[ 29.826621][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.834813][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.847818][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.860522][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.873454][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.939800][ T368] syz-executor.2 (368) used greatest stack depth: 19448 bytes left [ 30.718698][ T9] device bridge_slave_1 left promiscuous mode [ 30.724803][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.732128][ T9] device bridge_slave_0 left promiscuous mode [ 30.738160][ T9] bridge0: port 1(bridge_slave_0) entered disabled state Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. 2024/08/28 16:35:52 ignoring optional flag "sandboxArg"="0" 2024/08/28 16:35:52 parsed 1 programs 2024/08/28 16:35:52 executed programs: 0 [ 47.157630][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 47.157640][ T23] audit: type=1400 audit(1724862952.649:88): avc: denied { mounton } for pid=418 comm="syz-executor.2" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 47.193000][ T419] cgroup1: Unknown subsys name 'perf_event' [ 47.193473][ T418] cgroup1: Unknown subsys name 'perf_event' [ 47.199732][ T422] cgroup1: Unknown subsys name 'perf_event' [ 47.212711][ T419] cgroup1: Unknown subsys name 'net_cls' [ 47.220905][ T418] cgroup1: Unknown subsys name 'net_cls' [ 47.221027][ T423] cgroup1: Unknown subsys name 'perf_event' [ 47.232039][ T424] cgroup1: Unknown subsys name 'perf_event' [ 47.238689][ T422] cgroup1: Unknown subsys name 'net_cls' [ 47.239079][ T425] cgroup1: Unknown subsys name 'perf_event' [ 47.250791][ T424] cgroup1: Unknown subsys name 'net_cls' [ 47.258713][ T423] cgroup1: Unknown subsys name 'net_cls' [ 47.258927][ T425] cgroup1: Unknown subsys name 'net_cls' [ 47.399822][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.406678][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.414428][ T419] device bridge_slave_0 entered promiscuous mode [ 47.422953][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.430092][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.437538][ T419] device bridge_slave_1 entered promiscuous mode [ 47.533573][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.540487][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.547768][ T424] device bridge_slave_0 entered promiscuous mode [ 47.568168][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.575044][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.582542][ T423] device bridge_slave_0 entered promiscuous mode [ 47.589010][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.595834][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.603248][ T424] device bridge_slave_1 entered promiscuous mode [ 47.624137][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.631316][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.638712][ T423] device bridge_slave_1 entered promiscuous mode [ 47.667315][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.674290][ T422] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.681600][ T422] device bridge_slave_0 entered promiscuous mode [ 47.691833][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.698688][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.706051][ T422] device bridge_slave_1 entered promiscuous mode [ 47.726237][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.733253][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.740685][ T418] device bridge_slave_0 entered promiscuous mode [ 47.750894][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.757738][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.764988][ T418] device bridge_slave_1 entered promiscuous mode [ 47.852845][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.860164][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.867407][ T425] device bridge_slave_0 entered promiscuous mode [ 47.883953][ T425] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.891006][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.898156][ T425] device bridge_slave_1 entered promiscuous mode [ 47.979430][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.986266][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.993404][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.000161][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.056512][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.063365][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.070574][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.077348][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.105005][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.112213][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.119509][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.126250][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.144170][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.151020][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.158234][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.164983][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.182269][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.189664][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.196785][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.204174][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.211366][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.218587][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.225522][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.232537][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.240222][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.247399][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.299720][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.307901][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.314754][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.322065][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.331115][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.337934][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.348452][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.375519][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.398572][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.406667][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.413641][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.422057][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.430980][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.437799][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.445155][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.453295][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.461362][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.468178][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.475416][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.484081][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.492587][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.499463][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.506557][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.514669][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.528332][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.535688][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.549355][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.556748][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.565304][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.573302][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.591568][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.599118][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.606344][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.615319][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.623794][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.630800][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.638604][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.646785][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.654835][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.661675][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.669136][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.689088][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.697344][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.706210][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.713156][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.720731][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.729339][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.737343][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.744317][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.751481][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.759282][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.795457][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.803320][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.811507][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.821762][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.828840][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.837049][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.845412][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.853790][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.862102][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.870202][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.877056][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.884852][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.892777][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.900736][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.908701][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.916631][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.925110][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.933284][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.942251][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.950118][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.957986][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.965852][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.973844][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.981839][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.990157][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.024782][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.033527][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.042163][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.050482][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.089300][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.097929][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.109997][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.117969][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.126441][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.135071][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.143763][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.169072][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.177551][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.186106][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.194534][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.202977][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.211239][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.219960][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.228159][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.248117][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.256635][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.265207][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.273858][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.294038][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.306268][ T23] audit: type=1400 audit(1724862954.799:89): avc: denied { mounton } for pid=447 comm="syz-executor.3" path="/root/syzkaller-testdir2947314052/syzkaller.3rfFN5/0/file0" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 49.334145][ T23] audit: type=1400 audit(1724862954.799:90): avc: denied { mount } for pid=447 comm="syz-executor.3" name="/" dev="incremental-fs" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.360298][ T23] audit: type=1400 audit(1724862954.799:91): avc: denied { unmount } for pid=447 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.386676][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.396235][ T23] audit: type=1400 audit(1724862954.889:92): avc: denied { read } for pid=447 comm="syz-executor.3" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.405937][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.420790][ T23] audit: type=1400 audit(1724862954.919:93): avc: denied { open } for pid=447 comm="syz-executor.3" path="/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.430780][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.461338][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.469531][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.477884][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.486174][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.494531][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.503184][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.511412][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.543032][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.559261][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.576712][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.585176][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.595229][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.603476][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.626647][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.645985][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/08/28 16:35:57 executed programs: 186 [ 56.769132][ T2311] ================================================================== [ 56.777677][ T2311] BUG: KASAN: use-after-free in selinux_inode_permission+0x59d/0x6a0 [ 56.785820][ T2311] Read of size 4 at addr ffff8881db2da824 by task syz-executor.1/2311 [ 56.793967][ T2311] [ 56.796145][ T2311] CPU: 0 PID: 2311 Comm: syz-executor.1 Not tainted 5.4.281-syzkaller-04937-gd883a2284ec1 #0 [ 56.806302][ T2311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 56.816205][ T2311] Call Trace: [ 56.819572][ T2311] dump_stack+0x1d8/0x241 [ 56.823951][ T2311] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 56.829554][ T2311] ? printk+0xd1/0x111 [ 56.833446][ T2311] ? selinux_inode_permission+0x59d/0x6a0 [ 56.839013][ T2311] print_address_description+0x8c/0x600 [ 56.844457][ T2311] ? is_mmconf_reserved+0x430/0x430 [ 56.849427][ T2311] ? selinux_inode_permission+0x59d/0x6a0 [ 56.854972][ T2311] __kasan_report+0xf3/0x120 [ 56.859422][ T2311] ? selinux_inode_permission+0x59d/0x6a0 [ 56.864958][ T2311] kasan_report+0x30/0x60 [ 56.869121][ T2311] ? memset+0x1f/0x40 [ 56.873021][ T2311] selinux_inode_permission+0x59d/0x6a0 [ 56.878403][ T2311] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 56.884055][ T2311] ? link_path_walk+0xbe/0x1040 [ 56.888732][ T2311] security_inode_permission+0x9d/0xf0 [ 56.894113][ T2311] link_path_walk+0x1d1/0x1040 [ 56.898713][ T2311] ? fput_many+0x15e/0x1b0 [ 56.902977][ T2311] ? handle_lookup_down+0x5b0/0x5b0 [ 56.907997][ T2311] ? path_init+0xafe/0xee0 [ 56.912258][ T2311] path_openat+0x1a3/0x34b0 [ 56.916597][ T2311] ? stack_trace_save+0x118/0x1c0 [ 56.921456][ T2311] ? stack_trace_snprint+0x170/0x170 [ 56.926588][ T2311] ? futex_wait+0x890/0x890 [ 56.930999][ T2311] ? __kasan_kmalloc+0x1d9/0x210 [ 56.935887][ T2311] ? do_filp_open+0x450/0x450 [ 56.940370][ T2311] ? do_sys_open+0x357/0x810 [ 56.944803][ T2311] ? do_syscall_64+0xca/0x1c0 [ 56.949483][ T2311] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 56.955393][ T2311] do_filp_open+0x20b/0x450 [ 56.959724][ T2311] ? vfs_tmpfile+0x2c0/0x2c0 [ 56.964166][ T2311] ? _raw_spin_unlock+0x49/0x60 [ 56.968836][ T2311] ? __alloc_fd+0x4c5/0x570 [ 56.973175][ T2311] do_sys_open+0x39c/0x810 [ 56.977599][ T2311] ? file_open_root+0x490/0x490 [ 56.982279][ T2311] ? switch_fpu_return+0x1d4/0x410 [ 56.987242][ T2311] ? ksys_mount+0xe0/0xf0 [ 56.991389][ T2311] do_syscall_64+0xca/0x1c0 [ 56.995729][ T2311] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 57.001474][ T2311] RIP: 0033:0x456e69 [ 57.005201][ T2311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b4 ff ff ff f7 d8 64 89 01 48 [ 57.024801][ T2311] RSP: 002b:00007f06067110d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.033048][ T2311] RAX: ffffffffffffffda RBX: 000000000055c038 RCX: 0000000000456e69 [ 57.040942][ T2311] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 57.048765][ T2311] RBP: 00000000004b0cab R08: 0000000000000000 R09: 0000000000000000 [ 57.056577][ T2311] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004b02b7 [ 57.064379][ T2311] R13: 000000000000006e R14: 000000000055c038 R15: 00007ffd410eefa8 [ 57.072189][ T2311] [ 57.074356][ T2311] Allocated by task 2311: [ 57.078527][ T2311] __kasan_kmalloc+0x171/0x210 [ 57.083141][ T2311] alloc_inode+0x43/0x70 [ 57.087311][ T2311] iget5_locked+0x9c/0x260 [ 57.091556][ T2311] fetch_regular_inode+0x256/0x320 [ 57.096497][ T2311] incfs_mount_fs+0x5c3/0xa00 [ 57.101007][ T2311] legacy_get_tree+0xdf/0x170 [ 57.105526][ T2311] vfs_get_tree+0x85/0x260 [ 57.109769][ T2311] do_new_mount+0x292/0x570 [ 57.114145][ T2311] do_mount+0x688/0xe10 [ 57.118206][ T2311] ksys_mount+0xc2/0xf0 [ 57.122234][ T2311] __x64_sys_mount+0xb1/0xc0 [ 57.126821][ T2311] do_syscall_64+0xca/0x1c0 [ 57.131159][ T2311] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 57.136873][ T2311] [ 57.139054][ T2311] Freed by task 2291: [ 57.142880][ T2311] __kasan_slab_free+0x1b5/0x270 [ 57.147654][ T2311] kfree+0x123/0x370 [ 57.151463][ T2311] evict+0x59d/0x6a0 [ 57.155192][ T2311] evict_inodes+0x5e1/0x660 [ 57.159622][ T2311] generic_shutdown_super+0x94/0x2a0 [ 57.164838][ T2311] kill_anon_super+0x37/0x60 [ 57.169281][ T2311] incfs_kill_sb+0x4c/0x200 [ 57.173676][ T2311] deactivate_locked_super+0xa8/0x110 [ 57.178975][ T2311] deactivate_super+0x1e2/0x2a0 [ 57.183661][ T2311] cleanup_mnt+0x44e/0x500 [ 57.187911][ T2311] task_work_run+0x140/0x170 [ 57.192430][ T2311] exit_to_usermode_loop+0x190/0x1a0 [ 57.197610][ T2311] prepare_exit_to_usermode+0x199/0x200 [ 57.202934][ T2311] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 57.208674][ T2311] [ 57.211108][ T2311] The buggy address belongs to the object at ffff8881db2da800 [ 57.211108][ T2311] which belongs to the cache kmalloc-1k of size 1024 [ 57.226066][ T2311] The buggy address is located 36 bytes inside of [ 57.226066][ T2311] 1024-byte region [ffff8881db2da800, ffff8881db2dac00) [ 57.239235][ T2311] The buggy address belongs to the page: [ 57.244910][ T2311] page:ffffea00076cb600 refcount:1 mapcount:0 mapping:ffff8881f5c02280 index:0x0 compound_mapcount: 0 [ 57.255701][ T2311] flags: 0x8000000000010200(slab|head) [ 57.260935][ T2311] raw: 8000000000010200 ffffea0007ab9e00 0000000500000005 ffff8881f5c02280 [ 57.269439][ T2311] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 57.277854][ T2311] page dumped because: kasan: bad access detected [ 57.284116][ T2311] page_owner tracks the page as allocated [ 57.289662][ T2311] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 57.304612][ T2311] prep_new_page+0x18f/0x370 [ 57.309017][ T2311] get_page_from_freelist+0x2d13/0x2d90 [ 57.314484][ T2311] __alloc_pages_nodemask+0x393/0x840 [ 57.319876][ T2311] alloc_slab_page+0x39/0x3c0 [ 57.324465][ T2311] new_slab+0x97/0x440 [ 57.328369][ T2311] ___slab_alloc+0x2fe/0x490 [ 57.332794][ T2311] __slab_alloc+0x62/0xa0 [ 57.336988][ T2311] __kmalloc_track_caller+0x16d/0x2b0 [ 57.342179][ T2311] __alloc_skb+0xb4/0x4d0 [ 57.346344][ T2311] alloc_uevent_skb+0x74/0x220 [ 57.350934][ T2311] kobject_uevent_net_broadcast+0x176/0x560 [ 57.356716][ T2311] kobject_uevent_env+0x54d/0x710 [ 57.361525][ T2311] netdev_queue_update_kobjects+0x1a6/0x3a0 [ 57.367339][ T2311] netdev_register_kobject+0x263/0x310 [ 57.372631][ T2311] register_netdevice+0xbc5/0x12a0 [ 57.377581][ T2311] __ip_tunnel_create+0x2b0/0x370 [ 57.382445][ T2311] page_owner free stack trace missing [ 57.387650][ T2311] [ 57.389814][ T2311] Memory state around the buggy address: [ 57.395374][ T2311] ffff8881db2da700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.403369][ T2311] ffff8881db2da780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 57.411255][ T2311] >ffff8881db2da800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 2024/08/28 16:36:02 executed programs: 530 [ 57.419236][ T2311] ^ [ 57.424275][ T2311] ffff8881db2da880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.432172][ T2311] ffff8881db2da900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.440080][ T2311] ================================================================== [ 57.448054][ T2311] Disabling lock debugging due to kernel taint 2024/08/28 16:36:07 executed programs: 900 [ 66.601900][ T121] cfg80211: failed to load regulatory.db