Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. 2025/03/27 08:10:25 ignoring optional flag "sandboxArg"="0" 2025/03/27 08:10:25 ignoring optional flag "type"="gce" 2025/03/27 08:10:25 parsed 1 programs 2025/03/27 08:10:25 executed programs: 0 [ 49.348051][ T422] cgroup1: Unknown subsys name 'perf_event' [ 49.348109][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 49.348121][ T23] audit: type=1400 audit(1743063025.880:88): avc: denied { mounton } for pid=422 comm="syz-executor.3" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 49.369541][ T424] cgroup1: Unknown subsys name 'perf_event' [ 49.406244][ T422] cgroup1: Unknown subsys name 'net_cls' [ 49.408367][ T426] cgroup1: Unknown subsys name 'perf_event' [ 49.425108][ T429] cgroup1: Unknown subsys name 'perf_event' [ 49.426646][ T427] cgroup1: Unknown subsys name 'perf_event' [ 49.431787][ T429] cgroup1: Unknown subsys name 'net_cls' [ 49.443693][ T430] cgroup1: Unknown subsys name 'perf_event' [ 49.449967][ T424] cgroup1: Unknown subsys name 'net_cls' [ 49.456057][ T430] cgroup1: Unknown subsys name 'net_cls' [ 49.456394][ T427] cgroup1: Unknown subsys name 'net_cls' [ 49.467825][ T426] cgroup1: Unknown subsys name 'net_cls' [ 49.731426][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.738296][ T422] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.745691][ T422] device bridge_slave_0 entered promiscuous mode [ 49.776562][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.783400][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.790922][ T422] device bridge_slave_1 entered promiscuous mode [ 49.806080][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.812928][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.820521][ T424] device bridge_slave_0 entered promiscuous mode [ 49.843587][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.850620][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.858060][ T429] device bridge_slave_0 entered promiscuous mode [ 49.868762][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.875646][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.882948][ T429] device bridge_slave_1 entered promiscuous mode [ 49.889376][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.896262][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.903659][ T424] device bridge_slave_1 entered promiscuous mode [ 49.910316][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.917315][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.924954][ T430] device bridge_slave_0 entered promiscuous mode [ 49.932021][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.939023][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.946539][ T426] device bridge_slave_0 entered promiscuous mode [ 49.957107][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.963944][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.971404][ T426] device bridge_slave_1 entered promiscuous mode [ 49.989080][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.995941][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.003456][ T430] device bridge_slave_1 entered promiscuous mode [ 50.014797][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.021652][ T427] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.029180][ T427] device bridge_slave_0 entered promiscuous mode [ 50.039863][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.046791][ T427] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.054365][ T427] device bridge_slave_1 entered promiscuous mode [ 50.323634][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.330501][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.337632][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.344360][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.361654][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.368517][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.375745][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.382574][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.396308][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.403160][ T429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.410372][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.417229][ T429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.437646][ T427] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.444514][ T427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.451622][ T427] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.458451][ T427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.475065][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.482176][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.489455][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.496295][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.509445][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.516307][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.523504][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.530287][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.569658][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.576833][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.583883][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.591104][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.598181][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.605304][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.612302][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.619446][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.626610][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.633578][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.640969][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.648030][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.656395][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.663823][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.715619][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.722935][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.731291][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.738158][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.747138][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.755221][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.762073][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.769343][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.777540][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.784356][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.791756][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.799886][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.806727][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.814088][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.841508][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.849592][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.857821][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.868421][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.875852][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.893515][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.926866][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.935149][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.942442][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.950035][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.958202][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.966469][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.974996][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.983051][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.989942][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.997563][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.005862][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.013931][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.021009][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.028223][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.037002][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.045101][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.051920][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.059253][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.067690][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.075876][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.082708][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.107686][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.115982][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.126509][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.135285][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.142110][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.149841][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.157163][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.164560][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.172746][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.181314][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.188251][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.195772][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.203730][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.211696][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.245861][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.254209][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.263072][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.271743][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.278604][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.286338][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.294122][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.303185][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.327940][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.336243][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.346302][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.354342][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.361198][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.368943][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.377690][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.415643][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.424050][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.433169][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.441102][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.449439][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.457783][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.466246][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.474578][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.513279][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.521963][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.531320][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.541189][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.542759][ T23] audit: type=1400 audit(1743063028.080:89): avc: denied { mounton } for pid=452 comm="syz-executor.3" path="/root/syzkaller-testdir1117825469/syzkaller.hX258m/0/file0" dev="sda1" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 51.576209][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.577116][ T23] audit: type=1400 audit(1743063028.100:90): avc: denied { mount } for pid=452 comm="syz-executor.3" name="/" dev="incremental-fs" ino=1960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.619726][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.628237][ T23] audit: type=1400 audit(1743063028.120:91): avc: denied { unmount } for pid=452 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.629049][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.658227][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.667179][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.675630][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.684617][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.692986][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.725250][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.733530][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.742245][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.759874][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.768083][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.796106][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.805092][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.813563][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.822174][ T23] audit: type=1400 audit(1743063028.370:92): avc: denied { read } for pid=457 comm="syz-executor.3" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.822287][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.846859][ T23] audit: type=1400 audit(1743063028.390:93): avc: denied { open } for pid=457 comm="syz-executor.3" path="/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.899402][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.907813][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.917402][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.925922][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.934240][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.946079][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.969847][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.981412][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.000671][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.010035][ T104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/03/27 08:10:30 executed programs: 147 [ 57.461749][ T1674] ================================================================== [ 57.469674][ T1674] BUG: KASAN: use-after-free in selinux_inode_permission+0x2f1/0x6a0 [ 57.477559][ T1674] Read of size 8 at addr ffff8881e2c91050 by task syz-executor.0/1674 [ 57.485516][ T1674] [ 57.487790][ T1674] CPU: 1 PID: 1674 Comm: syz-executor.0 Not tainted 5.4.290-syzkaller-05053-g41adfeb3d639 #0 [ 57.497924][ T1674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.508296][ T1674] Call Trace: [ 57.511542][ T1674] dump_stack+0x1d8/0x241 [ 57.515705][ T1674] ? is_mmconf_reserved+0x430/0x430 [ 57.520742][ T1674] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 57.526374][ T1674] ? printk+0xd1/0x111 [ 57.530290][ T1674] ? selinux_inode_permission+0x2f1/0x6a0 [ 57.535832][ T1674] print_address_description+0x8c/0x600 [ 57.541223][ T1674] ? selinux_inode_permission+0x2f1/0x6a0 [ 57.546770][ T1674] __kasan_report+0xf3/0x120 [ 57.551196][ T1674] ? selinux_inode_permission+0x2f1/0x6a0 [ 57.556845][ T1674] kasan_report+0x30/0x60 [ 57.561003][ T1674] selinux_inode_permission+0x2f1/0x6a0 [ 57.566384][ T1674] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 57.572055][ T1674] ? generic_permission+0x141/0x3e0 [ 57.577056][ T1674] ? __fget+0x407/0x490 [ 57.581054][ T1674] security_inode_permission+0x9d/0xf0 [ 57.586346][ T1674] link_path_walk+0x1d1/0x1040 [ 57.590948][ T1674] ? fput_many+0x15e/0x1b0 [ 57.595212][ T1674] ? handle_lookup_down+0x5b0/0x5b0 [ 57.600229][ T1674] ? path_init+0xafe/0xee0 [ 57.604485][ T1674] path_openat+0x1a3/0x34b0 [ 57.608829][ T1674] ? stack_trace_save+0x118/0x1c0 [ 57.613684][ T1674] ? stack_trace_snprint+0x170/0x170 [ 57.618812][ T1674] ? futex_wait+0x890/0x890 [ 57.623163][ T1674] ? __kasan_kmalloc+0x1d9/0x210 [ 57.628007][ T1674] ? do_filp_open+0x450/0x450 [ 57.632515][ T1674] ? do_sys_open+0x357/0x810 [ 57.637155][ T1674] ? do_syscall_64+0xca/0x1c0 [ 57.641677][ T1674] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 57.647568][ T1674] do_filp_open+0x20b/0x450 [ 57.651902][ T1674] ? vfs_tmpfile+0x2c0/0x2c0 [ 57.656329][ T1674] ? _raw_spin_unlock+0x49/0x60 [ 57.661026][ T1674] ? __alloc_fd+0x4c5/0x570 [ 57.665352][ T1674] do_sys_open+0x39c/0x810 [ 57.669607][ T1674] ? file_open_root+0x490/0x490 [ 57.674289][ T1674] ? switch_fpu_return+0x1d4/0x410 [ 57.679252][ T1674] ? ksys_mount+0xe0/0xf0 [ 57.683490][ T1674] do_syscall_64+0xca/0x1c0 [ 57.687867][ T1674] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 57.693576][ T1674] RIP: 0033:0x456e69 [ 57.697290][ T1674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b4 ff ff ff f7 d8 64 89 01 48 [ 57.716734][ T1674] RSP: 002b:00007f671939a0d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.724974][ T1674] RAX: ffffffffffffffda RBX: 000000000055c038 RCX: 0000000000456e69 [ 57.732785][ T1674] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 57.740596][ T1674] RBP: 00000000004b0cab R08: 0000000000000000 R09: 0000000000000000 [ 57.748406][ T1674] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004b02b7 [ 57.756219][ T1674] R13: 000000000000006e R14: 000000000055c038 R15: 00007fff77958ee8 [ 57.764034][ T1674] [ 57.766195][ T1674] Allocated by task 1674: [ 57.770462][ T1674] __kasan_kmalloc+0x171/0x210 [ 57.775151][ T1674] alloc_inode+0x43/0x70 [ 57.779222][ T1674] iget5_locked+0x9c/0x260 [ 57.783471][ T1674] fetch_regular_inode+0x256/0x320 [ 57.788423][ T1674] incfs_mount_fs+0x5c3/0xa00 [ 57.792941][ T1674] legacy_get_tree+0xdf/0x170 [ 57.797472][ T1674] vfs_get_tree+0x85/0x260 [ 57.801879][ T1674] do_new_mount+0x292/0x570 [ 57.806215][ T1674] do_mount+0x688/0xe10 [ 57.810215][ T1674] ksys_mount+0xc2/0xf0 [ 57.814196][ T1674] __x64_sys_mount+0xb1/0xc0 [ 57.818625][ T1674] do_syscall_64+0xca/0x1c0 [ 57.822962][ T1674] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 57.828790][ T1674] [ 57.830970][ T1674] Freed by task 1658: [ 57.834785][ T1674] __kasan_slab_free+0x1b5/0x270 [ 57.839553][ T1674] kfree+0x123/0x370 [ 57.843302][ T1674] evict+0x80c/0x960 [ 57.847031][ T1674] evict_inodes+0x63c/0x6c0 [ 57.851363][ T1674] generic_shutdown_super+0x94/0x300 [ 57.856487][ T1674] kill_anon_super+0x37/0x60 [ 57.860909][ T1674] incfs_kill_sb+0x4c/0x200 [ 57.865248][ T1674] deactivate_locked_super+0xa8/0x110 [ 57.870448][ T1674] deactivate_super+0x1e2/0x2a0 [ 57.875137][ T1674] cleanup_mnt+0x44e/0x500 [ 57.879390][ T1674] task_work_run+0x140/0x170 [ 57.883818][ T1674] exit_to_usermode_loop+0x190/0x1a0 [ 57.888944][ T1674] prepare_exit_to_usermode+0x199/0x200 [ 57.894323][ T1674] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 57.900042][ T1674] [ 57.902214][ T1674] The buggy address belongs to the object at ffff8881e2c91000 [ 57.902214][ T1674] which belongs to the cache kmalloc-1k of size 1024 [ 57.916106][ T1674] The buggy address is located 80 bytes inside of [ 57.916106][ T1674] 1024-byte region [ffff8881e2c91000, ffff8881e2c91400) [ 57.929206][ T1674] The buggy address belongs to the page: [ 57.934690][ T1674] page:ffffea00078b2400 refcount:1 mapcount:0 mapping:ffff8881f5c02280 index:0xffff8881e2c91800 compound_mapcount: 0 [ 57.946740][ T1674] flags: 0x8000000000010200(slab|head) [ 57.952225][ T1674] raw: 8000000000010200 ffffea00078a3800 0000000500000005 ffff8881f5c02280 [ 57.960639][ T1674] raw: ffff8881e2c91800 000000008010000c 00000001ffffffff 0000000000000000 [ 57.969050][ T1674] page dumped because: kasan: bad access detected [ 57.975312][ T1674] page_owner tracks the page as allocated [ 57.980869][ T1674] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 57.995831][ T1674] prep_new_page+0x18f/0x370 [ 58.000243][ T1674] get_page_from_freelist+0x2d13/0x2d90 [ 58.005715][ T1674] __alloc_pages_nodemask+0x393/0x840 [ 58.011247][ T1674] alloc_slab_page+0x39/0x3c0 [ 58.016035][ T1674] new_slab+0x97/0x440 [ 58.019932][ T1674] ___slab_alloc+0x2fe/0x490 [ 58.024373][ T1674] __slab_alloc+0x62/0xa0 [ 58.028608][ T1674] __kmalloc_track_caller+0x16d/0x2b0 [ 58.033818][ T1674] __alloc_skb+0xb4/0x4d0 [ 58.037982][ T1674] netlink_sendmsg+0x797/0xcf0 [ 58.042590][ T1674] ____sys_sendmsg+0x5ac/0x8f0 [ 58.047184][ T1674] __sys_sendmsg+0x28b/0x380 [ 58.051606][ T1674] do_syscall_64+0xca/0x1c0 [ 58.055945][ T1674] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 58.061670][ T1674] page_owner free stack trace missing [ 58.066883][ T1674] [ 58.069049][ T1674] Memory state around the buggy address: [ 58.074527][ T1674] ffff8881e2c90f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.082420][ T1674] ffff8881e2c90f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.090326][ T1674] >ffff8881e2c91000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.098220][ T1674] ^ [ 58.104725][ T1674] ffff8881e2c91080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.112623][ T1674] ffff8881e2c91100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.120600][ T1674] ================================================================== [ 58.128636][ T1674] Disabling lock debugging due to kernel taint 2025/03/27 08:10:35 executed programs: 420 2025/03/27 08:10:40 executed programs: 745 [ 66.425790][ T13] cfg80211: failed to load regulatory.db