Warning: Permanently added '[localhost]:27299' (ED25519) to the list of known hosts. 2024/05/21 17:31:19 ignoring optional flag "sandboxArg"="0" 2024/05/21 17:31:19 parsed 1 programs [ 77.401728][ T39] kauditd_printk_skb: 73 callbacks suppressed [ 77.401744][ T39] audit: type=1400 audit(1716312679.952:207): avc: denied { getattr } for pid=5403 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 77.445700][ T39] audit: type=1400 audit(1716312679.992:208): avc: denied { mounton } for pid=5411 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 77.456286][ T39] audit: type=1400 audit(1716312679.992:209): avc: denied { mount } for pid=5411 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 77.466888][ T39] audit: type=1400 audit(1716312680.002:210): avc: denied { read write } for pid=5411 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.478508][ T39] audit: type=1400 audit(1716312680.002:211): avc: denied { open } for pid=5411 comm="syz-executor" path="/swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 77.514022][ T39] audit: type=1400 audit(1716312680.062:212): avc: denied { unlink } for pid=5411 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 78.008232][ T39] audit: type=1400 audit(1716312680.552:213): avc: denied { relabelto } for pid=5415 comm="mkswap" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 79.167023][ T5411] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/05/21 17:31:21 executed programs: 0 [ 79.216226][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.220312][ T65] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.224254][ T65] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.228950][ T65] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.232705][ T65] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.235658][ T65] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.242302][ T39] audit: type=1400 audit(1716312681.792:214): avc: denied { mounton } for pid=5420 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.418615][ T5420] chnl_net:caif_netlink_parms(): no params data found [ 79.523009][ T5420] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.526350][ T5420] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.529517][ T5420] bridge_slave_0: entered allmulticast mode [ 79.532959][ T39] audit: type=1400 audit(1716312682.082:215): avc: denied { search } for pid=4670 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.533532][ T5420] bridge_slave_0: entered promiscuous mode [ 79.546679][ T5420] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.550063][ T5420] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.553145][ T5420] bridge_slave_1: entered allmulticast mode [ 79.556331][ T5420] bridge_slave_1: entered promiscuous mode [ 79.614910][ T5420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.623377][ T5420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.688660][ T5420] team0: Port device team_slave_0 added [ 79.698594][ T5420] team0: Port device team_slave_1 added [ 79.756999][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.760563][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.772591][ T5420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.779389][ T5420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.783115][ T5420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.794412][ T5420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.868242][ T5420] hsr_slave_0: entered promiscuous mode [ 79.872690][ T5420] hsr_slave_1: entered promiscuous mode [ 80.608690][ T5420] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.618159][ T5420] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.630085][ T5420] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.637832][ T5420] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.722574][ T5420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.741544][ T5420] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.749006][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.752809][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.762412][ T826] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.765384][ T826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.859290][ T39] audit: type=1400 audit(1716312683.412:216): avc: denied { sys_module } for pid=5420 comm="syz-executor.0" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 80.954035][ T5420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.987920][ T5420] veth0_vlan: entered promiscuous mode [ 80.996968][ T5420] veth1_vlan: entered promiscuous mode [ 81.022549][ T5420] veth0_macvtap: entered promiscuous mode [ 81.028291][ T5420] veth1_macvtap: entered promiscuous mode [ 81.044774][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.054131][ T5420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.058814][ T5420] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.062483][ T5420] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.066307][ T5420] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.069954][ T5420] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.129558][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.133087][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.155948][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.159441][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.253130][ T5197] Bluetooth: hci0: command tx timeout [ 81.429191][ T5471] loop0: detected capacity change from 0 to 32768 [ 81.452211][ T5471] ea_get: invalid extended attribute [ 81.454797][ T5471] ffff888032b7bab0: 30 00 00 00 00 0b 06 00 75 73 65 72 2e 78 61 74 0.......user.xat [ 81.458954][ T5471] ffff888032b7bac0: 74 72 31 00 78 61 74 74 72 31 00 0b 06 00 75 73 tr1.xattr1....us [ 81.463762][ T5471] ffff888032b7bad0: 65 72 2e 78 61 74 74 72 32 00 78 61 74 74 72 32 er.xattr2.xattr2 [ 81.467902][ T5471] ffff888032b7bae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.472527][ T5471] ffff888032b7baf0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.476682][ T5471] ffff888032b7bb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.480807][ T5471] ffff888032b7bb10: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.485274][ T5471] ffff888032b7bb20: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.489442][ T5471] ffff888032b7bb30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.494581][ T5471] ffff888032b7bb40: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.499067][ T5471] ffff888032b7bb50: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.503479][ T5471] ffff888032b7bb60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.507658][ T5471] ffff888032b7bb70: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.511599][ T5471] ffff888032b7bb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.515643][ T5471] ffff888032b7bb90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.519991][ T5471] ffff888032b7bba0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.524387][ T5471] ffff888032b7bbb0: ed 81 08 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.528486][ T5471] ffff888032b7bbc0: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 81.533113][ T5471] ffff888032b7bbd0: 00 7a 6a 8b ff ff ff ff 00 c0 93 1e 80 88 ff ff .zj............. [ 81.537403][ T5471] ffff888032b7bbe0: d8 bd b7 32 80 88 ff ff 10 3e f3 2b 80 88 ff ff ...2.....>.+.... [ 81.541845][ T5471] ffff888032b7bbf0: 04 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ [ 81.546014][ T5471] ffff888032b7bc00: 0a 00 00 00 00 00 00 00 f2 f1 7c 63 00 00 00 00 ..........|c.... [ 81.550075][ T5471] ffff888032b7bc10: a6 74 ec 19 00 00 00 00 f2 f1 7c 63 00 00 00 00 .t........|c.... [ 81.555250][ T5471] ffff888032b7bc20: a6 74 ec 19 00 00 00 00 f2 f1 7c 63 00 00 00 00 .t........|c.... [ 81.559451][ T5471] ffff888032b7bc30: a6 74 ec 19 00 00 00 00 00 00 00 00 ad 4e ad de .t...........N.. [ 81.563805][ T5471] ffff888032b7bc40: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 81.567927][ T5471] ffff888032b7bc50: a8 07 15 8e ff ff ff ff 18 1a 2d 94 ff ff ff ff ..........-..... [ 81.575143][ T5471] ffff888032b7bc60: 00 00 00 00 00 00 00 00 c0 70 3d 8b ff ff ff ff .........p=..... [ 81.579420][ T5471] ffff888032b7bc70: 00 02 00 00 00 00 00 00 00 00 0c 00 00 00 00 00 ................ [ 81.588129][ T5471] ffff888032b7bc80: 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.608181][ T5471] ffff888032b7bc90: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.621360][ T5471] ffff888032b7bca0: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 81.625535][ T5471] ffff888032b7bcb0: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 81.644044][ T5471] ffff888032b7bcc0: 20 7d ea 92 ff ff ff ff 00 00 00 00 00 00 00 00 }.............. [ 81.648147][ T5471] ffff888032b7bcd0: 00 00 00 00 00 00 00 00 40 a0 2c 8b ff ff ff ff ........@.,..... [ 81.652687][ T5471] ffff888032b7bce0: 00 02 00 00 00 00 00 00 e8 bc b7 32 80 88 ff ff ...........2.... [ 81.657252][ T5471] ffff888032b7bcf0: e8 bc b7 32 80 88 ff ff 90 bc b7 32 80 88 ff ff ...2.......2.... [ 81.662641][ T5471] ffff888032b7bd00: b8 07 15 8e ff ff ff ff 00 00 00 00 00 00 00 00 ................ [ 81.666766][ T5471] ffff888032b7bd10: 00 00 00 00 00 00 00 00 40 71 3d 8b ff ff ff ff ........@q=..... [ 81.672085][ T5471] ffff888032b7bd20: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.677091][ T5471] ffff888032b7bd30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.682814][ T5471] ffff888032b7bd40: 88 81 71 00 00 c9 ff ff 48 bd b7 32 80 88 ff ff ..q.....H..2.... [ 81.686894][ T5471] ffff888032b7bd50: 48 bd b7 32 80 88 ff ff 00 00 00 00 00 00 00 00 H..2............ [ 81.691479][ T5471] ffff888032b7bd60: 00 00 00 00 00 00 00 00 68 bd b7 32 80 88 ff ff ........h..2.... [ 81.701530][ T5471] ffff888032b7bd70: 68 bd b7 32 80 88 ff ff 38 b4 b7 32 80 88 ff ff h..2....8..2.... [ 81.725050][ T5471] ffff888032b7bd80: c0 c9 93 1e 80 88 ff ff 88 bd b7 32 80 88 ff ff ...........2.... [ 81.731420][ T5471] ffff888032b7bd90: 88 bd b7 32 80 88 ff ff 00 00 00 00 00 00 00 00 ...2............ [ 81.737562][ T5471] ffff888032b7bda0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.744955][ T5471] ffff888032b7bdb0: 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 ................ [ 81.752300][ T5471] ffff888032b7bdc0: 00 00 00 00 00 00 00 00 c0 78 6a 8b ff ff ff ff .........xj..... [ 81.758417][ T5471] ffff888032b7bdd0: 00 00 00 00 00 00 00 00 b0 bb b7 32 80 88 ff ff ...........2.... [ 81.763733][ T5471] ffff888032b7bde0: 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... [ 81.769135][ T5471] ffff888032b7bdf0: ff ff ff ff ff ff ff ff e0 ca b7 94 ff ff ff ff ................ [ 81.775784][ T5471] ffff888032b7be00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.781848][ T5471] ffff888032b7be10: 80 6f 3d 8b ff ff ff ff 00 02 00 00 00 00 00 00 .o=............. [ 81.785813][ T5471] ffff888032b7be20: 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 !............... [ 81.790696][ T5471] ffff888032b7be30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.795373][ T5471] ffff888032b7be40: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 81.801438][ T5471] ffff888032b7be50: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 81.806180][ T5471] ffff888032b7be60: 20 7d ea 92 ff ff ff ff 00 00 00 00 00 00 00 00 }.............. [ 81.810023][ T5471] ffff888032b7be70: 00 00 00 00 00 00 00 00 40 a0 2c 8b ff ff ff ff ........@.,..... [ 81.814825][ T5471] ffff888032b7be80: 00 02 00 00 00 00 00 00 88 be b7 32 80 88 ff ff ...........2.... [ 81.818970][ T5471] ffff888032b7be90: 88 be b7 32 80 88 ff ff 30 be b7 32 80 88 ff ff ...2....0..2.... [ 81.823113][ T5471] ffff888032b7bea0: c8 07 15 8e ff ff ff ff 00 00 00 00 00 00 00 00 ................ [ 81.828017][ T5471] ffff888032b7beb0: 00 00 00 00 00 00 00 00 c0 71 3d 8b ff ff ff ff .........q=..... [ 81.835612][ T5471] ffff888032b7bec0: 00 03 00 00 00 00 00 00 ca 0c 10 00 00 00 00 00 ................ [ 81.841124][ T5471] ffff888032b7bed0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.845667][ T5471] ffff888032b7bee0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.850345][ T5471] ffff888032b7bef0: 00 00 00 00 00 00 00 00 40 7e 6a 8b ff ff ff ff ........@~j..... [ 81.854980][ T5471] ffff888032b7bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.859205][ T5471] ffff888032b7bf10: 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... [ 81.863472][ T5471] ffff888032b7bf20: ff ff ff ff ff ff ff ff 20 cb b7 94 ff ff ff ff ........ ....... [ 81.867301][ T5471] ffff888032b7bf30: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.871978][ T5471] ffff888032b7bf40: 00 70 3d 8b ff ff ff ff 00 02 00 00 00 00 00 00 .p=............. [ 81.876105][ T5471] ffff888032b7bf50: 50 bf b7 32 80 88 ff ff 50 bf b7 32 80 88 ff ff P..2....P..2.... [ 81.880202][ T5471] ffff888032b7bf60: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.884344][ T5471] ffff888032b7bf70: 00 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de .............N.. [ 81.888210][ T5471] ffff888032b7bf80: ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff ................ [ 81.892018][ T5471] ffff888032b7bf90: 20 7d ea 92 ff ff ff ff 00 00 00 00 00 00 00 00 }.............. [ 81.895356][ T5471] ffff888032b7bfa0: 00 00 00 00 00 00 00 00 40 a0 2c 8b ff ff ff ff ........@.,..... [ 81.899115][ T5471] ffff888032b7bfb0: 00 02 00 00 00 00 00 00 b8 bf b7 32 80 88 ff ff ...........2.... [ 81.902993][ T5471] ffff888032b7bfc0: b8 bf b7 32 80 88 ff ff 60 bf b7 32 80 88 ff ff ...2....`..2.... [ 81.906861][ T5471] ffff888032b7bfd0: 60 cb b7 94 ff ff ff ff 00 00 00 00 00 00 00 00 `............... [ 81.910888][ T5471] ffff888032b7bfe0: 00 00 00 00 00 00 00 00 c0 6f 3d 8b ff ff ff ff .........o=..... [ 81.915036][ T5471] ffff888032b7bff0: 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.919116][ T5471] ffff888032b7c000: 00 c0 b7 32 80 88 ff ff 00 c0 b7 32 80 88 ff ff ...2.......2.... [ 81.922892][ T5471] ffff888032b7c010: 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 ................ [ 81.926352][ T5471] ffff888032b7c020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.929868][ T5471] ffff888032b7c030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 81.933732][ T5471] ================================================================== [ 81.937210][ T5471] BUG: KASAN: slab-out-of-bounds in hex_dump_to_buffer+0xdee/0xe30 [ 81.940880][ T5471] Read of size 1 at addr ffff888032b7c040 by task syz-executor.0/5471 [ 81.946720][ T5471] [ 81.948390][ T5471] CPU: 0 PID: 5471 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-10355-g38da32ee70b8 #0 [ 81.952672][ T5471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 81.957096][ T5471] Call Trace: [ 81.958691][ T5471] [ 81.960089][ T5471] dump_stack_lvl+0x116/0x1f0 [ 81.962567][ T5471] print_report+0xc3/0x620 [ 81.964571][ T5471] ? __virt_addr_valid+0x5e/0x580 [ 81.967244][ T5471] ? __phys_addr+0xc6/0x150 [ 81.969265][ T5471] kasan_report+0xd9/0x110 [ 81.971241][ T5471] ? hex_dump_to_buffer+0xdee/0xe30 [ 81.973564][ T5471] ? hex_dump_to_buffer+0xdee/0xe30 [ 81.976047][ T5471] hex_dump_to_buffer+0xdee/0xe30 [ 81.978314][ T5471] print_hex_dump+0x18c/0x260 [ 81.980379][ T5471] ? __pfx_print_hex_dump+0x10/0x10 [ 81.982627][ T5471] ? __wake_up_klogd.part.0+0x99/0xf0 [ 81.984780][ T5471] ? __pfx_lock_acquire+0x10/0x10 [ 81.987067][ T5471] ? rwsem_read_trylock+0x12d/0x250 [ 81.989212][ T5471] ea_get+0x864/0x12c0 [ 81.990775][ T5471] ? down_read+0xc9/0x330 [ 81.992451][ T5471] ? __pfx_ea_get+0x10/0x10 [ 81.994302][ T5471] ? kasan_save_stack+0x42/0x60 [ 81.996302][ T5471] ? kasan_save_stack+0x33/0x60 [ 81.998287][ T5471] ? kasan_save_track+0x14/0x30 [ 82.000245][ T5471] ? __kasan_kmalloc+0xaa/0xb0 [ 82.002314][ T5471] ? inode_doinit_use_xattr+0x54/0x410 [ 82.004698][ T5471] ? inode_doinit_with_dentry+0x51f/0x12c0 [ 82.007254][ T5471] __jfs_getxattr+0xfd/0x3f0 [ 82.009337][ T5471] ? path_listxattr+0x9c/0x160 [ 82.011313][ T5471] ? __pfx___jfs_getxattr+0x10/0x10 [ 82.013647][ T5471] ? __pfx_jfs_xattr_get+0x10/0x10 [ 82.015765][ T5471] jfs_xattr_get+0x3c/0x50 [ 82.017609][ T5471] __vfs_getxattr+0x13b/0x1a0 [ 82.019659][ T5471] ? __pfx___vfs_getxattr+0x10/0x10 [ 82.021813][ T5471] inode_doinit_use_xattr+0xb5/0x410 [ 82.024048][ T5471] inode_doinit_with_dentry+0x51f/0x12c0 [ 82.026628][ T5471] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 82.029439][ T5471] ? jfs_iget+0x254/0x4d0 [ 82.031296][ T5471] selinux_d_instantiate+0x26/0x30 [ 82.033574][ T5471] security_d_instantiate+0x57/0xf0 [ 82.036081][ T5471] d_splice_alias+0x94/0xdf0 [ 82.038210][ T5471] jfs_lookup+0x237/0x370 [ 82.040115][ T5471] ? __pfx_jfs_lookup+0x10/0x10 [ 82.042174][ T5471] ? lockdep_init_map_type+0x16d/0x7d0 [ 82.044646][ T5471] __lookup_slow+0x24f/0x460 [ 82.046470][ T5471] ? __pfx___lookup_slow+0x10/0x10 [ 82.049508][ T5471] ? __startup_64+0x120/0x2a0 [ 82.053247][ T5471] ? __startup_64+0x120/0x2a0 [ 82.055154][ T5471] ? lookup_fast+0x155/0x540 [ 82.057111][ T5471] walk_component+0x350/0x5b0 [ 82.059269][ T5471] path_lookupat+0x17f/0x770 [ 82.061287][ T5471] filename_lookup+0x1e5/0x5b0 [ 82.063367][ T5471] ? __pfx_lock_release+0x10/0x10 [ 82.065455][ T5471] ? __pfx_filename_lookup+0x10/0x10 [ 82.067771][ T5471] ? getname_flags.part.0+0x1e1/0x4f0 [ 82.070025][ T5471] user_path_at_empty+0x42/0x60 [ 82.072389][ T5471] path_listxattr+0x9c/0x160 [ 82.074444][ T5471] ? __pfx_path_listxattr+0x10/0x10 [ 82.076926][ T5471] do_syscall_64+0xcf/0x260 [ 82.079365][ T5471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.082104][ T5471] RIP: 0033:0x7f5936c7dca9 [ 82.084130][ T5471] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 82.093168][ T5471] RSP: 002b:00007f59379b60c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 82.096873][ T5471] RAX: ffffffffffffffda RBX: 00007f5936dabf80 RCX: 00007f5936c7dca9 [ 82.100475][ T5471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 82.104021][ T5471] RBP: 00007f5936cc947e R08: 0000000000000000 R09: 0000000000000000 [ 82.107580][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.111270][ T5471] R13: 000000000000000b R14: 00007f5936dabf80 R15: 00007ffd9c6d7608 [ 82.115120][ T5471] [ 82.116446][ T5471] [ 82.117472][ T5471] Allocated by task 5471: [ 82.119533][ T5471] kasan_save_stack+0x33/0x60 [ 82.121503][ T5471] kasan_save_track+0x14/0x30 [ 82.123449][ T5471] __kasan_slab_alloc+0x89/0x90 [ 82.125560][ T5471] kmem_cache_alloc_lru_noprof+0x121/0x2f0 [ 82.128075][ T5471] jfs_alloc_inode+0x25/0x60 [ 82.130975][ T5471] alloc_inode+0x5d/0x230 [ 82.133332][ T5471] iget_locked+0x1a1/0x6d0 [ 82.136079][ T5471] jfs_iget+0x1e/0x4d0 [ 82.138358][ T5471] jfs_lookup+0x2a8/0x370 [ 82.140881][ T5471] __lookup_slow+0x24f/0x460 [ 82.143704][ T5471] walk_component+0x350/0x5b0 [ 82.145889][ T5471] path_lookupat+0x17f/0x770 [ 82.148162][ T5471] filename_lookup+0x1e5/0x5b0 [ 82.151012][ T5471] user_path_at_empty+0x42/0x60 [ 82.154028][ T5471] path_listxattr+0x9c/0x160 [ 82.156556][ T5471] do_syscall_64+0xcf/0x260 [ 82.159088][ T5471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.162556][ T5471] [ 82.163688][ T5471] The buggy address belongs to the object at ffff888032b7b780 [ 82.163688][ T5471] which belongs to the cache jfs_ip of size 2240 [ 82.170865][ T5471] The buggy address is located 0 bytes to the right of [ 82.170865][ T5471] allocated 2240-byte region [ffff888032b7b780, ffff888032b7c040) [ 82.177999][ T5471] [ 82.178949][ T5471] The buggy address belongs to the physical page: [ 82.181677][ T5471] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32b78 [ 82.185865][ T5471] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 82.189723][ T5471] memcg:ffff88802030c701 [ 82.191923][ T5471] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 82.195730][ T5471] page_type: 0xffffefff(slab) [ 82.197841][ T5471] raw: 00fff00000000040 ffff88801638e640 dead000000000122 0000000000000000 [ 82.201669][ T5471] raw: 0000000000000000 00000000800d000d 00000001ffffefff ffff88802030c701 [ 82.205499][ T5471] head: 00fff00000000040 ffff88801638e640 dead000000000122 0000000000000000 [ 82.209337][ T5471] head: 0000000000000000 00000000800d000d 00000001ffffefff ffff88802030c701 [ 82.213225][ T5471] head: 00fff00000000003 ffffea0000cade01 ffffffffffffffff 0000000000000000 [ 82.217078][ T5471] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 82.220963][ T5471] page dumped because: kasan: bad access detected [ 82.223865][ T5471] page_owner tracks the page as allocated [ 82.226193][ T5471] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5471, tgid 5469 (syz-executor.0), ts 81434272872, free_ts 0 [ 82.234814][ T5471] post_alloc_hook+0x2d1/0x350 [ 82.236679][ T5471] get_page_from_freelist+0x136a/0x2df0 [ 82.239437][ T5471] __alloc_pages_noprof+0x22b/0x2460 [ 82.241830][ T5471] alloc_slab_page+0x56/0x110 [ 82.243946][ T5471] new_slab+0x84/0x260 [ 82.245894][ T5471] ___slab_alloc+0xdac/0x1870 [ 82.248020][ T5471] __slab_alloc.constprop.0+0x56/0xb0 [ 82.250438][ T5471] kmem_cache_alloc_lru_noprof+0x2a7/0x2f0 [ 82.253192][ T5471] jfs_alloc_inode+0x25/0x60 [ 82.255166][ T5471] alloc_inode+0x5d/0x230 [ 82.256892][ T5471] new_inode+0x22/0x270 [ 82.258701][ T5471] jfs_fill_super+0x433/0xd20 [ 82.260558][ T5471] mount_bdev+0x1e3/0x2d0 [ 82.262378][ T5471] legacy_get_tree+0x109/0x220 [ 82.264313][ T5471] vfs_get_tree+0x8f/0x380 [ 82.266247][ T5471] path_mount+0x14e6/0x1f20 [ 82.268205][ T5471] page_owner free stack trace missing [ 82.270528][ T5471] [ 82.271554][ T5471] Memory state around the buggy address: [ 82.273935][ T5471] ffff888032b7bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.277527][ T5471] ffff888032b7bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.281603][ T5471] >ffff888032b7c000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 82.285013][ T5471] ^ [ 82.287977][ T5471] ffff888032b7c080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.291876][ T5471] ffff888032b7c100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 82.296092][ T5471] ================================================================== [ 82.308949][ T5471] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.313145][ T5471] CPU: 3 PID: 5471 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-10355-g38da32ee70b8 #0 [ 82.319499][ T5471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 82.323912][ T5471] Call Trace: [ 82.325705][ T5471] [ 82.326996][ T5471] dump_stack_lvl+0x3d/0x1f0 [ 82.328925][ T5471] panic+0x6f5/0x7a0 [ 82.330379][ T5471] ? __pfx_panic+0x10/0x10 [ 82.333449][ T5471] ? preempt_schedule_thunk+0x1a/0x30 [ 82.335964][ T5471] ? preempt_schedule_common+0x44/0xc0 [ 82.338500][ T5471] ? check_panic_on_warn+0x1f/0xb0 [ 82.341301][ T5471] check_panic_on_warn+0xab/0xb0 [ 82.343906][ T5471] end_report+0x117/0x180 [ 82.345958][ T5471] kasan_report+0xe9/0x110 [ 82.348047][ T5471] ? hex_dump_to_buffer+0xdee/0xe30 [ 82.350341][ T5471] ? hex_dump_to_buffer+0xdee/0xe30 [ 82.352674][ T5471] hex_dump_to_buffer+0xdee/0xe30 [ 82.354878][ T5471] print_hex_dump+0x18c/0x260 [ 82.356933][ T5471] ? __pfx_print_hex_dump+0x10/0x10 [ 82.358961][ T5471] ? __wake_up_klogd.part.0+0x99/0xf0 [ 82.360823][ T5471] ? __pfx_lock_acquire+0x10/0x10 [ 82.362558][ T5471] ? rwsem_read_trylock+0x12d/0x250 [ 82.364406][ T5471] ea_get+0x864/0x12c0 [ 82.365929][ T5471] ? down_read+0xc9/0x330 [ 82.367470][ T5471] ? __pfx_ea_get+0x10/0x10 [ 82.369139][ T5471] ? kasan_save_stack+0x42/0x60 [ 82.370849][ T5471] ? kasan_save_stack+0x33/0x60 [ 82.372542][ T5471] ? kasan_save_track+0x14/0x30 [ 82.374432][ T5471] ? __kasan_kmalloc+0xaa/0xb0 [ 82.376334][ T5471] ? inode_doinit_use_xattr+0x54/0x410 [ 82.378470][ T5471] ? inode_doinit_with_dentry+0x51f/0x12c0 [ 82.380942][ T5471] __jfs_getxattr+0xfd/0x3f0 [ 82.383081][ T5471] ? path_listxattr+0x9c/0x160 [ 82.385247][ T5471] ? __pfx___jfs_getxattr+0x10/0x10 [ 82.387574][ T5471] ? __pfx_jfs_xattr_get+0x10/0x10 [ 82.389758][ T5471] jfs_xattr_get+0x3c/0x50 [ 82.391813][ T5471] __vfs_getxattr+0x13b/0x1a0 [ 82.393971][ T5471] ? __pfx___vfs_getxattr+0x10/0x10 [ 82.396332][ T5471] inode_doinit_use_xattr+0xb5/0x410 [ 82.399030][ T5471] inode_doinit_with_dentry+0x51f/0x12c0 [ 82.401589][ T5471] ? __pfx_inode_doinit_with_dentry+0x10/0x10 [ 82.404382][ T5471] ? jfs_iget+0x254/0x4d0 [ 82.406351][ T5471] selinux_d_instantiate+0x26/0x30 [ 82.408668][ T5471] security_d_instantiate+0x57/0xf0 [ 82.411050][ T5471] d_splice_alias+0x94/0xdf0 [ 82.413174][ T5471] jfs_lookup+0x237/0x370 [ 82.415193][ T5471] ? __pfx_jfs_lookup+0x10/0x10 [ 82.417467][ T5471] ? lockdep_init_map_type+0x16d/0x7d0 [ 82.420232][ T5471] __lookup_slow+0x24f/0x460 [ 82.422736][ T5471] ? __pfx___lookup_slow+0x10/0x10 [ 82.425280][ T5471] ? __startup_64+0x120/0x2a0 [ 82.427222][ T5471] ? __startup_64+0x120/0x2a0 [ 82.429113][ T5471] ? lookup_fast+0x155/0x540 [ 82.431166][ T5471] walk_component+0x350/0x5b0 [ 82.433236][ T5471] path_lookupat+0x17f/0x770 [ 82.435254][ T5471] filename_lookup+0x1e5/0x5b0 [ 82.437387][ T5471] ? __pfx_lock_release+0x10/0x10 [ 82.439562][ T5471] ? __pfx_filename_lookup+0x10/0x10 [ 82.441875][ T5471] ? getname_flags.part.0+0x1e1/0x4f0 [ 82.444207][ T5471] user_path_at_empty+0x42/0x60 [ 82.446377][ T5471] path_listxattr+0x9c/0x160 [ 82.448401][ T5471] ? __pfx_path_listxattr+0x10/0x10 [ 82.450581][ T5471] do_syscall_64+0xcf/0x260 [ 82.452509][ T5471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.454856][ T5471] RIP: 0033:0x7f5936c7dca9 [ 82.456621][ T5471] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 82.464513][ T5471] RSP: 002b:00007f59379b60c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 82.468107][ T5471] RAX: ffffffffffffffda RBX: 00007f5936dabf80 RCX: 00007f5936c7dca9 [ 82.471517][ T5471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 82.474885][ T5471] RBP: 00007f5936cc947e R08: 0000000000000000 R09: 0000000000000000 [ 82.478080][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.481215][ T5471] R13: 000000000000000b R14: 00007f5936dabf80 R15: 00007ffd9c6d7608 [ 82.484300][ T5471] [ 82.486292][ T5471] Kernel Offset: disabled [ 82.488179][ T5471] Rebooting in 86400 seconds..