Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. executing program [ 21.152210][ T30] audit: type=1400 audit(1729990326.832:66): avc: denied { execmem } for pid=287 comm="syz-executor184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.161631][ T289] loop0: detected capacity change from 0 to 512 [ 21.172416][ T30] audit: type=1400 audit(1729990326.832:67): avc: denied { read write } for pid=287 comm="syz-executor184" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.202758][ T30] audit: type=1400 audit(1729990326.832:68): avc: denied { open } for pid=287 comm="syz-executor184" path="/dev/loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.226808][ T30] audit: type=1400 audit(1729990326.832:69): avc: denied { ioctl } for pid=287 comm="syz-executor184" path="/dev/loop0" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.280575][ T30] audit: type=1400 audit(1729990326.962:70): avc: denied { mounton } for pid=289 comm="syz-executor184" path=2F726F6F742FE91F7189591E9233614B dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 21.282714][ T289] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor184: corrupted in-inode xattr [ 21.318581][ T289] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor184: couldn't read orphan inode 15 (err -117) [ 21.330810][ T289] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 21.341314][ T30] audit: type=1400 audit(1729990327.022:71): avc: denied { mount } for pid=289 comm="syz-executor184" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 21.361709][ T289] ================================================================== [ 21.363395][ T30] audit: type=1400 audit(1729990327.042:72): avc: denied { write } for pid=289 comm="syz-executor184" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.370899][ T289] BUG: KASAN: use-after-free in ext4_insert_dentry+0x392/0x710 [ 21.393441][ T30] audit: type=1400 audit(1729990327.042:73): avc: denied { add_name } for pid=289 comm="syz-executor184" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 21.400611][ T289] Write of size 251 at addr ffff88810e187f14 by task syz-executor184/289 [ 21.400635][ T289] [ 21.400641][ T289] CPU: 1 PID: 289 Comm: syz-executor184 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 21.400663][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 21.422695][ T30] audit: type=1400 audit(1729990327.042:74): avc: denied { create } for pid=289 comm="syz-executor184" name="net_prio.prioidx" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.430571][ T289] Call Trace: [ 21.430580][ T289] [ 21.430587][ T289] dump_stack_lvl+0x151/0x1c0 [ 21.430615][ T289] ? io_uring_drop_tctx_refs+0x190/0x190 [ 21.430636][ T289] ? panic+0x760/0x760 [ 21.433074][ T30] audit: type=1400 audit(1729990327.042:75): avc: denied { read append open } for pid=289 comm="syz-executor184" path=2F726F6F742FE91F7189591E9233614B2F66696C65302F6E65745F7072696F2E7072696F696478 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 21.443061][ T289] ? __ext4_handle_dirty_metadata+0x2fe/0x830 [ 21.443088][ T289] print_address_description+0x87/0x3b0 [ 21.534965][ T289] kasan_report+0x179/0x1c0 [ 21.539300][ T289] ? ext4_insert_dentry+0x392/0x710 [ 21.544421][ T289] ? ext4_insert_dentry+0x392/0x710 [ 21.549580][ T289] kasan_check_range+0x293/0x2a0 [ 21.554332][ T289] ? ext4_insert_dentry+0x392/0x710 [ 21.559378][ T289] memcpy+0x44/0x70 [ 21.563003][ T289] ext4_insert_dentry+0x392/0x710 [ 21.567967][ T289] add_dirent_to_buf+0x384/0x7d0 [ 21.572833][ T289] ? ext4_dx_add_entry+0x1620/0x1620 [ 21.577945][ T289] ? ext4_handle_dirty_dx_node+0x41c/0x580 [ 21.583748][ T289] make_indexed_dir+0xf34/0x15a0 [ 21.588522][ T289] ? add_dirent_to_buf+0x7d0/0x7d0 [ 21.593487][ T289] ? add_dirent_to_buf+0x54e/0x7d0 [ 21.598510][ T289] ? ext4_dx_add_entry+0x1620/0x1620 [ 21.603643][ T289] ? __kasan_check_read+0x11/0x20 [ 21.608588][ T289] ? __ext4_read_dirblock+0x56f/0x8e0 [ 21.613781][ T289] ext4_add_entry+0xde2/0x12b0 [ 21.618514][ T289] ? ext4_inc_count+0x190/0x190 [ 21.623161][ T289] ? dquot_initialize+0x20/0x20 [ 21.627843][ T289] ? selinux_determine_inode_label+0x29c/0x3b0 [ 21.633832][ T289] ext4_add_nondir+0x97/0x290 [ 21.638344][ T289] ? memcpy+0x56/0x70 [ 21.642166][ T289] ext4_symlink+0x913/0xed0 [ 21.646512][ T289] ? d_alloc+0x199/0x1d0 [ 21.650709][ T289] ? ext4_unlink+0x3f0/0x3f0 [ 21.655128][ T289] ? selinux_inode_symlink+0x22/0x30 [ 21.660238][ T289] ? security_inode_symlink+0xb8/0x100 [ 21.665615][ T289] vfs_symlink+0x29f/0x480 [ 21.669977][ T289] do_symlinkat+0x1ea/0x5a0 [ 21.674384][ T289] ? __check_object_size+0x2ec/0x3d0 [ 21.679505][ T289] ? vfs_symlink+0x480/0x480 [ 21.683951][ T289] ? getname_flags+0x1fd/0x520 [ 21.688633][ T289] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.694526][ T289] __x64_sys_symlink+0x7e/0x90 [ 21.699212][ T289] x64_sys_call+0x290/0x9a0 [ 21.703554][ T289] do_syscall_64+0x3b/0xb0 [ 21.707802][ T289] ? clear_bhb_loop+0x35/0x90 [ 21.712441][ T289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 21.718176][ T289] RIP: 0033:0x7ffae7523b99 [ 21.722505][ T289] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 21.742384][ T289] RSP: 002b:00007fff534813f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 21.750819][ T289] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007ffae7523b99 [ 21.758635][ T289] RDX: 0000000000000000 RSI: 0000000020000cc0 RDI: 0000000020000dc0 [ 21.766676][ T289] RBP: 00007ffae75975f0 R08: 000055556e1ed4c0 R09: 000055556e1ed4c0 [ 21.775198][ T289] R10: 000055556e1ed4c0 R11: 0000000000000246 R12: 00007fff53481420 [ 21.783216][ T289] R13: 00007fff53481648 R14: 431bde82d7b634db R15: 00007ffae756c03b [ 21.791019][ T289] [ 21.793857][ T289] [ 21.796027][ T289] The buggy address belongs to the page: [ 21.801501][ T289] page:ffffea00043861c0 refcount:3 mapcount:0 mapping:ffff8881092cfa18 index:0x3f pfn:0x10e187 [ 21.811650][ T289] memcg:ffff888100214000 [ 21.815733][ T289] aops:def_blk_aops ino:700000 [ 21.820331][ T289] flags: 0x400000000000202a(referenced|dirty|active|private|zone=1) [ 21.828148][ T289] raw: 400000000000202a 0000000000000000 dead000000000122 ffff8881092cfa18 [ 21.836568][ T289] raw: 000000000000003f ffff8881004ccd20 00000003ffffffff ffff888100214000 [ 21.845102][ T289] page dumped because: kasan: bad access detected [ 21.851370][ T289] page_owner tracks the page as allocated [ 21.856991][ T289] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 289, ts 21361588977, free_ts 15675619464 [ 21.873849][ T289] post_alloc_hook+0x1a3/0x1b0 [ 21.878429][ T289] prep_new_page+0x1b/0x110 [ 21.882891][ T289] get_page_from_freelist+0x3550/0x35d0 [ 21.888585][ T289] __alloc_pages+0x27e/0x8f0 [ 21.893093][ T289] pagecache_get_page+0xb18/0xeb0 [ 21.897968][ T289] __getblk_gfp+0x21e/0x7c0 [ 21.902616][ T289] ext4_getblk+0x259/0x700 [ 21.906872][ T289] ext4_bread+0x2f/0x180 [ 21.910973][ T289] ext4_append+0x31f/0x5b0 [ 21.915719][ T289] make_indexed_dir+0x515/0x15a0 [ 21.920511][ T289] ext4_add_entry+0xde2/0x12b0 [ 21.925101][ T289] ext4_add_nondir+0x97/0x290 [ 21.929604][ T289] ext4_symlink+0x913/0xed0 [ 21.933963][ T289] vfs_symlink+0x29f/0x480 [ 21.938199][ T289] do_symlinkat+0x1ea/0x5a0 [ 21.942549][ T289] __x64_sys_symlink+0x7e/0x90 [ 21.947180][ T289] page last free stack trace: [ 21.951652][ T289] free_unref_page_prepare+0x7c8/0x7d0 [ 21.956962][ T289] free_unref_page_list+0x14b/0xa60 [ 21.961983][ T289] release_pages+0x1310/0x1370 [ 21.966650][ T289] free_pages_and_swap_cache+0x8a/0xa0 [ 21.971890][ T289] tlb_finish_mmu+0x177/0x320 [ 21.976398][ T289] exit_mmap+0x40d/0x940 [ 21.980471][ T289] __mmput+0x95/0x310 [ 21.984287][ T289] mmput+0x5b/0x170 [ 21.987933][ T289] do_exit+0xb9c/0x2ca0 [ 21.991964][ T289] do_group_exit+0x141/0x310 [ 21.996671][ T289] __x64_sys_exit_group+0x3f/0x40 [ 22.001476][ T289] x64_sys_call+0x610/0x9a0 [ 22.005820][ T289] do_syscall_64+0x3b/0xb0 [ 22.010255][ T289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 22.016028][ T289] [ 22.018149][ T289] Memory state around the buggy address: [ 22.023722][ T289] ffff88810e187f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 executing program executing program executing program [ 22.031708][ T289] ffff88810e187f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 22.039854][ T289] >ffff88810e188000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 22.047739][ T289] ^ [ 22.051814][ T289] ffff88810e188080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 22.059714][ T289] ffff88810e188100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 22.067605][ T289] ================================================================== [ 22.075597][ T289] Disabling lock debugging due to kernel taint executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program