Warning: Permanently added '10.128.1.168' (ECDSA) to the list of known hosts. 2023/04/26 20:54:43 ignoring optional flag "sandboxArg"="0" 2023/04/26 20:54:43 parsed 1 programs [ 69.111204][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 69.111208][ T26] audit: type=1400 audit(1682542483.388:204): avc: denied { getattr } for pid=5279 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 2023/04/26 20:54:43 executed programs: 0 [ 69.141754][ T26] audit: type=1400 audit(1682542483.388:205): avc: denied { read } for pid=5279 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.184364][ T26] audit: type=1400 audit(1682542483.388:206): avc: denied { open } for pid=5279 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 69.213221][ T26] audit: type=1400 audit(1682542483.428:207): avc: denied { mounton } for pid=5285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.238313][ T26] audit: type=1400 audit(1682542483.428:208): avc: denied { mount } for pid=5285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 71.228113][ T8] cfg80211: failed to load regulatory.db [ 72.345545][ T4945] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 76.505558][ T4945] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 80.665595][ T4945] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 82.753626][ T4350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.761436][ T4350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.769416][ T4350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.778003][ T4350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.786221][ T4350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.793480][ T4350] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.807371][ T26] audit: type=1400 audit(1682542497.088:209): avc: denied { mounton } for pid=5301 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 82.891575][ T5301] chnl_net:caif_netlink_parms(): no params data found [ 82.926194][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.933522][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.940921][ T5301] bridge_slave_0: entered allmulticast mode [ 82.947378][ T5301] bridge_slave_0: entered promiscuous mode [ 82.954726][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.963492][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.970853][ T5301] bridge_slave_1: entered allmulticast mode [ 82.977367][ T5301] bridge_slave_1: entered promiscuous mode [ 82.997083][ T5301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.009933][ T5301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.029496][ T5301] team0: Port device team_slave_0 added [ 83.037528][ T5301] team0: Port device team_slave_1 added [ 83.053250][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.060791][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.087005][ T5301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.098982][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.106167][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.133622][ T5301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.158879][ T5301] hsr_slave_0: entered promiscuous mode [ 83.165842][ T5301] hsr_slave_1: entered promiscuous mode [ 83.711686][ T5301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.733954][ T5301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.744638][ T5301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.754745][ T5301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.778487][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.785630][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.793056][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.800301][ T5301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.850025][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.863658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.876086][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.884502][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.895063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 83.909952][ T5301] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.921622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.932207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.941036][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.948181][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.968620][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.978540][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.988008][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.995131][ T4957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.004302][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.013366][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.033968][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.044255][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.053328][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.063842][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.072868][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.082073][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.093888][ T5301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.107552][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.117460][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.126826][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.135245][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.170226][ T26] audit: type=1400 audit(1682542498.448:210): avc: denied { sys_module } for pid=5301 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.244370][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.253949][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.265214][ T5301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.284812][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.294213][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.313059][ T5301] veth0_vlan: entered promiscuous mode [ 84.321067][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.330225][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.340770][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.352683][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.365920][ T5301] veth1_vlan: entered promiscuous mode [ 84.386733][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.394752][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.403182][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.412632][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.423519][ T5301] veth0_macvtap: entered promiscuous mode [ 84.434263][ T5301] veth1_macvtap: entered promiscuous mode [ 84.450775][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.459856][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.469073][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.479152][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.489439][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.501896][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.511306][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.522001][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.532497][ T5301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.542879][ T5301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.552248][ T5301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.564460][ T5301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.631331][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.640690][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.664741][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.675308][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.685084][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.695960][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.708378][ T26] audit: type=1400 audit(1682542498.988:211): avc: denied { mounton } for pid=5301 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.785768][ T5409] loop0: detected capacity change from 0 to 32768 [ 84.794351][ T26] audit: type=1400 audit(1682542499.068:212): avc: denied { mounton } for pid=5408 comm="syz-executor.0" path="/root/syzkaller-testdir3794854062/syzkaller.TlFHZX/0/file0" dev="sda1" ino=1937 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.826300][ T4350] Bluetooth: hci0: command 0x0409 tx timeout [ 84.848530][ T5409] ea_get: invalid extended attribute [ 84.858496][ T5409] ffff8880705574b0: 22 00 00 00 ff 05 66 00 69 00 6c 00 65 00 31 00 ".....f.i.l.e.1. [ 84.869864][ T26] audit: type=1400 audit(1682542499.118:213): avc: denied { mount } for pid=5408 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.876358][ T5409] ffff8880705574c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.909523][ T5409] ffff8880705574d0: 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.923005][ T5409] ffff8880705574e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.933872][ T5409] ffff8880705574f0: 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.944313][ T5409] ffff888070557500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.954804][ T5409] ffff888070557510: 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.965993][ T5409] ffff888070557520: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.976477][ T5409] ffff888070557530: 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 84.996330][ T5409] ffff888070557540: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.012121][ T5409] ffff888070557550: 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.022365][ T5409] ffff888070557560: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.033755][ T5409] ffff888070557570: ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.044232][ T5409] ffff888070557580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.056179][ T5409] ffff888070557590: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.066545][ T5409] ffff8880705575a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.077452][ T5409] ffff8880705575b0: ed 41 08 00 00 00 00 00 00 00 00 00 00 00 00 00 .A.............. [ 85.087470][ T5409] ffff8880705575c0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 85.098531][ T5409] ffff8880705575d0: 80 17 47 89 ff ff ff ff 00 60 bd 2a 80 88 ff ff ..G......`.*.... [ 85.108657][ T5409] ffff8880705575e0: d8 77 55 70 80 88 ff ff 40 55 af 25 80 88 ff ff .wUp....@U.%.... [ 85.121039][ T5409] ffff8880705575f0: 20 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 ............... [ 85.131411][ T5409] ffff888070557600: 00 01 00 00 00 00 00 00 6e 1f 1f 63 00 00 00 00 ........n..c.... [ 85.142602][ T5409] ffff888070557610: 45 ef 28 21 00 00 00 00 6e 1f 1f 63 00 00 00 00 E.(!....n..c.... [ 85.152758][ T5409] ffff888070557620: 45 ef 28 21 00 00 00 00 6e 1f 1f 63 00 00 00 00 E.(!....n..c.... [ 85.163257][ T5409] ffff888070557630: 45 ef 28 21 00 00 00 00 00 00 00 00 ad 4e ad de E.(!.........N.. [ 85.173171][ T5409] ffff888070557640: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 85.183789][ T5409] ffff888070557650: 48 4a 6a 8b ff ff ff ff 20 f2 bf 8f ff ff ff ff HJj..... ....... [ 85.193534][ T5409] ffff888070557660: 00 00 00 00 00 00 00 00 c0 f0 1a 89 ff ff ff ff ................ [ 85.203825][ T5409] ffff888070557670: 00 02 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 ................ [ 85.217067][ T5409] ffff888070557680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.228892][ T5409] ffff888070557690: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.240435][ T5409] ffff8880705576a0: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 85.250867][ T5409] ffff8880705576b0: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 85.261909][ T5409] ffff8880705576c0: 20 95 7c 8e ff ff ff ff 00 00 00 00 00 00 00 00 .|............. [ 85.271855][ T5409] ffff8880705576d0: 00 00 00 00 00 00 00 00 80 e0 0b 89 ff ff ff ff ................ [ 85.283346][ T5409] ffff8880705576e0: 00 02 00 00 00 00 00 00 e8 76 55 70 80 88 ff ff .........vUp.... [ 85.293411][ T5409] ffff8880705576f0: e8 76 55 70 80 88 ff ff 90 76 55 70 80 88 ff ff .vUp.....vUp.... [ 85.304602][ T5409] ffff888070557700: 78 4a 6a 8b ff ff ff ff 00 00 00 00 00 00 00 00 xJj............. [ 85.315680][ T5409] ffff888070557710: 00 00 00 00 00 00 00 00 c0 f2 1a 89 ff ff ff ff ................ [ 85.326903][ T5409] ffff888070557720: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.337420][ T5409] ffff888070557730: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.347209][ T5409] ffff888070557740: 98 7d 0c 01 00 c9 ff ff 48 77 55 70 80 88 ff ff .}......HwUp.... [ 85.357020][ T5409] ffff888070557750: 48 77 55 70 80 88 ff ff 00 00 00 00 00 00 00 00 HwUp............ [ 85.367285][ T5409] ffff888070557760: 00 00 00 00 00 00 00 00 68 77 55 70 80 88 ff ff ........hwUp.... [ 85.377087][ T5409] ffff888070557770: 68 77 55 70 80 88 ff ff 38 67 55 70 80 88 ff ff hwUp....8gUp.... [ 85.387956][ T5409] ffff888070557780: 00 6a bd 2a 80 88 ff ff 88 77 55 70 80 88 ff ff .j.*.....wUp.... [ 85.397761][ T5409] ffff888070557790: 88 77 55 70 80 88 ff ff 00 00 00 00 00 00 00 00 .wUp............ [ 85.408806][ T5409] ffff8880705577a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.420100][ T5409] ffff8880705577b0: 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ [ 85.431436][ T5409] ffff8880705577c0: 00 00 00 00 00 00 00 00 40 16 47 89 ff ff ff ff ........@.G..... [ 85.441627][ T5409] ffff8880705577d0: 00 00 00 00 00 00 00 00 b0 75 55 70 80 88 ff ff .........uUp.... [ 85.452963][ T5409] ffff8880705577e0: 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... [ 85.462865][ T5409] ffff8880705577f0: ff ff ff ff ff ff ff ff c0 54 4d 90 ff ff ff ff .........TM..... [ 85.475435][ T5409] ffff888070557800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.485061][ T5409] ffff888070557810: 80 ef 1a 89 ff ff ff ff 00 02 00 00 00 00 00 00 ................ [ 85.496203][ T5409] ffff888070557820: 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 !............... [ 85.506446][ T5409] ffff888070557830: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.517317][ T5409] ffff888070557840: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 85.527278][ T5409] ffff888070557850: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 85.538165][ T5409] ffff888070557860: 20 95 7c 8e ff ff ff ff 00 00 00 00 00 00 00 00 .|............. [ 85.548952][ T5409] ffff888070557870: 00 00 00 00 00 00 00 00 80 e0 0b 89 ff ff ff ff ................ [ 85.560495][ T5409] ffff888070557880: 00 02 00 00 00 00 00 00 88 78 55 70 80 88 ff ff .........xUp.... [ 85.570728][ T5409] ffff888070557890: 88 78 55 70 80 88 ff ff 30 78 55 70 80 88 ff ff .xUp....0xUp.... [ 85.581591][ T5409] ffff8880705578a0: 68 4a 6a 8b ff ff ff ff 00 00 00 00 00 00 00 00 hJj............. [ 85.592956][ T5409] ffff8880705578b0: 00 00 00 00 00 00 00 00 c0 f1 1a 89 ff ff ff ff ................ [ 85.603824][ T5409] ffff8880705578c0: 00 03 00 00 00 00 00 00 ca 0c 10 00 00 00 00 00 ................ [ 85.613642][ T5409] ffff8880705578d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.624639][ T5409] ffff8880705578e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.637294][ T5409] ffff8880705578f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.648197][ T5409] ffff888070557900: 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... [ 85.658642][ T5409] ffff888070557910: ff ff ff ff ff ff ff ff 20 95 7c 8e ff ff ff ff ........ .|..... [ 85.670129][ T5409] ffff888070557920: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.680117][ T5409] ffff888070557930: 80 e0 0b 89 ff ff ff ff 00 02 00 00 00 00 00 00 ................ [ 85.691102][ T5409] ffff888070557940: 40 79 55 70 80 88 ff ff 40 79 55 70 80 88 ff ff @yUp....@yUp.... [ 85.701054][ T5409] ffff888070557950: e8 78 55 70 80 88 ff ff 40 55 4d 90 ff ff ff ff .xUp....@UM..... [ 85.713896][ T5409] ffff888070557960: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.723770][ T5409] ffff888070557970: c0 ef 1a 89 ff ff ff ff 00 03 00 00 00 00 00 00 ................ [ 85.734952][ T5409] ffff888070557980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.744816][ T5409] ffff888070557990: a0 fc 1a 89 ff ff ff ff 00 00 00 00 00 00 00 00 ................ [ 85.756322][ T5409] ffff8880705579a0: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 85.766308][ T5409] ffff8880705579b0: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 85.777393][ T5409] ffff8880705579c0: 00 55 4d 90 ff ff ff ff 00 00 00 00 00 00 00 00 .UM............. [ 85.787720][ T5409] ffff8880705579d0: 00 00 00 00 00 00 00 00 00 f0 1a 89 ff ff ff ff ................ [ 85.798649][ T5409] ffff8880705579e0: 00 02 00 00 00 00 00 00 e8 79 55 70 80 88 ff ff .........yUp.... [ 85.808533][ T5409] ffff8880705579f0: e8 79 55 70 80 88 ff ff 00 00 00 00 00 00 00 00 .yUp............ [ 85.819584][ T5409] ffff888070557a00: 00 7a 55 70 80 88 ff ff 00 7a 55 70 80 88 ff ff .zUp.....zUp.... [ 85.829788][ T5409] ffff888070557a10: 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ [ 85.840746][ T5409] ffff888070557a20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.853473][ T5409] ffff888070557a30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 85.864810][ T5409] ================================================================== [ 85.873175][ T5409] BUG: KASAN: slab-out-of-bounds in hex_dump_to_buffer+0x909/0xc10 [ 85.881158][ T5409] Read of size 1 at addr ffff888070557a40 by task syz-executor.0/5409 [ 85.889493][ T5409] [ 85.891908][ T5409] CPU: 1 PID: 5409 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 85.900663][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 85.910724][ T5409] Call Trace: [ 85.914001][ T5409] [ 85.916948][ T5409] dump_stack_lvl+0x60/0xa0 [ 85.921450][ T5409] print_address_description.constprop.0+0x2c/0x3c0 [ 85.928050][ T5409] ? hex_dump_to_buffer+0x909/0xc10 [ 85.933243][ T5409] kasan_report+0x118/0x130 [ 85.937744][ T5409] ? hex_dump_to_buffer+0x909/0xc10 [ 85.943026][ T5409] hex_dump_to_buffer+0x909/0xc10 [ 85.948204][ T5409] ? llist_reverse_order+0x60/0x60 [ 85.953316][ T5409] print_hex_dump+0x12e/0x1e0 [ 85.957991][ T5409] ? hex_dump_to_buffer+0xc10/0xc10 [ 85.963200][ T5409] ? irq_work_queue+0x35/0x50 [ 85.967879][ T5409] ? _printk+0xae/0xe0 [ 85.972032][ T5409] ? syslog_print_all+0x300/0x300 [ 85.977085][ T5409] ? __down_read_common+0x880/0xf30 [ 85.982302][ T5409] ea_get+0x5b7/0x14b0 [ 85.986379][ T5409] ? ea_release+0x1b0/0x1b0 [ 85.990878][ T5409] __jfs_getxattr+0xbb/0x310 [ 85.995462][ T5409] ? jfs_initxattrs+0x1d0/0x1d0 [ 86.000309][ T5409] ? find_held_lock+0x2d/0x110 [ 86.005064][ T5409] ? fs_reclaim_acquire+0xb2/0x160 [ 86.010156][ T5409] ? lock_downgrade+0x690/0x690 [ 86.014987][ T5409] jfs_xattr_get+0x27/0x30 [ 86.019470][ T5409] __vfs_getxattr+0xe6/0x140 [ 86.024057][ T5409] ? xattr_full_name+0x70/0x70 [ 86.028902][ T5409] ? __kmem_cache_alloc_node+0x168/0x3f0 [ 86.034508][ T5409] inode_doinit_use_xattr+0xab/0x370 [ 86.039767][ T5409] inode_doinit_with_dentry+0xb24/0x12e0 [ 86.045377][ T5409] ? psi_fop_poll+0x48/0x60 [ 86.049855][ T5409] ? selinux_sem_semctl+0x120/0x120 [ 86.055124][ T5409] ? jfs_iget+0x1cd/0x420 [ 86.059685][ T5409] ? lock_downgrade+0x690/0x690 [ 86.064603][ T5409] security_d_instantiate+0x41/0xb0 [ 86.069777][ T5409] d_splice_alias+0x68/0xcc0 [ 86.074428][ T5409] ? do_raw_spin_unlock+0x171/0x230 [ 86.079598][ T5409] ? _raw_spin_unlock+0x24/0x40 [ 86.084595][ T5409] jfs_lookup+0x1a1/0x2a0 [ 86.088984][ T5409] ? jfs_link+0x4b0/0x4b0 [ 86.093287][ T5409] ? __d_lookup+0x1b8/0x350 [ 86.097760][ T5409] ? lookup_open.isra.0+0x209/0x1510 [ 86.103191][ T5409] ? __d_lookup_rcu+0x3d0/0x3d0 [ 86.108018][ T5409] ? __d_lookup+0x1d0/0x350 [ 86.112504][ T5409] ? jfs_link+0x4b0/0x4b0 [ 86.116821][ T5409] lookup_open.isra.0+0x844/0x1510 [ 86.121903][ T5409] ? link_path_walk.part.0+0xac0/0xac0 [ 86.127343][ T5409] ? lock_sync+0x180/0x180 [ 86.131934][ T5409] ? _raw_spin_unlock+0x24/0x40 [ 86.137062][ T5409] path_openat+0x7ad/0x2280 [ 86.141822][ T5409] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 86.147786][ T5409] ? path_lookupat+0x750/0x750 [ 86.152521][ T5409] do_filp_open+0x1a5/0x3d0 [ 86.156996][ T5409] ? may_open_dev+0xd0/0xd0 [ 86.161470][ T5409] ? find_held_lock+0x2d/0x110 [ 86.166217][ T5409] ? do_raw_spin_lock+0x120/0x2a0 [ 86.171300][ T5409] ? spin_bug+0x1c0/0x1c0 [ 86.175600][ T5409] ? _raw_spin_unlock+0x24/0x40 [ 86.180430][ T5409] ? alloc_fd+0x1e4/0x640 [ 86.184806][ T5409] ? getname_flags.part.0+0x89/0x440 [ 86.190062][ T5409] do_sys_openat2+0x11e/0x3f0 [ 86.194733][ T5409] ? build_open_flags+0x4a0/0x4a0 [ 86.199728][ T5409] ? lock_downgrade+0x690/0x690 [ 86.204567][ T5409] ? __ct_user_enter+0xf9/0x130 [ 86.209393][ T5409] ? lock_downgrade+0x690/0x690 [ 86.214217][ T5409] __x64_sys_open+0xfd/0x1a0 [ 86.218823][ T5409] ? vtime_user_exit+0x218/0x6c0 [ 86.223744][ T5409] ? do_sys_open+0xe0/0xe0 [ 86.228157][ T5409] ? syscall_enter_from_user_mode+0x22/0x80 [ 86.234024][ T5409] ? lockdep_hardirqs_on+0x79/0x100 [ 86.239212][ T5409] do_syscall_64+0x35/0xb0 [ 86.243610][ T5409] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.249477][ T5409] RIP: 0033:0x7ff6f408a5a9 [ 86.253866][ T5409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.273793][ T5409] RSP: 002b:00007ff6f511f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 86.282200][ T5409] RAX: ffffffffffffffda RBX: 00007ff6f41abf80 RCX: 00007ff6f408a5a9 [ 86.290325][ T5409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 86.298301][ T5409] RBP: 00007ff6f40e5580 R08: 0000000000000000 R09: 0000000000000000 [ 86.306248][ T5409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.314300][ T5409] R13: 00007ffd26b24c4f R14: 00007ff6f511f300 R15: 0000000000022000 [ 86.322249][ T5409] [ 86.325334][ T5409] [ 86.327647][ T5409] Allocated by task 5409: [ 86.332064][ T5409] kasan_save_stack+0x1e/0x40 [ 86.336888][ T5409] kasan_set_track+0x21/0x30 [ 86.341456][ T5409] __kasan_slab_alloc+0x7b/0x80 [ 86.346275][ T5409] kmem_cache_alloc_lru+0x1df/0x640 [ 86.351442][ T5409] jfs_alloc_inode+0x1a/0x50 [ 86.356003][ T5409] alloc_inode+0x56/0x1e0 [ 86.360301][ T5409] iget_locked+0x14d/0x5f0 [ 86.364780][ T5409] jfs_iget+0xd/0x420 [ 86.368734][ T5409] jfs_lookup+0x1fa/0x2a0 [ 86.373122][ T5409] lookup_open.isra.0+0x844/0x1510 [ 86.378207][ T5409] path_openat+0x7ad/0x2280 [ 86.382767][ T5409] do_filp_open+0x1a5/0x3d0 [ 86.387239][ T5409] do_sys_openat2+0x11e/0x3f0 [ 86.391883][ T5409] __x64_sys_open+0xfd/0x1a0 [ 86.396441][ T5409] do_syscall_64+0x35/0xb0 [ 86.400827][ T5409] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.406687][ T5409] [ 86.408985][ T5409] The buggy address belongs to the object at ffff888070557180 [ 86.408985][ T5409] which belongs to the cache jfs_ip of size 2240 [ 86.422659][ T5409] The buggy address is located 0 bytes to the right of [ 86.422659][ T5409] allocated 2240-byte region [ffff888070557180, ffff888070557a40) [ 86.437745][ T5409] [ 86.440079][ T5409] The buggy address belongs to the physical page: [ 86.446550][ T5409] page:ffffea0001c155c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888070557fff pfn:0x70557 [ 86.458151][ T5409] memcg:ffff888016365b81 [ 86.462368][ T5409] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 86.470144][ T5409] raw: 00fff00000000200 ffff888019357d00 ffffea0001c15590 ffff888019359650 [ 86.478698][ T5409] raw: ffff888070557fff ffff888070557180 0000000100000001 ffff888016365b81 [ 86.487249][ T5409] page dumped because: kasan: bad access detected [ 86.493634][ T5409] page_owner tracks the page as allocated [ 86.499320][ T5409] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x342050(__GFP_IO|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE|__GFP_RECLAIMABLE), pid 5409, tgid 5408 (syz-executor.0), ts 84847233978, free_ts 67456047955 [ 86.521854][ T5409] get_page_from_freelist+0x1190/0x2e20 [ 86.527374][ T5409] __alloc_pages+0x1c7/0x490 [ 86.531945][ T5409] cache_grow_begin+0x9b/0x3b0 [ 86.536681][ T5409] cache_alloc_refill+0x27f/0x380 [ 86.541778][ T5409] kmem_cache_alloc_lru+0x53c/0x640 [ 86.546945][ T5409] jfs_alloc_inode+0x1a/0x50 [ 86.551505][ T5409] alloc_inode+0x56/0x1e0 [ 86.555979][ T5409] iget_locked+0x14d/0x5f0 [ 86.560458][ T5409] jfs_iget+0xd/0x420 [ 86.564413][ T5409] jfs_lookup+0x1fa/0x2a0 [ 86.568994][ T5409] lookup_open.isra.0+0x844/0x1510 [ 86.574078][ T5409] path_openat+0x7ad/0x2280 [ 86.578585][ T5409] do_filp_open+0x1a5/0x3d0 [ 86.583094][ T5409] do_sys_openat2+0x11e/0x3f0 [ 86.588011][ T5409] __x64_sys_open+0xfd/0x1a0 [ 86.592570][ T5409] do_syscall_64+0x35/0xb0 [ 86.597046][ T5409] page last free stack trace: [ 86.602220][ T5409] free_pcp_prepare+0x5c7/0xa30 [ 86.607130][ T5409] free_unref_page+0x19/0x480 [ 86.611868][ T5409] slabs_destroy+0x85/0xc0 [ 86.616359][ T5409] ___cache_free+0x2aa/0x3d0 [ 86.620965][ T5409] qlist_free_all+0x4f/0x1a0 [ 86.625612][ T5409] kasan_quarantine_reduce+0x191/0x220 [ 86.631128][ T5409] __kasan_slab_alloc+0x5f/0x80 [ 86.635961][ T5409] kmem_cache_alloc+0x1b5/0x3f0 [ 86.640791][ T5409] mas_alloc_nodes+0x3b2/0x700 [ 86.645526][ T5409] mas_preallocate+0x232/0x300 [ 86.650261][ T5409] vma_expand+0x1ef/0x8d0 [ 86.654654][ T5409] shift_arg_pages+0x16e/0x3a0 [ 86.659398][ T5409] setup_arg_pages+0x400/0x8b0 [ 86.664569][ T5409] load_elf_binary+0x83d/0x4430 [ 86.669392][ T5409] bprm_execve+0x677/0x14f0 [ 86.673962][ T5409] do_execveat_common+0x602/0x800 [ 86.679045][ T5409] [ 86.681526][ T5409] Memory state around the buggy address: [ 86.687156][ T5409] ffff888070557900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.695276][ T5409] ffff888070557980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.703659][ T5409] >ffff888070557a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 86.711746][ T5409] ^ [ 86.717893][ T5409] ffff888070557a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.725942][ T5409] ffff888070557b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.734092][ T5409] ================================================================== [ 86.753785][ T5409] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.760999][ T5409] CPU: 0 PID: 5409 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 86.769232][ T5409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 86.779542][ T5409] Call Trace: [ 86.782821][ T5409] [ 86.785748][ T5409] dump_stack_lvl+0x60/0xa0 [ 86.790260][ T5409] panic+0x4ab/0x550 [ 86.794157][ T5409] ? panic_smp_self_stop+0x70/0x70 [ 86.799261][ T5409] ? preempt_schedule_thunk+0x16/0x20 [ 86.804627][ T5409] ? preempt_schedule_common+0x45/0xb0 [ 86.810084][ T5409] ? preempt_schedule_thunk+0x16/0x20 [ 86.815457][ T5409] check_panic_on_warn+0x71/0x80 [ 86.820394][ T5409] end_report+0xe9/0x120 [ 86.824643][ T5409] ? hex_dump_to_buffer+0x909/0xc10 [ 86.829922][ T5409] kasan_report+0xf5/0x130 [ 86.834336][ T5409] ? hex_dump_to_buffer+0x909/0xc10 [ 86.839532][ T5409] hex_dump_to_buffer+0x909/0xc10 [ 86.844560][ T5409] ? llist_reverse_order+0x60/0x60 [ 86.849848][ T5409] print_hex_dump+0x12e/0x1e0 [ 86.854546][ T5409] ? hex_dump_to_buffer+0xc10/0xc10 [ 86.859739][ T5409] ? irq_work_queue+0x35/0x50 [ 86.864423][ T5409] ? _printk+0xae/0xe0 [ 86.868487][ T5409] ? syslog_print_all+0x300/0x300 [ 86.873507][ T5409] ? __down_read_common+0x880/0xf30 [ 86.878696][ T5409] ea_get+0x5b7/0x14b0 [ 86.882846][ T5409] ? ea_release+0x1b0/0x1b0 [ 86.887345][ T5409] __jfs_getxattr+0xbb/0x310 [ 86.892014][ T5409] ? jfs_initxattrs+0x1d0/0x1d0 [ 86.896960][ T5409] ? find_held_lock+0x2d/0x110 [ 86.901728][ T5409] ? fs_reclaim_acquire+0xb2/0x160 [ 86.905903][ T4350] Bluetooth: hci0: command 0x041b tx timeout [ 86.912804][ T5409] ? lock_downgrade+0x690/0x690 [ 86.917747][ T5409] jfs_xattr_get+0x27/0x30 [ 86.922246][ T5409] __vfs_getxattr+0xe6/0x140 [ 86.927016][ T5409] ? xattr_full_name+0x70/0x70 [ 86.931773][ T5409] ? __kmem_cache_alloc_node+0x168/0x3f0 [ 86.937661][ T5409] inode_doinit_use_xattr+0xab/0x370 [ 86.942952][ T5409] inode_doinit_with_dentry+0xb24/0x12e0 [ 86.948582][ T5409] ? psi_fop_poll+0x48/0x60 [ 86.953180][ T5409] ? selinux_sem_semctl+0x120/0x120 [ 86.958375][ T5409] ? jfs_iget+0x1cd/0x420 [ 86.962788][ T5409] ? lock_downgrade+0x690/0x690 [ 86.967732][ T5409] security_d_instantiate+0x41/0xb0 [ 86.973023][ T5409] d_splice_alias+0x68/0xcc0 [ 86.977785][ T5409] ? do_raw_spin_unlock+0x171/0x230 [ 86.982982][ T5409] ? _raw_spin_unlock+0x24/0x40 [ 86.987914][ T5409] jfs_lookup+0x1a1/0x2a0 [ 86.992325][ T5409] ? jfs_link+0x4b0/0x4b0 [ 86.996670][ T5409] ? __d_lookup+0x1b8/0x350 [ 87.001172][ T5409] ? lookup_open.isra.0+0x209/0x1510 [ 87.006463][ T5409] ? __d_lookup_rcu+0x3d0/0x3d0 [ 87.011412][ T5409] ? __d_lookup+0x1d0/0x350 [ 87.015914][ T5409] ? jfs_link+0x4b0/0x4b0 [ 87.020323][ T5409] lookup_open.isra.0+0x844/0x1510 [ 87.025463][ T5409] ? link_path_walk.part.0+0xac0/0xac0 [ 87.030916][ T5409] ? lock_sync+0x180/0x180 [ 87.035328][ T5409] ? _raw_spin_unlock+0x24/0x40 [ 87.040272][ T5409] path_openat+0x7ad/0x2280 [ 87.044769][ T5409] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 87.050743][ T5409] ? path_lookupat+0x750/0x750 [ 87.055506][ T5409] do_filp_open+0x1a5/0x3d0 [ 87.060007][ T5409] ? may_open_dev+0xd0/0xd0 [ 87.064509][ T5409] ? find_held_lock+0x2d/0x110 [ 87.069384][ T5409] ? do_raw_spin_lock+0x120/0x2a0 [ 87.074671][ T5409] ? spin_bug+0x1c0/0x1c0 [ 87.079004][ T5409] ? _raw_spin_unlock+0x24/0x40 [ 87.083855][ T5409] ? alloc_fd+0x1e4/0x640 [ 87.088198][ T5409] ? getname_flags.part.0+0x89/0x440 [ 87.093494][ T5409] do_sys_openat2+0x11e/0x3f0 [ 87.098347][ T5409] ? build_open_flags+0x4a0/0x4a0 [ 87.103370][ T5409] ? lock_downgrade+0x690/0x690 [ 87.108744][ T5409] ? __ct_user_enter+0xf9/0x130 [ 87.113594][ T5409] ? lock_downgrade+0x690/0x690 [ 87.118503][ T5409] __x64_sys_open+0xfd/0x1a0 [ 87.123089][ T5409] ? vtime_user_exit+0x218/0x6c0 [ 87.128021][ T5409] ? do_sys_open+0xe0/0xe0 [ 87.132434][ T5409] ? syscall_enter_from_user_mode+0x22/0x80 [ 87.138415][ T5409] ? lockdep_hardirqs_on+0x79/0x100 [ 87.143612][ T5409] do_syscall_64+0x35/0xb0 [ 87.148120][ T5409] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 87.154090][ T5409] RIP: 0033:0x7ff6f408a5a9 [ 87.158495][ T5409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.178438][ T5409] RSP: 002b:00007ff6f511f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 87.186939][ T5409] RAX: ffffffffffffffda RBX: 00007ff6f41abf80 RCX: 00007ff6f408a5a9 [ 87.195003][ T5409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 87.203070][ T5409] RBP: 00007ff6f40e5580 R08: 0000000000000000 R09: 0000000000000000 [ 87.211127][ T5409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.219097][ T5409] R13: 00007ffd26b24c4f R14: 00007ff6f511f300 R15: 0000000000022000 [ 87.227173][ T5409] [ 87.230410][ T5409] Kernel Offset: disabled [ 87.234822][ T5409] Rebooting in 86400 seconds..