Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. 2023/09/10 05:06:07 ignoring optional flag "sandboxArg"="0" 2023/09/10 05:06:07 parsed 1 programs 2023/09/10 05:06:07 executed programs: 0 [ 43.384437][ T23] kauditd_printk_skb: 68 callbacks suppressed [ 43.384449][ T23] audit: type=1400 audit(1694322367.530:144): avc: denied { mounton } for pid=400 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 43.421758][ T23] audit: type=1400 audit(1694322367.530:145): avc: denied { mount } for pid=400 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 43.655171][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.662241][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.670295][ T410] device bridge_slave_0 entered promiscuous mode [ 43.702421][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.710430][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.717946][ T410] device bridge_slave_1 entered promiscuous mode [ 43.789239][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.796752][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.804518][ T418] device bridge_slave_0 entered promiscuous mode [ 43.816172][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.823257][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.830520][ T418] device bridge_slave_1 entered promiscuous mode [ 43.859389][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.866746][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.875143][ T407] device bridge_slave_0 entered promiscuous mode [ 43.886761][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.894697][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.902413][ T407] device bridge_slave_1 entered promiscuous mode [ 43.916184][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.923668][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.931974][ T416] device bridge_slave_0 entered promiscuous mode [ 43.939175][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.946213][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.953574][ T413] device bridge_slave_0 entered promiscuous mode [ 43.976068][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.983077][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.990614][ T416] device bridge_slave_1 entered promiscuous mode [ 43.998580][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.005812][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.014515][ T413] device bridge_slave_1 entered promiscuous mode [ 44.088386][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.096550][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.105762][ T417] device bridge_slave_0 entered promiscuous mode [ 44.144874][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.152696][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.160358][ T417] device bridge_slave_1 entered promiscuous mode [ 44.260183][ T23] audit: type=1400 audit(1694322368.400:146): avc: denied { create } for pid=410 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.287984][ T23] audit: type=1400 audit(1694322368.400:147): avc: denied { write } for pid=410 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.297786][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.308962][ T23] audit: type=1400 audit(1694322368.400:148): avc: denied { read } for pid=410 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.316052][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.316174][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.350684][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.411141][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.418393][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.426027][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.433410][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.450085][ T407] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.457305][ T407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.464487][ T407] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.471572][ T407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.497575][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.504635][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.511973][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.519200][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.549553][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.556777][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.563997][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.570919][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.629087][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.636904][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.644911][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.652077][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.659272][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.666360][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.673663][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.680828][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.688105][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.695393][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.734607][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.742397][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.750662][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.760094][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.768836][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.775704][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.783243][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.791588][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.799876][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.807187][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.815135][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.822702][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.842720][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.850998][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.858968][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.867131][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.907232][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.916299][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.925013][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.932045][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.939481][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.948920][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.957120][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.964155][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.971436][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.980423][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.988458][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.997130][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.005843][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.013128][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.020923][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.030385][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.039214][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.046256][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.053706][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.061266][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.069152][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.077520][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.085729][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.092917][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.100322][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.109240][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.117509][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.124380][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.154103][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.162394][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.170755][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.179479][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.188286][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.196031][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.204573][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.213416][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.221478][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.246404][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.255341][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.264260][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.274371][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.281279][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.288566][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.296209][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.303967][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.333937][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.343772][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.352358][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.359879][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.368135][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.376282][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.384494][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.393212][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.401528][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.409797][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.416896][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.424605][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.433050][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.441241][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.449401][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.478945][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.487592][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.497864][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.507670][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.517056][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.526599][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.563838][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.573213][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.581788][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.591205][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.599619][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.628871][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.638120][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.646683][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.671346][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.679646][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.687892][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.696326][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.707677][ T23] audit: type=1400 audit(1694322369.850:149): avc: denied { mounton } for pid=410 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 45.722619][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.740822][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.757584][ T23] audit: type=1400 audit(1694322369.900:150): avc: denied { mounton } for pid=443 comm="syz-executor.1" path="/root/syzkaller-testdir864006485/syzkaller.GoHDDo/0/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 45.799693][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.809266][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.818640][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.828329][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.837202][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.846305][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.855027][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.864382][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.890089][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.898740][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.907914][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.917773][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.926610][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.935822][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.945353][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.954069][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.962826][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.971288][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.996219][ T448] ================================================================== [ 46.004783][ T448] BUG: KASAN: use-after-free in fuse_copy_one+0x1c0/0x3a0 [ 46.011801][ T448] Read of size 256 at addr ffff8881d5c14010 by task syz-executor.1/448 [ 46.020506][ T448] [ 46.022683][ T448] CPU: 0 PID: 448 Comm: syz-executor.1 Not tainted 5.4.249-syzkaller-04712-g50533a8b511b #0 [ 46.032659][ T448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 46.042855][ T448] Call Trace: [ 46.045988][ T448] dump_stack+0x1d8/0x241 [ 46.050137][ T448] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 46.055881][ T448] ? printk+0xd1/0x111 [ 46.060033][ T448] ? fuse_copy_one+0x1c0/0x3a0 [ 46.064963][ T448] ? wake_up_klogd+0xb2/0xf0 [ 46.069822][ T448] ? fuse_copy_one+0x1c0/0x3a0 [ 46.074578][ T448] print_address_description+0x8c/0x600 [ 46.080109][ T448] ? panic+0x896/0x896 [ 46.084041][ T448] ? _raw_spin_lock+0xa4/0x1b0 [ 46.089635][ T448] ? fuse_copy_one+0x1c0/0x3a0 [ 46.094568][ T448] __kasan_report+0xf3/0x120 [ 46.099036][ T448] ? fuse_copy_one+0x1c0/0x3a0 [ 46.103833][ T448] ? fuse_copy_one+0x1c0/0x3a0 [ 46.108510][ T448] kasan_report+0x30/0x60 [ 46.112778][ T448] check_memory_region+0x272/0x280 [ 46.117715][ T448] memcpy+0x25/0x50 [ 46.121623][ T448] fuse_copy_one+0x1c0/0x3a0 [ 46.126270][ T448] fuse_copy_args+0x339/0x410 [ 46.130751][ T448] fuse_dev_do_read+0xc1b/0x1190 [ 46.135533][ T448] ? queue_interrupt+0x310/0x310 [ 46.140688][ T448] fuse_dev_read+0x179/0x220 [ 46.145442][ T448] ? fuse_dev_release+0x5c0/0x5c0 [ 46.150454][ T448] ? do_futex+0x13c1/0x19f0 [ 46.155851][ T448] ? __lru_cache_add+0x206/0x2b0 [ 46.160883][ T448] ? iov_iter_init+0x82/0x160 [ 46.165568][ T448] __vfs_read+0x5cd/0x730 [ 46.169991][ T448] ? rw_verify_area+0x360/0x360 [ 46.175117][ T448] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 46.182259][ T448] ? security_file_permission+0x1dc/0x2f0 [ 46.188038][ T448] vfs_read+0x148/0x360 [ 46.192020][ T448] ksys_read+0x199/0x2c0 [ 46.196605][ T448] ? vfs_write+0x4e0/0x4e0 [ 46.201149][ T448] ? __do_page_fault+0x725/0xbb0 [ 46.206870][ T448] do_syscall_64+0xca/0x1c0 [ 46.211404][ T448] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.217728][ T448] [ 46.220148][ T448] Allocated by task 444: [ 46.224274][ T448] __kasan_kmalloc+0x171/0x210 [ 46.228940][ T448] __d_alloc+0xae/0x6a0 [ 46.233099][ T448] d_alloc_parallel+0xe7/0x1310 [ 46.237880][ T448] __lookup_slow+0x156/0x460 [ 46.242625][ T448] lookup_slow+0x53/0x70 [ 46.246704][ T448] walk_component+0x2dc/0x590 [ 46.251527][ T448] path_lookupat+0x182/0x3f0 [ 46.256124][ T448] filename_lookup+0x253/0x6e0 [ 46.261061][ T448] do_mount+0x135/0xe10 [ 46.265796][ T448] ksys_mount+0xc2/0xf0 [ 46.270812][ T448] __x64_sys_mount+0xb1/0xc0 [ 46.276162][ T448] do_syscall_64+0xca/0x1c0 [ 46.281474][ T448] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.287945][ T448] [ 46.290103][ T448] Freed by task 17: [ 46.293942][ T448] __kasan_slab_free+0x1b5/0x270 [ 46.299256][ T448] kfree+0x123/0x370 [ 46.303134][ T448] rcu_do_batch+0x451/0xa00 [ 46.307587][ T448] rcu_core+0x4c8/0xcb0 [ 46.312355][ T448] __do_softirq+0x23b/0x6b7 [ 46.316950][ T448] [ 46.319462][ T448] The buggy address belongs to the object at ffff8881d5c14000 [ 46.319462][ T448] which belongs to the cache kmalloc-rcl-512 of size 512 [ 46.335311][ T448] The buggy address is located 16 bytes inside of [ 46.335311][ T448] 512-byte region [ffff8881d5c14000, ffff8881d5c14200) [ 46.350473][ T448] The buggy address belongs to the page: [ 46.355943][ T448] page:ffffea0007570500 refcount:1 mapcount:0 mapping:ffff8881f5c0db80 index:0x0 compound_mapcount: 0 [ 46.367223][ T448] flags: 0x8000000000010200(slab|head) [ 46.373002][ T448] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5c0db80 [ 46.381676][ T448] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 46.390301][ T448] page dumped because: kasan: bad access detected [ 46.396539][ T448] page_owner tracks the page as allocated [ 46.402281][ T448] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 46.421417][ T448] prep_new_page+0x18f/0x370 [ 46.426236][ T448] get_page_from_freelist+0x2d13/0x2d90 [ 46.431661][ T448] __alloc_pages_nodemask+0x393/0x840 [ 46.436946][ T448] alloc_slab_page+0x39/0x3c0 [ 46.441458][ T448] new_slab+0x97/0x440 [ 46.445718][ T448] ___slab_alloc+0x2fe/0x490 [ 46.450742][ T448] __slab_alloc+0x62/0xa0 [ 46.454953][ T448] __kmalloc+0x19b/0x2e0 [ 46.459505][ T448] __d_alloc+0xae/0x6a0 [ 46.464405][ T448] d_alloc_parallel+0xe7/0x1310 [ 46.469497][ T448] __lookup_slow+0x156/0x460 [ 46.473900][ T448] lookup_slow+0x53/0x70 [ 46.477975][ T448] walk_component+0x2dc/0x590 [ 46.482599][ T448] path_lookupat+0x182/0x3f0 [ 46.487698][ T448] filename_lookup+0x253/0x6e0 [ 46.492617][ T448] do_mount+0x135/0xe10 [ 46.497392][ T448] page_owner free stack trace missing [ 46.502611][ T448] [ 46.504780][ T448] Memory state around the buggy address: [ 46.510447][ T448] ffff8881d5c13f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.521254][ T448] ffff8881d5c13f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 46.531602][ T448] >ffff8881d5c14000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.540934][ T448] ^ [ 46.545947][ T448] ffff8881d5c14080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.554586][ T448] ffff8881d5c14100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.563436][ T448] ================================================================== [ 46.571679][ T448] Disabling lock debugging due to kernel taint [ 46.592800][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.603598][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.621036][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.632407][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.641453][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.655552][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.703461][ T23] audit: type=1400 audit(1694322370.850:151): avc: denied { unmount } for pid=410 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 46.746826][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.758085][ T107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.790988][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.800562][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.813546][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.823673][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2023/09/10 05:06:12 executed programs: 14 2023/09/10 05:06:17 executed programs: 49