Warning: Permanently added '10.128.1.243' (ECDSA) to the list of known hosts. 2023/03/03 02:46:48 ignoring optional flag "sandboxArg"="0" 2023/03/03 02:46:48 parsed 1 programs 2023/03/03 02:46:48 executed programs: 0 [ 48.732574][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 48.732581][ T30] audit: type=1400 audit(1677811608.970:137): avc: denied { mounton } for pid=379 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.772400][ T30] audit: type=1400 audit(1677811608.970:138): avc: denied { mount } for pid=379 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.839279][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.846181][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.853301][ T384] device bridge_slave_0 entered promiscuous mode [ 48.860944][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.868272][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.875582][ T384] device bridge_slave_1 entered promiscuous mode [ 48.940433][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.947465][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.954472][ T387] device bridge_slave_0 entered promiscuous mode [ 48.961192][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.968138][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.975323][ T387] device bridge_slave_1 entered promiscuous mode [ 48.981814][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.988700][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.995837][ T392] device bridge_slave_0 entered promiscuous mode [ 49.021491][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.028483][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.035691][ T392] device bridge_slave_1 entered promiscuous mode [ 49.059644][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.066953][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.073948][ T391] device bridge_slave_0 entered promiscuous mode [ 49.097900][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.104742][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.112406][ T391] device bridge_slave_1 entered promiscuous mode [ 49.119250][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.126162][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.133233][ T400] device bridge_slave_0 entered promiscuous mode [ 49.139650][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.146640][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.153672][ T386] device bridge_slave_0 entered promiscuous mode [ 49.161882][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.168750][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.176079][ T386] device bridge_slave_1 entered promiscuous mode [ 49.191432][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.198384][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.205582][ T400] device bridge_slave_1 entered promiscuous mode [ 49.303703][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.310775][ T384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.317873][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.324634][ T384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.339500][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.346355][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.353509][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.360489][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.381183][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.389082][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.396153][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.403636][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.436455][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.443407][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.450499][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.457315][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.477350][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.484390][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.491747][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.499240][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.506384][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.513542][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.520791][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.528089][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.535350][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.555103][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.563198][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.571360][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.578565][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.586369][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.594256][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.601049][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.608246][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.624435][ T387] device veth0_vlan entered promiscuous mode [ 49.639734][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.647854][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.656463][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.663595][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.670886][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.679120][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.687314][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.694147][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.701825][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.709757][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.716726][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.724010][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.732349][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.756260][ T387] device veth1_macvtap entered promiscuous mode [ 49.765989][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.773969][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.782029][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.789624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.798051][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.804959][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.812439][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.821139][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.828276][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.835637][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.851089][ T391] device veth0_vlan entered promiscuous mode [ 49.866343][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.874114][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.881965][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.902105][ T391] device veth1_macvtap entered promiscuous mode [ 49.910124][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.918742][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.926910][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.934316][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.941869][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.949968][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.958044][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.965720][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.973582][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.980453][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.987585][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.995665][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.002707][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.009952][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.018109][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.025314][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.032394][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.040500][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.047622][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.054899][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.063009][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.070947][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.078881][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.086892][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.094627][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.102522][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.110400][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.118692][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.131937][ T384] device veth0_vlan entered promiscuous mode [ 50.144495][ T386] device veth0_vlan entered promiscuous mode [ 50.154799][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.162955][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.170841][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.178721][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.186492][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.194593][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.203340][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.211968][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.219918][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.228622][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.236849][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.245454][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.254137][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.262586][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.271124][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.282106][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.293067][ T30] audit: type=1400 audit(1677811610.530:139): avc: denied { mount } for pid=387 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 50.302424][ T386] device veth1_macvtap entered promiscuous mode [ 50.330770][ T384] device veth1_macvtap entered promiscuous mode [ 50.340705][ T30] audit: type=1400 audit(1677811610.580:140): avc: denied { mounton } for pid=420 comm="syz-executor.1" path="/root/syzkaller-testdir2519667764/syzkaller.qXQxkj/0/file0" dev="sda1" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 50.374645][ T392] device veth0_vlan entered promiscuous mode [ 50.382385][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.391294][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.399898][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.408141][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.416320][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.424763][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.431876][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.439040][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.447288][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.455470][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.462303][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.469549][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.477510][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.485723][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.493389][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.501292][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.509137][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.517024][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.524886][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.532823][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.562318][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.570557][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.578749][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.586472][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.594603][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.602876][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.611087][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.619378][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.628113][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.636185][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.644490][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.653198][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.667163][ T400] device veth0_vlan entered promiscuous mode [ 50.674807][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.683276][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.691350][ T427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.707715][ T400] device veth1_macvtap entered promiscuous mode [ 50.717060][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.728826][ T392] device veth1_macvtap entered promiscuous mode [ 50.742761][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.751684][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.759743][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.767706][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.776063][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.784424][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.792665][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.805492][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.813736][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.837531][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.846064][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.173791][ T30] audit: type=1400 audit(1677811611.410:141): avc: denied { unmount } for pid=387 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 2023/03/03 02:46:54 executed programs: 25 2023/03/03 02:46:59 executed programs: 61 2023/03/03 02:47:04 executed programs: 97 2023/03/03 02:47:09 executed programs: 133 [ 72.587801][ T1240] ================================================================== [ 72.595690][ T1240] BUG: KASAN: use-after-free in fuse_copy_one+0x16f/0x350 [ 72.602881][ T1240] Read of size 256 at addr ffff888126e71810 by task syz-executor.4/1240 [ 72.611031][ T1240] [ 72.613221][ T1240] CPU: 0 PID: 1240 Comm: syz-executor.4 Not tainted 5.15.94-syzkaller #0 [ 72.621635][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 72.631528][ T1240] Call Trace: [ 72.634675][ T1240] [ 72.637429][ T1240] dump_stack_lvl+0x105/0x148 [ 72.641969][ T1240] ? io_uring_drop_tctx_refs+0x14e/0x14e [ 72.647621][ T1240] ? panic+0x4f8/0x4f8 [ 72.651487][ T1240] print_address_description+0x87/0x3b0 [ 72.656883][ T1240] kasan_report+0x179/0x1c0 [ 72.661214][ T1240] ? fuse_copy_one+0x16f/0x350 [ 72.665980][ T1240] ? fuse_copy_one+0x16f/0x350 [ 72.671033][ T1240] kasan_check_range+0x293/0x2a0 [ 72.675936][ T1240] ? fuse_copy_one+0x16f/0x350 [ 72.680921][ T1240] memcpy+0x2d/0x70 [ 72.684662][ T1240] fuse_copy_one+0x16f/0x350 [ 72.689081][ T1240] fuse_copy_args+0x2d0/0x390 [ 72.693766][ T1240] ? fuse_copy_one+0x192/0x350 [ 72.698623][ T1240] fuse_dev_do_read+0xa29/0xf20 [ 72.703494][ T1240] ? queue_interrupt+0x310/0x310 [ 72.708365][ T1240] ? memset+0x35/0x40 [ 72.712347][ T1240] ? __fsnotify_parent+0x104/0x590 [ 72.717376][ T1240] fuse_dev_read+0x15d/0x1f0 [ 72.721887][ T1240] ? fuse_dev_release+0x4d0/0x4d0 [ 72.726839][ T1240] ? fsnotify_perm+0x34a/0x4a0 [ 72.731535][ T1240] vfs_read+0x8e3/0xba0 [ 72.735597][ T1240] ? kernel_read+0x130/0x130 [ 72.740025][ T1240] ? __fget_files+0x261/0x290 [ 72.744537][ T1240] ? __fdget_pos+0x14a/0x250 [ 72.749159][ T1240] ksys_read+0x15c/0x240 [ 72.753276][ T1240] ? vfs_write+0xd00/0xd00 [ 72.757489][ T1240] __x64_sys_read+0x76/0x80 [ 72.762106][ T1240] do_syscall_64+0x3d/0xb0 [ 72.766597][ T1240] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 72.772433][ T1240] RIP: 0033:0x7f1e379dd639 [ 72.776659][ T1240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.797234][ T1240] RSP: 002b:00007f1e374ee168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.805488][ T1240] RAX: ffffffffffffffda RBX: 00007f1e37afe1f0 RCX: 00007f1e379dd639 [ 72.813372][ T1240] RDX: 0000000000002020 RSI: 0000000020002140 RDI: 0000000000000003 [ 72.821535][ T1240] RBP: 00007f1e37a38ae9 R08: 0000000000000000 R09: 0000000000000000 [ 72.829432][ T1240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.837412][ T1240] R13: 00007fff601ae45f R14: 00007f1e374ee300 R15: 0000000000022000 [ 72.845235][ T1240] [ 72.848087][ T1240] [ 72.850259][ T1240] Allocated by task 1235: [ 72.854426][ T1240] ____kasan_kmalloc+0xdb/0x110 [ 72.859112][ T1240] __kasan_kmalloc+0x9/0x10 [ 72.863461][ T1240] __kmalloc+0x13a/0x270 [ 72.867537][ T1240] __d_alloc+0x95/0x650 [ 72.871519][ T1240] d_alloc_parallel+0xd1/0xed0 [ 72.876207][ T1240] __lookup_slow+0x149/0x360 [ 72.880887][ T1240] lookup_slow+0x54/0x70 [ 72.885334][ T1240] walk_component+0x3d2/0x540 [ 72.889841][ T1240] path_lookupat+0x95/0x340 [ 72.894178][ T1240] filename_lookup+0x22b/0x550 [ 72.898805][ T1240] user_path_at_empty+0x38/0x150 [ 72.903569][ T1240] __se_sys_mount+0x21f/0x2d0 [ 72.908158][ T1240] __x64_sys_mount+0xba/0xd0 [ 72.912852][ T1240] do_syscall_64+0x3d/0xb0 [ 72.917216][ T1240] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 72.922939][ T1240] [ 72.925107][ T1240] Freed by task 341: [ 72.928839][ T1240] kasan_set_track+0x4b/0x70 [ 72.933437][ T1240] kasan_set_free_info+0x23/0x40 [ 72.938390][ T1240] ____kasan_slab_free+0x126/0x160 [ 72.943424][ T1240] __kasan_slab_free+0x11/0x20 [ 72.948198][ T1240] slab_free_freelist_hook+0xbd/0x190 [ 72.953405][ T1240] kmem_cache_free_bulk+0x552/0x700 [ 72.958430][ T1240] kfree_rcu_work+0x2b2/0x6a0 [ 72.962942][ T1240] process_one_work+0x635/0xa70 [ 72.967717][ T1240] worker_thread+0x8bb/0xf40 [ 72.972143][ T1240] kthread+0x3a1/0x480 [ 72.976074][ T1240] ret_from_fork+0x1f/0x30 [ 72.980303][ T1240] [ 72.982678][ T1240] Last potentially related work creation: [ 72.989148][ T1240] kasan_save_stack+0x3b/0x60 [ 72.993651][ T1240] __kasan_record_aux_stack+0xd3/0xf0 [ 72.998858][ T1240] kasan_record_aux_stack_noalloc+0xb/0x10 [ 73.004506][ T1240] kvfree_call_rcu+0xb2/0x7d0 [ 73.009014][ T1240] __d_move+0x927/0x10e0 [ 73.013096][ T1240] __d_unalias+0x194/0x1c0 [ 73.018817][ T1240] d_splice_alias+0x19d/0x310 [ 73.023333][ T1240] fuse_lookup+0x23d/0x500 [ 73.027592][ T1240] __lookup_slow+0x26d/0x360 [ 73.032142][ T1240] lookup_slow+0x54/0x70 [ 73.036176][ T1240] walk_component+0x3d2/0x540 [ 73.040690][ T1240] link_path_walk+0x5b9/0xd10 [ 73.045205][ T1240] filename_parentat+0x228/0x5a0 [ 73.049978][ T1240] filename_create+0xe3/0x490 [ 73.054602][ T1240] do_mkdirat+0x112/0x390 [ 73.058850][ T1240] __x64_sys_mkdir+0x69/0x80 [ 73.063377][ T1240] do_syscall_64+0x3d/0xb0 [ 73.067617][ T1240] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 73.073371][ T1240] [ 73.075515][ T1240] The buggy address belongs to the object at ffff888126e71800 [ 73.075515][ T1240] which belongs to the cache kmalloc-rcl-512 of size 512 [ 73.090099][ T1240] The buggy address is located 16 bytes inside of [ 73.090099][ T1240] 512-byte region [ffff888126e71800, ffff888126e71a00) [ 73.103344][ T1240] The buggy address belongs to the page: [ 73.108838][ T1240] page:ffffea00049b9c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126e70 [ 73.118993][ T1240] head:ffffea00049b9c00 order:2 compound_mapcount:0 compound_pincount:0 [ 73.127142][ T1240] flags: 0x4000000000010200(slab|head|zone=1) [ 73.133044][ T1240] raw: 4000000000010200 0000000000000000 dead000000000122 ffff88810004c300 [ 73.141646][ T1240] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 73.150058][ T1240] page dumped because: kasan: bad access detected [ 73.156410][ T1240] page_owner tracks the page as allocated [ 73.162054][ T1240] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 1203, ts 71543968866, free_ts 0 [ 73.184009][ T1240] post_alloc_hook+0x1a3/0x1b0 [ 73.188782][ T1240] get_page_from_freelist+0x2c14/0x2cf0 [ 73.194163][ T1240] __alloc_pages+0x386/0x7b0 [ 73.198589][ T1240] new_slab+0x92/0x490 [ 73.202493][ T1240] ___slab_alloc+0x39e/0x830 [ 73.206927][ T1240] __slab_alloc+0x4a/0x90 [ 73.211100][ T1240] __kmalloc+0x16d/0x270 [ 73.215173][ T1240] __d_alloc+0x95/0x650 [ 73.219161][ T1240] d_alloc_parallel+0xd1/0xed0 [ 73.223759][ T1240] __lookup_slow+0x149/0x360 [ 73.228182][ T1240] lookup_slow+0x54/0x70 [ 73.232268][ T1240] walk_component+0x3d2/0x540 [ 73.236779][ T1240] path_lookupat+0x95/0x340 [ 73.241124][ T1240] filename_lookup+0x22b/0x550 [ 73.245714][ T1240] user_path_at_empty+0x38/0x150 [ 73.250496][ T1240] __se_sys_mount+0x21f/0x2d0 [ 73.255005][ T1240] page_owner free stack trace missing [ 73.260210][ T1240] [ 73.262406][ T1240] Memory state around the buggy address: [ 73.267847][ T1240] ffff888126e71700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.276128][ T1240] ffff888126e71780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.284162][ T1240] >ffff888126e71800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.293061][ T1240] ^ [ 73.297749][ T1240] ffff888126e71880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.306153][ T1240] ffff888126e71900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.315345][ T1240] ================================================================== [ 73.324612][ T1240] Disabling lock debugging due to kernel taint 2023/03/03 02:47:14 executed programs: 166 2023/03/03 02:47:19 executed programs: 202