Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. 2024/04/28 18:56:45 ignoring optional flag "sandboxArg"="0" 2024/04/28 18:56:45 parsed 1 programs [ 107.336988][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 107.337007][ T28] audit: type=1400 audit(1714330605.706:204): avc: denied { getattr } for pid=5419 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.367362][ T28] audit: type=1400 audit(1714330605.706:205): avc: denied { read } for pid=5419 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.391010][ T28] audit: type=1400 audit(1714330605.706:206): avc: denied { open } for pid=5419 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 107.414997][ T28] audit: type=1400 audit(1714330605.766:207): avc: denied { mounton } for pid=5424 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 107.440188][ T28] audit: type=1400 audit(1714330605.786:208): avc: denied { mount } for pid=5424 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 107.468600][ T28] audit: type=1400 audit(1714330605.786:209): avc: denied { setattr } for pid=5424 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.492501][ T28] audit: type=1400 audit(1714330605.786:210): avc: denied { read write } for pid=5424 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 107.520965][ T28] audit: type=1400 audit(1714330605.786:211): avc: denied { open } for pid=5424 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 107.547316][ T28] audit: type=1400 audit(1714330605.846:212): avc: denied { unlink } for pid=5424 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 108.010968][ T28] audit: type=1400 audit(1714330606.386:213): avc: denied { relabelto } for pid=5426 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/04/28 18:56:47 executed programs: 0 [ 109.394256][ T5424] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.582160][ T5076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.593700][ T5442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.602872][ T5442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.611751][ T5442] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.619955][ T5442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.627872][ T5442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.629162][ T5444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.643717][ T5444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.653513][ T5444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.662210][ T5446] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.662939][ T5444] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.672407][ T5446] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.678362][ T5444] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.684541][ T5446] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.690916][ T5444] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.698087][ T5446] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.712660][ T5450] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.720775][ T5446] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.727934][ T5449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.736558][ T5450] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.744378][ T5446] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.752348][ T5450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.757364][ T5449] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.761580][ T5450] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.869093][ T5450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.883813][ T5450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.898022][ T5450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.908224][ T5450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.922483][ T5450] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.930138][ T5450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.504154][ T5439] chnl_net:caif_netlink_parms(): no params data found [ 110.520534][ T5447] chnl_net:caif_netlink_parms(): no params data found [ 110.672648][ T5438] chnl_net:caif_netlink_parms(): no params data found [ 110.685159][ T5443] chnl_net:caif_netlink_parms(): no params data found [ 110.808675][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.815863][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.823188][ T5447] bridge_slave_0: entered allmulticast mode [ 110.830255][ T5447] bridge_slave_0: entered promiscuous mode [ 110.839432][ T5447] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.846545][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.853993][ T5447] bridge_slave_1: entered allmulticast mode [ 110.861049][ T5447] bridge_slave_1: entered promiscuous mode [ 110.951410][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.958884][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.966672][ T5439] bridge_slave_0: entered allmulticast mode [ 110.974236][ T5439] bridge_slave_0: entered promiscuous mode [ 111.058152][ T5447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.067627][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.074862][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.084906][ T5439] bridge_slave_1: entered allmulticast mode [ 111.092516][ T5439] bridge_slave_1: entered promiscuous mode [ 111.156440][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.166097][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.173353][ T5443] bridge_slave_0: entered allmulticast mode [ 111.182915][ T5443] bridge_slave_0: entered promiscuous mode [ 111.193080][ T5447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.230907][ T5439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.240294][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.247686][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.254868][ T5438] bridge_slave_0: entered allmulticast mode [ 111.262572][ T5438] bridge_slave_0: entered promiscuous mode [ 111.275575][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.283167][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.290604][ T5443] bridge_slave_1: entered allmulticast mode [ 111.298317][ T5443] bridge_slave_1: entered promiscuous mode [ 111.320253][ T5439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.330022][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.337297][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.344466][ T5438] bridge_slave_1: entered allmulticast mode [ 111.351753][ T5438] bridge_slave_1: entered promiscuous mode [ 111.401123][ T5447] team0: Port device team_slave_0 added [ 111.411859][ T5447] team0: Port device team_slave_1 added [ 111.505360][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.518578][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.532653][ T5443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.546977][ T5443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.576000][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.583148][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.609502][ T5447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.625781][ T5439] team0: Port device team_slave_0 added [ 111.647433][ T5451] chnl_net:caif_netlink_parms(): no params data found [ 111.678976][ T5447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.686081][ T5447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.713516][ T5447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.734945][ T5439] team0: Port device team_slave_1 added [ 111.778395][ T5442] Bluetooth: hci1: command tx timeout [ 111.782231][ T5443] team0: Port device team_slave_0 added [ 111.795316][ T5443] team0: Port device team_slave_1 added [ 111.851417][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.858615][ T5442] Bluetooth: hci3: command tx timeout [ 111.859102][ T5442] Bluetooth: hci2: command tx timeout [ 111.864093][ T5450] Bluetooth: hci0: command tx timeout [ 111.876600][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.905800][ T5439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.923655][ T5438] team0: Port device team_slave_0 added [ 111.933512][ T5438] team0: Port device team_slave_1 added [ 111.970631][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.977993][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.005664][ T5443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.018340][ T5450] Bluetooth: hci4: command tx timeout [ 112.037750][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.044724][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.071310][ T5439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.122735][ T5443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.130169][ T5443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.156931][ T5443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.179340][ T5447] hsr_slave_0: entered promiscuous mode [ 112.186181][ T5447] hsr_slave_1: entered promiscuous mode [ 112.203895][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.210957][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.238983][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.252491][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.260055][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.286369][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.394627][ T5451] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.401894][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.410473][ T5451] bridge_slave_0: entered allmulticast mode [ 112.419012][ T5451] bridge_slave_0: entered promiscuous mode [ 112.475108][ T5443] hsr_slave_0: entered promiscuous mode [ 112.482014][ T5443] hsr_slave_1: entered promiscuous mode [ 112.491160][ T5443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.499890][ T5443] Cannot create hsr debugfs directory [ 112.537444][ T5451] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.544592][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.551960][ T5451] bridge_slave_1: entered allmulticast mode [ 112.559971][ T5451] bridge_slave_1: entered promiscuous mode [ 112.573868][ T5439] hsr_slave_0: entered promiscuous mode [ 112.583083][ T5439] hsr_slave_1: entered promiscuous mode [ 112.590318][ T5439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.598125][ T5439] Cannot create hsr debugfs directory [ 112.625457][ T5438] hsr_slave_0: entered promiscuous mode [ 112.631922][ T5438] hsr_slave_1: entered promiscuous mode [ 112.638623][ T5438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.646605][ T5438] Cannot create hsr debugfs directory [ 112.790873][ T5451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.856882][ T5451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.985548][ T5451] team0: Port device team_slave_0 added [ 113.042957][ T5451] team0: Port device team_slave_1 added [ 113.191330][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.199169][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.225726][ T5451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.294384][ T5451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.301444][ T5451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.329191][ T5451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.439916][ T5447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.474174][ T5447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.487454][ T5447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.524446][ T5451] hsr_slave_0: entered promiscuous mode [ 113.532223][ T5451] hsr_slave_1: entered promiscuous mode [ 113.538750][ T5451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.546303][ T5451] Cannot create hsr debugfs directory [ 113.569508][ T5447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.740459][ T5443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.762777][ T5443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.832276][ T5443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.857375][ T5450] Bluetooth: hci1: command tx timeout [ 113.937782][ T5450] Bluetooth: hci0: command tx timeout [ 113.937798][ T4469] Bluetooth: hci2: command tx timeout [ 113.937813][ T5442] Bluetooth: hci3: command tx timeout [ 113.970107][ T5443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.097690][ T5450] Bluetooth: hci4: command tx timeout [ 114.535088][ T5447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.583664][ T5439] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.601895][ T5439] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.616218][ T5439] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.654102][ T5443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.679148][ T5439] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.748148][ T5447] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.865206][ T5443] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.932481][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.939859][ T5083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.966774][ T5438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.987759][ T5438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.032045][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.039308][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.054112][ T5438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.077822][ T5438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.113743][ T927] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.121033][ T927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.242767][ T927] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.250025][ T927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.407569][ T5451] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.448030][ T5451] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.463679][ T5451] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.508910][ T5451] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.600260][ T5439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.706746][ T5439] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.804697][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.812008][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.832315][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.839562][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.940870][ T5450] Bluetooth: hci1: command tx timeout [ 116.018748][ T5450] Bluetooth: hci0: command tx timeout [ 116.021871][ T4469] Bluetooth: hci3: command tx timeout [ 116.024235][ T5442] Bluetooth: hci2: command tx timeout [ 116.160025][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.177804][ T5450] Bluetooth: hci4: command tx timeout [ 116.318750][ T5438] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.332930][ T5451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.383451][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.390753][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.421240][ T5451] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.450203][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.457447][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.494399][ T5447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.514044][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.521385][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.576361][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.583694][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.613565][ T5443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.839287][ T5438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.034496][ T5439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.124421][ T5447] veth0_vlan: entered promiscuous mode [ 117.169753][ T5443] veth0_vlan: entered promiscuous mode [ 117.245830][ T5447] veth1_vlan: entered promiscuous mode [ 117.306466][ T5443] veth1_vlan: entered promiscuous mode [ 117.428833][ T5439] veth0_vlan: entered promiscuous mode [ 117.473447][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.514796][ T5447] veth0_macvtap: entered promiscuous mode [ 117.573111][ T5447] veth1_macvtap: entered promiscuous mode [ 117.633661][ T5439] veth1_vlan: entered promiscuous mode [ 117.669223][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.694395][ T5443] veth0_macvtap: entered promiscuous mode [ 117.721986][ T5451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.793851][ T5443] veth1_macvtap: entered promiscuous mode [ 117.833089][ T5447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.925736][ T5447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.936271][ T5447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.948038][ T5447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.956782][ T5447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.018068][ T5450] Bluetooth: hci1: command tx timeout [ 118.039290][ T5439] veth0_macvtap: entered promiscuous mode [ 118.052224][ T5439] veth1_macvtap: entered promiscuous mode [ 118.097813][ T5450] Bluetooth: hci0: command tx timeout [ 118.103263][ T5450] Bluetooth: hci2: command tx timeout [ 118.109275][ T5442] Bluetooth: hci3: command tx timeout [ 118.171207][ T5451] veth0_vlan: entered promiscuous mode [ 118.195235][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.216798][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.236834][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.258055][ T5450] Bluetooth: hci4: command tx timeout [ 118.260615][ T5451] veth1_vlan: entered promiscuous mode [ 118.318897][ T5443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.346140][ T5443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.359776][ T5443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.383034][ T5443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.391914][ T5443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.404927][ T5443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.415275][ T5443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.432040][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.443360][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.453414][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.467136][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.478778][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.556075][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.574943][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.594095][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.605024][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.626122][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.645009][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.661251][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.711272][ T5439] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.730324][ T5439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.747579][ T5439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.756337][ T5439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.877572][ T5519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.885971][ T5519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.936268][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 118.936295][ T28] audit: type=1400 audit(1714330617.306:215): avc: denied { mounton } for pid=5447 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 118.998428][ T5451] veth0_macvtap: entered promiscuous mode [ 119.019267][ T5438] veth0_vlan: entered promiscuous mode [ 119.053761][ T5451] veth1_macvtap: entered promiscuous mode [ 119.111525][ T5438] veth1_vlan: entered promiscuous mode [ 119.158512][ T5083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.166373][ T5083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.188192][ T5612] loop1: detected capacity change from 0 to 512 [ 119.222460][ T28] audit: type=1400 audit(1714330617.596:216): avc: denied { mounton } for pid=5611 comm="syz-executor.1" path="/root/syzkaller-testdir1191187396/syzkaller.yzFqfo/0/bus" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 119.257104][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.282892][ T5612] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.307480][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.324177][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.334823][ T5612] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.335680][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.355324][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.366361][ T5612] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2846: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 119.367742][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.389216][ T5612] EXT4-fs (loop1): 1 truncate cleaned up [ 119.395785][ T5612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.396214][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.412954][ T28] audit: type=1400 audit(1714330617.786:217): avc: denied { mount } for pid=5611 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.429964][ T5612] jffs2: notice: (5612) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 119.438843][ T28] audit: type=1400 audit(1714330617.786:218): avc: denied { mounton } for pid=5611 comm="syz-executor.1" path="/root/syzkaller-testdir1191187396/syzkaller.yzFqfo/0/bus/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.530875][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.549132][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.556736][ T28] audit: type=1400 audit(1714330617.926:219): avc: denied { setattr } for pid=5611 comm="syz-executor.1" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 2024/04/28 18:56:58 executed programs: 5 [ 119.625824][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.648731][ T28] audit: type=1400 audit(1714330618.026:220): avc: denied { unmount } for pid=5447 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 119.664950][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.672947][ T28] audit: type=1400 audit(1714330618.026:221): avc: denied { search } for pid=4508 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.687068][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.702083][ T5447] EXT4-fs error (device loop1): ext4_readdir:258: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1191187396/syzkaller.yzFqfo/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 119.719785][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.759149][ T5451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.774532][ T5451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.785223][ T28] audit: type=1400 audit(1714330618.146:222): avc: denied { write } for pid=5447 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.788093][ T5447] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 119.813986][ T28] audit: type=1400 audit(1714330618.146:223): avc: denied { remove_name } for pid=5447 comm="syz-executor.1" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.831328][ T5451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.859860][ T28] audit: type=1400 audit(1714330618.166:224): avc: denied { rmdir } for pid=5447 comm="syz-executor.1" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.899038][ T5447] EXT4-fs error (device loop1): ext4_readdir:258: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1191187396/syzkaller.yzFqfo/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 119.935571][ T5438] veth0_macvtap: entered promiscuous mode [ 119.950753][ T5447] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 119.978423][ T5438] veth1_macvtap: entered promiscuous mode [ 119.993898][ T5451] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.008912][ T5451] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.018242][ T5451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.028200][ T5447] EXT4-fs error (device loop1): ext4_readdir:258: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1191187396/syzkaller.yzFqfo/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.067506][ T5451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.116704][ T5447] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.128456][ T5625] loop3: detected capacity change from 0 to 512 [ 120.179284][ T5447] EXT4-fs error (device loop1): ext4_readdir:258: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1191187396/syzkaller.yzFqfo/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.191752][ T5151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.214940][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.244910][ T5625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.247813][ T5151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.263027][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.282169][ T5447] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.302816][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.321632][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.332048][ T5625] EXT4-fs (loop3): 1 truncate cleaned up [ 120.333174][ T5447] EXT4-fs error (device loop1): ext4_readdir:258: inode #11: block 54: comm syz-executor.1: path /root/syzkaller-testdir1191187396/syzkaller.yzFqfo/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.340463][ T5625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.349271][ T5625] jffs2: warning: (5625) save_xattr_datum: jffs2_flash_writev()=-22, req=65305, wrote=32, at 0x01e00c [ 120.366908][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.402017][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.414198][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.414577][ T5447] EXT4-fs error (device loop1): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.437197][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.465818][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.465895][ T5443] EXT4-fs error (device loop3): ext4_readdir:258: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir2336104419/syzkaller.18bCi0/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.539212][ T5443] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.565628][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.587849][ T5443] EXT4-fs error (device loop3): ext4_readdir:258: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir2336104419/syzkaller.18bCi0/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.601852][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.638737][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.653596][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.663870][ T5443] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.673610][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.696348][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.706651][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.717660][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.729960][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.769042][ T5443] EXT4-fs error (device loop3): ext4_readdir:258: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir2336104419/syzkaller.18bCi0/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.796531][ T5443] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.821015][ T5443] EXT4-fs error (device loop3): ext4_readdir:258: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir2336104419/syzkaller.18bCi0/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.851626][ T5443] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.875410][ T5443] EXT4-fs error (device loop3): ext4_readdir:258: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir2336104419/syzkaller.18bCi0/0/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 120.923235][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.924992][ T5438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.931853][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.944741][ T5443] EXT4-fs error (device loop3): ext4_empty_dir:3126: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 120.951751][ T5438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.998650][ T5438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.026429][ T5438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.150453][ T1274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.208459][ T1274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.306566][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.326143][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.353204][ T5637] loop0: detected capacity change from 0 to 512 [ 121.384704][ T5637] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.468186][ T5637] EXT4-fs (loop0): 1 truncate cleaned up [ 121.517802][ T5637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.598885][ T5637] ================================================================== [ 121.606990][ T5637] BUG: KASAN: slab-out-of-bounds in jffs2_sum_add_kvec+0x125a/0x15d0 [ 121.615135][ T5637] Read of size 4 at addr ffff888029f0ccbc by task syz-executor.0/5637 [ 121.623477][ T5637] [ 121.625812][ T5637] CPU: 0 PID: 5637 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00355-g2c8159388952 #0 [ 121.636157][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 121.646226][ T5637] Call Trace: [ 121.649529][ T5637] [ 121.652473][ T5637] dump_stack_lvl+0x116/0x1f0 [ 121.657270][ T5637] print_report+0xc3/0x620 [ 121.661709][ T5637] ? __virt_addr_valid+0x5e/0x580 [ 121.666750][ T5637] ? __phys_addr+0xc6/0x150 [ 121.671275][ T5637] kasan_report+0xd9/0x110 [ 121.675715][ T5637] ? jffs2_sum_add_kvec+0x125a/0x15d0 [ 121.681127][ T5637] ? jffs2_sum_add_kvec+0x125a/0x15d0 [ 121.686527][ T5637] jffs2_sum_add_kvec+0x125a/0x15d0 [ 121.691782][ T5637] jffs2_flash_direct_writev+0xa8/0xd0 [ 121.697271][ T5637] jffs2_flash_writev+0x9b4/0xec0 [ 121.702339][ T5637] ? do_setxattr+0x146/0x170 [ 121.706969][ T5637] ? hlock_class+0x4e/0x130 [ 121.711588][ T5637] ? __pfx_jffs2_flash_writev+0x10/0x10 [ 121.717164][ T5637] save_xattr_datum+0x44e/0x790 [ 121.722064][ T5637] ? __pfx_save_xattr_datum+0x10/0x10 [ 121.727582][ T5637] ? crc32_body+0x34f/0x610 [ 121.732117][ T5637] ? do_jffs2_setxattr+0xa4a/0x1630 [ 121.737339][ T5637] do_jffs2_setxattr+0xa4a/0x1630 [ 121.742399][ T5637] ? __pfx_do_jffs2_setxattr+0x10/0x10 [ 121.747889][ T5637] ? evm_protected_xattr_common+0x183/0x1f0 [ 121.753815][ T5637] ? xattr_resolve_name+0x27b/0x3f0 [ 121.754956][ T5447] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.759112][ T5637] ? __pfx_jffs2_trusted_setxattr+0x10/0x10 [ 121.759140][ T5637] __vfs_setxattr+0x173/0x1e0 [ 121.759167][ T5637] ? __pfx___vfs_setxattr+0x10/0x10 [ 121.759194][ T5637] __vfs_setxattr_noperm+0x127/0x5e0 [ 121.759224][ T5637] __vfs_setxattr_locked+0x182/0x260 [ 121.759253][ T5637] vfs_setxattr+0x146/0x350 [ 121.759283][ T5637] ? __pfx_vfs_setxattr+0x10/0x10 [ 121.759312][ T5637] ? rep_movs_alternative+0x4a/0x70 [ 121.759338][ T5637] do_setxattr+0x146/0x170 [ 121.759365][ T5637] setxattr+0x15d/0x180 [ 121.759391][ T5637] ? __pfx_setxattr+0x10/0x10 [ 121.822560][ T5637] ? mnt_get_write_access+0x20c/0x300 [ 121.828007][ T5637] path_setxattr+0x179/0x1e0 [ 121.832636][ T5637] ? __pfx_path_setxattr+0x10/0x10 [ 121.837783][ T5637] __x64_sys_setxattr+0xc4/0x160 [ 121.842750][ T5637] ? do_syscall_64+0x91/0x260 [ 121.847449][ T5637] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.852666][ T5637] do_syscall_64+0xcf/0x260 [ 121.857178][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.863271][ T5637] RIP: 0033:0x7fded427de69 [ 121.867700][ T5637] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 121.887325][ T5637] RSP: 002b:00007fded50170c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 121.895828][ T5637] RAX: ffffffffffffffda RBX: 00007fded43abf80 RCX: 00007fded427de69 [ 121.903801][ T5637] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 00000000200000c0 [ 121.911861][ T5637] RBP: 00007fded42ca47a R08: 0000000000000000 R09: 0000000000000000 [ 121.919833][ T5637] R10: 000000000000feeb R11: 0000000000000246 R12: 0000000000000000 [ 121.927808][ T5637] R13: 000000000000000b R14: 00007fded43abf80 R15: 00007ffe02b106b8 [ 121.935794][ T5637] [ 121.938825][ T5637] [ 121.941145][ T5637] Allocated by task 5612: [ 121.945469][ T5637] kasan_save_stack+0x33/0x60 [ 121.950153][ T5637] kasan_save_track+0x14/0x30 [ 121.954923][ T5637] __kasan_kmalloc+0xaa/0xb0 [ 121.959514][ T5637] __kmalloc+0x1f9/0x440 [ 121.963758][ T5637] jffs2_do_mount_fs+0x84b/0x2460 [ 121.968787][ T5637] jffs2_do_fill_super+0x3d4/0xa60 [ 121.973943][ T5637] jffs2_fill_super+0x283/0x370 [ 121.978810][ T5637] mtd_get_sb+0x2ce/0x490 [ 121.983147][ T5637] get_tree_mtd+0x6ce/0x860 [ 121.987654][ T5637] vfs_get_tree+0x8f/0x380 [ 121.992077][ T5637] path_mount+0x14e6/0x1f20 [ 121.996588][ T5637] __x64_sys_mount+0x297/0x320 [ 122.001360][ T5637] do_syscall_64+0xcf/0x260 [ 122.005864][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.011859][ T5637] [ 122.014181][ T5637] The buggy address belongs to the object at ffff888029f0c000 [ 122.014181][ T5637] which belongs to the cache kmalloc-4k of size 4096 [ 122.028411][ T5637] The buggy address is located 956 bytes to the right of [ 122.028411][ T5637] allocated 2304-byte region [ffff888029f0c000, ffff888029f0c900) [ 122.043421][ T5637] [ 122.045737][ T5637] The buggy address belongs to the physical page: [ 122.052142][ T5637] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29f08 [ 122.060900][ T5637] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 122.068440][ T5637] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff) [ 122.076414][ T5637] page_type: 0xffffffff() [ 122.080740][ T5637] raw: 00fff80000000840 ffff888015042140 ffffea0000a93200 dead000000000002 [ 122.089321][ T5637] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 122.097906][ T5637] head: 00fff80000000840 ffff888015042140 ffffea0000a93200 dead000000000002 [ 122.106576][ T5637] head: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 122.115261][ T5637] head: 00fff80000000003 ffffea0000a7c201 ffffea0000a7c248 00000000ffffffff [ 122.123963][ T5637] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000 [ 122.132640][ T5637] page dumped because: kasan: bad access detected [ 122.139050][ T5637] page_owner tracks the page as allocated [ 122.144802][ T5637] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4654, tgid 799444987 (v4l_id), ts 4654, free_ts 39432570420 [ 122.164806][ T5637] post_alloc_hook+0x2d4/0x350 [ 122.169586][ T5637] get_page_from_freelist+0xa28/0x3780 [ 122.175225][ T5637] __alloc_pages+0x22b/0x2460 [ 122.179996][ T5637] new_slab+0xcc/0x3a0 [ 122.184081][ T5637] ___slab_alloc+0x66d/0x1790 [ 122.188762][ T5637] __slab_alloc.constprop.0+0x56/0xb0 [ 122.194141][ T5637] __kmalloc+0x3b4/0x440 [ 122.198417][ T5637] tomoyo_realpath_from_path+0xb9/0x720 [ 122.204082][ T5637] tomoyo_check_open_permission+0x2a7/0x3b0 [ 122.210074][ T5637] tomoyo_file_open+0x71/0x90 [ 122.214779][ T5637] security_file_open+0x78/0x630 [ 122.219728][ T5637] do_dentry_open+0x583/0x18c0 [ 122.224508][ T5637] path_openat+0x1dfb/0x2990 [ 122.229119][ T5637] do_filp_open+0x1dc/0x430 [ 122.233645][ T5637] do_sys_openat2+0x17a/0x1e0 [ 122.238685][ T5637] __x64_sys_openat+0x175/0x210 [ 122.243554][ T5637] page last free pid 4529 tgid 4529 stack trace: [ 122.249879][ T5637] free_unref_page_prepare+0x527/0xb10 [ 122.255355][ T5637] free_unref_page+0x33/0x3c0 [ 122.260048][ T5637] __put_partials+0x14c/0x170 [ 122.264745][ T5637] qlist_free_all+0x4e/0x140 [ 122.269384][ T5637] kasan_quarantine_reduce+0x192/0x1e0 [ 122.274848][ T5637] __kasan_slab_alloc+0x69/0x90 [ 122.279702][ T5637] __kmalloc_node+0x1e9/0x480 [ 122.284388][ T5637] kvmalloc_node+0x9d/0x1a0 [ 122.288897][ T5637] seq_read_iter+0x830/0x12c0 [ 122.293577][ T5637] kernfs_fop_read_iter+0x41a/0x590 [ 122.298782][ T5637] vfs_read+0x6c0/0xb80 [ 122.302944][ T5637] ksys_read+0x12f/0x260 [ 122.307194][ T5637] do_syscall_64+0xcf/0x260 [ 122.311785][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.317692][ T5637] [ 122.320009][ T5637] Memory state around the buggy address: [ 122.325630][ T5637] ffff888029f0cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.333690][ T5637] ffff888029f0cc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.341836][ T5637] >ffff888029f0cc80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.349895][ T5637] ^ [ 122.355779][ T5637] ffff888029f0cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.363922][ T5637] ffff888029f0cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 122.371976][ T5637] ================================================================== [ 122.400667][ T5637] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 122.407914][ T5637] CPU: 1 PID: 5637 Comm: syz-executor.0 Not tainted 6.9.0-rc5-syzkaller-00355-g2c8159388952 #0 [ 122.418269][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 122.428344][ T5637] Call Trace: [ 122.431627][ T5637] [ 122.434642][ T5637] dump_stack_lvl+0x3d/0x1f0 [ 122.439333][ T5637] panic+0x6f5/0x7a0 [ 122.443244][ T5637] ? __pfx_panic+0x10/0x10 [ 122.447678][ T5637] ? preempt_schedule_thunk+0x1a/0x30 [ 122.453095][ T5637] ? preempt_schedule_common+0x44/0xc0 [ 122.458564][ T5637] ? check_panic_on_warn+0x1f/0xb0 [ 122.463686][ T5637] check_panic_on_warn+0xab/0xb0 [ 122.468800][ T5637] end_report+0x117/0x180 [ 122.473135][ T5637] kasan_report+0xe9/0x110 [ 122.477556][ T5637] ? jffs2_sum_add_kvec+0x125a/0x15d0 [ 122.482956][ T5637] ? jffs2_sum_add_kvec+0x125a/0x15d0 [ 122.488422][ T5637] jffs2_sum_add_kvec+0x125a/0x15d0 [ 122.493716][ T5637] jffs2_flash_direct_writev+0xa8/0xd0 [ 122.499184][ T5637] jffs2_flash_writev+0x9b4/0xec0 [ 122.504221][ T5637] ? do_setxattr+0x146/0x170 [ 122.508817][ T5637] ? hlock_class+0x4e/0x130 [ 122.513327][ T5637] ? __pfx_jffs2_flash_writev+0x10/0x10 [ 122.518905][ T5637] save_xattr_datum+0x44e/0x790 [ 122.523761][ T5637] ? __pfx_save_xattr_datum+0x10/0x10 [ 122.529160][ T5637] ? crc32_body+0x34f/0x610 [ 122.533667][ T5637] ? do_jffs2_setxattr+0xa4a/0x1630 [ 122.538877][ T5637] do_jffs2_setxattr+0xa4a/0x1630 [ 122.543913][ T5637] ? __pfx_do_jffs2_setxattr+0x10/0x10 [ 122.549378][ T5637] ? evm_protected_xattr_common+0x183/0x1f0 [ 122.555275][ T5637] ? xattr_resolve_name+0x27b/0x3f0 [ 122.560476][ T5637] ? __pfx_jffs2_trusted_setxattr+0x10/0x10 [ 122.566372][ T5637] __vfs_setxattr+0x173/0x1e0 [ 122.571071][ T5637] ? __pfx___vfs_setxattr+0x10/0x10 [ 122.576646][ T5637] __vfs_setxattr_noperm+0x127/0x5e0 [ 122.581983][ T5637] __vfs_setxattr_locked+0x182/0x260 [ 122.587288][ T5637] vfs_setxattr+0x146/0x350 [ 122.591825][ T5637] ? __pfx_vfs_setxattr+0x10/0x10 [ 122.596861][ T5637] ? rep_movs_alternative+0x4a/0x70 [ 122.602065][ T5637] do_setxattr+0x146/0x170 [ 122.606486][ T5637] setxattr+0x15d/0x180 [ 122.610663][ T5637] ? __pfx_setxattr+0x10/0x10 [ 122.615389][ T5637] ? mnt_get_write_access+0x20c/0x300 [ 122.620768][ T5637] path_setxattr+0x179/0x1e0 [ 122.625372][ T5637] ? __pfx_path_setxattr+0x10/0x10 [ 122.630681][ T5637] __x64_sys_setxattr+0xc4/0x160 [ 122.635623][ T5637] ? do_syscall_64+0x91/0x260 [ 122.640299][ T5637] ? lockdep_hardirqs_on+0x7c/0x110 [ 122.645510][ T5637] do_syscall_64+0xcf/0x260 [ 122.650023][ T5637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.655939][ T5637] RIP: 0033:0x7fded427de69 [ 122.660354][ T5637] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 122.679966][ T5637] RSP: 002b:00007fded50170c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 122.688384][ T5637] RAX: ffffffffffffffda RBX: 00007fded43abf80 RCX: 00007fded427de69 [ 122.696354][ T5637] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 00000000200000c0 [ 122.704331][ T5637] RBP: 00007fded42ca47a R08: 0000000000000000 R09: 0000000000000000 [ 122.712336][ T5637] R10: 000000000000feeb R11: 0000000000000246 R12: 0000000000000000 [ 122.720335][ T5637] R13: 000000000000000b R14: 00007fded43abf80 R15: 00007ffe02b106b8 [ 122.728397][ T5637] [ 122.731928][ T5637] Kernel Offset: disabled [ 122.736238][ T5637] Rebooting in 86400 seconds..