Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. 2025/08/31 05:48:45 parsed 1 programs [ 43.884327][ T30] audit: type=1400 audit(1756619326.643:105): avc: denied { unlink } for pid=390 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.963049][ T390] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.522167][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.529339][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.536778][ T411] device bridge_slave_0 entered promiscuous mode [ 44.543544][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.550709][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.558112][ T411] device bridge_slave_1 entered promiscuous mode [ 44.596846][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.603971][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.611265][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.618326][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.634967][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.642375][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.650373][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.658348][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.668254][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.676547][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.683633][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.692394][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.700693][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.707910][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.719468][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.728776][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.742175][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.752984][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.761008][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.768780][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.777339][ T411] device veth0_vlan entered promiscuous mode [ 44.788318][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.797437][ T411] device veth1_macvtap entered promiscuous mode [ 44.806611][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.817240][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.918312][ T30] audit: type=1401 audit(1756619327.673:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2025/08/31 05:48:47 executed programs: 0 [ 45.206932][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.214154][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.221534][ T457] device bridge_slave_0 entered promiscuous mode [ 45.228903][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.236136][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.243471][ T457] device bridge_slave_1 entered promiscuous mode [ 45.286839][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.293958][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.301436][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.308772][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.329590][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.337529][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.345546][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.354623][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.362939][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.370152][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.382577][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.391212][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.398310][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.409426][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.420552][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.434604][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.446122][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.455078][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.462526][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.473763][ T457] device veth0_vlan entered promiscuous mode [ 45.483355][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.492721][ T457] device veth1_macvtap entered promiscuous mode [ 45.501664][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.516012][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.524327][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.647160][ T468] loop2: detected capacity change from 0 to 40427 [ 45.666788][ T468] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 45.674664][ T468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 45.683736][ T468] F2FS-fs (loop2): invalid crc value [ 45.690651][ T8] device bridge_slave_1 left promiscuous mode [ 45.697137][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.698161][ T468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.710838][ T8] device bridge_slave_0 left promiscuous mode [ 45.717451][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.725772][ T8] device veth1_macvtap left promiscuous mode [ 45.731890][ T8] device veth0_vlan left promiscuous mode [ 45.736455][ T468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.745171][ T468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.752827][ T30] audit: type=1400 audit(1756619328.503:107): avc: denied { mount } for pid=467 comm="syz.2.15" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.778041][ T30] audit: type=1400 audit(1756619328.533:108): avc: denied { write } for pid=467 comm="syz.2.15" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.793328][ T457] ------------[ cut here ]------------ [ 45.800517][ T30] audit: type=1400 audit(1756619328.533:109): avc: denied { add_name } for pid=467 comm="syz.2.15" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.823955][ T457] WARNING: CPU: 1 PID: 457 at fs/f2fs/inode.c:880 f2fs_evict_inode+0x12b0/0x1560 [ 45.829808][ T30] audit: type=1400 audit(1756619328.533:110): avc: denied { create } for pid=467 comm="syz.2.15" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.842368][ T457] Modules linked in: [ 45.855377][ T30] audit: type=1400 audit(1756619328.533:111): avc: denied { read open } for pid=467 comm="syz.2.15" path="/0/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.859127][ T457] CPU: 1 PID: 457 Comm: syz-executor Not tainted syzkaller #0 [ 45.882054][ T30] audit: type=1400 audit(1756619328.533:112): avc: denied { ioctl } for pid=467 comm="syz.2.15" path="/0/bus/file0" dev="loop2" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.889757][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.923676][ T457] RIP: 0010:f2fs_evict_inode+0x12b0/0x1560 [ 45.929779][ T457] Code: e9 55 f2 ff ff e8 20 2c 61 ff eb 05 e8 19 2c 61 ff 4c 8b 74 24 28 48 8b 7c 24 18 e8 3a f0 02 00 e9 bc fc ff ff e8 00 2c 61 ff <0f> 0b 4c 89 f7 be 08 00 00 00 e8 d1 a8 9f ff f0 41 80 0e 04 e9 99 [ 45.950496][ T457] RSP: 0018:ffffc90002bf78c0 EFLAGS: 00010293 [ 45.956767][ T457] RAX: ffffffff82078400 RBX: 1ffff9200057ef2c RCX: ffff88811161a780 [ 45.964767][ T457] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 45.972735][ T457] RBP: ffffc90002bf7a30 R08: dffffc0000000000 R09: ffffed1025c201e7 [ 45.980961][ T457] R10: ffffed1025c201e7 R11: 1ffff11025c201e6 R12: ffff88812e100f30 [ 45.989399][ T457] R13: dffffc0000000000 R14: ffff888117a0e078 R15: 0000000000000002 [ 45.997795][ T457] FS: 0000555566ccf500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.007287][ T457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.014185][ T457] CR2: 0000555566cea4a8 CR3: 000000011b748000 CR4: 00000000003506b0 [ 46.022196][ T457] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.030212][ T457] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.038278][ T457] Call Trace: [ 46.041564][ T457] [ 46.044564][ T457] ? inode_wait_for_writeback+0x1b0/0x200 [ 46.050490][ T457] ? f2fs_write_inode+0x850/0x850 [ 46.055700][ T457] ? bit_waitqueue+0x30/0x30 [ 46.060340][ T457] ? locks_free_lock_context+0x42/0x70 [ 46.066353][ T457] ? f2fs_write_inode+0x850/0x850 [ 46.071511][ T457] evict+0x485/0x870 [ 46.075626][ T457] ? proc_nr_inodes+0x310/0x310 [ 46.080532][ T457] ? _raw_spin_lock+0x8e/0xe0 [ 46.085281][ T457] ? _raw_spin_unlock+0x4d/0x70 [ 46.090404][ T457] evict_inodes+0x5de/0x650 [ 46.094983][ T457] ? clear_inode+0x150/0x150 [ 46.099667][ T457] generic_shutdown_super+0x96/0x330 [ 46.105037][ T457] kill_block_super+0x7f/0xf0 [ 46.109761][ T457] kill_f2fs_super+0x2e7/0x390 [ 46.114601][ T457] ? radix_tree_delete_item+0x2c8/0x410 [ 46.120163][ T457] ? f2fs_mount+0x40/0x40 [ 46.124640][ T457] ? unregister_shrinker+0x201/0x290 [ 46.130133][ T457] deactivate_locked_super+0xa0/0x100 [ 46.135777][ T457] deactivate_super+0xaf/0xe0 [ 46.140474][ T457] cleanup_mnt+0x446/0x500 [ 46.144959][ T457] __cleanup_mnt+0x19/0x20 [ 46.149506][ T457] task_work_run+0x127/0x190 [ 46.154237][ T457] exit_to_user_mode_loop+0xd0/0xe0 [ 46.159495][ T457] exit_to_user_mode_prepare+0x5a/0xa0 [ 46.165470][ T457] syscall_exit_to_user_mode+0x1a/0x30 [ 46.171074][ T457] do_syscall_64+0x58/0xa0 [ 46.175746][ T457] ? clear_bhb_loop+0x50/0xa0 [ 46.180455][ T457] ? clear_bhb_loop+0x50/0xa0 [ 46.185249][ T457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.191155][ T457] RIP: 0033:0x7f1eaadfea47 [ 46.195620][ T457] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 46.215595][ T457] RSP: 002b:00007ffe240f5fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 46.224080][ T457] RAX: 0000000000000000 RBX: 00007f1eaae705fc RCX: 00007f1eaadfea47 [ 46.232136][ T457] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe240f6090 [ 46.240237][ T457] RBP: 00007ffe240f6090 R08: 0000000000000000 R09: 0000000000000000 [ 46.248449][ T457] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe240f7110 [ 46.256675][ T457] R13: 00007f1eaae705fc R14: 000000000000b1d0 R15: 00007ffe240f7150 [ 46.264930][ T457] [ 46.267964][ T457] ---[ end trace 02e0c4a9f0215109 ]--- [ 46.296635][ T457] ================================================================== [ 46.304856][ T457] BUG: KASAN: use-after-free in _raw_spin_lock+0x81/0xe0 [ 46.312033][ T457] Write of size 4 at addr ffff88812e100ca8 by task syz-executor/457 [ 46.320284][ T457] [ 46.322700][ T457] CPU: 0 PID: 457 Comm: syz-executor Tainted: G W syzkaller #0 [ 46.331728][ T457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.342055][ T457] Call Trace: [ 46.345323][ T457] [ 46.348414][ T457] __dump_stack+0x21/0x30 [ 46.352742][ T457] dump_stack_lvl+0xee/0x150 [ 46.357477][ T457] ? show_regs_print_info+0x20/0x20 [ 46.363001][ T457] ? load_image+0x3a0/0x3a0 [ 46.367784][ T457] print_address_description+0x7f/0x2c0 [ 46.373615][ T457] ? _raw_spin_lock+0x81/0xe0 [ 46.378331][ T457] kasan_report+0xf1/0x140 [ 46.382942][ T457] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 46.388801][ T457] ? _raw_spin_lock+0x81/0xe0 [ 46.393596][ T457] kasan_check_range+0x280/0x290 [ 46.398623][ T457] __kasan_check_write+0x14/0x20 [ 46.403550][ T457] _raw_spin_lock+0x81/0xe0 [ 46.408378][ T457] ? _raw_spin_trylock_bh+0x130/0x130 [ 46.413890][ T457] ? __kasan_check_write+0x14/0x20 [ 46.419017][ T457] ? _raw_spin_lock+0x8e/0xe0 [ 46.423789][ T457] ? _raw_spin_trylock_bh+0x130/0x130 [ 46.429245][ T457] igrab+0x20/0xa0 [ 46.432986][ T457] f2fs_sync_inode_meta+0x153/0x2a0 [ 46.438201][ T457] f2fs_write_checkpoint+0xa7d/0x1f00 [ 46.443674][ T457] ? f2fs_get_sectors_written+0x4e0/0x4e0 [ 46.449404][ T457] ? rwsem_write_trylock+0x130/0x300 [ 46.454907][ T457] ? __kasan_check_read+0x11/0x20 [ 46.459936][ T457] ? wb_wait_for_completion+0x1d8/0x270 [ 46.465491][ T457] f2fs_issue_checkpoint+0x2e5/0x470 [ 46.470865][ T457] ? f2fs_destroy_checkpoint_caches+0x30/0x30 [ 46.477146][ T457] ? try_to_writeback_inodes_sb+0xc0/0xc0 [ 46.483178][ T457] f2fs_sync_fs+0x16f/0x2c0 [ 46.487885][ T457] sync_filesystem+0x1cb/0x240 [ 46.492659][ T457] f2fs_quota_off_umount+0x217/0x230 [ 46.498003][ T457] f2fs_put_super+0xb7/0xc00 [ 46.502681][ T457] ? fsnotify_destroy_marks+0x14f/0x400 [ 46.508229][ T457] ? fsnotify_sb_delete+0x471/0x4e0 [ 46.513412][ T457] ? f2fs_drop_inode+0x980/0x980 [ 46.518327][ T457] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 46.524030][ T457] ? clear_inode+0x150/0x150 [ 46.528602][ T457] ? fscrypt_destroy_keyring+0x27f/0x290 [ 46.534226][ T457] ? f2fs_drop_inode+0x980/0x980 [ 46.539245][ T457] generic_shutdown_super+0x151/0x330 [ 46.544589][ T457] kill_block_super+0x7f/0xf0 [ 46.549370][ T457] kill_f2fs_super+0x2e7/0x390 [ 46.554107][ T457] ? radix_tree_delete_item+0x2c8/0x410 [ 46.559630][ T457] ? f2fs_mount+0x40/0x40 [ 46.563938][ T457] ? unregister_shrinker+0x201/0x290 [ 46.569322][ T457] deactivate_locked_super+0xa0/0x100 [ 46.574872][ T457] deactivate_super+0xaf/0xe0 [ 46.579653][ T457] cleanup_mnt+0x446/0x500 [ 46.584061][ T457] __cleanup_mnt+0x19/0x20 [ 46.588483][ T457] task_work_run+0x127/0x190 [ 46.593067][ T457] exit_to_user_mode_loop+0xd0/0xe0 [ 46.598368][ T457] exit_to_user_mode_prepare+0x5a/0xa0 [ 46.604483][ T457] syscall_exit_to_user_mode+0x1a/0x30 [ 46.610049][ T457] do_syscall_64+0x58/0xa0 [ 46.614544][ T457] ? clear_bhb_loop+0x50/0xa0 [ 46.619243][ T457] ? clear_bhb_loop+0x50/0xa0 [ 46.624114][ T457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.630005][ T457] RIP: 0033:0x7f1eaadfea47 [ 46.634418][ T457] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 46.654199][ T457] RSP: 002b:00007ffe240f5fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 46.662616][ T457] RAX: 0000000000000000 RBX: 00007f1eaae705fc RCX: 00007f1eaadfea47 [ 46.670567][ T457] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe240f6090 [ 46.678557][ T457] RBP: 00007ffe240f6090 R08: 0000000000000000 R09: 0000000000000000 [ 46.686515][ T457] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe240f7110 [ 46.694586][ T457] R13: 00007f1eaae705fc R14: 000000000000b1d0 R15: 00007ffe240f7150 [ 46.702632][ T457] [ 46.705633][ T457] [ 46.707933][ T457] Allocated by task 468: [ 46.712148][ T457] __kasan_slab_alloc+0xbd/0xf0 [ 46.716985][ T457] slab_post_alloc_hook+0x4f/0x2b0 [ 46.722077][ T457] kmem_cache_alloc+0xf7/0x260 [ 46.726828][ T457] f2fs_alloc_inode+0x26/0x330 [ 46.731744][ T457] new_inode_pseudo+0x62/0x210 [ 46.736585][ T457] new_inode+0x28/0x1e0 [ 46.740723][ T457] f2fs_new_inode+0xd2/0x12b0 [ 46.745380][ T457] f2fs_create+0x178/0x15f0 [ 46.749862][ T457] path_openat+0x11ae/0x2f10 [ 46.754431][ T457] do_filp_open+0x1b3/0x3e0 [ 46.759007][ T457] do_sys_openat2+0x14c/0x7b0 [ 46.763858][ T457] __x64_sys_openat+0x136/0x160 [ 46.769298][ T457] x64_sys_call+0x219/0x9a0 [ 46.773905][ T457] do_syscall_64+0x4c/0xa0 [ 46.778301][ T457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.784175][ T457] [ 46.786479][ T457] Freed by task 25: [ 46.790258][ T457] kasan_set_track+0x4a/0x70 [ 46.794825][ T457] kasan_set_free_info+0x23/0x40 [ 46.799744][ T457] ____kasan_slab_free+0x125/0x160 [ 46.804934][ T457] __kasan_slab_free+0x11/0x20 [ 46.809683][ T457] slab_free_freelist_hook+0xc2/0x190 [ 46.815119][ T457] kmem_cache_free+0x100/0x320 [ 46.819956][ T457] f2fs_free_inode+0x24/0x30 [ 46.824655][ T457] i_callback+0x4c/0x70 [ 46.829032][ T457] rcu_do_batch+0x51d/0xba0 [ 46.833522][ T457] rcu_core+0x5e4/0xf80 [ 46.837930][ T457] rcu_core_si+0x9/0x10 [ 46.842071][ T457] handle_softirqs+0x250/0x560 [ 46.846812][ T457] run_ksoftirqd+0x28/0x40 [ 46.851199][ T457] smpboot_thread_fn+0x45a/0x8c0 [ 46.856114][ T457] kthread+0x411/0x500 [ 46.860469][ T457] ret_from_fork+0x1f/0x30 [ 46.865050][ T457] [ 46.867361][ T457] Last potentially related work creation: [ 46.873050][ T457] kasan_save_stack+0x3a/0x60 [ 46.877707][ T457] __kasan_record_aux_stack+0xd2/0x100 [ 46.883155][ T457] kasan_record_aux_stack_noalloc+0xb/0x10 [ 46.888938][ T457] call_rcu+0x105/0xfe0 [ 46.893080][ T457] evict+0x7da/0x870 [ 46.896973][ T457] evict_inodes+0x5de/0x650 [ 46.901452][ T457] generic_shutdown_super+0x96/0x330 [ 46.906890][ T457] kill_block_super+0x7f/0xf0 [ 46.911542][ T457] kill_f2fs_super+0x2e7/0x390 [ 46.916297][ T457] deactivate_locked_super+0xa0/0x100 [ 46.921760][ T457] deactivate_super+0xaf/0xe0 [ 46.926414][ T457] cleanup_mnt+0x446/0x500 [ 46.930823][ T457] __cleanup_mnt+0x19/0x20 [ 46.935322][ T457] task_work_run+0x127/0x190 [ 46.939929][ T457] exit_to_user_mode_loop+0xd0/0xe0 [ 46.945468][ T457] exit_to_user_mode_prepare+0x5a/0xa0 [ 46.950902][ T457] syscall_exit_to_user_mode+0x1a/0x30 [ 46.956349][ T457] do_syscall_64+0x58/0xa0 [ 46.960748][ T457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.966619][ T457] [ 46.968919][ T457] The buggy address belongs to the object at ffff88812e100c20 [ 46.968919][ T457] which belongs to the cache f2fs_inode_cache of size 1424 [ 46.983565][ T457] The buggy address is located 136 bytes inside of [ 46.983565][ T457] 1424-byte region [ffff88812e100c20, ffff88812e1011b0) [ 46.996907][ T457] The buggy address belongs to the page: [ 47.002519][ T457] page:ffffea0004b84000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12e100 [ 47.012744][ T457] head:ffffea0004b84000 order:3 compound_mapcount:0 compound_pincount:0 [ 47.021053][ T457] flags: 0x4000000000010200(slab|head|zone=1) [ 47.027131][ T457] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888107f89380 [ 47.035954][ T457] raw: 0000000000000000 0000000080150015 00000001ffffffff 0000000000000000 [ 47.044521][ T457] page dumped because: kasan: bad access detected [ 47.050997][ T457] page_owner tracks the page as allocated [ 47.056692][ T457] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 468, ts 45683243976, free_ts 0 [ 47.078020][ T457] post_alloc_hook+0x192/0x1b0 [ 47.082782][ T457] prep_new_page+0x1c/0x110 [ 47.087262][ T457] get_page_from_freelist+0x2cc5/0x2d50 [ 47.092784][ T457] __alloc_pages+0x18f/0x440 [ 47.097350][ T457] new_slab+0xa1/0x4d0 [ 47.101488][ T457] ___slab_alloc+0x381/0x810 [ 47.106078][ T457] __slab_alloc+0x49/0x90 [ 47.110398][ T457] kmem_cache_alloc+0x138/0x260 [ 47.115224][ T457] f2fs_alloc_inode+0x26/0x330 [ 47.119968][ T457] iget_locked+0x16c/0x7e0 [ 47.124497][ T457] f2fs_iget+0x55/0x5130 [ 47.128848][ T457] f2fs_fill_super+0x3a20/0x6d10 [ 47.133810][ T457] mount_bdev+0x2ae/0x3e0 [ 47.138337][ T457] f2fs_mount+0x34/0x40 [ 47.142484][ T457] legacy_get_tree+0xed/0x190 [ 47.147271][ T457] vfs_get_tree+0x89/0x260 [ 47.152040][ T457] page_owner free stack trace missing [ 47.157399][ T457] [ 47.159703][ T457] Memory state around the buggy address: [ 47.165579][ T457] ffff88812e100b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.173635][ T457] ffff88812e100c00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 47.181759][ T457] >ffff88812e100c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.190155][ T457] ^ [ 47.195592][ T457] ffff88812e100d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.203732][ T457] ffff88812e100d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.212036][ T457] ================================================================== [ 47.220266][ T457] Disabling lock debugging due to kernel taint [ 47.238560][ T30] audit: type=1400 audit(1756619329.993:113): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.261404][ T30] audit: type=1400 audit(1756619329.993:114): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1