Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. 2023/07/20 21:47:41 ignoring optional flag "sandboxArg"="0" 2023/07/20 21:47:41 parsed 1 programs 2023/07/20 21:47:41 executed programs: 0 [ 43.445416][ T23] kauditd_printk_skb: 69 callbacks suppressed [ 43.445425][ T23] audit: type=1400 audit(1689889661.520:145): avc: denied { mounton } for pid=405 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.480905][ T23] audit: type=1400 audit(1689889661.520:146): avc: denied { mount } for pid=405 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.618433][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.627391][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.635911][ T412] device bridge_slave_0 entered promiscuous mode [ 43.645138][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.652962][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.661139][ T412] device bridge_slave_1 entered promiscuous mode [ 43.835630][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.843270][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.850925][ T420] device bridge_slave_0 entered promiscuous mode [ 43.862507][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.870395][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.878272][ T420] device bridge_slave_1 entered promiscuous mode [ 43.909551][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.916781][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.924608][ T423] device bridge_slave_0 entered promiscuous mode [ 43.933770][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.941207][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.949155][ T423] device bridge_slave_1 entered promiscuous mode [ 44.007866][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.016381][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.023752][ T425] device bridge_slave_0 entered promiscuous mode [ 44.030906][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.038508][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.046220][ T425] device bridge_slave_1 entered promiscuous mode [ 44.067486][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.075030][ T422] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.082921][ T422] device bridge_slave_0 entered promiscuous mode [ 44.090784][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.091652][ T23] audit: type=1400 audit(1689889662.160:147): avc: denied { create } for pid=412 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.098411][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.119219][ T23] audit: type=1400 audit(1689889662.160:148): avc: denied { write } for pid=412 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.127124][ T422] device bridge_slave_1 entered promiscuous mode [ 44.148540][ T23] audit: type=1400 audit(1689889662.160:149): avc: denied { read } for pid=412 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.195510][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.203415][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.211483][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.218990][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.234589][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.242772][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.250218][ T421] device bridge_slave_0 entered promiscuous mode [ 44.293099][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.300379][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.308726][ T421] device bridge_slave_1 entered promiscuous mode [ 44.425606][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.433606][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.441743][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.449118][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.469563][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.477905][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.486096][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.493272][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.508754][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.517894][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.525500][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.532519][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.551669][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.559531][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.567321][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.574667][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.582430][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.589852][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.599239][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.606959][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.642336][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.650707][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.658877][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.668247][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.676615][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.683476][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.690807][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.699144][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.707327][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.714753][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.722645][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.731313][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.767550][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.776179][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.784067][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.792717][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.801228][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.808052][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.815398][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.823974][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.833318][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.841260][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.849226][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.858344][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.890948][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.898771][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.923929][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.933033][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.942111][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.949811][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.957877][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.966827][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.976276][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.984179][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.991727][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.999681][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.007997][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.017717][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.026219][ T107] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.033189][ T107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.041355][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.050614][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.059203][ T107] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.071209][ T107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.090839][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.100492][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.128999][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.138671][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.146983][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.155950][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.165634][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.175077][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.182285][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.190617][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.199417][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.208320][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.215969][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.223645][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.261675][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.270037][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.283905][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.292354][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.300005][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.308215][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.316877][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.325542][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.334938][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.343525][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.351863][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.359854][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.369545][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.378280][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.386495][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.394948][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.403248][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.411385][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.427391][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.435278][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.444136][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.453842][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.462505][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.469936][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.491274][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.511202][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.520900][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.530257][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.538856][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.547464][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.557110][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.582887][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.591321][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.599219][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.607627][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.616621][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.624889][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.633688][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.642013][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.650199][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.658818][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.687592][ T23] audit: type=1400 audit(1689889663.760:150): avc: denied { mounton } for pid=420 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 45.690401][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.720027][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.762998][ T23] audit: type=1400 audit(1689889663.830:151): avc: denied { sys_admin } for pid=447 comm="syz-executor.3" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.794530][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.803752][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.813416][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.822528][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.831888][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.840201][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.849273][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.858314][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.867346][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.876470][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.885446][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.894092][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.903236][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.911433][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.919367][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.929417][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.955428][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.964617][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.974146][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.983046][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.020705][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.029727][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.067517][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.079861][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.090871][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.101033][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.125055][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.147447][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.157414][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.167310][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.193939][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.210220][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.220640][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.229699][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2023/07/20 21:47:46 executed programs: 148 2023/07/20 21:47:51 executed programs: 592 2023/07/20 21:47:56 executed programs: 884 2023/07/20 21:48:01 executed programs: 1283 [ 66.561601][ T74] cfg80211: failed to load regulatory.db 2023/07/20 21:48:06 executed programs: 1675 2023/07/20 21:48:11 executed programs: 2032 [ 78.842460][ T9539] ================================================================== [ 78.851923][ T9539] BUG: KASAN: use-after-free in detach_if_pending+0x188/0x360 [ 78.859326][ T9539] Write of size 8 at addr ffff8881e91d71c8 by task syz-executor.5/9539 [ 78.867711][ T9539] [ 78.870244][ T9539] CPU: 1 PID: 9539 Comm: syz-executor.5 Not tainted 5.4.242-syzkaller-00086-g14e059a4e07a #0 [ 78.880551][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 78.890898][ T9539] Call Trace: [ 78.894082][ T9539] dump_stack+0x1d8/0x241 [ 78.898246][ T9539] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 78.904220][ T9539] ? printk+0xd1/0x111 [ 78.908066][ T9539] ? detach_if_pending+0x188/0x360 [ 78.913244][ T9539] ? wake_up_klogd+0xb2/0xf0 [ 78.917742][ T9539] ? detach_if_pending+0x188/0x360 [ 78.923081][ T9539] print_address_description+0x8c/0x600 [ 78.929898][ T9539] ? panic+0x896/0x896 [ 78.934812][ T9539] ? detach_if_pending+0x188/0x360 [ 78.940054][ T9539] __kasan_report+0xf3/0x120 [ 78.944624][ T9539] ? detach_if_pending+0x188/0x360 [ 78.950496][ T9539] kasan_report+0x30/0x60 [ 78.956005][ T9539] detach_if_pending+0x188/0x360 [ 78.961570][ T9539] del_timer_sync+0x13c/0x230 [ 78.966392][ T9539] ? find_next_bit+0xcd/0x100 [ 78.971935][ T9539] ? try_to_del_timer_sync+0x150/0x150 [ 78.977639][ T9539] ? pcpu_chunk_relocate+0xdc/0x3a0 [ 78.982925][ T9539] tun_flow_uninit+0x2c/0x280 [ 78.987946][ T9539] ? free_percpu+0x359/0x910 [ 78.992926][ T9539] tun_free_netdev+0x77/0x190 [ 78.997721][ T9539] ? tun_xdp+0x3f0/0x3f0 [ 79.002398][ T9539] netdev_run_todo+0xb7f/0xdf0 [ 79.007416][ T9539] ? netdev_refcnt_read+0x1c0/0x1c0 [ 79.012761][ T9539] ? kfree+0x123/0x370 [ 79.016736][ T9539] tun_chr_close+0xc1/0x130 [ 79.021701][ T9539] ? tun_chr_open+0x530/0x530 [ 79.026675][ T9539] __fput+0x262/0x680 [ 79.030560][ T9539] task_work_run+0x140/0x170 [ 79.035370][ T9539] exit_to_usermode_loop+0x190/0x1a0 [ 79.040912][ T9539] prepare_exit_to_usermode+0x199/0x200 [ 79.046439][ T9539] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 79.052174][ T9539] [ 79.054315][ T9539] The buggy address belongs to the page: [ 79.059878][ T9539] page:ffffea0007a475c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 [ 79.068915][ T9539] flags: 0x8000000000000000() [ 79.073516][ T9539] raw: 8000000000000000 0000000000000000 ffffea0007a475c8 0000000000000000 [ 79.081943][ T9539] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.090571][ T9539] page dumped because: kasan: bad access detected [ 79.097093][ T9539] page_owner tracks the page as freed [ 79.102407][ T9539] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x146dc0(GFP_USER|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ZERO) [ 79.118308][ T9539] prep_new_page+0x18f/0x370 [ 79.122944][ T9539] get_page_from_freelist+0x2d13/0x2d90 [ 79.128699][ T9539] __alloc_pages_nodemask+0x393/0x840 [ 79.134213][ T9539] kmalloc_order_trace+0x2a/0x100 [ 79.139000][ T9539] kvmalloc_node+0x7e/0xf0 [ 79.143418][ T9539] alloc_netdev_mqs+0x85/0xc70 [ 79.148110][ T9539] tun_set_iff+0x51f/0xdc0 [ 79.152633][ T9539] __tun_chr_ioctl+0x860/0x1d50 [ 79.157413][ T9539] do_vfs_ioctl+0x742/0x1720 [ 79.162169][ T9539] __x64_sys_ioctl+0xd4/0x110 [ 79.167198][ T9539] do_syscall_64+0xca/0x1c0 [ 79.173371][ T9539] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 79.180982][ T9539] page last free stack trace: [ 79.186224][ T9539] __free_pages_ok+0x847/0x950 [ 79.190901][ T9539] __free_pages+0x91/0x140 [ 79.195297][ T9539] device_release+0x6b/0x190 [ 79.200308][ T9539] kobject_put+0x1e6/0x2f0 [ 79.209285][ T9539] netdev_run_todo+0xc44/0xdf0 [ 79.214585][ T9539] tun_chr_close+0xc1/0x130 [ 79.219096][ T9539] __fput+0x262/0x680 [ 79.222898][ T9539] task_work_run+0x140/0x170 [ 79.227678][ T9539] exit_to_usermode_loop+0x190/0x1a0 [ 79.233208][ T9539] prepare_exit_to_usermode+0x199/0x200 [ 79.238652][ T9539] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 79.244701][ T9539] [ 79.247203][ T9539] Memory state around the buggy address: [ 79.252834][ T9539] ffff8881e91d7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.260799][ T9539] ffff8881e91d7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.270128][ T9539] >ffff8881e91d7180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.278586][ T9539] ^ [ 79.285168][ T9539] ffff8881e91d7200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2023/07/20 21:48:17 executed programs: 2383 [ 79.294383][ T9539] ffff8881e91d7280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 79.303089][ T9539] ================================================================== [ 79.312281][ T9539] Disabling lock debugging due to kernel taint 2023/07/20 21:48:22 executed programs: 2689