Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts. 2023/07/02 04:22:16 ignoring optional flag "sandboxArg"="0" 2023/07/02 04:22:16 parsed 1 programs 2023/07/02 04:22:16 executed programs: 0 [ 38.492217][ T23] kauditd_printk_skb: 69 callbacks suppressed [ 38.492224][ T23] audit: type=1400 audit(1688271736.789:145): avc: denied { mounton } for pid=401 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 38.525813][ T23] audit: type=1400 audit(1688271736.799:146): avc: denied { mount } for pid=401 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 38.716016][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.723306][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.730779][ T408] device bridge_slave_0 entered promiscuous mode [ 38.739442][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.746535][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.754967][ T408] device bridge_slave_1 entered promiscuous mode [ 38.798098][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.805410][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.812670][ T406] device bridge_slave_0 entered promiscuous mode [ 38.845978][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.853871][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.861460][ T414] device bridge_slave_0 entered promiscuous mode [ 38.871716][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.878734][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.886512][ T414] device bridge_slave_1 entered promiscuous mode [ 38.892894][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.900027][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.907359][ T406] device bridge_slave_1 entered promiscuous mode [ 38.991957][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.999099][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.006531][ T413] device bridge_slave_0 entered promiscuous mode [ 39.015305][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.022499][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.030806][ T413] device bridge_slave_1 entered promiscuous mode [ 39.037904][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.045049][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.052988][ T412] device bridge_slave_0 entered promiscuous mode [ 39.065318][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.072428][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.079904][ T412] device bridge_slave_1 entered promiscuous mode [ 39.104751][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.111766][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.119155][ T420] device bridge_slave_0 entered promiscuous mode [ 39.129545][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.136678][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.143905][ T420] device bridge_slave_1 entered promiscuous mode [ 39.296015][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.302947][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.310188][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.317021][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.331171][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.338031][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.345136][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.352095][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.407212][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.414054][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.421232][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.428249][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.454744][ T420] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.461774][ T420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.469160][ T420] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.476007][ T420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.492891][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.499870][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.507203][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.514375][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.539154][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.546478][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.553874][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.561502][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.568529][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.575958][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.583164][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.590532][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.598075][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.605376][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.612620][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.648140][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.656507][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.664126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.672253][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.680370][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.687532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.694773][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.702052][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.709336][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.717141][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.753807][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.762490][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.770525][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.778719][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.786964][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.793777][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.801262][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.808518][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.815884][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.823938][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.867217][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.875415][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.883644][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.890841][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.898936][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.907572][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.915674][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.922774][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.930678][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.939114][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.947389][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.955296][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.963051][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.971315][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.979637][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.988063][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.995970][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.003434][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.011446][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.020263][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.028860][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.035790][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.043599][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.053406][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.061616][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.068927][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.096731][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.103989][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.112074][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.120521][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.129677][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.136996][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.144592][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.152803][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.160762][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.169671][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.178345][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.185840][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.193581][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.201953][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.247160][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.256316][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.264950][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.273387][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.282501][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.289859][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.297688][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.305976][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.313932][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.320900][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.328218][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.336520][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.344790][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.351791][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.359366][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.368411][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.377831][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.386610][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.394747][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.403574][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.429516][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.438325][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.446384][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.454913][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.462451][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.470744][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.484986][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.493194][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.502425][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.510685][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.531882][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.540361][ T125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.553999][ T23] audit: type=1400 audit(1688271738.859:147): avc: denied { mounton } for pid=406 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=10887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.564764][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.591923][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.599835][ T23] audit: type=1400 audit(1688271738.889:148): avc: denied { mounton } for pid=443 comm="syz-executor.2" path="/root/syzkaller-testdir3555654980/syzkaller.RrR9sF/0/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.638485][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.646935][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.655491][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.664183][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.673434][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.682052][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.700262][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.717513][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.725745][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.736327][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.744426][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.774915][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.783086][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.802473][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.810895][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.821810][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.830593][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.847712][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.856455][ T361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.873706][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.882140][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.893689][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.903012][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.098251][ T473] ================================================================== [ 41.106877][ T473] BUG: KASAN: use-after-free in fuse_copy_one+0x1c0/0x3a0 [ 41.114243][ T473] Read of size 256 at addr ffff8881d6429410 by task syz-executor.4/473 [ 41.122927][ T473] [ 41.125107][ T473] CPU: 0 PID: 473 Comm: syz-executor.4 Not tainted 5.4.242-syzkaller-00082-g487daef44f9f #0 [ 41.135359][ T473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 41.145599][ T473] Call Trace: [ 41.148735][ T473] dump_stack+0x1d8/0x241 [ 41.152908][ T473] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 41.158538][ T473] ? printk+0xd1/0x111 [ 41.162548][ T473] ? fuse_copy_one+0x1c0/0x3a0 [ 41.167136][ T473] ? wake_up_klogd+0xb2/0xf0 [ 41.171659][ T473] ? fuse_copy_one+0x1c0/0x3a0 [ 41.176258][ T473] print_address_description+0x8c/0x600 [ 41.181636][ T473] ? panic+0x896/0x896 [ 41.185802][ T473] ? _raw_spin_lock+0xa4/0x1b0 [ 41.190773][ T473] ? fuse_copy_one+0x1c0/0x3a0 [ 41.195375][ T473] __kasan_report+0xf3/0x120 [ 41.199976][ T473] ? fuse_copy_one+0x1c0/0x3a0 [ 41.204570][ T473] ? fuse_copy_one+0x1c0/0x3a0 [ 41.209258][ T473] kasan_report+0x30/0x60 [ 41.213427][ T473] check_memory_region+0x272/0x280 [ 41.218475][ T473] memcpy+0x25/0x50 [ 41.222189][ T473] fuse_copy_one+0x1c0/0x3a0 [ 41.226792][ T473] fuse_copy_args+0x339/0x410 [ 41.231318][ T473] fuse_dev_do_read+0xc1b/0x1190 [ 41.236187][ T473] ? queue_interrupt+0x310/0x310 [ 41.241121][ T473] fuse_dev_read+0x179/0x220 [ 41.246166][ T473] ? fuse_dev_release+0x5c0/0x5c0 [ 41.251863][ T473] ? do_futex+0x13c1/0x19f0 [ 41.256995][ T473] ? iov_iter_init+0x82/0x160 [ 41.261580][ T473] __vfs_read+0x5cd/0x730 [ 41.265842][ T473] ? rw_verify_area+0x360/0x360 [ 41.270704][ T473] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 41.277507][ T473] ? security_file_permission+0x1dc/0x2f0 [ 41.283505][ T473] vfs_read+0x148/0x360 [ 41.287497][ T473] ksys_read+0x199/0x2c0 [ 41.291746][ T473] ? vfs_write+0x4e0/0x4e0 [ 41.296256][ T473] do_syscall_64+0xca/0x1c0 [ 41.300769][ T473] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 41.306790][ T473] [ 41.308959][ T473] Allocated by task 458: [ 41.313045][ T473] __kasan_kmalloc+0x171/0x210 [ 41.317751][ T473] __d_alloc+0xae/0x6a0 [ 41.321967][ T473] d_alloc_parallel+0xe7/0x1310 [ 41.326730][ T473] __lookup_slow+0x156/0x460 [ 41.331145][ T473] lookup_slow+0x53/0x70 [ 41.335221][ T473] walk_component+0x2dc/0x590 [ 41.339729][ T473] path_lookupat+0x182/0x3f0 [ 41.344164][ T473] filename_lookup+0x253/0x6e0 [ 41.348847][ T473] do_mount+0x135/0xe10 [ 41.352848][ T473] ksys_mount+0xc2/0xf0 [ 41.357736][ T473] __x64_sys_mount+0xb1/0xc0 [ 41.362411][ T473] do_syscall_64+0xca/0x1c0 [ 41.366885][ T473] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 41.372606][ T473] [ 41.374777][ T473] Freed by task 10: [ 41.378547][ T473] __kasan_slab_free+0x1b5/0x270 [ 41.383286][ T473] kfree+0x123/0x370 [ 41.387177][ T473] rcu_do_batch+0x451/0xa00 [ 41.391548][ T473] rcu_core+0x4c8/0xcb0 [ 41.395595][ T473] __do_softirq+0x23b/0x6b7 [ 41.400095][ T473] [ 41.402269][ T473] The buggy address belongs to the object at ffff8881d6429400 [ 41.402269][ T473] which belongs to the cache kmalloc-rcl-512 of size 512 [ 41.417293][ T473] The buggy address is located 16 bytes inside of [ 41.417293][ T473] 512-byte region [ffff8881d6429400, ffff8881d6429600) [ 41.430493][ T473] The buggy address belongs to the page: [ 41.436392][ T473] page:ffffea0007590a00 refcount:1 mapcount:0 mapping:ffff8881f5c0db80 index:0x0 compound_mapcount: 0 [ 41.447326][ T473] flags: 0x8000000000010200(slab|head) [ 41.452708][ T473] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5c0db80 [ 41.461120][ T473] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 41.469799][ T473] page dumped because: kasan: bad access detected [ 41.476227][ T473] page_owner tracks the page as allocated [ 41.481876][ T473] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 41.502129][ T473] prep_new_page+0x18f/0x370 [ 41.507116][ T473] get_page_from_freelist+0x2d13/0x2d90 [ 41.512927][ T473] __alloc_pages_nodemask+0x393/0x840 [ 41.518858][ T473] alloc_slab_page+0x39/0x3c0 [ 41.523576][ T473] new_slab+0x97/0x440 [ 41.527641][ T473] ___slab_alloc+0x2fe/0x490 [ 41.532072][ T473] __slab_alloc+0x62/0xa0 [ 41.536332][ T473] __kmalloc+0x19b/0x2e0 [ 41.540856][ T473] __d_alloc+0xae/0x6a0 [ 41.544921][ T473] d_alloc_parallel+0xe7/0x1310 [ 41.549796][ T473] __lookup_slow+0x156/0x460 [ 41.554217][ T473] lookup_slow+0x53/0x70 [ 41.558387][ T473] walk_component+0x2dc/0x590 [ 41.563161][ T473] path_lookupat+0x182/0x3f0 [ 41.567682][ T473] filename_lookup+0x253/0x6e0 [ 41.572379][ T473] do_mount+0x135/0xe10 [ 41.576361][ T473] page_owner free stack trace missing [ 41.581896][ T473] [ 41.584189][ T473] Memory state around the buggy address: [ 41.589632][ T473] ffff8881d6429300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.597538][ T473] ffff8881d6429380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 41.605522][ T473] >ffff8881d6429400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.610825][ T23] audit: type=1400 audit(1688271739.399:149): avc: denied { unmount } for pid=414 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 41.613681][ T473] ^ [ 41.613690][ T473] ffff8881d6429480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.613696][ T473] ffff8881d6429500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.613705][ T473] ================================================================== [ 41.662150][ T473] Disabling lock debugging due to kernel taint 2023/07/02 04:22:22 executed programs: 24 2023/07/02 04:22:27 executed programs: 60