Warning: Permanently added '10.128.1.95' (ED25519) to the list of known hosts. executing program [ 27.152407][ T23] audit: type=1400 audit(1743940949.290:66): avc: denied { execmem } for pid=353 comm="syz-executor205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 27.171716][ T23] audit: type=1400 audit(1743940949.290:67): avc: denied { read write } for pid=353 comm="syz-executor205" name="loop0" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.195945][ T23] audit: type=1400 audit(1743940949.290:68): avc: denied { open } for pid=353 comm="syz-executor205" path="/dev/loop0" dev="devtmpfs" ino=9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.220163][ T23] audit: type=1400 audit(1743940949.290:69): avc: denied { ioctl } for pid=353 comm="syz-executor205" path="/dev/loop0" dev="devtmpfs" ino=9409 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.245615][ T23] audit: type=1400 audit(1743940949.340:70): avc: denied { mounton } for pid=355 comm="syz-executor205" path="/root/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.248258][ T355] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 27.298262][ T355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 27.307525][ T355] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz-executor205: corrupted in-inode xattr [ 27.319895][ T355] EXT4-fs error (device loop0): ext4_orphan_get:1242: comm syz-executor205: couldn't read orphan inode 15 (err -117) [ 27.332507][ T355] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nodiscard,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue [ 27.355235][ T23] audit: type=1400 audit(1743940949.500:71): avc: denied { mount } for pid=355 comm="syz-executor205" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.365354][ T355] ================================================================== [ 27.377163][ T23] audit: type=1400 audit(1743940949.500:72): avc: denied { write } for pid=355 comm="syz-executor205" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.384811][ T355] BUG: KASAN: use-after-free in ext4_insert_dentry+0x366/0x6c0 [ 27.384819][ T355] Write of size 247 at addr ffff8881ebea5f24 by task syz-executor205/355 [ 27.384826][ T355] [ 27.406960][ T23] audit: type=1400 audit(1743940949.500:73): avc: denied { add_name } for pid=355 comm="syz-executor205" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.413785][ T355] CPU: 0 PID: 355 Comm: syz-executor205 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 27.413791][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 27.413794][ T355] Call Trace: [ 27.413819][ T355] dump_stack+0x1d8/0x241 [ 27.422488][ T23] audit: type=1400 audit(1743940949.500:74): avc: denied { create } for pid=355 comm="syz-executor205" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.424206][ T355] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 27.466863][ T23] audit: type=1400 audit(1743940949.500:75): avc: denied { write open } for pid=355 comm="syz-executor205" path="/root/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.476294][ T355] ? printk+0xd1/0x111 [ 27.476305][ T355] ? ext4_insert_dentry+0x366/0x6c0 [ 27.476324][ T355] ? wake_up_klogd+0xb2/0xf0 [ 27.620181][ T355] ? ext4_insert_dentry+0x366/0x6c0 [ 27.625313][ T355] print_address_description+0x8c/0x600 [ 27.630696][ T355] ? panic+0x89d/0x89d [ 27.634603][ T355] ? ext4_insert_dentry+0x366/0x6c0 [ 27.639633][ T355] __kasan_report+0xf3/0x120 [ 27.644057][ T355] ? ext4_insert_dentry+0x366/0x6c0 [ 27.649094][ T355] ? ext4_insert_dentry+0x366/0x6c0 [ 27.654127][ T355] kasan_report+0x30/0x60 [ 27.658297][ T355] check_memory_region+0x272/0x280 [ 27.663355][ T355] memcpy+0x38/0x50 [ 27.667000][ T355] ext4_insert_dentry+0x366/0x6c0 [ 27.671862][ T355] add_dirent_to_buf+0x3b3/0x780 [ 27.676637][ T355] ? ext4_dx_add_entry+0x1850/0x1850 [ 27.681765][ T355] make_indexed_dir+0xec8/0x1690 [ 27.686533][ T355] ? add_dirent_to_buf+0x780/0x780 [ 27.691477][ T355] ? add_dirent_to_buf+0x376/0x780 [ 27.696423][ T355] ? ext4_dx_add_entry+0x1850/0x1850 [ 27.701547][ T355] ? __ext4_read_dirblock+0x4e7/0xdb0 [ 27.706761][ T355] ext4_add_entry+0xdc2/0x1240 [ 27.711356][ T355] ? ext4_dx_csum+0x650/0x650 [ 27.715868][ T355] ? may_create+0x6d0/0x970 [ 27.720210][ T355] ? ext4_set_aops+0x3c9/0x510 [ 27.724804][ T355] ext4_create+0x2fc/0x5b0 [ 27.729062][ T355] ? ext4_lookup+0xaa0/0xaa0 [ 27.733496][ T355] ? security_inode_create+0xb4/0x100 [ 27.738694][ T355] vfs_create+0x426/0x5b0 [ 27.742862][ T355] do_mknodat+0x290/0x450 [ 27.747023][ T355] ? vfs_mknod+0x560/0x560 [ 27.751280][ T355] do_syscall_64+0xca/0x1c0 [ 27.755618][ T355] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 27.761361][ T355] RIP: 0033:0x7f3ed1d8df19 [ 27.765599][ T355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 27.785043][ T355] RSP: 002b:00007ffd9a090378 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 27.793283][ T355] RAX: ffffffffffffffda RBX: 00007f3ed1dd70e0 RCX: 00007f3ed1d8df19 [ 27.801104][ T355] RDX: 0000000000000700 RSI: 0000000000000000 RDI: 0000200000000000 [ 27.808907][ T355] RBP: 00007f3ed1dd7095 R08: 00005555612b34c0 R09: 00005555612b34c0 [ 27.816717][ T355] R10: 00005555612b34c0 R11: 0000000000000246 R12: 00007ffd9a0903a0 [ 27.824529][ T355] R13: 00007ffd9a0905c8 R14: 431bde82d7b634db R15: 00007f3ed1dd703b [ 27.832341][ T355] [ 27.834509][ T355] The buggy address belongs to the page: [ 27.839992][ T355] page:ffffea0007afa940 refcount:3 mapcount:0 mapping:ffff8881f584a8b8 index:0x3f [ 27.849010][ T355] def_blk_aops [ 27.852217][ T355] flags: 0x800000000000202a(referenced|dirty|active|private) [ 27.859427][ T355] raw: 800000000000202a dead000000000100 dead000000000122 ffff8881f584a8b8 [ 27.867844][ T355] raw: 000000000000003f ffff8881dd260348 00000003ffffffff ffff8881f5cb2000 [ 27.876255][ T355] page dumped because: kasan: bad access detected [ 27.882504][ T355] page->mem_cgroup:ffff8881f5cb2000 [ 27.887544][ T355] page_owner tracks the page as allocated [ 27.893109][ T355] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE) [ 27.905949][ T355] prep_new_page+0x18f/0x370 [ 27.910502][ T355] get_page_from_freelist+0x2d13/0x2d90 [ 27.915868][ T355] __alloc_pages_nodemask+0x393/0x840 [ 27.921077][ T355] pagecache_get_page+0x460/0x750 [ 27.925936][ T355] __getblk_gfp+0x1ec/0x720 [ 27.930276][ T355] ext4_getblk+0x1d3/0x540 [ 27.934526][ T355] ext4_bread+0x89/0x390 [ 27.938625][ T355] ext4_append+0x297/0x4d0 [ 27.942947][ T355] make_indexed_dir+0x535/0x1690 [ 27.947721][ T355] ext4_add_entry+0xdc2/0x1240 [ 27.952316][ T355] ext4_create+0x2fc/0x5b0 [ 27.956569][ T355] vfs_create+0x426/0x5b0 [ 27.960742][ T355] do_mknodat+0x290/0x450 [ 27.964903][ T355] do_syscall_64+0xca/0x1c0 [ 27.969248][ T355] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 27.974965][ T355] page last free stack trace: [ 27.979491][ T355] free_unref_page_prepare+0x297/0x380 [ 27.984779][ T355] free_unref_page_list+0x10a/0x590 [ 27.989916][ T355] release_pages+0xad8/0xb20 [ 27.994342][ T355] tlb_finish_mmu+0x177/0x320 [ 27.998856][ T355] exit_mmap+0x2dc/0x520 [ 28.002935][ T355] __mmput+0x8e/0x2c0 [ 28.006751][ T355] do_exit+0xc08/0x2bc0 [ 28.010747][ T355] do_group_exit+0x138/0x300 [ 28.015169][ T355] __x64_sys_exit_group+0x3b/0x40 [ 28.020030][ T355] do_syscall_64+0xca/0x1c0 [ 28.024371][ T355] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 28.030094][ T355] [ 28.032262][ T355] Memory state around the buggy address: [ 28.037738][ T355] ffff8881ebea5f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.045633][ T355] ffff8881ebea5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 executing program executing program executing program executing program [ 28.053620][ T355] >ffff8881ebea6000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.061511][ T355] ^ [ 28.065419][ T355] ffff8881ebea6080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.073317][ T355] ffff8881ebea6100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.081212][ T355] ================================================================== [ 28.089111][ T355] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program