Warning: Permanently added '10.128.0.43' (ED25519) to the list of known hosts. executing program [ 31.081664][ T30] audit: type=1400 audit(1700213575.023:66): avc: denied { execmem } for pid=295 comm="syz-executor249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.084637][ T30] audit: type=1400 audit(1700213575.023:67): avc: denied { read write } for pid=295 comm="syz-executor249" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.088413][ T30] audit: type=1400 audit(1700213575.043:68): avc: denied { open } for pid=295 comm="syz-executor249" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.092569][ T296] loop0: detected capacity change from 0 to 512 [ 31.094954][ T30] audit: type=1400 audit(1700213575.043:69): avc: denied { ioctl } for pid=295 comm="syz-executor249" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.102726][ T30] audit: type=1400 audit(1700213575.043:70): avc: denied { mounton } for pid=296 comm="syz-executor249" path="/root/file0" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.102804][ T296] EXT4-fs (loop0): Ignoring removed bh option [ 31.131229][ T296] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 31.141151][ T296] EXT4-fs (loop0): 1 truncate cleaned up [ 31.146792][ T296] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 31.163985][ T30] audit: type=1400 audit(1700213575.103:71): avc: denied { mount } for pid=296 comm="syz-executor249" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.185709][ T30] audit: type=1400 audit(1700213575.103:72): avc: denied { write } for pid=296 comm="syz-executor249" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.190009][ T296] ================================================================== [ 31.207380][ T30] audit: type=1400 audit(1700213575.143:73): avc: denied { add_name } for pid=296 comm="syz-executor249" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.215191][ T296] BUG: KASAN: slab-out-of-bounds in ext4_search_dir+0xf7/0x1b0 [ 31.235760][ T30] audit: type=1400 audit(1700213575.143:74): avc: denied { create } for pid=296 comm="syz-executor249" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.243057][ T296] Read of size 1 at addr ffff88811d344d23 by task syz-executor249/296 [ 31.243075][ T296] [ 31.243081][ T296] CPU: 0 PID: 296 Comm: syz-executor249 Not tainted 5.15.137-syzkaller-01792-g61cfd264993d #0 [ 31.263172][ T30] audit: type=1400 audit(1700213575.143:75): avc: denied { write open } for pid=296 comm="syz-executor249" path="/root/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.271088][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 31.271100][ T296] Call Trace: [ 31.271105][ T296] [ 31.271112][ T296] dump_stack_lvl+0x151/0x1b7 [ 31.326948][ T296] ? io_uring_drop_tctx_refs+0x190/0x190 [ 31.332411][ T296] ? __wake_up_klogd+0xd5/0x110 [ 31.337100][ T296] ? panic+0x751/0x751 [ 31.341007][ T296] print_address_description+0x87/0x3b0 [ 31.346390][ T296] kasan_report+0x179/0x1c0 [ 31.350724][ T296] ? ext4_search_dir+0xf7/0x1b0 [ 31.355414][ T296] ? ext4_search_dir+0xf7/0x1b0 [ 31.360101][ T296] __asan_report_load1_noabort+0x14/0x20 [ 31.365568][ T296] ext4_search_dir+0xf7/0x1b0 [ 31.370083][ T296] ext4_find_inline_entry+0x4b6/0x5e0 [ 31.375288][ T296] ? __kasan_check_write+0x14/0x20 [ 31.380235][ T296] ? ext4_try_create_inline_dir+0x320/0x320 [ 31.385961][ T296] ? stack_trace_save+0x113/0x1c0 [ 31.390827][ T296] ? stack_trace_snprint+0xf0/0xf0 [ 31.395777][ T296] __ext4_find_entry+0x2b0/0x1af0 [ 31.400635][ T296] ? slab_post_alloc_hook+0x53/0x2c0 [ 31.405750][ T296] ? kmem_cache_alloc+0xf5/0x200 [ 31.410525][ T296] ? d_alloc+0x4b/0x1d0 [ 31.414516][ T296] ? do_mkdirat+0xbd/0x450 [ 31.418771][ T296] ? __x64_sys_mkdirat+0x89/0xa0 [ 31.423551][ T296] ? ext4_ci_compare+0x660/0x660 [ 31.428319][ T296] ? generic_set_encrypted_ci_d_ops+0x91/0xf0 [ 31.434218][ T296] ext4_lookup+0x3c6/0xaa0 [ 31.438473][ T296] ? ext4_add_entry+0x12b0/0x12b0 [ 31.443334][ T296] ? slab_post_alloc_hook+0x72/0x2c0 [ 31.448454][ T296] ? __kasan_check_write+0x14/0x20 [ 31.453402][ T296] ? _raw_spin_lock+0xa4/0x1b0 [ 31.458001][ T296] ? __d_alloc+0x4dd/0x6c0 [ 31.462253][ T296] ? _raw_spin_unlock+0x4d/0x70 [ 31.466943][ T296] ? d_alloc+0x199/0x1d0 [ 31.471018][ T296] __lookup_hash+0x143/0x290 [ 31.475447][ T296] filename_create+0x288/0x520 [ 31.480047][ T296] ? kern_path_create+0x1a0/0x1a0 [ 31.484926][ T296] do_mkdirat+0xbd/0x450 [ 31.488986][ T296] ? vfs_mkdir+0x610/0x610 [ 31.493242][ T296] __x64_sys_mkdirat+0x89/0xa0 [ 31.497838][ T296] do_syscall_64+0x3d/0xb0 [ 31.502090][ T296] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.507819][ T296] RIP: 0033:0x7f010afcec59 [ 31.512165][ T296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 31.531600][ T296] RSP: 002b:00007ffd90ff64a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 31.539845][ T296] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f010afcec59 [ 31.547656][ T296] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 00000000ffffff9c [ 31.555468][ T296] RBP: 0000000000000000 R08: 00000000000014ef R09: 00007ffd90ff64e0 [ 31.563282][ T296] R10: 00000000000014f3 R11: 0000000000000246 R12: 00007ffd90ff64e0 [ 31.571181][ T296] R13: 00007ffd90ff6768 R14: 431bde82d7b634db R15: 00007f010b01703b [ 31.579006][ T296] [ 31.581853][ T296] [ 31.584031][ T296] Allocated by task 296: [ 31.588102][ T296] __kasan_slab_alloc+0xb1/0xe0 [ 31.592791][ T296] slab_post_alloc_hook+0x53/0x2c0 [ 31.597739][ T296] kmem_cache_alloc+0xf5/0x200 [ 31.602338][ T296] __kernfs_new_node+0xdb/0x700 [ 31.607024][ T296] kernfs_new_node+0x97/0x170 [ 31.611537][ T296] __kernfs_create_file+0x4a/0x270 [ 31.616484][ T296] sysfs_add_file_mode_ns+0x273/0x320 [ 31.621693][ T296] internal_create_group+0x573/0xf00 [ 31.626811][ T296] sysfs_create_groups+0x5b/0x130 [ 31.631696][ T296] kobject_add_internal+0x8ce/0xd90 [ 31.637011][ T296] kobject_init_and_add+0x120/0x190 [ 31.642001][ T296] ext4_register_sysfs+0xbf/0x2c0 [ 31.646860][ T296] ext4_fill_super+0x8a31/0x96e0 [ 31.651634][ T296] mount_bdev+0x282/0x3b0 [ 31.655800][ T296] ext4_mount+0x34/0x40 [ 31.659793][ T296] legacy_get_tree+0xf1/0x190 [ 31.664308][ T296] vfs_get_tree+0x88/0x290 [ 31.668560][ T296] do_new_mount+0x28b/0xad0 [ 31.672903][ T296] path_mount+0x671/0x1070 [ 31.677158][ T296] __se_sys_mount+0x2c4/0x3b0 [ 31.681684][ T296] __x64_sys_mount+0xbf/0xd0 [ 31.686092][ T296] do_syscall_64+0x3d/0xb0 [ 31.690344][ T296] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.696075][ T296] [ 31.698244][ T296] The buggy address belongs to the object at ffff88811d344c80 [ 31.698244][ T296] which belongs to the cache kernfs_node_cache of size 136 [ 31.712651][ T296] The buggy address is located 27 bytes to the right of [ 31.712651][ T296] 136-byte region [ffff88811d344c80, ffff88811d344d08) [ 31.726191][ T296] The buggy address belongs to the page: [ 31.731664][ T296] page:ffffea000474d100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d344 [ 31.741725][ T296] flags: 0x4000000000000200(slab|zone=1) [ 31.747200][ T296] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001bed80 [ 31.755619][ T296] raw: 0000000000000000 0000000000140014 00000001ffffffff 0000000000000000 [ 31.764036][ T296] page dumped because: kasan: bad access detected [ 31.770281][ T296] page_owner tracks the page as allocated [ 31.775835][ T296] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 296, ts 31140690675, free_ts 0 [ 31.790762][ T296] post_alloc_hook+0x1a3/0x1b0 [ 31.795361][ T296] prep_new_page+0x1b/0x110 [ 31.799706][ T296] get_page_from_freelist+0x3550/0x35d0 [ 31.805083][ T296] __alloc_pages+0x206/0x5e0 [ 31.809510][ T296] new_slab+0x9a/0x4e0 [ 31.813417][ T296] ___slab_alloc+0x39e/0x830 [ 31.817849][ T296] __slab_alloc+0x4a/0x90 [ 31.822010][ T296] kmem_cache_alloc+0x134/0x200 [ 31.826695][ T296] __kernfs_new_node+0xdb/0x700 [ 31.831391][ T296] kernfs_new_node+0x97/0x170 [ 31.835896][ T296] __kernfs_create_file+0x4a/0x270 [ 31.840842][ T296] sysfs_add_file_mode_ns+0x273/0x320 [ 31.846050][ T296] internal_create_group+0x573/0xf00 [ 31.851172][ T296] sysfs_create_groups+0x5b/0x130 [ 31.856036][ T296] kobject_add_internal+0x8ce/0xd90 [ 31.861067][ T296] kobject_init_and_add+0x120/0x190 [ 31.866099][ T296] page_owner free stack trace missing [ 31.871309][ T296] [ 31.873476][ T296] Memory state around the buggy address: [ 31.878951][ T296] ffff88811d344c00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 31.886845][ T296] ffff88811d344c80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.894743][ T296] >ffff88811d344d00: 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 [ 31.902640][ T296] ^ [ 31.907598][ T296] ffff88811d344d80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 31.915492][ T296] ffff88811d344e00: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 31.923385][ T296] ================================================================== executing program executing program [ 31.931280][ T296] Disabling lock debugging due to kernel taint [ 31.938045][ T296] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #12: block 7: comm syz-executor249: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3089191003, rec_len=43069, size=56 fake=0 executing program executing program executing program [ 31.975526][ T302] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 31.996790][ T303] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 32.018690][ T304] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program [ 32.039494][ T305] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 32.060914][ T306] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program [ 32.085308][ T307] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 32.105812][ T308] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program executing program executing program executing program [ 32.131606][ T310] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 32.152154][ T311] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 36.953132][ T798] EXT4-fs error: 481 callbacks suppressed [ 36.953148][ T798] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 36.980157][ T799] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program [ 37.001238][ T800] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 37.023218][ T801] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program executing program [ 37.044375][ T802] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 37.065353][ T803] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 37.086234][ T804] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program [ 37.107126][ T805] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr [ 37.128183][ T807] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program executing program [ 37.150354][ T808] EXT4-fs error (device loop0): ext4_xattr_ibody_get:603: inode #20: comm syz-executor249: corrupted in-inode xattr executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program