Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. 2024/04/28 00:05:00 ignoring optional flag "sandboxArg"="0" 2024/04/28 00:05:00 parsed 1 programs 2024/04/28 00:05:00 executed programs: 0 [ 42.566154][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 42.566162][ T29] audit: type=1400 audit(1714262700.796:150): avc: denied { mounton } for pid=337 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.605980][ T29] audit: type=1400 audit(1714262700.796:151): avc: denied { mount } for pid=337 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 42.632186][ T29] audit: type=1400 audit(1714262700.796:152): avc: denied { setattr } for pid=337 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.673300][ T29] audit: type=1400 audit(1714262700.886:153): avc: denied { mounton } for pid=349 comm="syz-executor.3" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 42.795882][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.803218][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.811422][ T349] device bridge_slave_0 entered promiscuous mode [ 42.820255][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.827870][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.836092][ T349] device bridge_slave_1 entered promiscuous mode [ 42.846961][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.854694][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.863585][ T351] device bridge_slave_0 entered promiscuous mode [ 42.872116][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.880396][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.889010][ T351] device bridge_slave_1 entered promiscuous mode [ 42.936748][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.944753][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.957760][ T350] device bridge_slave_0 entered promiscuous mode [ 42.971884][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.980015][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.993586][ T350] device bridge_slave_1 entered promiscuous mode [ 43.036395][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.043970][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.051882][ T347] device bridge_slave_0 entered promiscuous mode [ 43.076819][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.084702][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.093472][ T347] device bridge_slave_1 entered promiscuous mode [ 43.187366][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.196183][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.207713][ T356] device bridge_slave_0 entered promiscuous mode [ 43.216193][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.224821][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.235710][ T356] device bridge_slave_1 entered promiscuous mode [ 43.261609][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.269140][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.277947][ T348] device bridge_slave_0 entered promiscuous mode [ 43.299257][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.306844][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.315518][ T348] device bridge_slave_1 entered promiscuous mode [ 43.339694][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.349813][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.359417][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.367016][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.518703][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.526949][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.534334][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.541277][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.565999][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.575338][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.584000][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.591834][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.599521][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.607818][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.618142][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.625668][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.647354][ T349] device veth0_vlan entered promiscuous mode [ 43.663083][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.671994][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.680395][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.689531][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.697661][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.716454][ T349] device veth1_macvtap entered promiscuous mode [ 43.734307][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.772254][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.781842][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.820018][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.829106][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.836443][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.844561][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.851778][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.860747][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.869362][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.876972][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.885920][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.894801][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.903058][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.911386][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.920093][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.929305][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.939406][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.953586][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.966060][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.976085][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.985477][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.994015][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.003749][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.012080][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.020694][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.029550][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.038953][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.046432][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.055428][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.064134][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.074824][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.084629][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.093592][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.101992][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.115969][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.124778][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.132773][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.141675][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.150663][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.160449][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.170005][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.181331][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.189765][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.198014][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.205519][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.213542][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.221059][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.237409][ T351] device veth0_vlan entered promiscuous mode [ 44.247342][ T29] audit: type=1400 audit(1714262702.476:154): avc: denied { mounton } for pid=378 comm="syz-executor.3" path="/root/syzkaller-testdir1034437131/syzkaller.H30KRV/0/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 44.278110][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.287639][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.296373][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.305393][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.313831][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.322538][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.331180][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.338504][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.346356][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.354413][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.363519][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.392440][ T351] device veth1_macvtap entered promiscuous mode [ 44.399595][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.409340][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.419198][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.428084][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.437009][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.444231][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.452353][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.462007][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.472223][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.481485][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.490100][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.498895][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.507516][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.517125][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.527016][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.534591][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.542324][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.551439][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.560142][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.569065][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.582856][ T350] device veth0_vlan entered promiscuous mode [ 44.597793][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.607323][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.617829][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.625891][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.634617][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.642714][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.653001][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.667832][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.677380][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.687353][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.695396][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.712527][ T356] device veth0_vlan entered promiscuous mode [ 44.724047][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.735916][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.745570][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.755173][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.764894][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.790423][ T347] device veth0_vlan entered promiscuous mode [ 44.801521][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.810412][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.819646][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.828859][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.852368][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.861680][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.873240][ T350] device veth1_macvtap entered promiscuous mode [ 44.881808][ T347] device veth1_macvtap entered promiscuous mode [ 44.891201][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.900484][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.909758][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.918376][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.932318][ T356] device veth1_macvtap entered promiscuous mode [ 44.943424][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.953104][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.961847][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.970188][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.980314][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.988879][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.998550][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.013592][ T348] device veth0_vlan entered promiscuous mode [ 45.020773][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.030206][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.038690][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.047008][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.055631][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.065089][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.076865][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.083781][ T29] audit: type=1400 audit(1714262703.306:155): avc: denied { unmount } for pid=349 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 45.087264][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.122254][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.131003][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.151698][ T348] device veth1_macvtap entered promiscuous mode [ 45.170724][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.181725][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.191026][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.201012][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.211079][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.221519][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.232402][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.252711][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.261669][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.273329][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.282084][ T390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.050317][ T464] ================================================================== [ 47.058572][ T464] BUG: KASAN: use-after-free in fuse_copy_one+0x84/0x310 [ 47.066576][ T464] Read of size 256 at addr ffff888121e87810 by task syz-executor.5/464 [ 47.078512][ T464] [ 47.081043][ T464] CPU: 1 PID: 464 Comm: syz-executor.5 Not tainted 5.15.149-syzkaller #0 [ 47.090264][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 47.101729][ T464] Call Trace: [ 47.105191][ T464] [ 47.108401][ T464] dump_stack_lvl+0x38/0x49 [ 47.113713][ T464] print_address_description.constprop.0+0x24/0x160 [ 47.120903][ T464] ? fuse_copy_one+0x84/0x310 [ 47.125995][ T464] kasan_report.cold+0x82/0xdb [ 47.131070][ T464] ? fuse_copy_one+0x84/0x310 [ 47.136403][ T464] kasan_check_range+0x148/0x190 [ 47.142239][ T464] memcpy+0x24/0x60 [ 47.146376][ T464] fuse_copy_one+0x84/0x310 [ 47.150893][ T464] ? fuse_copy_finish+0x240/0x240 [ 47.155894][ T464] fuse_copy_args+0x84/0x360 [ 47.160964][ T464] ? memcpy+0x4e/0x60 [ 47.165025][ T464] fuse_dev_do_read.constprop.0+0x144b/0x1c30 [ 47.171142][ T464] ? futex_wait_queue_me+0x6d0/0x6d0 [ 47.180099][ T464] ? fuse_copy_args+0x360/0x360 [ 47.185358][ T464] fuse_dev_read+0x13d/0x1e0 [ 47.190493][ T464] ? fuse_dev_splice_read+0x490/0x490 [ 47.196264][ T464] ? __pmd_alloc+0x330/0x330 [ 47.202386][ T464] new_sync_read+0x353/0x6d0 [ 47.207441][ T464] ? fsnotify+0xe30/0xe30 [ 47.212550][ T464] ? ksys_lseek+0x140/0x140 [ 47.218098][ T464] ? put_vma+0x1a/0x50 [ 47.222216][ T464] ? selinux_file_permission+0x2f1/0x3f0 [ 47.228378][ T464] ? fsnotify+0xe30/0xe30 [ 47.233654][ T464] vfs_read+0x347/0x4b0 [ 47.238257][ T464] ksys_read+0x111/0x210 [ 47.242967][ T464] ? vfs_write+0x8e0/0x8e0 [ 47.247358][ T464] ? __kasan_check_write+0x14/0x20 [ 47.252585][ T464] ? switch_fpu_return+0xec/0x1f0 [ 47.257620][ T464] __x64_sys_read+0x6e/0xb0 [ 47.262040][ T464] ? syscall_exit_to_user_mode+0x2f/0x40 [ 47.267693][ T464] do_syscall_64+0x35/0xb0 [ 47.272249][ T464] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.278365][ T464] RIP: 0033:0x7f1c34bb0db9 [ 47.282639][ T464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.303800][ T464] RSP: 002b:00007f1c346d10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 47.312731][ T464] RAX: ffffffffffffffda RBX: 00007f1c34cd11f0 RCX: 00007f1c34bb0db9 [ 47.320863][ T464] RDX: 0000000000002020 RSI: 0000000020002140 RDI: 0000000000000003 [ 47.328737][ T464] RBP: 00007f1c34c0dad0 R08: 0000000000000000 R09: 0000000000000000 [ 47.336635][ T464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.344437][ T464] R13: 000000000000006e R14: 00007f1c34cd11f0 R15: 00007ffdbfac9458 [ 47.352249][ T464] [ 47.355134][ T464] [ 47.357285][ T464] Allocated by task 457: [ 47.361460][ T464] kasan_save_stack+0x26/0x50 [ 47.366048][ T464] __kasan_kmalloc+0xae/0xe0 [ 47.370566][ T464] __kmalloc+0x2d5/0x4e0 [ 47.374644][ T464] __d_alloc+0x593/0x8a0 [ 47.378717][ T464] d_alloc+0x3c/0x210 [ 47.382549][ T464] d_alloc_parallel+0xdc/0x1090 [ 47.387363][ T464] __lookup_slow+0x106/0x3d0 [ 47.391884][ T464] walk_component+0x3a1/0x690 [ 47.396385][ T464] path_lookupat+0x11f/0x6b0 [ 47.400816][ T464] filename_lookup+0x192/0x510 [ 47.405418][ T464] user_path_at_empty+0x3a/0x60 [ 47.410099][ T464] __x64_sys_mount+0x1a0/0x280 [ 47.414844][ T464] do_syscall_64+0x35/0xb0 [ 47.419219][ T464] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.425040][ T464] [ 47.427190][ T464] Freed by task 25: [ 47.430959][ T464] kasan_save_stack+0x26/0x50 [ 47.435988][ T464] kasan_set_track+0x25/0x30 [ 47.440421][ T464] kasan_set_free_info+0x24/0x40 [ 47.445211][ T464] __kasan_slab_free+0x111/0x150 [ 47.450115][ T464] slab_free_freelist_hook+0x94/0x1a0 [ 47.455287][ T464] kmem_cache_free_bulk+0x3be/0x7a0 [ 47.460389][ T464] kfree_rcu_work+0x418/0x8b0 [ 47.465100][ T464] process_one_work+0x62c/0xec0 [ 47.470225][ T464] worker_thread+0x48e/0xdb0 [ 47.474840][ T464] kthread+0x324/0x3e0 [ 47.478720][ T464] ret_from_fork+0x1f/0x30 [ 47.483338][ T464] [ 47.485500][ T464] Last potentially related work creation: [ 47.491323][ T464] kasan_save_stack+0x26/0x50 [ 47.495838][ T464] __kasan_record_aux_stack+0xd8/0xf0 [ 47.501122][ T464] kasan_record_aux_stack_noalloc+0xb/0x10 [ 47.506777][ T464] kvfree_call_rcu+0x98/0x8e0 [ 47.511377][ T464] __d_move+0x3f1/0x13a0 [ 47.515443][ T464] d_splice_alias+0x8a7/0xb40 [ 47.519956][ T464] fuse_lookup+0x5a6/0x15a0 [ 47.524393][ T464] __lookup_slow+0x19b/0x3d0 [ 47.528850][ T464] walk_component+0x3a1/0x690 [ 47.533406][ T464] link_path_walk.part.0+0x57b/0xb30 [ 47.538622][ T464] path_parentat+0x8f/0x160 [ 47.542963][ T464] __filename_parentat+0x19e/0x630 [ 47.547907][ T464] filename_create+0x95/0x3e0 [ 47.552541][ T464] do_mkdirat+0x9c/0x2c0 [ 47.556748][ T464] __x64_sys_mkdir+0xd5/0x120 [ 47.561351][ T464] do_syscall_64+0x35/0xb0 [ 47.565612][ T464] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.571344][ T464] [ 47.573502][ T464] The buggy address belongs to the object at ffff888121e87800 [ 47.573502][ T464] which belongs to the cache kmalloc-rcl-512 of size 512 [ 47.587837][ T464] The buggy address is located 16 bytes inside of [ 47.587837][ T464] 512-byte region [ffff888121e87800, ffff888121e87a00) [ 47.601377][ T464] The buggy address belongs to the page: [ 47.606837][ T464] page:ffffea000487a100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121e84 [ 47.616957][ T464] head:ffffea000487a100 order:2 compound_mapcount:0 compound_pincount:0 [ 47.625060][ T464] flags: 0x4000000000010200(slab|head|zone=1) [ 47.630971][ T464] raw: 4000000000010200 0000000000000000 dead000000000122 ffff88810004c300 [ 47.639570][ T464] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 47.648129][ T464] page dumped because: kasan: bad access detected [ 47.654345][ T464] page_owner tracks the page as allocated [ 47.660107][ T464] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 379, ts 44419069201, free_ts 0 [ 47.681223][ T464] prep_new_page+0x1a2/0x310 [ 47.685641][ T464] get_page_from_freelist+0x1ce2/0x30a0 [ 47.691039][ T464] __alloc_pages+0x2d1/0x2620 [ 47.695541][ T464] allocate_slab+0x39d/0x530 [ 47.699962][ T464] ___slab_alloc.constprop.0+0x3ca/0x890 [ 47.705432][ T464] __slab_alloc.constprop.0+0x42/0x80 [ 47.710967][ T464] __kmalloc+0x49f/0x4e0 [ 47.715152][ T464] __d_alloc+0x593/0x8a0 [ 47.719229][ T464] d_alloc+0x3c/0x210 [ 47.723044][ T464] d_alloc_parallel+0xdc/0x1090 [ 47.727820][ T464] __lookup_slow+0x106/0x3d0 [ 47.732456][ T464] walk_component+0x3a1/0x690 [ 47.737147][ T464] path_lookupat+0x11f/0x6b0 [ 47.741989][ T464] filename_lookup+0x192/0x510 [ 47.746678][ T464] user_path_at_empty+0x3a/0x60 [ 47.751682][ T464] vfs_statx+0xeb/0x330 [ 47.755661][ T464] page_owner free stack trace missing [ 47.761221][ T464] [ 47.763377][ T464] Memory state around the buggy address: [ 47.769047][ T464] ffff888121e87700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.777047][ T464] ffff888121e87780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.785177][ T464] >ffff888121e87800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.793170][ T464] ^ 2024/04/28 00:05:06 executed programs: 19 [ 47.797602][ T464] ffff888121e87880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.805582][ T464] ffff888121e87900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.814071][ T464] ================================================================== [ 47.822425][ T464] Disabling lock debugging due to kernel taint 2024/04/28 00:05:11 executed programs: 55