Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. 2024/10/12 19:04:30 ignoring optional flag "sandboxArg"="0" 2024/10/12 19:04:30 ignoring optional flag "type"="gce" 2024/10/12 19:04:31 parsed 1 programs [ 45.604089][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 45.604103][ T24] audit: type=1400 audit(1728759871.120:94): avc: denied { mount } for pid=343 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/10/12 19:04:31 executed programs: 0 [ 45.635070][ T24] audit: type=1400 audit(1728759871.150:95): avc: denied { unlink } for pid=343 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.687450][ T343] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.807488][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.814765][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.822330][ T357] device bridge_slave_0 entered promiscuous mode [ 45.830847][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.838196][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.845655][ T357] device bridge_slave_1 entered promiscuous mode [ 45.931233][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.938509][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.945895][ T354] device bridge_slave_0 entered promiscuous mode [ 45.952963][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.960293][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.967626][ T354] device bridge_slave_1 entered promiscuous mode [ 46.000661][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.007654][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.014942][ T358] device bridge_slave_0 entered promiscuous mode [ 46.022687][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.029799][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.037522][ T358] device bridge_slave_1 entered promiscuous mode [ 46.091240][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.098526][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.106058][ T360] device bridge_slave_0 entered promiscuous mode [ 46.113145][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.120319][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.127973][ T360] device bridge_slave_1 entered promiscuous mode [ 46.155699][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.162744][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.170459][ T359] device bridge_slave_0 entered promiscuous mode [ 46.178025][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.185112][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.192713][ T359] device bridge_slave_1 entered promiscuous mode [ 46.317541][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.325368][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.337770][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.346449][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.354916][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.361916][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.380659][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.389284][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.398622][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.406957][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.413792][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.442269][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.451751][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.470516][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.478397][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.487184][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.494210][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.501821][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.516487][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.524810][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.533637][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.540868][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.549549][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.558320][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.565259][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.574433][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.582192][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.591442][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.598716][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.610849][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.630645][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.640105][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.648833][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.656762][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.682332][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.692032][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.701287][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.709717][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.717481][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.726426][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.735014][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.742171][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.749884][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.757695][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.765687][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.775503][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.784194][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.791179][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.798779][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.814035][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.822885][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.831547][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.839741][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.848498][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.862154][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.871670][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.884300][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.894117][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.906351][ T357] device veth0_vlan entered promiscuous mode [ 46.925643][ T360] device veth0_vlan entered promiscuous mode [ 46.933350][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.942613][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.954075][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.963872][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.973359][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.984542][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.995693][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.005330][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.016168][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.024366][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.037527][ T354] device veth0_vlan entered promiscuous mode [ 47.050550][ T360] device veth1_macvtap entered promiscuous mode [ 47.063100][ T357] device veth1_macvtap entered promiscuous mode [ 47.070744][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.079350][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.089017][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.097939][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.106139][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.113895][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.122441][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.130667][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.138539][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.146817][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.155397][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.162899][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.173103][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.181976][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.196516][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.205428][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.213797][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.222673][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.240082][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.248617][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.258435][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.266998][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.283706][ T358] device veth0_vlan entered promiscuous mode [ 47.291465][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.299910][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.308714][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.317104][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.325417][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.332822][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.343632][ T24] audit: type=1400 audit(1728759872.860:96): avc: denied { mounton } for pid=360 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.349370][ T359] device veth0_vlan entered promiscuous mode [ 47.390149][ T358] device veth1_macvtap entered promiscuous mode [ 47.391340][ T24] audit: type=1400 audit(1728759872.910:97): avc: denied { create } for pid=378 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.404873][ T354] device veth1_macvtap entered promiscuous mode [ 47.422588][ T24] audit: type=1400 audit(1728759872.910:98): avc: denied { bind } for pid=378 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.422604][ T24] audit: type=1400 audit(1728759872.910:99): avc: denied { listen } for pid=378 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.422626][ T24] audit: type=1400 audit(1728759872.910:100): avc: denied { connect } for pid=378 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.483715][ T24] audit: type=1400 audit(1728759873.000:101): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.506533][ T5] ================================================================== [ 47.508927][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.514470][ T5] BUG: KASAN: use-after-free in _raw_spin_lock_bh+0x97/0x1b0 [ 47.529606][ T5] Write of size 4 at addr ffff88810dd9cc88 by task kworker/0:0/5 [ 47.535752][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.537412][ T5] [ 47.546047][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.548126][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.10.226-syzkaller-1003431-ge5e5644ea27f #0 [ 47.565746][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.566947][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.585329][ T5] Workqueue: vsock-loopback vsock_loopback_work [ 47.591775][ T5] Call Trace: [ 47.594990][ T5] dump_stack_lvl+0x1e2/0x24b [ 47.595407][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.599910][ T5] ? bfq_pos_tree_add_move+0x43b/0x43b [ 47.613210][ T5] ? panic+0x812/0x812 [ 47.617106][ T5] ? stack_trace_save+0x113/0x1c0 [ 47.621957][ T5] print_address_description+0x81/0x3b0 [ 47.625474][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.628112][ T5] ? __kasan_check_write+0x14/0x20 [ 47.640678][ T5] kasan_report+0x179/0x1c0 [ 47.645206][ T5] ? _raw_spin_lock_bh+0x97/0x1b0 [ 47.650128][ T5] ? _raw_spin_lock_bh+0x97/0x1b0 [ 47.655164][ T5] kasan_check_range+0x293/0x2a0 [ 47.659922][ T5] __kasan_check_write+0x14/0x20 [ 47.664784][ T5] _raw_spin_lock_bh+0x97/0x1b0 [ 47.666874][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.669482][ T5] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 47.681627][ T5] ? vsock_find_bound_socket+0x2d0/0x330 [ 47.687118][ T5] virtio_transport_recv_pkt+0x665/0x4130 [ 47.692696][ T5] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 47.695362][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.698380][ T5] ? virtio_transport_release+0xc00/0xc00 [ 47.711298][ T5] ? __mod_timer+0x903/0xcf0 [ 47.715796][ T5] ? try_invoke_on_locked_down_task+0x280/0x280 [ 47.722039][ T5] ? __kasan_check_write+0x14/0x20 [ 47.727102][ T5] ? _raw_spin_lock+0xa4/0x1b0 [ 47.731872][ T5] ? __kasan_check_write+0x14/0x20 [ 47.736840][ T5] ? wake_up_q+0x125/0x1e0 [ 47.741161][ T5] ? wake_q_add+0xaf/0x100 [ 47.745433][ T5] ? __mutex_unlock_slowpath+0x227/0x330 [ 47.751174][ T5] ? mutex_unlock+0x40/0x40 [ 47.755584][ T5] ? __queue_delayed_work+0x16d/0x1f0 [ 47.760787][ T5] ? mutex_unlock+0x33/0x40 [ 47.765237][ T5] ? __rtnl_unlock+0x77/0x80 [ 47.769922][ T5] ? netdev_run_todo+0xd5a/0xdc0 [ 47.774800][ T5] ? addrconf_mod_dad_work+0xc1/0x120 [ 47.780083][ T5] ? netdev_refcnt_read+0x1e0/0x1e0 [ 47.785238][ T5] ? addrconf_dad_kick+0x2f1/0x400 [ 47.790525][ T5] ? addrconf_dad_completed+0xd90/0xd90 [ 47.795981][ T5] ? __kasan_check_write+0x14/0x20 [ 47.801196][ T5] ? virtio_transport_deliver_tap_pkt+0xb0/0xb0 [ 47.807424][ T5] ? virtio_transport_deliver_tap_pkt+0x60/0xb0 [ 47.813582][ T5] vsock_loopback_work+0x37d/0x3f0 [ 47.818865][ T5] ? vsock_loopback_send_pkt+0x120/0x120 [ 47.824518][ T5] ? read_word_at_a_time+0x12/0x20 [ 47.829656][ T5] ? strscpy+0x9c/0x260 [ 47.833646][ T5] process_one_work+0x6dc/0xbd0 [ 47.838343][ T5] worker_thread+0xaea/0x1510 [ 47.843034][ T5] kthread+0x34b/0x3d0 [ 47.847191][ T5] ? worker_clr_flags+0x180/0x180 [ 47.852320][ T5] ? kthread_blkcg+0xd0/0xd0 [ 47.856766][ T5] ret_from_fork+0x1f/0x30 [ 47.860980][ T5] [ 47.863263][ T5] Allocated by task 382: [ 47.867499][ T5] ____kasan_kmalloc+0xdb/0x110 [ 47.872464][ T5] __kasan_kmalloc+0x9/0x10 [ 47.876888][ T5] kmem_cache_alloc_trace+0x18a/0x2e0 [ 47.882478][ T5] virtio_transport_do_socket_init+0x56/0x2d0 [ 47.888744][ T5] vsock_assign_transport+0x324/0x3f0 [ 47.894250][ T5] vsock_stream_connect+0x5cf/0xd30 [ 47.899259][ T5] __sys_connect+0x388/0x410 [ 47.903879][ T5] __x64_sys_connect+0x7a/0x90 [ 47.908654][ T5] do_syscall_64+0x34/0x70 [ 47.912982][ T5] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.918977][ T5] [ 47.921439][ T5] Freed by task 382: [ 47.925327][ T5] kasan_set_track+0x4b/0x70 [ 47.929771][ T5] kasan_set_free_info+0x23/0x40 [ 47.934609][ T5] ____kasan_slab_free+0x121/0x160 [ 47.939783][ T5] __kasan_slab_free+0x11/0x20 [ 47.944343][ T5] slab_free_freelist_hook+0xc0/0x190 [ 47.949545][ T5] kfree+0xc3/0x270 [ 47.953186][ T5] virtio_transport_destruct+0x3b/0x40 [ 47.958476][ T5] vsock_assign_transport+0x266/0x3f0 [ 47.963681][ T5] vsock_stream_connect+0x5cf/0xd30 [ 47.968832][ T5] __sys_connect+0x388/0x410 [ 47.973449][ T5] __x64_sys_connect+0x7a/0x90 [ 47.978325][ T5] do_syscall_64+0x34/0x70 [ 47.982571][ T5] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.988276][ T5] [ 47.990451][ T5] The buggy address belongs to the object at ffff88810dd9cc80 [ 47.990451][ T5] which belongs to the cache kmalloc-64 of size 64 [ 48.005905][ T5] The buggy address is located 8 bytes inside of [ 48.005905][ T5] 64-byte region [ffff88810dd9cc80, ffff88810dd9ccc0) [ 48.019202][ T5] The buggy address belongs to the page: [ 48.024693][ T5] page:ffffea0004376700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10dd9c [ 48.035567][ T5] flags: 0x4000000000000200(slab) [ 48.040764][ T5] raw: 4000000000000200 ffffea0004375b40 0000000400000004 ffff888100043800 [ 48.049283][ T5] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 48.057770][ T5] page dumped because: kasan: bad access detected [ 48.064394][ T5] page_owner tracks the page as allocated [ 48.069954][ T5] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 96, ts 4574269788, free_ts 4574241922 [ 48.085830][ T5] prep_new_page+0x166/0x180 [ 48.090506][ T5] get_page_from_freelist+0x2d8c/0x2f30 [ 48.096098][ T5] __alloc_pages_nodemask+0x435/0xaf0 [ 48.101262][ T5] new_slab+0x80/0x400 [ 48.105271][ T5] ___slab_alloc+0x302/0x4b0 [ 48.109856][ T5] __slab_alloc+0x63/0xa0 [ 48.114110][ T5] kmem_cache_alloc_trace+0x1bd/0x2e0 [ 48.119964][ T5] kernfs_fop_open+0x7fa/0xab0 [ 48.124959][ T5] do_dentry_open+0x7c1/0x10d0 [ 48.130048][ T5] vfs_open+0x73/0x80 [ 48.133975][ T5] path_openat+0x2660/0x3000 [ 48.138669][ T5] do_filp_open+0x21c/0x460 [ 48.143542][ T5] do_sys_openat2+0x13f/0x710 [ 48.148152][ T5] __x64_sys_openat+0x243/0x290 [ 48.152905][ T5] do_syscall_64+0x34/0x70 [ 48.157517][ T5] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.163669][ T5] page last free stack trace: [ 48.168723][ T5] free_unref_page_prepare+0x2ae/0x2d0 [ 48.174515][ T5] free_the_page+0x9e/0x370 [ 48.179446][ T5] __free_pages+0x67/0xc0 [ 48.183617][ T5] free_pages+0x7c/0x90 [ 48.187618][ T5] selinux_genfs_get_sid+0x24d/0x2a0 [ 48.192784][ T5] inode_doinit_with_dentry+0x86f/0x1050 [ 48.198369][ T5] selinux_d_instantiate+0x27/0x40 [ 48.203732][ T5] security_d_instantiate+0x9f/0x100 [ 48.208954][ T5] d_splice_alias+0x6d/0x390 [ 48.213487][ T5] kernfs_iop_lookup+0x2a4/0x2f0 [ 48.218583][ T5] path_openat+0x11ab/0x3000 [ 48.222998][ T5] do_filp_open+0x21c/0x460 [ 48.227326][ T5] do_sys_openat2+0x13f/0x710 [ 48.231838][ T5] __x64_sys_openat+0x243/0x290 [ 48.236625][ T5] do_syscall_64+0x34/0x70 [ 48.240995][ T5] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.246971][ T5] [ 48.249143][ T5] Memory state around the buggy address: [ 48.254887][ T5] ffff88810dd9cb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 48.262955][ T5] ffff88810dd9cc00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 48.271115][ T5] >ffff88810dd9cc80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 48.279436][ T5] ^ [ 48.283865][ T5] ffff88810dd9cd00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 48.291948][ T5] ffff88810dd9cd80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 48.300190][ T5] ================================================================== [ 48.308684][ T5] Disabling lock debugging due to kernel taint [ 48.366336][ T359] device veth1_macvtap entered promiscuous mode 2024/10/12 19:04:36 executed programs: 8 2024/10/12 19:04:42 executed programs: 10