Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. 2024/04/18 00:12:12 ignoring optional flag "sandboxArg"="0" 2024/04/18 00:12:12 parsed 1 programs [ 41.877449][ T24] audit: type=1400 audit(1713399132.810:154): avc: denied { mounton } for pid=336 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.902878][ T24] audit: type=1400 audit(1713399132.810:155): avc: denied { mount } for pid=336 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/04/18 00:12:12 executed programs: 0 [ 41.926158][ T24] audit: type=1400 audit(1713399132.840:156): avc: denied { unlink } for pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.957733][ T336] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.051363][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.058250][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.065463][ T346] device bridge_slave_0 entered promiscuous mode [ 42.073214][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.080176][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.087343][ T346] device bridge_slave_1 entered promiscuous mode [ 42.170837][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.177892][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.185052][ T351] device bridge_slave_0 entered promiscuous mode [ 42.196953][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.203853][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.211003][ T352] device bridge_slave_0 entered promiscuous mode [ 42.219573][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.226417][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.233812][ T352] device bridge_slave_1 entered promiscuous mode [ 42.242409][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.249566][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.256899][ T351] device bridge_slave_1 entered promiscuous mode [ 42.283180][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.290338][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.297626][ T348] device bridge_slave_0 entered promiscuous mode [ 42.306508][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.313672][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.321007][ T348] device bridge_slave_1 entered promiscuous mode [ 42.361630][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.368601][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.375702][ T347] device bridge_slave_0 entered promiscuous mode [ 42.382709][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.389769][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.396935][ T347] device bridge_slave_1 entered promiscuous mode [ 42.453216][ T24] audit: type=1400 audit(1713399133.380:157): avc: denied { write } for pid=346 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.461720][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.480396][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.487761][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.494707][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.501982][ T24] audit: type=1400 audit(1713399133.380:158): avc: denied { read } for pid=347 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.550702][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.557679][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.564762][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.571603][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.579573][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.586414][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.593641][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.600496][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.631495][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.638356][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.645420][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.652349][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.670941][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.678505][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.685490][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.692783][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.700295][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.707493][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.714459][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.721882][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.730169][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.756013][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.764074][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.772125][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.779050][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.786887][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.795603][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.803885][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.811093][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.818427][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.826478][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.833267][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.840624][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.848680][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.855504][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.870817][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.878474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.886533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.894918][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.901791][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.909355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.917327][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.924146][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.931534][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.958159][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.966116][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.975955][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.984093][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.990940][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.998594][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.006411][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.014252][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.022460][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.030610][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.037479][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.049012][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.059766][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.073282][ T347] device veth0_vlan entered promiscuous mode [ 43.091211][ T351] device veth0_vlan entered promiscuous mode [ 43.098837][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.106684][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.115686][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.123699][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.131227][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.138799][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.146478][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.153962][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.161233][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.169590][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.185519][ T352] device veth0_vlan entered promiscuous mode [ 43.195555][ T346] device veth0_vlan entered promiscuous mode [ 43.201951][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.211233][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.219667][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.227624][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.235591][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.243424][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.251229][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.259377][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.267437][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.274265][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.281663][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.289404][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.297291][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.304581][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.311975][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.319322][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.326974][ T347] device veth1_macvtap entered promiscuous mode [ 43.339871][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.347674][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.355736][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.363899][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.370755][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.378198][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.386420][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.400863][ T351] device veth1_macvtap entered promiscuous mode [ 43.407725][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.415730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.424319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.434666][ T346] device veth1_macvtap entered promiscuous mode [ 43.442799][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.451078][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.459305][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.480099][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.488364][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.496398][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.505172][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.513551][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.521532][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.529616][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.537508][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.545498][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.553869][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.562337][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.570637][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.579208][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.587118][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.601370][ T24] audit: type=1400 audit(1713399134.530:159): avc: denied { mounton } for pid=346 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.602677][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.632894][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.654460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.663540][ T24] audit: type=1400 audit(1713399134.600:160): avc: denied { bind } for pid=370 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.663980][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.696904][ T348] device veth0_vlan entered promiscuous mode [ 43.716223][ T352] device veth1_macvtap entered promiscuous mode [ 43.725563][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.742124][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.747412][ T24] audit: type=1400 audit(1713399134.670:161): avc: denied { listen } for pid=376 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.750334][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.794977][ T348] device veth1_macvtap entered promiscuous mode [ 43.801188][ T24] audit: type=1400 audit(1713399134.670:162): avc: denied { connect } for pid=376 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.821694][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.832814][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.855892][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.878392][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.902019][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.927654][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.951933][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.977213][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.001371][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.050513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.075279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.099281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.127666][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.279204][ T5] ================================================================== [ 45.287135][ T5] BUG: KASAN: use-after-free in _raw_spin_lock_bh+0x97/0x1b0 [ 45.294304][ T5] Write of size 4 at addr ffff888110b05988 by task kworker/0:0/5 [ 45.301854][ T5] [ 45.304026][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.209-syzkaller-999876-gd82f901b3eb5 #0 [ 45.313757][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.323675][ T5] Workqueue: vsock-loopback vsock_loopback_work [ 45.329742][ T5] Call Trace: [ 45.332946][ T5] dump_stack_lvl+0x1e2/0x24b [ 45.337460][ T5] ? bfq_pos_tree_add_move+0x43b/0x43b [ 45.342756][ T5] ? panic+0x80b/0x80b [ 45.346742][ T5] print_address_description+0x81/0x3b0 [ 45.352123][ T5] ? __kasan_check_write+0x14/0x20 [ 45.357074][ T5] kasan_report+0x179/0x1c0 [ 45.361403][ T5] ? _raw_spin_lock_bh+0x97/0x1b0 [ 45.366267][ T5] ? _raw_spin_lock_bh+0x97/0x1b0 [ 45.371135][ T5] kasan_check_range+0x293/0x2a0 [ 45.376020][ T5] __kasan_check_write+0x14/0x20 [ 45.380775][ T5] _raw_spin_lock_bh+0x97/0x1b0 [ 45.385547][ T5] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 45.390588][ T5] ? vsock_find_bound_socket+0x2d0/0x330 [ 45.396044][ T5] virtio_transport_recv_pkt+0x665/0x4130 [ 45.401598][ T5] ? virtio_transport_release+0xc00/0xc00 [ 45.407165][ T5] ? __kasan_check_write+0x14/0x20 [ 45.412193][ T5] ? calc_wheel_index+0x16b/0xa40 [ 45.417051][ T5] ? _raw_write_lock_bh+0xa4/0x170 [ 45.421998][ T5] ? _raw_write_lock_irq+0x170/0x170 [ 45.427125][ T5] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 45.432600][ T5] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 45.438055][ T5] ? __kasan_check_write+0x14/0x20 [ 45.442996][ T5] ? __switch_to+0x5f6/0x1240 [ 45.447512][ T5] ? sched_clock+0x3a/0x40 [ 45.451766][ T5] ? __kasan_check_write+0x14/0x20 [ 45.456715][ T5] ? virtio_transport_deliver_tap_pkt+0xb0/0xb0 [ 45.463073][ T5] ? virtio_transport_deliver_tap_pkt+0x60/0xb0 [ 45.469131][ T5] vsock_loopback_work+0x37d/0x3f0 [ 45.474076][ T5] ? vsock_loopback_send_pkt+0x120/0x120 [ 45.479556][ T5] ? read_word_at_a_time+0x12/0x20 [ 45.484494][ T5] ? strscpy+0x9c/0x260 [ 45.488641][ T5] process_one_work+0x6dc/0xbd0 [ 45.493261][ T5] worker_thread+0xaea/0x1510 [ 45.497775][ T5] kthread+0x34b/0x3d0 [ 45.501676][ T5] ? worker_clr_flags+0x180/0x180 [ 45.506547][ T5] ? kthread_blkcg+0xd0/0xd0 [ 45.510974][ T5] ret_from_fork+0x1f/0x30 [ 45.515208][ T5] [ 45.517383][ T5] Allocated by task 429: [ 45.521464][ T5] ____kasan_kmalloc+0xdb/0x110 [ 45.526152][ T5] __kasan_kmalloc+0x9/0x10 [ 45.530494][ T5] kmem_cache_alloc_trace+0x18a/0x2e0 [ 45.535694][ T5] virtio_transport_do_socket_init+0x56/0x2d0 [ 45.541598][ T5] vsock_assign_transport+0x324/0x3f0 [ 45.546809][ T5] vsock_stream_connect+0x5cf/0xd30 [ 45.551922][ T5] __sys_connect+0x388/0x410 [ 45.556346][ T5] __x64_sys_connect+0x7a/0x90 [ 45.560956][ T5] do_syscall_64+0x34/0x70 [ 45.565229][ T5] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 45.571112][ T5] [ 45.573278][ T5] Freed by task 448: [ 45.577368][ T5] kasan_set_track+0x4b/0x70 [ 45.581906][ T5] kasan_set_free_info+0x23/0x40 [ 45.586962][ T5] ____kasan_slab_free+0x121/0x160 [ 45.591959][ T5] __kasan_slab_free+0x11/0x20 [ 45.596554][ T5] slab_free_freelist_hook+0xc0/0x190 [ 45.602280][ T5] kfree+0xc3/0x270 [ 45.606102][ T5] virtio_transport_destruct+0x3b/0x40 [ 45.611399][ T5] vsock_assign_transport+0x266/0x3f0 [ 45.616605][ T5] vsock_stream_connect+0x5cf/0xd30 [ 45.621727][ T5] __sys_connect+0x388/0x410 [ 45.626160][ T5] __x64_sys_connect+0x7a/0x90 [ 45.630771][ T5] do_syscall_64+0x34/0x70 [ 45.635004][ T5] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 45.640723][ T5] [ 45.642896][ T5] The buggy address belongs to the object at ffff888110b05980 [ 45.642896][ T5] which belongs to the cache kmalloc-64 of size 64 [ 45.656958][ T5] The buggy address is located 8 bytes inside of [ 45.656958][ T5] 64-byte region [ffff888110b05980, ffff888110b059c0) [ 45.669929][ T5] The buggy address belongs to the page: [ 45.675474][ T5] page:ffffea000442c140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110b05 [ 45.685544][ T5] flags: 0x4000000000000200(slab) [ 45.690404][ T5] raw: 4000000000000200 ffffea000442bdc0 0000000600000006 ffff888100043800 [ 45.698809][ T5] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 45.707217][ T5] page dumped because: kasan: bad access detected [ 45.713470][ T5] page_owner tracks the page as allocated [ 45.719023][ T5] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 107, ts 5328898777, free_ts 0 [ 45.733884][ T5] prep_new_page+0x166/0x180 [ 45.738391][ T5] get_page_from_freelist+0x2d8c/0x2f30 [ 45.743846][ T5] __alloc_pages_nodemask+0x435/0xaf0 [ 45.749180][ T5] new_slab+0x80/0x400 [ 45.753071][ T5] ___slab_alloc+0x302/0x4b0 [ 45.757498][ T5] __slab_alloc+0x63/0xa0 [ 45.761760][ T5] kmem_cache_alloc_trace+0x1bd/0x2e0 [ 45.767049][ T5] kernfs_fop_open+0x7fa/0xab0 [ 45.771642][ T5] do_dentry_open+0x7c1/0x10d0 [ 45.776241][ T5] vfs_open+0x73/0x80 [ 45.780149][ T5] path_openat+0x2660/0x3000 [ 45.784572][ T5] do_filp_open+0x21c/0x460 [ 45.788912][ T5] do_sys_openat2+0x13f/0x6f0 [ 45.793425][ T5] __x64_sys_openat+0x243/0x290 [ 45.798118][ T5] do_syscall_64+0x34/0x70 [ 45.802367][ T5] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 45.808086][ T5] page_owner free stack trace missing [ 45.813296][ T5] [ 45.815497][ T5] Memory state around the buggy address: [ 45.821026][ T5] ffff888110b05880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.828955][ T5] ffff888110b05900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.836836][ T5] >ffff888110b05980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.844715][ T5] ^ [ 45.848892][ T5] ffff888110b05a00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.856794][ T5] ffff888110b05a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 45.864676][ T5] ================================================================== [ 45.872586][ T5] Disabling lock debugging due to kernel taint