Warning: Permanently added '10.128.10.40' (ED25519) to the list of known hosts. 2024/02/28 03:29:33 ignoring optional flag "sandboxArg"="0" 2024/02/28 03:29:33 parsed 1 programs [ 43.648628][ T23] kauditd_printk_skb: 72 callbacks suppressed [ 43.648640][ T23] audit: type=1400 audit(1709090973.620:148): avc: denied { mounton } for pid=406 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.680599][ T23] audit: type=1400 audit(1709090973.620:149): avc: denied { mount } for pid=406 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.704515][ T23] audit: type=1400 audit(1709090973.650:150): avc: denied { unlink } for pid=406 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/02/28 03:29:33 executed programs: 0 [ 43.763526][ T406] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.041749][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.049557][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.058345][ T425] device bridge_slave_0 entered promiscuous mode [ 44.092076][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.099162][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.106687][ T425] device bridge_slave_1 entered promiscuous mode [ 44.139956][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.146933][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.155008][ T418] device bridge_slave_0 entered promiscuous mode [ 44.166389][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.177302][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.186512][ T418] device bridge_slave_1 entered promiscuous mode [ 44.207419][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.215702][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.223618][ T419] device bridge_slave_0 entered promiscuous mode [ 44.235538][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.243476][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.251760][ T419] device bridge_slave_1 entered promiscuous mode [ 44.262404][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.269753][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.277563][ T423] device bridge_slave_0 entered promiscuous mode [ 44.303593][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.310974][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.318909][ T424] device bridge_slave_0 entered promiscuous mode [ 44.333859][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.341601][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.349962][ T423] device bridge_slave_1 entered promiscuous mode [ 44.377937][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.386824][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.394784][ T424] device bridge_slave_1 entered promiscuous mode [ 44.414021][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.421285][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.429284][ T426] device bridge_slave_0 entered promiscuous mode [ 44.456755][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.464312][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.471683][ T426] device bridge_slave_1 entered promiscuous mode [ 44.683776][ T23] audit: type=1400 audit(1709090974.650:151): avc: denied { create } for pid=418 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.707145][ T23] audit: type=1400 audit(1709090974.650:152): avc: denied { write } for pid=418 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.712708][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.728432][ T23] audit: type=1400 audit(1709090974.650:153): avc: denied { read } for pid=418 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.734759][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.763292][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.770405][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.790073][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.796945][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.804084][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.811038][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.826939][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.834097][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.841391][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.848161][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.865862][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.872716][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.879991][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.886842][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.906625][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.914475][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.922098][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.929639][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.939372][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.946767][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.954434][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.961369][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.994347][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.001915][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.009664][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.017745][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.025458][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.032761][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.040365][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.047568][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.054907][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.063249][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.070902][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.083480][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.090881][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.118288][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.126690][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.135213][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.142054][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.149443][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.157781][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.165878][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.172792][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.180532][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.188371][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.213060][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.221101][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.254120][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.262769][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.271977][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.278840][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.309128][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.317392][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.326489][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.333976][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.341458][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.349631][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.356990][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.365597][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.374085][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.381660][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.389309][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.398123][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.406658][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.413493][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.420892][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.428720][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.444198][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.479934][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.489453][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.497382][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.504990][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.513632][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.522402][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.531373][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.538791][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.546321][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.553630][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.561490][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.570168][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.577985][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.608334][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.617171][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.626645][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.634964][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.642197][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.650315][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.659866][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.668306][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.675232][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.682579][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.690943][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.699460][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.706401][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.713683][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.722494][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.730818][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.738170][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.745724][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.754571][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.763116][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.770360][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.813061][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.827709][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.837076][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.845982][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.855205][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.863317][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.895935][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.904780][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.912907][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.921068][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.948429][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.958115][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.968044][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.976666][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.012058][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.021425][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.029534][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.038692][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.047219][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.055489][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.063514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.072521][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.094155][ T23] audit: type=1400 audit(1709090976.070:154): avc: denied { mounton } for pid=419 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.104600][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.137910][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.146599][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.155354][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.193618][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.214180][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.222082][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.231690][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.240176][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.248645][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.257480][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.266053][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.285371][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.294090][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.302543][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.311406][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.336767][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.345082][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.353157][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.362056][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.370998][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.380441][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.403298][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.411828][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.421160][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.429934][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.452849][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.462417][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.483085][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.491538][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.464148][ T74] cfg80211: failed to load regulatory.db [ 96.214608][ T419] ================================================================== [ 96.222534][ T419] BUG: KASAN: use-after-free in mutex_spin_on_owner+0x27b/0x2e0 [ 96.229976][ T419] Read of size 4 at addr ffff8881d7812f78 by task syz-executor.3/419 [ 96.238123][ T419] [ 96.240309][ T419] CPU: 0 PID: 419 Comm: syz-executor.3 Not tainted 5.4.265-syzkaller-04844-g50cb39f34248 #0 [ 96.250691][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 96.260563][ T419] Call Trace: [ 96.263707][ T419] dump_stack+0x1d8/0x241 [ 96.268202][ T419] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 96.273998][ T419] ? printk+0xd1/0x111 [ 96.278009][ T419] ? mutex_spin_on_owner+0x27b/0x2e0 [ 96.283123][ T419] ? wake_up_klogd+0xb2/0xf0 [ 96.287902][ T419] ? mutex_spin_on_owner+0x27b/0x2e0 [ 96.293015][ T419] print_address_description+0x8c/0x600 [ 96.298405][ T419] ? panic+0x896/0x896 [ 96.302383][ T419] ? finish_task_switch+0x1bb/0x590 [ 96.307586][ T419] ? mutex_spin_on_owner+0x27b/0x2e0 [ 96.312798][ T419] __kasan_report+0xf3/0x120 [ 96.317589][ T419] ? mutex_spin_on_owner+0x27b/0x2e0 [ 96.322684][ T419] kasan_report+0x30/0x60 [ 96.327831][ T419] mutex_spin_on_owner+0x27b/0x2e0 [ 96.332780][ T419] __mutex_lock+0x737/0x1060 [ 96.337287][ T419] ? __ww_mutex_lock_interruptible_slowpath+0x10/0x10 [ 96.343890][ T419] ? __module_put_and_exit+0x20/0x20 [ 96.349321][ T419] ? up_read+0x6f/0x1b0 [ 96.353343][ T419] mutex_lock_killable+0xd8/0x110 [ 96.358205][ T419] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 96.364708][ T419] ? mutex_lock+0xa5/0x110 [ 96.369053][ T419] ? mutex_trylock+0xa0/0xa0 [ 96.373583][ T419] lo_open+0x18/0xc0 [ 96.377319][ T419] __blkdev_get+0x3c8/0x1160 [ 96.381834][ T419] ? blkdev_get+0x3a0/0x3a0 [ 96.386174][ T419] ? _raw_spin_unlock+0x49/0x60 [ 96.390932][ T419] blkdev_get+0x2de/0x3a0 [ 96.395089][ T419] ? blkdev_open+0x173/0x290 [ 96.399589][ T419] ? block_ioctl+0xe0/0xe0 [ 96.403841][ T419] do_dentry_open+0x964/0x1130 [ 96.408549][ T419] ? finish_open+0xd0/0xd0 [ 96.412830][ T419] ? security_inode_permission+0xad/0xf0 [ 96.418496][ T419] ? memcpy+0x38/0x50 [ 96.422500][ T419] path_openat+0x2992/0x3480 [ 96.426943][ T419] ? do_filp_open+0x450/0x450 [ 96.431607][ T419] ? do_sys_open+0x357/0x810 [ 96.435992][ T419] ? do_syscall_64+0xca/0x1c0 [ 96.440700][ T419] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 96.446879][ T419] do_filp_open+0x20b/0x450 [ 96.451216][ T419] ? vfs_tmpfile+0x280/0x280 [ 96.456073][ T419] ? _raw_spin_unlock+0x49/0x60 [ 96.461023][ T419] ? __alloc_fd+0x4c1/0x560 [ 96.465406][ T419] do_sys_open+0x39c/0x810 [ 96.469800][ T419] ? check_preemption_disabled+0x153/0x320 [ 96.475436][ T419] ? file_open_root+0x490/0x490 [ 96.480225][ T419] do_syscall_64+0xca/0x1c0 [ 96.484585][ T419] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 96.490256][ T419] [ 96.492435][ T419] Allocated by task 453: [ 96.497112][ T419] __kasan_kmalloc+0x171/0x210 [ 96.502032][ T419] kmem_cache_alloc+0xd9/0x250 [ 96.506725][ T419] dup_task_struct+0x4f/0x600 [ 96.511406][ T419] copy_process+0x56d/0x3230 [ 96.516423][ T419] _do_fork+0x197/0x900 [ 96.520963][ T419] __x64_sys_clone3+0x2da/0x300 [ 96.525689][ T419] do_syscall_64+0xca/0x1c0 [ 96.530460][ T419] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 96.536552][ T419] [ 96.538739][ T419] Freed by task 10: [ 96.542567][ T419] __kasan_slab_free+0x1b5/0x270 [ 96.547613][ T419] kmem_cache_free+0x10b/0x2c0 [ 96.552347][ T419] rcu_do_batch+0x492/0xa00 [ 96.557444][ T419] rcu_core+0x4c8/0xcb0 [ 96.561703][ T419] __do_softirq+0x23b/0x6b7 [ 96.566395][ T419] [ 96.568710][ T419] The buggy address belongs to the object at ffff8881d7812f40 [ 96.568710][ T419] which belongs to the cache task_struct of size 3904 [ 96.583300][ T419] The buggy address is located 56 bytes inside of [ 96.583300][ T419] 3904-byte region [ffff8881d7812f40, ffff8881d7813e80) [ 96.597115][ T419] The buggy address belongs to the page: [ 96.603647][ T419] page:ffffea00075e0400 refcount:1 mapcount:0 mapping:ffff8881f5cf8500 index:0x0 compound_mapcount: 0 [ 96.615581][ T419] flags: 0x8000000000010200(slab|head) [ 96.620927][ T419] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5cf8500 [ 96.630033][ T419] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 96.639218][ T419] page dumped because: kasan: bad access detected [ 96.646074][ T419] page_owner tracks the page as allocated [ 96.651824][ T419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL) [ 96.668747][ T419] prep_new_page+0x18f/0x370 [ 96.673198][ T419] get_page_from_freelist+0x2d13/0x2d90 [ 96.678562][ T419] __alloc_pages_nodemask+0x393/0x840 [ 96.683951][ T419] alloc_slab_page+0x39/0x3c0 [ 96.688573][ T419] new_slab+0x97/0x440 [ 96.692577][ T419] ___slab_alloc+0x2fe/0x490 [ 96.697180][ T419] __slab_alloc+0x62/0xa0 [ 96.701456][ T419] kmem_cache_alloc+0x109/0x250 [ 96.706479][ T419] dup_task_struct+0x4f/0x600 [ 96.710971][ T419] copy_process+0x56d/0x3230 [ 96.715574][ T419] _do_fork+0x197/0x900 [ 96.719654][ T419] kernel_thread+0x16a/0x1d0 [ 96.724427][ T419] kthreadd+0x3b1/0x4f0 [ 96.729257][ T419] ret_from_fork+0x1f/0x30 [ 96.734271][ T419] page_owner free stack trace missing [ 96.739878][ T419] [ 96.742135][ T419] Memory state around the buggy address: [ 96.747794][ T419] ffff8881d7812e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.755861][ T419] ffff8881d7812e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 96.763751][ T419] >ffff8881d7812f00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 96.771842][ T419] ^ [ 96.779748][ T419] ffff8881d7812f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.787825][ T419] ffff8881d7813000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 96.795830][ T419] ================================================================== [ 96.803905][ T419] Disabling lock debugging due to kernel taint 2024/02/28 03:30:26 executed programs: 8 [ 97.925120][ T103] device bridge_slave_1 left promiscuous mode [ 97.931432][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.938810][ T103] device bridge_slave_0 left promiscuous mode [ 97.944821][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.061910][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.068827][ T514] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.076354][ T514] device bridge_slave_0 entered promiscuous mode [ 98.085870][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.093327][ T514] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.100990][ T514] device bridge_slave_1 entered promiscuous mode [ 98.279243][ T521] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.286429][ T521] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.294316][ T521] device bridge_slave_0 entered promiscuous mode [ 98.309098][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.316776][ T518] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.324672][ T518] device bridge_slave_0 entered promiscuous mode [ 98.334416][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.341440][ T518] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.349698][ T518] device bridge_slave_1 entered promiscuous mode [ 98.360201][ T521] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.367665][ T521] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.375594][ T521] device bridge_slave_1 entered promiscuous mode [ 98.408005][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.415761][ T519] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.423202][ T519] device bridge_slave_0 entered promiscuous mode [ 98.434879][ T519] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.442197][ T519] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.450971][ T519] device bridge_slave_1 entered promiscuous mode [ 98.515174][ T514] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.522613][ T514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.530645][ T514] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.538048][ T514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.649790][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.657763][ T125] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.665820][ T125] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.688543][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.697191][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.704067][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.711834][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.721850][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.729261][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.744589][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.754317][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.830070][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.853398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.862275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.870811][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.878859][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.887313][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.903981][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.916650][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.926069][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.934384][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.953785][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.961570][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.986207][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.994621][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.002862][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.011567][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.020597][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.027567][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.036573][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.044845][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.053363][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.063258][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.071937][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.078977][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.095827][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.103948][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.112915][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.121389][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.128995][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.146479][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.155330][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.165802][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.173081][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.181059][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.189731][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.198050][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.205197][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.212569][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.221242][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.238172][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.246668][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.255607][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.274159][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.282174][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.290427][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.299219][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.308038][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.316467][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.324594][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.332569][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.362689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.371423][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.390029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.399000][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.421192][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.429903][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.438217][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.446533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.466511][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.475199][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.490994][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.499392][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.509970][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.518618][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.542185][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.550734][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.559687][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.568391][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.577089][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.585767][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.602319][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.610767][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.624562][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.632584][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.648558][ T103] device bridge_slave_1 left promiscuous mode [ 99.654812][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.662970][ T103] device bridge_slave_0 left promiscuous mode [ 99.669467][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.677581][ T103] device bridge_slave_1 left promiscuous mode [ 99.683519][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.691088][ T103] device bridge_slave_0 left promiscuous mode [ 99.697164][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.704814][ T103] device bridge_slave_1 left promiscuous mode [ 99.711103][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.718523][ T103] device bridge_slave_0 left promiscuous mode [ 99.724814][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.953813][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.961950][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.970729][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.981038][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.989772][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.998201][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.292646][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.299803][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.307756][ T540] device bridge_slave_0 entered promiscuous mode [ 102.314858][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.322176][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.330171][ T540] device bridge_slave_1 entered promiscuous mode [ 102.386777][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.394034][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.401671][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.409216][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.439200][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.447788][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.455725][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.463070][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.475395][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.483494][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.490418][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.515254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.524360][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.531993][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.539694][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.547765][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.563972][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.572279][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.587526][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.605490][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.615357][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready