Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. 2023/10/29 10:54:45 ignoring optional flag "sandboxArg"="0" 2023/10/29 10:54:45 parsed 1 programs [ 111.086182][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 111.086197][ T27] audit: type=1400 audit(1698576886.004:205): avc: denied { getattr } for pid=5381 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 111.118293][ T27] audit: type=1400 audit(1698576886.004:206): avc: denied { read } for pid=5381 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 111.141097][ T27] audit: type=1400 audit(1698576886.004:207): avc: denied { open } for pid=5381 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 111.165275][ T27] audit: type=1400 audit(1698576886.054:208): avc: denied { mounton } for pid=5386 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 111.192468][ T27] audit: type=1400 audit(1698576886.054:209): avc: denied { mount } for pid=5386 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 111.218305][ T27] audit: type=1400 audit(1698576886.084:210): avc: denied { read write } for pid=5386 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 111.247118][ T27] audit: type=1400 audit(1698576886.084:211): avc: denied { open } for pid=5386 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 111.274149][ T27] audit: type=1400 audit(1698576886.164:212): avc: denied { unlink } for pid=5386 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 111.787555][ T27] audit: type=1400 audit(1698576886.704:213): avc: denied { relabelto } for pid=5388 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/10/29 10:54:48 executed programs: 0 [ 113.241452][ T5386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 113.439411][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.450347][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.464104][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.480829][ T5405] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.492730][ T5405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.504822][ T5405] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.516068][ T5405] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.524279][ T5405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.533049][ T5405] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.542326][ T5414] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.552168][ T5405] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.555046][ T5414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.560332][ T5405] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.570658][ T5414] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.575645][ T5405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.585223][ T5040] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.592435][ T5405] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.597350][ T5414] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.604646][ T5405] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.611836][ T5040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.619156][ T5405] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.634308][ T5414] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.634422][ T5415] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.642398][ T5040] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.657324][ T5040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.664221][ T5414] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.667303][ T5040] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.684826][ T5040] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.689243][ T5414] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.699596][ T5414] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.707377][ T27] audit: type=1400 audit(1698576888.584:214): avc: denied { mounton } for pid=5401 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 113.826484][ T5414] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.836970][ T5414] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.845432][ T5414] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.856748][ T5414] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.870879][ T5414] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 113.879327][ T5414] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 114.571553][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 114.714119][ T5411] chnl_net:caif_netlink_parms(): no params data found [ 114.780806][ T5402] chnl_net:caif_netlink_parms(): no params data found [ 114.831582][ T5401] chnl_net:caif_netlink_parms(): no params data found [ 114.971906][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.979468][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.987279][ T5407] bridge_slave_0: entered allmulticast mode [ 114.995443][ T5407] bridge_slave_0: entered promiscuous mode [ 115.008882][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.016518][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.024140][ T5407] bridge_slave_1: entered allmulticast mode [ 115.031616][ T5407] bridge_slave_1: entered promiscuous mode [ 115.198397][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.209575][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.216958][ T5411] bridge_slave_0: entered allmulticast mode [ 115.225297][ T5411] bridge_slave_0: entered promiscuous mode [ 115.241738][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.249043][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.257362][ T5411] bridge_slave_1: entered allmulticast mode [ 115.266365][ T5411] bridge_slave_1: entered promiscuous mode [ 115.321274][ T5419] chnl_net:caif_netlink_parms(): no params data found [ 115.398056][ T5407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.411048][ T5407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.427158][ T5413] chnl_net:caif_netlink_parms(): no params data found [ 115.476942][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.485033][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.492653][ T5402] bridge_slave_0: entered allmulticast mode [ 115.501248][ T5402] bridge_slave_0: entered promiscuous mode [ 115.525365][ T5411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.582782][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.591110][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.599799][ T5402] bridge_slave_1: entered allmulticast mode [ 115.612662][ T5402] bridge_slave_1: entered promiscuous mode [ 115.650297][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.658365][ T5401] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.665984][ T5401] bridge_slave_0: entered allmulticast mode [ 115.673029][ T5401] bridge_slave_0: entered promiscuous mode [ 115.684187][ T5411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.694201][ T5040] Bluetooth: hci0: command 0x0409 tx timeout [ 115.724948][ T5407] team0: Port device team_slave_0 added [ 115.742651][ T5407] team0: Port device team_slave_1 added [ 115.772102][ T5402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.781599][ T5414] Bluetooth: hci2: command 0x0409 tx timeout [ 115.781628][ T5408] Bluetooth: hci1: command 0x0409 tx timeout [ 115.788669][ T5040] Bluetooth: hci3: command 0x0409 tx timeout [ 115.805307][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.812468][ T5401] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.820424][ T5401] bridge_slave_1: entered allmulticast mode [ 115.830579][ T5401] bridge_slave_1: entered promiscuous mode [ 115.854628][ T5040] Bluetooth: hci4: command 0x0409 tx timeout [ 115.933037][ T5402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.954273][ T5040] Bluetooth: hci5: command 0x0409 tx timeout [ 115.998225][ T5411] team0: Port device team_slave_0 added [ 116.008860][ T5411] team0: Port device team_slave_1 added [ 116.086895][ T5401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.134443][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.142032][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.150356][ T5419] bridge_slave_0: entered allmulticast mode [ 116.158167][ T5419] bridge_slave_0: entered promiscuous mode [ 116.169282][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.177217][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.184508][ T5419] bridge_slave_1: entered allmulticast mode [ 116.191697][ T5419] bridge_slave_1: entered promiscuous mode [ 116.201153][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.209005][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.237490][ T5407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.257065][ T5402] team0: Port device team_slave_0 added [ 116.267641][ T5401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.319969][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.327421][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.354701][ T5411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.398747][ T5407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.406508][ T5407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.434199][ T5407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.456963][ T5402] team0: Port device team_slave_1 added [ 116.483618][ T5401] team0: Port device team_slave_0 added [ 116.494798][ T5411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.501860][ T5411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.528746][ T5411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.548390][ T5413] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.559617][ T5413] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.567156][ T5413] bridge_slave_0: entered allmulticast mode [ 116.575181][ T5413] bridge_slave_0: entered promiscuous mode [ 116.608049][ T5419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.656921][ T5401] team0: Port device team_slave_1 added [ 116.664726][ T5413] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.671963][ T5413] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.680311][ T5413] bridge_slave_1: entered allmulticast mode [ 116.688378][ T5413] bridge_slave_1: entered promiscuous mode [ 116.715991][ T5419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.732492][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.739946][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.766789][ T5402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.863086][ T5413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.890260][ T5402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.897600][ T5402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.924279][ T5402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.980173][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.987618][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.014552][ T5401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.028889][ T5401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.036043][ T5401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.062543][ T5401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.095747][ T5407] hsr_slave_0: entered promiscuous mode [ 117.103743][ T5407] hsr_slave_1: entered promiscuous mode [ 117.117383][ T5413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.154680][ T5419] team0: Port device team_slave_0 added [ 117.166874][ T5411] hsr_slave_0: entered promiscuous mode [ 117.173542][ T5411] hsr_slave_1: entered promiscuous mode [ 117.183621][ T5411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.192641][ T5411] Cannot create hsr debugfs directory [ 117.267189][ T5419] team0: Port device team_slave_1 added [ 117.327282][ T5413] team0: Port device team_slave_0 added [ 117.338206][ T5413] team0: Port device team_slave_1 added [ 117.457700][ T5401] hsr_slave_0: entered promiscuous mode [ 117.470000][ T5401] hsr_slave_1: entered promiscuous mode [ 117.481233][ T5401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.491093][ T5401] Cannot create hsr debugfs directory [ 117.545606][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.552713][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.581334][ T5419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.603008][ T5419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.610468][ T5419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.637350][ T5419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.673448][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.680810][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.707261][ T5413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.727991][ T5402] hsr_slave_0: entered promiscuous mode [ 117.735559][ T5402] hsr_slave_1: entered promiscuous mode [ 117.741866][ T5402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.750271][ T5402] Cannot create hsr debugfs directory [ 117.773988][ T5040] Bluetooth: hci0: command 0x041b tx timeout [ 117.838220][ T5413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.845828][ T5413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.872383][ T5408] Bluetooth: hci2: command 0x041b tx timeout [ 117.872502][ T5040] Bluetooth: hci3: command 0x041b tx timeout [ 117.879558][ T5413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.885088][ T5408] Bluetooth: hci1: command 0x041b tx timeout [ 117.934075][ T5040] Bluetooth: hci4: command 0x041b tx timeout [ 118.024115][ T5040] Bluetooth: hci5: command 0x041b tx timeout [ 118.116842][ T5413] hsr_slave_0: entered promiscuous mode [ 118.124031][ T5413] hsr_slave_1: entered promiscuous mode [ 118.130517][ T5413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.138915][ T5413] Cannot create hsr debugfs directory [ 118.327155][ T5419] hsr_slave_0: entered promiscuous mode [ 118.334137][ T5419] hsr_slave_1: entered promiscuous mode [ 118.341498][ T5419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.349705][ T5419] Cannot create hsr debugfs directory [ 118.914172][ T5407] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.965843][ T5407] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 119.011541][ T5407] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 119.026591][ T5407] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 119.248149][ T5401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.287879][ T5401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.301200][ T5401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.317094][ T5401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.513544][ T5411] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.528427][ T5411] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.547745][ T5411] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.563181][ T5411] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.596350][ T5407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.752563][ T5407] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.848718][ T5419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.862649][ T5419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.863990][ T5040] Bluetooth: hci0: command 0x040f tx timeout [ 119.935211][ T5408] Bluetooth: hci1: command 0x040f tx timeout [ 119.940733][ T5414] Bluetooth: hci2: command 0x040f tx timeout [ 119.942472][ T5040] Bluetooth: hci3: command 0x040f tx timeout [ 120.013993][ T5040] Bluetooth: hci4: command 0x040f tx timeout [ 120.104186][ T5040] Bluetooth: hci5: command 0x040f tx timeout [ 120.196249][ T5419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.249170][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.256793][ T5467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.271761][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.437276][ T5419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.620049][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.627612][ T5467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.713049][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.936803][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.944281][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.032739][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.040164][ T5051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.153248][ T5411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.246509][ T5411] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.350557][ T5407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.462858][ T5057] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.470181][ T5057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.504468][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 121.504483][ T27] audit: type=1400 audit(1698576896.424:216): avc: denied { sys_module } for pid=5401 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 121.587513][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.594884][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.830247][ T5402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.925488][ T5402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.945139][ T5040] Bluetooth: hci0: command 0x0419 tx timeout [ 121.950080][ T5402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.998678][ T5402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.022950][ T5040] Bluetooth: hci2: command 0x0419 tx timeout [ 122.022969][ T5414] Bluetooth: hci3: command 0x0419 tx timeout [ 122.022999][ T5414] Bluetooth: hci1: command 0x0419 tx timeout [ 122.094449][ T5414] Bluetooth: hci4: command 0x0419 tx timeout [ 122.134815][ T5401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.174170][ T5414] Bluetooth: hci5: command 0x0419 tx timeout [ 122.390040][ T5419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.419909][ T5411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.446401][ T5413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.471106][ T5413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.496350][ T5413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.569492][ T5413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.652960][ T5419] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.672341][ T5407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.811046][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.818419][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.976281][ T5401] veth0_vlan: entered promiscuous mode [ 123.000346][ T5052] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.007839][ T5052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.243710][ T5411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.257429][ T5401] veth1_vlan: entered promiscuous mode [ 123.639678][ T5401] veth0_macvtap: entered promiscuous mode [ 123.698817][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.757586][ T5401] veth1_macvtap: entered promiscuous mode [ 123.809295][ T5402] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.849914][ T5411] veth0_vlan: entered promiscuous mode [ 123.897118][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.904903][ T5050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.961768][ T5413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.014390][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.022167][ T5050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.052136][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.080818][ T5401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.106985][ T5407] veth0_vlan: entered promiscuous mode [ 124.143288][ T5411] veth1_vlan: entered promiscuous mode [ 124.193195][ T5401] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.208523][ T5401] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.218710][ T5401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.228048][ T5401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.275172][ T5413] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.304632][ T5407] veth1_vlan: entered promiscuous mode [ 124.363384][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.371542][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.470594][ T5419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.597280][ T5057] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.604616][ T5057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.815867][ T5411] veth0_macvtap: entered promiscuous mode [ 124.843210][ T5407] veth0_macvtap: entered promiscuous mode [ 124.897145][ T5402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.950499][ T5411] veth1_macvtap: entered promiscuous mode [ 125.034900][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.043302][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.103070][ T5407] veth1_macvtap: entered promiscuous mode [ 125.333733][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.342581][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.342734][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.346985][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.423186][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.486149][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.537670][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.569643][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.598747][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.612554][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.630744][ T5407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.641783][ T5407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.661170][ T5407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.734787][ T27] audit: type=1400 audit(1698576900.644:217): avc: denied { mounton } for pid=5401 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 125.801458][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.823727][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.845947][ T5411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.864422][ T5411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.886424][ T5411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.939561][ T5407] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.953381][ T5407] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.963758][ T5407] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.973139][ T5407] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.010035][ T5411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.020552][ T5411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.051164][ T5411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.083472][ T5411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.246918][ T5402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.470453][ T5413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.528523][ T5419] veth0_vlan: entered promiscuous mode [ 126.571697][ T5589] loop1: detected capacity change from 0 to 14901 [ 126.628146][ T27] audit: type=1400 audit(1698576901.544:218): avc: denied { mounton } for pid=5587 comm="syz-executor.1" path="/root/syzkaller-testdir690625290/syzkaller.5X8BRe/0/file0" dev="sda1" ino=1949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 126.669831][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.678865][ T5419] veth1_vlan: entered promiscuous mode [ 126.690284][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.699572][ T5589] jfs_mount: diMount failed w/rc = -5 [ 126.723688][ T5589] ipimap: ffff888062a7b570, fileset:1, jfs_mount [ 126.739982][ T5589] ipbmap: ffff888062a794f0, fileset:16, jfs_mount [ 126.766911][ T5589] ipimap: ffff888062a7b570, jfs_evict_inode [ 126.784244][ C0] inode: ffff888062a7b570, jfs_free_inode [ 126.790562][ C0] inode: ffff888062a7a530, jfs_free_inode [ 126.800838][ T5589] ================================================================== [ 126.809293][ T5589] BUG: KASAN: slab-use-after-free in jfs_evict_inode+0x4c0/0x4d0 [ 126.817829][ T5589] Read of size 8 at addr ffff888062a7b4f0 by task syz-executor.1/5589 [ 126.826251][ T5589] [ 126.829061][ T5589] CPU: 0 PID: 5589 Comm: syz-executor.1 Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e-dirty #0 [ 126.840370][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 126.851158][ T5589] Call Trace: [ 126.854462][ T5589] [ 126.857406][ T5589] dump_stack_lvl+0xd9/0x1b0 [ 126.862358][ T5589] print_report+0xc4/0x620 [ 126.866873][ T5589] ? __virt_addr_valid+0x5e/0x2d0 [ 126.872071][ T5589] ? __phys_addr+0xc6/0x140 [ 126.876832][ T5589] kasan_report+0xda/0x110 [ 126.881342][ T5589] ? jfs_evict_inode+0x4c0/0x4d0 [ 126.886838][ T5589] ? jfs_evict_inode+0x4c0/0x4d0 [ 126.892086][ T5589] jfs_evict_inode+0x4c0/0x4d0 [ 126.896864][ T5589] ? jfs_write_inode+0x240/0x240 [ 126.901971][ T5589] evict+0x2ed/0x6b0 [ 126.906152][ T5589] iput.part.0+0x55e/0x7a0 [ 126.910766][ T5589] iput+0x5c/0x80 [ 126.914498][ T5589] diFreeSpecial+0x7a/0x110 [ 126.919314][ T5589] jfs_mount+0x4fd/0x930 [ 126.923584][ T5589] jfs_fill_super+0x5a3/0xd20 [ 126.928450][ T5589] ? jfs_remount+0x650/0x650 [ 126.933398][ T5589] ? down_write+0x14f/0x200 [ 126.938565][ T5589] ? sb_set_blocksize+0xf6/0x120 [ 126.943874][ T5589] ? setup_bdev_super+0x366/0x6f0 [ 126.949292][ T5589] ? jfs_remount+0x650/0x650 [ 126.954072][ T5589] mount_bdev+0x1f3/0x2e0 [ 126.958428][ T5589] ? sget+0x610/0x610 [ 126.963241][ T5589] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 126.969145][ T5589] ? cap_capable+0x1d8/0x240 [ 126.973828][ T5589] ? jfs_get_dquots+0x20/0x20 [ 126.978761][ T5589] legacy_get_tree+0x109/0x220 [ 126.983788][ T5589] vfs_get_tree+0x8c/0x370 [ 126.988646][ T5589] path_mount+0x1492/0x1ed0 [ 126.993268][ T5589] ? lockdep_hardirqs_on+0x7d/0x100 [ 126.998856][ T5589] ? finish_automount+0xa40/0xa40 [ 127.004725][ T5589] ? putname+0x12e/0x170 [ 127.009249][ T5589] __x64_sys_mount+0x293/0x310 [ 127.014315][ T5589] ? copy_mnt_ns+0xb60/0xb60 [ 127.019094][ T5589] ? syscall_enter_from_user_mode+0x26/0x80 [ 127.024997][ T5589] do_syscall_64+0x38/0xb0 [ 127.029594][ T5589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.035678][ T5589] RIP: 0033:0x7f0815e7e1ea [ 127.040133][ T5589] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 127.060536][ T5589] RSP: 002b:00007f0816b8fee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.069420][ T5589] RAX: ffffffffffffffda RBX: 00007f0816b8ff80 RCX: 00007f0815e7e1ea [ 127.077788][ T5589] RDX: 0000000020002400 RSI: 0000000020000040 RDI: 00007f0816b8ff40 [ 127.085770][ T5589] RBP: 0000000020002400 R08: 00007f0816b8ff80 R09: 0000000000000080 [ 127.094003][ T5589] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000040 [ 127.102418][ T5589] R13: 00007f0816b8ff40 R14: 0000000000002332 R15: 0000000020002500 [ 127.110505][ T5589] [ 127.113762][ T5589] [ 127.116108][ T5589] Allocated by task 5589: [ 127.120890][ T5589] kasan_save_stack+0x33/0x50 [ 127.125986][ T5589] kasan_set_track+0x25/0x30 [ 127.130889][ T5589] __kasan_slab_alloc+0x81/0x90 [ 127.136776][ T5589] kmem_cache_alloc_lru+0x202/0x6d0 [ 127.144250][ T5589] jfs_alloc_inode+0x25/0x60 [ 127.149015][ T5589] alloc_inode+0x5d/0x220 [ 127.153425][ T5589] new_inode+0x22/0x260 [ 127.157670][ T5589] diReadSpecial+0x51/0x6e0 [ 127.162265][ T5589] jfs_mount+0x31e/0x930 [ 127.166903][ T5589] jfs_fill_super+0x5a3/0xd20 [ 127.171765][ T5589] mount_bdev+0x1f3/0x2e0 [ 127.176192][ T5589] legacy_get_tree+0x109/0x220 [ 127.181230][ T5589] vfs_get_tree+0x8c/0x370 [ 127.185829][ T5589] path_mount+0x1492/0x1ed0 [ 127.191290][ T5589] __x64_sys_mount+0x293/0x310 [ 127.196757][ T5589] do_syscall_64+0x38/0xb0 [ 127.203135][ T5589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.211031][ T5589] [ 127.213592][ T5589] Freed by task 5419: [ 127.218910][ T5589] kasan_save_stack+0x33/0x50 [ 127.224052][ T5589] kasan_set_track+0x25/0x30 [ 127.229241][ T5589] kasan_save_free_info+0x28/0x40 [ 127.234540][ T5589] ____kasan_slab_free+0x138/0x190 [ 127.239742][ T5589] kmem_cache_free+0x104/0x380 [ 127.244770][ T5589] i_callback+0x43/0x70 [ 127.249013][ T5589] rcu_core+0x805/0x1bb0 [ 127.253373][ T5589] __do_softirq+0x218/0x965 [ 127.258152][ T5589] [ 127.260476][ T5589] Last potentially related work creation: [ 127.266264][ T5589] kasan_save_stack+0x33/0x50 [ 127.271025][ T5589] __kasan_record_aux_stack+0x78/0x80 [ 127.276593][ T5589] __call_rcu_common.constprop.0+0x9a/0x790 [ 127.283035][ T5589] destroy_inode+0x129/0x1b0 [ 127.287806][ T5589] iput.part.0+0x55e/0x7a0 [ 127.292219][ T5589] iput+0x5c/0x80 [ 127.296029][ T5589] diFreeSpecial+0x7a/0x110 [ 127.300633][ T5589] jfs_mount+0x46b/0x930 [ 127.305075][ T5589] jfs_fill_super+0x5a3/0xd20 [ 127.309944][ T5589] mount_bdev+0x1f3/0x2e0 [ 127.315279][ T5589] legacy_get_tree+0x109/0x220 [ 127.320135][ T5589] vfs_get_tree+0x8c/0x370 [ 127.324746][ T5589] path_mount+0x1492/0x1ed0 [ 127.329530][ T5589] __x64_sys_mount+0x293/0x310 [ 127.334675][ T5589] do_syscall_64+0x38/0xb0 [ 127.339373][ T5589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.348597][ T5589] [ 127.350923][ T5589] The buggy address belongs to the object at ffff888062a7b140 [ 127.350923][ T5589] which belongs to the cache jfs_ip of size 2240 [ 127.365425][ T5589] The buggy address is located 944 bytes inside of [ 127.365425][ T5589] freed 2240-byte region [ffff888062a7b140, ffff888062a7ba00) [ 127.381247][ T5589] [ 127.383920][ T5589] The buggy address belongs to the physical page: [ 127.390378][ T5589] page:ffffea00018a9ec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888062a7bfff pfn:0x62a7b [ 127.402804][ T5589] memcg:ffff88807e5b8401 [ 127.407216][ T5589] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 127.415116][ T5589] page_type: 0x1() [ 127.418967][ T5589] raw: 00fff00000000800 ffff888016ad0400 ffffea00018a9e90 ffff8880153b9350 [ 127.427937][ T5589] raw: ffff888062a7bfff ffff888062a7b140 0000000100000001 ffff88807e5b8401 [ 127.436795][ T5589] page dumped because: kasan: bad access detected [ 127.443286][ T5589] page_owner tracks the page as allocated [ 127.448987][ T5589] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x342050(__GFP_IO|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE|__GFP_RECLAIMABLE), pid 5589, tgid 5587 (syz-executor.1), ts 126698475522, free_ts 26348408774 [ 127.471752][ T5589] post_alloc_hook+0x2cf/0x340 [ 127.476694][ T5589] get_page_from_freelist+0xee0/0x2f20 [ 127.482152][ T5589] __alloc_pages+0x1d0/0x4a0 [ 127.486862][ T5589] cache_grow_begin+0x99/0x3a0 [ 127.491629][ T5589] cache_alloc_refill+0x294/0x3a0 [ 127.496922][ T5589] kmem_cache_alloc_lru+0x566/0x6d0 [ 127.502822][ T5589] jfs_alloc_inode+0x25/0x60 [ 127.507499][ T5589] alloc_inode+0x5d/0x220 [ 127.511908][ T5589] new_inode+0x22/0x260 [ 127.516131][ T5589] diReadSpecial+0x51/0x6e0 [ 127.521135][ T5589] jfs_mount+0x31e/0x930 [ 127.525559][ T5589] jfs_fill_super+0x5a3/0xd20 [ 127.531170][ T5589] mount_bdev+0x1f3/0x2e0 [ 127.535681][ T5589] legacy_get_tree+0x109/0x220 [ 127.540586][ T5589] vfs_get_tree+0x8c/0x370 [ 127.545271][ T5589] path_mount+0x1492/0x1ed0 [ 127.549877][ T5589] page last free stack trace: [ 127.554627][ T5589] free_unref_page_prepare+0x476/0xa40 [ 127.560242][ T5589] free_unref_page+0x33/0x3b0 [ 127.565003][ T5589] free_contig_range+0xb6/0x190 [ 127.570152][ T5589] destroy_args+0x768/0x990 [ 127.574919][ T5589] debug_vm_pgtable+0x1d79/0x3e00 [ 127.580211][ T5589] do_one_initcall+0x117/0x630 [ 127.585325][ T5589] kernel_init_freeable+0x5c2/0x900 [ 127.590607][ T5589] kernel_init+0x1c/0x2a0 [ 127.595111][ T5589] ret_from_fork+0x45/0x80 [ 127.599794][ T5589] ret_from_fork_asm+0x11/0x20 [ 127.604647][ T5589] [ 127.606960][ T5589] Memory state around the buggy address: [ 127.612790][ T5589] ffff888062a7b380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.621653][ T5589] ffff888062a7b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.630171][ T5589] >ffff888062a7b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.638403][ T5589] ^ [ 127.646295][ T5589] ffff888062a7b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.655245][ T5589] ffff888062a7b580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 127.663575][ T5589] ================================================================== [ 127.753882][ T5589] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 127.761931][ T5589] CPU: 1 PID: 5589 Comm: syz-executor.1 Not tainted 6.6.0-rc6-syzkaller-00355-gfe3cfe869d5e-dirty #0 [ 127.773489][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 127.784183][ T5589] Call Trace: [ 127.788040][ T5589] [ 127.792017][ T5589] dump_stack_lvl+0xd9/0x1b0 [ 127.796912][ T5589] panic+0x6a6/0x750 [ 127.800871][ T5589] ? panic_smp_self_stop+0xa0/0xa0 [ 127.809937][ T5589] ? preempt_schedule_thunk+0x1a/0x30 [ 127.815791][ T5589] ? preempt_schedule_common+0x45/0xc0 [ 127.821816][ T5589] check_panic_on_warn+0xab/0xb0 [ 127.825154][ T5411] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 127.834521][ T5589] end_report+0x108/0x150 [ 127.838865][ T5589] kasan_report+0xea/0x110 [ 127.843308][ T5589] ? jfs_evict_inode+0x4c0/0x4d0 [ 127.848422][ T5589] ? jfs_evict_inode+0x4c0/0x4d0 [ 127.853364][ T5589] jfs_evict_inode+0x4c0/0x4d0 [ 127.858306][ T5589] ? jfs_write_inode+0x240/0x240 [ 127.863411][ T5589] evict+0x2ed/0x6b0 [ 127.867300][ T5589] iput.part.0+0x55e/0x7a0 [ 127.871800][ T5589] iput+0x5c/0x80 [ 127.875518][ T5589] diFreeSpecial+0x7a/0x110 [ 127.880253][ T5589] jfs_mount+0x4fd/0x930 [ 127.884677][ T5589] jfs_fill_super+0x5a3/0xd20 [ 127.889478][ T5589] ? jfs_remount+0x650/0x650 [ 127.894540][ T5589] ? down_write+0x14f/0x200 [ 127.899159][ T5589] ? sb_set_blocksize+0xf6/0x120 [ 127.904364][ T5589] ? setup_bdev_super+0x366/0x6f0 [ 127.909485][ T5589] ? jfs_remount+0x650/0x650 [ 127.914099][ T5589] mount_bdev+0x1f3/0x2e0 [ 127.918617][ T5589] ? sget+0x610/0x610 [ 127.922622][ T5589] ? selinux_sb_eat_lsm_opts+0x594/0x700 [ 127.928295][ T5589] ? cap_capable+0x1d8/0x240 [ 127.932895][ T5589] ? jfs_get_dquots+0x20/0x20 [ 127.937670][ T5589] legacy_get_tree+0x109/0x220 [ 127.942445][ T5589] vfs_get_tree+0x8c/0x370 [ 127.946970][ T5589] path_mount+0x1492/0x1ed0 [ 127.952129][ T5589] ? lockdep_hardirqs_on+0x7d/0x100 [ 127.957489][ T5589] ? finish_automount+0xa40/0xa40 [ 127.962607][ T5589] ? putname+0x12e/0x170 [ 127.966853][ T5589] __x64_sys_mount+0x293/0x310 [ 127.971827][ T5589] ? copy_mnt_ns+0xb60/0xb60 [ 127.976788][ T5589] ? syscall_enter_from_user_mode+0x26/0x80 [ 127.982787][ T5589] do_syscall_64+0x38/0xb0 [ 127.987513][ T5589] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 127.993680][ T5589] RIP: 0033:0x7f0815e7e1ea [ 127.998286][ T5589] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 128.018095][ T5589] RSP: 002b:00007f0816b8fee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.027610][ T5589] RAX: ffffffffffffffda RBX: 00007f0816b8ff80 RCX: 00007f0815e7e1ea [ 128.035675][ T5589] RDX: 0000000020002400 RSI: 0000000020000040 RDI: 00007f0816b8ff40 [ 128.043837][ T5589] RBP: 0000000020002400 R08: 00007f0816b8ff80 R09: 0000000000000080 [ 128.052475][ T5589] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000020000040 [ 128.060679][ T5589] R13: 00007f0816b8ff40 R14: 0000000000002332 R15: 0000000020002500 [ 128.068845][ T5589] [ 128.072562][ T5589] Kernel Offset: disabled [ 128.077159][ T5589] Rebooting in 86400 seconds..