Warning: Permanently added '10.128.10.3' (ED25519) to the list of known hosts. 2024/04/07 09:05:11 ignoring optional flag "sandboxArg"="0" 2024/04/07 09:05:11 parsed 1 programs 2024/04/07 09:05:11 executed programs: 0 [ 44.145741][ T23] kauditd_printk_skb: 68 callbacks suppressed [ 44.145753][ T23] audit: type=1400 audit(1712480711.670:144): avc: denied { mounton } for pid=403 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 44.239744][ T23] audit: type=1400 audit(1712480711.670:145): avc: denied { mount } for pid=403 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 44.439152][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.446438][ T422] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.454168][ T422] device bridge_slave_0 entered promiscuous mode [ 44.484547][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.491668][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.499024][ T422] device bridge_slave_1 entered promiscuous mode [ 44.572791][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.580371][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.587958][ T412] device bridge_slave_0 entered promiscuous mode [ 44.594864][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.601924][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.609198][ T419] device bridge_slave_0 entered promiscuous mode [ 44.616806][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.623738][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.631292][ T424] device bridge_slave_0 entered promiscuous mode [ 44.637820][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.645340][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.653101][ T418] device bridge_slave_0 entered promiscuous mode [ 44.659712][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.666644][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.674355][ T412] device bridge_slave_1 entered promiscuous mode [ 44.690360][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.697400][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.705523][ T419] device bridge_slave_1 entered promiscuous mode [ 44.712007][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.719024][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.726795][ T424] device bridge_slave_1 entered promiscuous mode [ 44.740873][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.748018][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.755462][ T418] device bridge_slave_1 entered promiscuous mode [ 44.834106][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.841119][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.848530][ T423] device bridge_slave_0 entered promiscuous mode [ 44.888999][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.896558][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.904019][ T423] device bridge_slave_1 entered promiscuous mode [ 45.007872][ T23] audit: type=1400 audit(1712480712.530:146): avc: denied { create } for pid=419 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.029752][ T23] audit: type=1400 audit(1712480712.530:147): avc: denied { write } for pid=419 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.059731][ T23] audit: type=1400 audit(1712480712.530:148): avc: denied { read } for pid=419 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 45.085568][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.092445][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.099550][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.106764][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.117498][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.124410][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.131705][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.138437][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.162098][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.168944][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.176311][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.183173][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.227708][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.234669][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.242344][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.249657][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.267373][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.274255][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.281375][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.288203][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.302180][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.309052][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.316345][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.323379][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.349976][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.357064][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.365060][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.373118][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.380530][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.387600][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.394922][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.402005][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.409241][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.416488][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.423608][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.430803][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.437783][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.474900][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.482621][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.490773][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.498932][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.505939][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.551403][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.558848][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.567265][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.575666][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.584312][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.591172][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.598517][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.606848][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.614871][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.621749][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.629004][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.636604][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.644445][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.652679][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.661125][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.668084][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.675450][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.683694][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.691892][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.698716][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.706339][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.714691][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.723129][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.729970][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.737293][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.745734][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.754462][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.761573][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.769371][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.777611][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.789851][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.797926][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.806092][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.815682][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.849856][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.858328][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.866760][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.873733][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.881823][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.889093][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.896620][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.905003][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.913374][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.920303][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.927596][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.935812][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.943797][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.951990][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.983329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.991775][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.000388][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.007256][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.016309][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.024890][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.033678][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.040779][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.048114][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.056199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.064312][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.072797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.081208][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.089358][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.105833][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.114481][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.123533][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.130389][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.137846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.146362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.154732][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.162820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.170967][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.212002][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.221840][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.260047][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.282552][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.291295][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.299591][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.308628][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.317295][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.325733][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.334108][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.350338][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.358873][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.367864][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.376076][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.384405][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.400073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.431182][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.439304][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.447912][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.455751][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.479752][ T23] audit: type=1400 audit(1712480714.000:149): avc: denied { mounton } for pid=419 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.510702][ T23] audit: type=1400 audit(1712480714.030:150): avc: denied { mounton } for pid=446 comm="syz-executor.0" path="/root/syzkaller-testdir2052448500/syzkaller.NEBeux/0/file0" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.511727][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.546620][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.555160][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.583016][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.591803][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.601096][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.609465][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.617824][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.625930][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.634349][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.642683][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.650946][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.659268][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.686448][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.695477][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.703996][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.713641][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.729884][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.744513][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.769372][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.778266][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.802158][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.811330][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.820440][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.830649][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.839378][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.848163][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.868600][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.880302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.939949][ T467] ================================================================== [ 46.947854][ T467] BUG: KASAN: use-after-free in fuse_copy_one+0x1c0/0x3a0 [ 46.954997][ T467] Read of size 256 at addr ffff8881d9bf4c10 by task syz-executor.2/467 [ 46.963153][ T467] [ 46.965469][ T467] CPU: 1 PID: 467 Comm: syz-executor.2 Not tainted 5.4.268-syzkaller-04870-gd0d34dcb02cc #0 [ 46.975642][ T467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.986384][ T467] Call Trace: [ 46.989528][ T467] dump_stack+0x1d8/0x241 [ 46.993687][ T467] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 46.999319][ T467] ? printk+0xd1/0x111 [ 47.003262][ T467] ? fuse_copy_one+0x1c0/0x3a0 [ 47.007825][ T467] ? wake_up_klogd+0xb2/0xf0 [ 47.012259][ T467] ? fuse_copy_one+0x1c0/0x3a0 [ 47.016858][ T467] print_address_description+0x8c/0x600 [ 47.022232][ T467] ? panic+0x896/0x896 [ 47.026146][ T467] ? _raw_spin_lock+0xa4/0x1b0 [ 47.030893][ T467] ? fuse_copy_one+0x1c0/0x3a0 [ 47.035456][ T467] __kasan_report+0xf3/0x120 [ 47.040015][ T467] ? fuse_copy_one+0x1c0/0x3a0 [ 47.044821][ T467] ? fuse_copy_one+0x1c0/0x3a0 [ 47.049483][ T467] kasan_report+0x30/0x60 [ 47.053760][ T467] check_memory_region+0x272/0x280 [ 47.058713][ T467] memcpy+0x25/0x50 [ 47.062667][ T467] fuse_copy_one+0x1c0/0x3a0 [ 47.067098][ T467] fuse_copy_args+0x339/0x410 [ 47.071607][ T467] fuse_dev_do_read+0xc1b/0x1190 [ 47.076385][ T467] ? queue_interrupt+0x310/0x310 [ 47.081443][ T467] fuse_dev_read+0x179/0x220 [ 47.085999][ T467] ? fuse_dev_release+0x5c0/0x5c0 [ 47.090853][ T467] ? do_futex+0x13c1/0x19f0 [ 47.095286][ T467] ? __lru_cache_add+0x206/0x2b0 [ 47.100236][ T467] ? iov_iter_init+0x82/0x160 [ 47.104927][ T467] __vfs_read+0x5cd/0x730 [ 47.109094][ T467] ? rw_verify_area+0x360/0x360 [ 47.113870][ T467] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 47.120466][ T467] ? security_file_permission+0x1dc/0x2f0 [ 47.126117][ T467] vfs_read+0x148/0x360 [ 47.130023][ T467] ksys_read+0x199/0x2c0 [ 47.134241][ T467] ? vfs_write+0x4e0/0x4e0 [ 47.138589][ T467] ? __do_page_fault+0x725/0xbb0 [ 47.143441][ T467] do_syscall_64+0xca/0x1c0 [ 47.147864][ T467] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 47.153673][ T467] [ 47.155953][ T467] Allocated by task 452: [ 47.160487][ T467] __kasan_kmalloc+0x171/0x210 [ 47.165173][ T467] __d_alloc+0xae/0x6a0 [ 47.169278][ T467] d_alloc_parallel+0xe7/0x1310 [ 47.173967][ T467] __lookup_slow+0x156/0x460 [ 47.178476][ T467] lookup_slow+0x53/0x70 [ 47.182554][ T467] walk_component+0x2dc/0x590 [ 47.187333][ T467] path_lookupat+0x182/0x3f0 [ 47.192451][ T467] filename_lookup+0x253/0x6e0 [ 47.197151][ T467] do_mount+0x135/0xe10 [ 47.201145][ T467] ksys_mount+0xc2/0xf0 [ 47.205118][ T467] __x64_sys_mount+0xb1/0xc0 [ 47.209545][ T467] do_syscall_64+0xca/0x1c0 [ 47.214078][ T467] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 47.219871][ T467] [ 47.222052][ T467] Freed by task 10: [ 47.225695][ T467] __kasan_slab_free+0x1b5/0x270 [ 47.230567][ T467] kfree+0x123/0x370 [ 47.234375][ T467] rcu_do_batch+0x451/0xa00 [ 47.238715][ T467] rcu_core+0x4c8/0xcb0 [ 47.242703][ T467] __do_softirq+0x23b/0x6b7 [ 47.247041][ T467] [ 47.249208][ T467] The buggy address belongs to the object at ffff8881d9bf4c00 [ 47.249208][ T467] which belongs to the cache kmalloc-rcl-512 of size 512 [ 47.263638][ T467] The buggy address is located 16 bytes inside of [ 47.263638][ T467] 512-byte region [ffff8881d9bf4c00, ffff8881d9bf4e00) [ 47.276630][ T467] The buggy address belongs to the page: [ 47.282113][ T467] page:ffffea000766fd00 refcount:1 mapcount:0 mapping:ffff8881f5c0db80 index:0x0 compound_mapcount: 0 [ 47.293497][ T467] flags: 0x8000000000010200(slab|head) [ 47.298784][ T467] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5c0db80 [ 47.307210][ T467] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 47.315785][ T467] page dumped because: kasan: bad access detected [ 47.322031][ T467] page_owner tracks the page as allocated [ 47.327606][ T467] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 47.345740][ T467] prep_new_page+0x18f/0x370 [ 47.350160][ T467] get_page_from_freelist+0x2d13/0x2d90 [ 47.355769][ T467] __alloc_pages_nodemask+0x393/0x840 [ 47.361041][ T467] alloc_slab_page+0x39/0x3c0 [ 47.365562][ T467] new_slab+0x97/0x440 [ 47.369469][ T467] ___slab_alloc+0x2fe/0x490 [ 47.374268][ T467] __slab_alloc+0x62/0xa0 [ 47.378430][ T467] __kmalloc+0x19b/0x2e0 [ 47.382517][ T467] __d_alloc+0xae/0x6a0 [ 47.386500][ T467] d_alloc_parallel+0xe7/0x1310 [ 47.391185][ T467] __lookup_slow+0x156/0x460 [ 47.395612][ T467] lookup_slow+0x53/0x70 [ 47.399693][ T467] walk_component+0x2dc/0x590 [ 47.404331][ T467] path_lookupat+0x182/0x3f0 [ 47.408815][ T467] filename_lookup+0x253/0x6e0 [ 47.413352][ T467] do_mount+0x135/0xe10 [ 47.417334][ T467] page_owner free stack trace missing [ 47.422718][ T467] [ 47.424890][ T467] Memory state around the buggy address: [ 47.430358][ T467] ffff8881d9bf4b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.438352][ T467] ffff8881d9bf4b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.446334][ T467] >ffff8881d9bf4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.454221][ T467] ^ [ 47.458743][ T467] ffff8881d9bf4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.466637][ T467] ffff8881d9bf4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.474532][ T467] ================================================================== [ 47.482526][ T467] Disabling lock debugging due to kernel taint [ 47.496770][ T23] audit: type=1400 audit(1712480715.020:151): avc: denied { unmount } for pid=419 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 2024/04/07 09:05:16 executed programs: 18 2024/04/07 09:05:21 executed programs: 54