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.447776][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.456535][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.465794][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.474520][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.482624][ T519] loop5: detected capacity change from 0 to 512 [ 50.483806][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.508895][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.518778][ T519] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 50.529333][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.542246][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.547419][ T519] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 50.552598][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.579483][ T519] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.583202][ T30] audit: type=1400 audit(1771044131.778:107): avc: denied { mount } for pid=518 comm="syz.5.19" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.624467][ T465] device veth1_macvtap entered promiscuous mode [ 50.628572][ T30] audit: type=1400 audit(1771044131.808:108): avc: denied { write } for pid=518 comm="syz.5.19" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.652943][ T30] audit: type=1400 audit(1771044131.808:109): avc: denied { add_name } for pid=518 comm="syz.5.19" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.675172][ T30] audit: type=1400 audit(1771044131.808:110): avc: denied { create } for pid=518 comm="syz.5.19" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.706388][ T30] audit: type=1400 audit(1771044131.898:111): avc: denied { mounton } for pid=518 comm="syz.5.19" path="/0/file0/bus" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.729665][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.730406][ T30] audit: type=1400 audit(1771044131.898:112): avc: denied { append open } for pid=518 comm="syz.5.19" path="/0/file0/memory.events" dev="loop5" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.754361][ T526] loop4: detected capacity change from 0 to 512 [ 50.762693][ T30] audit: type=1400 audit(1771044131.898:113): avc: denied { read write } for pid=518 comm="syz.5.19" name="memory.events" dev="loop5" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.769234][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.802757][ T524] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #17: block 55303144555455: comm syz.5.19: lblock 96 mapped to illegal pblock 55303144555455 (length 1) [ 50.822751][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.864849][ T529] loop6: detected capacity change from 0 to 512 [ 50.871362][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.881133][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.889947][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.898628][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.909923][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 55196275532849, count = 24885 [ 50.929494][ T526] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 50.942176][ T529] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 50.952453][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 111267104045367, count = 13155 [ 50.980160][ T529] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 50.989990][ T532] loop1: detected capacity change from 0 to 512 [ 51.001838][ T529] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.018815][ T526] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 51.020154][ T538] loop0: detected capacity change from 0 to 512 [ 51.045372][ T526] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.052701][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 111270560216116, count = 14134 [ 51.071345][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 216446284133, count = 12083 [ 51.077487][ T532] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 51.110086][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 126947324669282, count = 24435 [ 51.113509][ T538] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 51.152754][ T45] device bridge_slave_1 left promiscuous mode [ 51.159089][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.182072][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 122455447463280, count = 25964 [ 51.197571][ T532] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 51.217254][ T45] device bridge_slave_0 left promiscuous mode [ 51.231561][ T532] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.271538][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.299951][ T538] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 51.307168][ T539] ------------[ cut here ]------------ [ 51.325778][ T45] device veth1_macvtap left promiscuous mode [ 51.339186][ T45] device veth0_vlan left promiscuous mode [ 51.377419][ T538] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.388654][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 129052583420531, count = 25702 [ 51.403935][ T539] kernel BUG at fs/ext4/extents.c:3186! [ 51.409557][ T539] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 51.415659][ T539] CPU: 1 PID: 539 Comm: syz.6.18 Not tainted syzkaller #0 [ 51.422793][ T539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 51.432883][ T539] RIP: 0010:ext4_split_extent_at+0xe22/0xe40 [ 51.433807][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 1952673641, count = 51 [ 51.438927][ T539] Code: ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c fc fb ff ff 4c 89 f7 49 89 d7 e8 bb e4 d2 ff 4c 89 fa e9 e9 fb ff ff e8 7e b6 93 ff <0f> 0b e8 77 b6 93 ff 0f 0b e8 70 b6 93 ff 0f 0b e8 69 b6 93 ff 0f [ 51.472338][ T539] RSP: 0018:ffffc90001886b00 EFLAGS: 00010293 [ 51.478469][ T539] RAX: ffffffff81d61682 RBX: 0000000000000001 RCX: ffff88811cc7a780 [ 51.486469][ T539] RDX: 0000000000000000 RSI: 000000000000008a RDI: 000000000000008b [ 51.494453][ T539] RBP: ffffc90001886c78 R08: 0000000000000010 R09: 0000000000000021 [ 51.502526][ T539] R10: dffffc0000000000 R11: ffffed1023d4d1ea R12: dffffc0000000000 [ 51.510509][ T539] R13: 000000000000008b R14: 0000000000000030 R15: 0000000000000010 [ 51.518489][ T539] FS: 00007f23db1e86c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.527541][ T539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.534146][ T539] CR2: 00007fad67262ff8 CR3: 000000011b753000 CR4: 00000000003506a0 [ 51.542498][ T539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.550482][ T539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.558739][ T539] Call Trace: [ 51.562032][ T539] [ 51.565331][ T539] ? ext4_ext_try_to_merge_right+0x820/0x820 [ 51.571376][ T539] ext4_split_extent+0x363/0x4c0 [ 51.576565][ T539] ext4_ext_map_blocks+0x3c16/0x61e0 [ 51.581992][ T539] ? ext4_ext_release+0x10/0x10 [ 51.586858][ T539] ? ext4_es_lookup_extent+0x54c/0x900 [ 51.592328][ T539] ext4_map_blocks+0x988/0x1b30 [ 51.597198][ T539] ? __kasan_slab_alloc+0xcf/0xf0 [ 51.602255][ T539] ? ksys_write+0x149/0x250 [ 51.606772][ T539] ? ext4_issue_zeroout+0x250/0x250 [ 51.611981][ T539] _ext4_get_block+0x1ea/0x540 [ 51.616879][ T539] ? ext4_get_block+0x50/0x50 [ 51.621586][ T539] ? slab_post_alloc_hook+0x6d/0x2b0 [ 51.626900][ T539] ext4_get_block+0x39/0x50 [ 51.631421][ T539] ext4_block_write_begin+0x563/0x1160 [ 51.636899][ T539] ? ext4_es_is_delayed+0x40/0x40 [ 51.641939][ T539] ? ext4_print_free_blocks+0x390/0x390 [ 51.647502][ T539] ? ext4_write_begin+0x44c/0x12e0 [ 51.652624][ T539] ? __ext4_journal_start_sb+0x154/0x2b0 [ 51.658270][ T539] ext4_write_begin+0x65a/0x12e0 [ 51.663338][ T539] ? ext4_file_write_iter+0x440/0x1540 [ 51.668810][ T539] ? ext4_readahead+0x110/0x110 [ 51.673683][ T539] ? ext4_get_group_desc+0x2ad/0x320 [ 51.679127][ T539] ? __kasan_check_read+0x11/0x20 [ 51.684253][ T539] ? mark_buffer_dirty+0x1cc/0x330 [ 51.689387][ T539] ? __ext4_handle_dirty_metadata+0x2f8/0x800 [ 51.695468][ T539] ? __kasan_check_write+0x14/0x20 [ 51.700588][ T539] ? ext4_mark_iloc_dirty+0x3013/0x3f50 [ 51.706169][ T539] ext4_da_write_begin+0x321/0xbf0 [ 51.711299][ T539] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 51.716598][ T539] ? __ext4_mark_inode_dirty+0x443/0x610 [ 51.722358][ T539] ? __ext4_journal_stop+0x36/0x1a0 [ 51.727754][ T539] ? ext4_write_end+0x79c/0xa70 [ 51.732618][ T539] ? fault_in_readable+0x105/0x160 [ 51.737742][ T539] generic_perform_write+0x2b7/0x690 [ 51.743144][ T539] ? grab_cache_page_write_begin+0xb0/0xb0 [ 51.748991][ T539] ? do_futex+0xde8/0x2800 [ 51.753421][ T539] ? generic_write_checks+0x3d4/0x480 [ 51.758805][ T539] ext4_buffered_write_iter+0x4ed/0x670 [ 51.764376][ T539] ext4_file_write_iter+0x440/0x1540 [ 51.769681][ T539] ? futex_exit_release+0x1d0/0x1d0 [ 51.774898][ T539] ? avc_policy_seqno+0x1b/0x70 [ 51.779774][ T539] ? ext4_file_read_iter+0x510/0x510 [ 51.785244][ T539] ? memset+0x35/0x40 [ 51.789239][ T539] ? iov_iter_init+0xbc/0x180 [ 51.793970][ T539] vfs_write+0x835/0xfd0 [ 51.798366][ T539] ? file_end_write+0x1b0/0x1b0 [ 51.803519][ T539] ? wait_for_completion_killable_timeout+0x10/0x10 [ 51.810269][ T539] ? __fget_files+0x2c4/0x320 [ 51.814977][ T539] ? __fdget_pos+0x2d2/0x380 [ 51.819893][ T539] ? ksys_write+0x71/0x250 [ 51.824342][ T539] ksys_write+0x149/0x250 [ 51.828697][ T539] ? __ia32_sys_read+0x90/0x90 [ 51.833634][ T539] ? __kasan_check_write+0x14/0x20 [ 51.838767][ T539] ? switch_fpu_return+0x15d/0x2c0 [ 51.843915][ T539] __x64_sys_write+0x7b/0x90 [ 51.848522][ T539] x64_sys_call+0x8ef/0x9a0 [ 51.853300][ T539] do_syscall_64+0x4c/0xa0 [ 51.857747][ T539] ? clear_bhb_loop+0x50/0xa0 [ 51.862437][ T539] ? clear_bhb_loop+0x50/0xa0 [ 51.867130][ T539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.873293][ T539] RIP: 0033:0x7f23db7a3079 [ 51.877721][ T539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.897427][ T539] RSP: 002b:00007f23db1e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.905970][ T539] RAX: ffffffffffffffda RBX: 00007f23db9d0080 RCX: 00007f23db7a3079 [ 51.913955][ T539] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 51.922127][ T539] RBP: 00007f23db835a4c R08: 0000000000000000 R09: 0000000000000000 [ 51.930104][ T539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.938080][ T539] R13: 0000000000000000 R14: 00007f23db9d0080 R15: 00007fff7f841ce8 [ 51.946152][ T539] [ 51.949180][ T539] Modules linked in: [ 51.969562][ T471] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad i_size value: 8174954977786731589 [ 51.973015][ T539] ---[ end trace fe1b2296bd59dca7 ]--- [ 51.982628][ T524] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.19: Freeing blocks not in datazone - block = 126947324669282, count = 24435 [ 52.031486][ T471] EXT4-fs error (device loop4): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad i_size value: 8174954977786731589 [ 52.038708][ T539] RIP: 0010:ext4_split_extent_at+0xe22/0xe40 [ 52.061050][ T539] Code: ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c fc fb ff ff 4c 89 f7 49 89 d7 e8 bb e4 d2 ff 4c 89 fa e9 e9 fb ff ff e8 7e b6 93 ff <0f> 0b e8 77 b6 93 ff 0f 0b e8 70 b6 93 ff 0f 0b e8 69 b6 93 ff 0f [ 52.109302][ T539] RSP: 0018:ffffc90001886b00 EFLAGS: 00010293 [ 52.128105][ T539] RAX: ffffffff81d61682 RBX: 0000000000000001 RCX: ffff88811cc7a780 [ 52.134727][ T466] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: inode has both inline data and extents flags [ 52.143660][ T539] RDX: 0000000000000000 RSI: 000000000000008a RDI: 000000000000008b [ 52.159774][ T551] ================================================================== [ 52.164925][ T539] RBP: ffffc90001886c78 R08: 0000000000000010 R09: 0000000000000021 [ 52.167915][ T551] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 52.177277][ T539] R10: dffffc0000000000 R11: ffffed1023d4d1ea R12: dffffc0000000000 [ 52.183769][ T551] Read of size 4 at addr ffff888132ec2214 by task syz.0.16/551 [ 52.183789][ T551] [ 52.183795][ T551] CPU: 1 PID: 551 Comm: syz.0.16 Tainted: G D syzkaller #0 [ 52.192619][ T539] R13: 000000000000008b R14: 0000000000000030 R15: 0000000000000010 [ 52.199357][ T551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 52.202565][ T539] FS: 00007f23db1e86c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 52.210271][ T551] Call Trace: [ 52.218751][ T539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.228331][ T551] [ 52.228340][ T551] __dump_stack+0x21/0x30 [ 52.238187][ T539] CR2: 00007f416c2a3ff8 CR3: 000000011b753000 CR4: 00000000003506b0 [ 52.240611][ T551] dump_stack_lvl+0x110/0x170 [ 52.247679][ T539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.250143][ T551] ? show_regs_print_info+0x20/0x20 [ 52.255608][ T539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.262463][ T551] ? load_image+0x3e0/0x3e0 [ 52.262490][ T551] print_address_description+0x7f/0x2c0 [ 52.267873][ T539] Kernel panic - not syncing: Fatal exception [ 52.275185][ T551] ? ext4_find_extent+0xbeb/0xe20 [ 52.309599][ T551] kasan_report+0xf1/0x140 [ 52.314056][ T551] ? __read_extent_tree_block+0x1e8/0x790 [ 52.319884][ T551] ? ext4_find_extent+0xbeb/0xe20 [ 52.325221][ T551] __asan_report_load4_noabort+0x14/0x20 [ 52.330889][ T551] ext4_find_extent+0xbeb/0xe20 [ 52.335760][ T551] ext4_ext_map_blocks+0x207/0x61e0 [ 52.340984][ T551] ? is_bpf_text_address+0x177/0x190 [ 52.346771][ T551] ? __kernel_text_address+0xa0/0x100 [ 52.352162][ T551] ? unwind_get_return_address+0x4d/0x90 [ 52.357823][ T551] ? ext4_ext_release+0x10/0x10 [ 52.362701][ T551] ? arch_stack_walk+0xee/0x140 [ 52.367665][ T551] ? ext4_es_lookup_extent+0x54c/0x900 [ 52.373250][ T551] ext4_map_blocks+0x988/0x1b30 [ 52.378201][ T551] ? __kasan_slab_alloc+0xcf/0xf0 [ 52.383417][ T551] ? alloc_page_buffers+0x16d/0x370 [ 52.388726][ T551] ? ksys_write+0x149/0x250 [ 52.393261][ T551] ? do_syscall_64+0x4c/0xa0 [ 52.397884][ T551] ? ext4_issue_zeroout+0x250/0x250 [ 52.403111][ T551] _ext4_get_block+0x1ea/0x540 [ 52.407986][ T551] ? ext4_get_block+0x50/0x50 [ 52.412682][ T551] ? slab_post_alloc_hook+0x6d/0x2b0 [ 52.418003][ T551] ext4_get_block+0x39/0x50 [ 52.422522][ T551] ext4_block_write_begin+0x563/0x1160 [ 52.428228][ T551] ? ext4_es_is_delayed+0x40/0x40 [ 52.433373][ T551] ? ext4_print_free_blocks+0x390/0x390 [ 52.439055][ T551] ? ext4_write_begin+0x44c/0x12e0 [ 52.444188][ T551] ? __ext4_journal_start_sb+0x154/0x2b0 [ 52.449854][ T551] ext4_write_begin+0x65a/0x12e0 [ 52.455171][ T551] ? ext4_file_write_iter+0x440/0x1540 [ 52.460738][ T551] ? ext4_readahead+0x110/0x110 [ 52.465868][ T551] ? ext4_get_group_desc+0x2ad/0x320 [ 52.471198][ T551] ? __kasan_check_read+0x11/0x20 [ 52.476371][ T551] ? mark_buffer_dirty+0x1cc/0x330 [ 52.481525][ T551] ? __ext4_handle_dirty_metadata+0x2f8/0x800 [ 52.487628][ T551] ? __kasan_check_write+0x14/0x20 [ 52.492891][ T551] ? ext4_mark_iloc_dirty+0x3013/0x3f50 [ 52.498609][ T551] ext4_da_write_begin+0x321/0xbf0 [ 52.504336][ T551] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 52.509858][ T551] ? __ext4_mark_inode_dirty+0x443/0x610 [ 52.515531][ T551] ? __ext4_journal_stop+0x36/0x1a0 [ 52.520917][ T551] ? ext4_write_end+0x79c/0xa70 [ 52.525808][ T551] ? fault_in_readable+0x105/0x160 [ 52.531105][ T551] generic_perform_write+0x2b7/0x690 [ 52.536518][ T551] ? grab_cache_page_write_begin+0xb0/0xb0 [ 52.542439][ T551] ? do_futex+0xde8/0x2800 [ 52.547019][ T551] ? generic_write_checks+0x3d4/0x480 [ 52.552942][ T551] ext4_buffered_write_iter+0x4ed/0x670 [ 52.558603][ T551] ext4_file_write_iter+0x440/0x1540 [ 52.563920][ T551] ? futex_exit_release+0x1d0/0x1d0 [ 52.569143][ T551] ? avc_policy_seqno+0x1b/0x70 [ 52.574102][ T551] ? ext4_file_read_iter+0x510/0x510 [ 52.579406][ T551] ? memset+0x35/0x40 [ 52.583398][ T551] ? iov_iter_init+0xbc/0x180 [ 52.588099][ T551] vfs_write+0x835/0xfd0 [ 52.592357][ T551] ? file_end_write+0x1b0/0x1b0 [ 52.597217][ T551] ? wait_for_completion_killable_timeout+0x10/0x10 [ 52.603818][ T551] ? __fget_files+0x2c4/0x320 [ 52.608602][ T551] ? __fdget_pos+0x2d2/0x380 [ 52.613205][ T551] ? ksys_write+0x71/0x250 [ 52.617639][ T551] ksys_write+0x149/0x250 [ 52.622129][ T551] ? __ia32_sys_read+0x90/0x90 [ 52.626917][ T551] ? __kasan_check_write+0x14/0x20 [ 52.632096][ T551] ? switch_fpu_return+0x15d/0x2c0 [ 52.637236][ T551] __x64_sys_write+0x7b/0x90 [ 52.642055][ T551] x64_sys_call+0x8ef/0x9a0 [ 52.646661][ T551] do_syscall_64+0x4c/0xa0 [ 52.651307][ T551] ? clear_bhb_loop+0x50/0xa0 [ 52.656108][ T551] ? clear_bhb_loop+0x50/0xa0 [ 52.660797][ T551] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.666705][ T551] RIP: 0033:0x7f416c880079 [ 52.671141][ T551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.690757][ T551] RSP: 002b:00007f416c2c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.699382][ T551] RAX: ffffffffffffffda RBX: 00007f416caad080 RCX: 00007f416c880079 [ 52.707452][ T551] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000006 [ 52.715439][ T551] RBP: 00007f416c912a4c R08: 0000000000000000 R09: 0000000000000000 [ 52.723524][ T551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.731506][ T551] R13: 0000000000000000 R14: 00007f416caad080 R15: 00007fff67d8fc58 [ 52.739503][ T551] [ 52.742546][ T551] [ 52.744885][ T551] The buggy address belongs to the page: [ 52.750522][ T551] page:ffffea0004cbb080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x132ec2 [ 52.760797][ T551] flags: 0x4000000000000000(zone=1) [ 52.766299][ T551] raw: 4000000000000000 ffffea0004cbb108 ffffea0004cbb048 0000000000000000 [ 52.774901][ T551] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 52.783679][ T551] page dumped because: kasan: bad access detected [ 52.790304][ T551] page_owner tracks the page as freed [ 52.795686][ T551] page last allocated via order 0, migratetype Movable, gfp_mask 0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 532, ts 52082007479, free_ts 52124895009 [ 52.811193][ T551] post_alloc_hook+0x192/0x1b0 [ 52.815998][ T551] prep_new_page+0x1c/0x110 [ 52.820531][ T551] get_page_from_freelist+0x2d3a/0x2dc0 [ 52.826129][ T551] __alloc_pages+0x1a2/0x460 [ 52.830751][ T551] handle_pte_fault+0xebf/0x2710 [ 52.835766][ T551] do_handle_mm_fault+0x1af9/0x1de0 [ 52.841073][ T551] do_user_addr_fault+0x828/0x1250 [ 52.846458][ T551] exc_page_fault+0x51/0xb0 [ 52.850986][ T551] asm_exc_page_fault+0x27/0x30 [ 52.855868][ T551] page last free stack trace: [ 52.860559][ T551] free_unref_page_prepare+0x542/0x550 [ 52.866364][ T551] free_unref_page_list+0x13a/0x9d0 [ 52.871608][ T551] release_pages+0x1006/0x1060 [ 52.876410][ T551] free_pages_and_swap_cache+0x86/0xa0 [ 52.881896][ T551] tlb_finish_mmu+0x17e/0x310 [ 52.886595][ T551] exit_mmap+0x43b/0x8b0 [ 52.890858][ T551] __mmput+0x93/0x320 [ 52.895121][ T551] mmput+0x50/0x150 [ 52.898959][ T551] do_exit+0x9f2/0x27e0 [ 52.903632][ T551] do_group_exit+0x141/0x310 [ 52.908415][ T551] get_signal+0x66a/0x1480 [ 52.913252][ T551] arch_do_signal_or_restart+0xdf/0x11c0 [ 52.919005][ T551] exit_to_user_mode_loop+0xa7/0xe0 [ 52.924315][ T551] exit_to_user_mode_prepare+0x87/0xd0 [ 52.929888][ T551] syscall_exit_to_user_mode+0x1a/0x30 [ 52.935395][ T551] do_syscall_64+0x58/0xa0 [ 52.939937][ T551] [ 52.942278][ T551] Memory state around the buggy address: [ 52.948014][ T551] ffff888132ec2100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.956454][ T551] ffff888132ec2180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.964536][ T551] >ffff888132ec2200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.972600][ T551] ^ [ 52.977542][ T551] ffff888132ec2280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.985622][ T551] ffff888132ec2300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.993733][ T551] ================================================================== [ 53.002087][ T539] Kernel Offset: disabled [ 53.006604][ T539] Rebooting in 86400 seconds..