[ 44.777762][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.788218][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.800666][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.862391][ T349] syz-executor.0 (349) used greatest stack depth: 19904 bytes left [ 45.322673][ T8] device bridge_slave_1 left promiscuous mode [ 45.328695][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.336208][ T8] device bridge_slave_0 left promiscuous mode [ 45.342396][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.349918][ T8] device veth1_macvtap left promiscuous mode [ 45.355862][ T8] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.101' (ECDSA) to the list of known hosts. 2023/03/02 16:56:15 ignoring optional flag "sandboxArg"="0" 2023/03/02 16:56:15 parsed 1 programs 2023/03/02 16:56:15 executed programs: 0 [ 62.285555][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 62.285564][ T30] audit: type=1400 audit(1677776175.310:137): avc: denied { mounton } for pid=392 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 62.316494][ T30] audit: type=1400 audit(1677776175.310:138): avc: denied { mount } for pid=392 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.347599][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.354476][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.361589][ T396] device bridge_slave_0 entered promiscuous mode [ 62.369427][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.376295][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.383480][ T396] device bridge_slave_1 entered promiscuous mode [ 62.415298][ T396] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.422167][ T396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.429337][ T396] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.436175][ T396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.450819][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.457986][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.465116][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.472737][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.481233][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.489291][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.496348][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.512524][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.520655][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.528754][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.535625][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.544143][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.551870][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.561520][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.569214][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.577001][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.585145][ T396] device veth0_vlan entered promiscuous mode [ 62.593726][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.602760][ T396] device veth1_macvtap entered promiscuous mode [ 62.612745][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.620838][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.632164][ T30] audit: type=1400 audit(1677776175.660:139): avc: denied { mount } for pid=396 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 62.663390][ T403] loop0: detected capacity change from 0 to 512 [ 62.670082][ T30] audit: type=1400 audit(1677776175.690:140): avc: denied { mounton } for pid=402 comm="syz-executor.0" path="/root/syzkaller-testdir2117968958/syzkaller.M7uj72/0/file0" dev="sda1" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 62.697865][ T403] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 62.697865][ T403] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 62.697865][ T403] [ 62.716206][ T403] EXT4-fs (loop0): Ignoring removed nobh option [ 62.722733][ T403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 62.735765][ T403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.747086][ T403] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2196: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 62.759700][ T403] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 62.772128][ T403] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,acl,debug_want_extra_isize=0x0000000000000080,lazytime,nobh,quota,,errors=continue. Quota mode: writeback. [ 62.790189][ T30] audit: type=1400 audit(1677776175.820:141): avc: denied { mount } for pid=402 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.812149][ T30] audit: type=1400 audit(1677776175.820:142): avc: denied { setattr } for pid=402 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 62.834633][ T30] audit: type=1400 audit(1677776175.840:143): avc: denied { unmount } for pid=396 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 62.834734][ T396] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 62.865678][ T396] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 62.874010][ T396] CPU: 1 PID: 396 Comm: syz-executor.0 Not tainted 5.15.94-syzkaller #0 [ 62.882255][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 62.892151][ T396] RIP: 0010:ext4_xattr_set_entry+0x12af/0x3660 [ 62.898179][ T396] Code: 4c 8b ac 24 a0 00 00 00 74 12 48 89 df e8 59 f8 c3 ff 48 ba 00 00 00 00 00 fc ff df 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 33 f8 c3 ff 48 ba 00 00 00 00 00 fc [ 62.917772][ T396] RSP: 0018:ffffc900005a7140 EFLAGS: 00010206 [ 62.923667][ T396] RAX: 0000000000000006 RBX: 0000000000000030 RCX: 0000000000000001 [ 62.931673][ T396] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 62.939463][ T396] RBP: ffffc900005a73f0 R08: dffffc0000000000 R09: ffffed1021cd6003 [ 62.947270][ T396] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff85ae84e0 [ 62.955181][ T396] R13: 1ffff920000b4ea8 R14: 0000000000000000 R15: ffff88810e674020 [ 62.962989][ T396] FS: 0000555555cde400(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 62.971757][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.978369][ T396] CR2: 0000555555ce7728 CR3: 000000012212e000 CR4: 00000000003506a0 [ 62.986211][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.993982][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.001904][ T396] Call Trace: [ 63.005108][ T396] [ 63.007883][ T396] ? ext4_xattr_block_set+0x2f1/0x3480 [ 63.013177][ T396] ? __mark_inode_dirty+0x14c/0x710 [ 63.018214][ T396] ? __dentry_kill+0x38b/0x550 [ 63.022903][ T396] ? task_work_run+0xcc/0x140 [ 63.027603][ T396] ? exit_to_user_mode_loop+0xc4/0xe0 [ 63.033052][ T396] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 63.038639][ T396] ? ext4_xattr_ibody_set+0x320/0x320 [ 63.043873][ T396] ? __kasan_kmalloc+0x9/0x10 [ 63.048527][ T396] ? __kmalloc+0x13a/0x270 [ 63.052779][ T396] ? ext4_xattr_block_set+0x373/0x3480 [ 63.058082][ T396] ext4_xattr_block_set+0xbf0/0x3480 [ 63.063193][ T396] ? ext4_xattr_ibody_set+0x320/0x320 [ 63.068486][ T396] ? ext4_get_inode_loc+0x1a0/0x1a0 [ 63.073574][ T396] ? ext4_xattr_block_find+0x500/0x500 [ 63.078921][ T396] ? __xattr_check_inode+0xad/0x360 [ 63.083957][ T396] ? __kasan_check_write+0x14/0x20 [ 63.088967][ T396] ? ext4_xattr_ibody_set+0x1fd/0x320 [ 63.094265][ T396] ext4_expand_extra_isize_ea+0xff1/0x1a30 [ 63.099907][ T396] ? ext4_xattr_set+0x370/0x370 [ 63.104591][ T396] ? is_bpf_text_address+0x117/0x130 [ 63.109711][ T396] __ext4_expand_extra_isize+0x217/0x360 [ 63.115181][ T396] __ext4_mark_inode_dirty+0x3e4/0x660 [ 63.120478][ T396] ? sb_end_intwrite+0xf0/0xf0 [ 63.125163][ T396] ? stack_trace_save+0x113/0x1c0 [ 63.130027][ T396] ? ext4_journal_check_start+0x52/0x1e0 [ 63.135593][ T396] ? ext4_dirty_inode+0x8a/0xe0 [ 63.140270][ T396] ext4_dirty_inode+0xac/0xe0 [ 63.144869][ T396] __mark_inode_dirty+0x14c/0x710 [ 63.149724][ T396] iput+0xfd/0x5d0 [ 63.153284][ T396] dentry_unlink_inode+0x2d8/0x3c0 [ 63.158232][ T396] __dentry_kill+0x38b/0x550 [ 63.162656][ T396] shrink_dentry_list+0x206/0x440 [ 63.167521][ T396] shrink_dcache_parent+0xaf/0x2e0 [ 63.172463][ T396] ? d_set_mounted+0x1f0/0x1f0 [ 63.177063][ T396] ? __init_rwsem+0x1c0/0x1c0 [ 63.181578][ T396] do_one_tree+0x1f/0xd0 [ 63.185669][ T396] shrink_dcache_for_umount+0x67/0xf0 [ 63.190976][ T396] generic_shutdown_super+0x63/0x260 [ 63.196178][ T396] kill_block_super+0x79/0xc0 [ 63.200687][ T396] deactivate_locked_super+0x7d/0xe0 [ 63.205814][ T396] deactivate_super+0x5d/0x80 [ 63.210404][ T396] cleanup_mnt+0x3b2/0x450 [ 63.214659][ T396] __cleanup_mnt+0xd/0x10 [ 63.218821][ T396] task_work_run+0xcc/0x140 [ 63.223162][ T396] exit_to_user_mode_loop+0xc4/0xe0 [ 63.228204][ T396] exit_to_user_mode_prepare+0x5a/0xa0 [ 63.233603][ T396] syscall_exit_to_user_mode+0x26/0x160 [ 63.239066][ T396] do_syscall_64+0x49/0xb0 [ 63.243318][ T396] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 63.249136][ T396] RIP: 0033:0x7f33096b5547 [ 63.253386][ T396] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.273057][ T396] RSP: 002b:00007ffd56692dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 63.281513][ T396] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f33096b5547 [ 63.289402][ T396] RDX: 00007ffd56692e99 RSI: 000000000000000a RDI: 00007ffd56692e90 [ 63.297316][ T396] RBP: 00007ffd56692e90 R08: 00000000ffffffff R09: 00007ffd56692c60 [ 63.305209][ T396] R10: 0000555555cdf793 R11: 0000000000000246 R12: 00007f330970eb24 [ 63.313028][ T396] R13: 00007ffd56693f50 R14: 0000555555cdf6f0 R15: 00007ffd56693f90 [ 63.320833][ T396] [ 63.323696][ T396] Modules linked in: [ 63.328047][ T396] ---[ end trace 4c2b5dbeb25d5e6c ]--- [ 63.333561][ T396] RIP: 0010:ext4_xattr_set_entry+0x12af/0x3660 [ 63.339532][ T396] Code: 4c 8b ac 24 a0 00 00 00 74 12 48 89 df e8 59 f8 c3 ff 48 ba 00 00 00 00 00 fc ff df 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 33 f8 c3 ff 48 ba 00 00 00 00 00 fc [ 63.359345][ T396] RSP: 0018:ffffc900005a7140 EFLAGS: 00010206 [ 63.365153][ T396] RAX: 0000000000000006 RBX: 0000000000000030 RCX: 0000000000000001 [ 63.373254][ T396] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 63.381028][ T396] RBP: ffffc900005a73f0 R08: dffffc0000000000 R09: ffffed1021cd6003 [ 63.389401][ T396] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff85ae84e0 [ 63.397683][ T396] R13: 1ffff920000b4ea8 R14: 0000000000000000 R15: ffff88810e674020 [ 63.405501][ T396] FS: 0000555555cde400(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 63.414350][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.420640][ T396] CR2: 000055f7f25a0068 CR3: 000000012212e000 CR4: 00000000003506b0 [ 63.428770][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.436634][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.444444][ T396] Kernel panic - not syncing: Fatal exception [ 63.450455][ T396] Kernel Offset: disabled [ 63.454664][ T396] Rebooting in 86400 seconds..