Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. 2023/11/09 09:19:34 ignoring optional flag "sandboxArg"="0" 2023/11/09 09:19:34 parsed 1 programs [ 105.490146][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 105.490158][ T27] audit: type=1400 audit(1699521574.799:203): avc: denied { getattr } for pid=5411 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.524699][ T27] audit: type=1400 audit(1699521574.819:204): avc: denied { read } for pid=5411 comm="syz-execprog" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.548220][ T27] audit: type=1400 audit(1699521574.819:205): avc: denied { open } for pid=5411 comm="syz-execprog" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.587969][ T27] audit: type=1400 audit(1699521574.889:206): avc: denied { mounton } for pid=5416 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 105.614718][ T27] audit: type=1400 audit(1699521574.889:207): avc: denied { mount } for pid=5416 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 105.639184][ T27] audit: type=1400 audit(1699521574.919:208): avc: denied { read write } for pid=5416 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 105.666338][ T27] audit: type=1400 audit(1699521574.919:209): avc: denied { open } for pid=5416 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 105.710903][ T27] audit: type=1400 audit(1699521575.009:210): avc: denied { unlink } for pid=5416 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 106.245261][ T27] audit: type=1400 audit(1699521575.549:211): avc: denied { relabelto } for pid=5418 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/11/09 09:19:36 executed programs: 0 [ 107.630241][ T5416] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.696335][ T5069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.704451][ T5069] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.712939][ T5069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.721360][ T5069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.729122][ T5069] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.737053][ T5069] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.755332][ T27] audit: type=1400 audit(1699521577.059:212): avc: denied { mounton } for pid=5422 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 107.907993][ T5422] chnl_net:caif_netlink_parms(): no params data found [ 107.981643][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.989139][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.998471][ T5422] bridge_slave_0: entered allmulticast mode [ 108.005871][ T5422] bridge_slave_0: entered promiscuous mode [ 108.016723][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.024459][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.031996][ T5422] bridge_slave_1: entered allmulticast mode [ 108.038938][ T5422] bridge_slave_1: entered promiscuous mode [ 108.072157][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.084617][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.123976][ T5422] team0: Port device team_slave_0 added [ 108.133788][ T5422] team0: Port device team_slave_1 added [ 108.164630][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.172002][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.199650][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.213963][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.221203][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.248822][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.296261][ T5422] hsr_slave_0: entered promiscuous mode [ 108.303626][ T5422] hsr_slave_1: entered promiscuous mode [ 109.145488][ T5422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.161164][ T5422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.180235][ T5422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.194367][ T5422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.356788][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.389223][ T5422] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.406781][ T4804] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.414611][ T4804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.447681][ T4804] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.455152][ T4804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.733785][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.782337][ T4456] Bluetooth: hci0: command 0x0409 tx timeout [ 109.817687][ T5422] veth0_vlan: entered promiscuous mode [ 109.837925][ T5422] veth1_vlan: entered promiscuous mode [ 109.893135][ T5422] veth0_macvtap: entered promiscuous mode [ 109.906767][ T5422] veth1_macvtap: entered promiscuous mode [ 109.939608][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.965688][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.982998][ T5422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.992154][ T5422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.003426][ T5422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.020121][ T5422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.151340][ T5081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.159563][ T5081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.230768][ T2472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.239912][ T2472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.794314][ T5488] loop0: detected capacity change from 0 to 32768 [ 110.806266][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 110.806283][ T27] audit: type=1400 audit(1699521580.119:214): avc: denied { mounton } for pid=5487 comm="syz-executor.0" path="/root/syzkaller-testdir2500124626/syzkaller.BU5VzR/0/bus" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 110.875838][ T27] audit: type=1400 audit(1699521580.139:215): avc: denied { mount } for pid=5487 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 110.920112][ T27] audit: type=1400 audit(1699521580.179:216): avc: denied { write } for pid=5502 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.979809][ T27] audit: type=1400 audit(1699521580.179:217): avc: denied { add_name } for pid=5502 comm="syz-executor.0" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.029860][ T27] audit: type=1400 audit(1699521580.189:218): avc: denied { create } for pid=5502 comm="syz-executor.0" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.089751][ T27] audit: type=1400 audit(1699521580.239:219): avc: denied { unmount } for pid=5422 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.115178][ T27] audit: type=1400 audit(1699521580.239:220): avc: denied { write open } for pid=5502 comm="syz-executor.0" path="/core" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.151996][ T27] audit: type=1400 audit(1699521580.249:221): avc: denied { remove_name } for pid=5504 comm="syz-executor.0" name="core" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.190931][ T27] audit: type=1400 audit(1699521580.249:222): avc: denied { unlink } for pid=5504 comm="syz-executor.0" name="core" dev="loop0" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.850301][ T4456] Bluetooth: hci0: command 0x041b tx timeout [ 111.973565][ T5507] loop0: detected capacity change from 0 to 32768 2023/11/09 09:19:42 executed programs: 3 [ 112.942716][ T5536] loop0: detected capacity change from 0 to 32768 [ 113.877905][ T5557] syz-executor.0 (5557) used greatest stack depth: 22688 bytes left [ 113.932166][ T4456] Bluetooth: hci0: command 0x040f tx timeout [ 113.989850][ T5565] loop0: detected capacity change from 0 to 32768 [ 114.985349][ T5596] loop0: detected capacity change from 0 to 32768 [ 116.005301][ T5626] loop0: detected capacity change from 0 to 32768 [ 116.019818][ T4456] Bluetooth: hci0: command 0x0419 tx timeout [ 116.951584][ T5657] loop0: detected capacity change from 0 to 32768 [ 117.947176][ T5686] loop0: detected capacity change from 0 to 32768 2023/11/09 09:19:47 executed programs: 8 [ 118.952974][ T5716] loop0: detected capacity change from 0 to 32768 [ 119.975596][ T5751] loop0: detected capacity change from 0 to 32768 [ 121.040909][ T5783] loop0: detected capacity change from 0 to 32768 [ 121.901454][ T5815] loop0: detected capacity change from 0 to 32768 [ 122.549223][ T5830] loop0: detected capacity change from 0 to 32768 2023/11/09 09:19:52 executed programs: 14 [ 123.124663][ T5834] loop0: detected capacity change from 0 to 32768 [ 123.676268][ T5838] loop0: detected capacity change from 0 to 32768 [ 124.227193][ T5842] loop0: detected capacity change from 0 to 32768 [ 124.779411][ T5846] loop0: detected capacity change from 0 to 32768 [ 125.344398][ T5850] loop0: detected capacity change from 0 to 32768 [ 125.894864][ T5854] loop0: detected capacity change from 0 to 32768 [ 126.444873][ T5858] loop0: detected capacity change from 0 to 32768 [ 127.002116][ T5862] loop0: detected capacity change from 0 to 32768 [ 127.528141][ T5866] loop0: detected capacity change from 0 to 32768 [ 128.089271][ T5870] loop0: detected capacity change from 0 to 32768 2023/11/09 09:19:57 executed programs: 24 [ 128.628115][ T5874] loop0: detected capacity change from 0 to 32768 [ 129.166647][ T5878] loop0: detected capacity change from 0 to 32768 [ 129.720541][ T5882] loop0: detected capacity change from 0 to 32768 [ 130.255202][ T5886] loop0: detected capacity change from 0 to 32768 [ 130.750254][ T5890] loop0: detected capacity change from 0 to 32768 [ 131.280732][ T5894] loop0: detected capacity change from 0 to 32768 [ 131.842341][ T5898] loop0: detected capacity change from 0 to 32768 [ 132.388719][ T5902] loop0: detected capacity change from 0 to 32768 [ 132.951268][ T5906] loop0: detected capacity change from 0 to 32768 [ 133.456135][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.463412][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.517507][ T5910] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:03 executed programs: 34 [ 133.972706][ T5914] loop0: detected capacity change from 0 to 32768 [ 134.532529][ T5918] loop0: detected capacity change from 0 to 32768 [ 135.090775][ T5922] loop0: detected capacity change from 0 to 32768 [ 135.642680][ T5926] loop0: detected capacity change from 0 to 32768 [ 136.171375][ T5930] loop0: detected capacity change from 0 to 32768 [ 136.743496][ T5934] loop0: detected capacity change from 0 to 32768 [ 137.303832][ T5938] loop0: detected capacity change from 0 to 32768 [ 137.846263][ T5942] loop0: detected capacity change from 0 to 32768 [ 138.402588][ T5946] loop0: detected capacity change from 0 to 32768 [ 138.964432][ T5950] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:08 executed programs: 44 [ 139.508749][ T5954] loop0: detected capacity change from 0 to 32768 [ 140.048980][ T5958] loop0: detected capacity change from 0 to 32768 [ 140.584953][ T5962] loop0: detected capacity change from 0 to 32768 [ 141.116993][ T5966] loop0: detected capacity change from 0 to 32768 [ 141.684702][ T5970] loop0: detected capacity change from 0 to 32768 [ 142.251939][ T5974] loop0: detected capacity change from 0 to 32768 [ 142.805250][ T5978] loop0: detected capacity change from 0 to 32768 [ 143.375647][ T5982] loop0: detected capacity change from 0 to 32768 [ 144.186135][ T5986] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:14 executed programs: 53 [ 144.732959][ T5990] loop0: detected capacity change from 0 to 32768 [ 145.286169][ T5994] loop0: detected capacity change from 0 to 32768 [ 145.820475][ T5998] loop0: detected capacity change from 0 to 32768 [ 146.375400][ T6002] loop0: detected capacity change from 0 to 32768 [ 146.923740][ T6006] loop0: detected capacity change from 0 to 32768 [ 147.478774][ T6010] loop0: detected capacity change from 0 to 32768 [ 148.033994][ T6014] loop0: detected capacity change from 0 to 32768 [ 148.597782][ T6018] loop0: detected capacity change from 0 to 32768 [ 149.130920][ T6022] loop0: detected capacity change from 0 to 32768 [ 149.644590][ T6026] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:19 executed programs: 63 [ 150.181441][ T6030] loop0: detected capacity change from 0 to 32768 [ 150.700342][ T6034] loop0: detected capacity change from 0 to 32768 [ 151.217100][ T6038] loop0: detected capacity change from 0 to 32768 [ 151.779044][ T6042] loop0: detected capacity change from 0 to 32768 [ 152.281096][ T6046] loop0: detected capacity change from 0 to 32768 [ 152.838530][ T6050] loop0: detected capacity change from 0 to 32768 [ 153.341379][ T6054] loop0: detected capacity change from 0 to 32768 [ 153.913194][ T6058] loop0: detected capacity change from 0 to 32768 [ 154.458207][ T6062] loop0: detected capacity change from 0 to 32768 [ 155.002969][ T6066] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:24 executed programs: 73 [ 155.550870][ T6070] loop0: detected capacity change from 0 to 32768 [ 156.111187][ T6074] loop0: detected capacity change from 0 to 32768 [ 156.643848][ T6078] loop0: detected capacity change from 0 to 32768 [ 157.197963][ T6082] loop0: detected capacity change from 0 to 32768 [ 157.755140][ T6086] loop0: detected capacity change from 0 to 32768 [ 158.304164][ T6090] loop0: detected capacity change from 0 to 32768 [ 158.865781][ T6094] loop0: detected capacity change from 0 to 32768 [ 159.411149][ T6098] loop0: detected capacity change from 0 to 32768 [ 159.928073][ T6102] loop0: detected capacity change from 0 to 32768 [ 160.511195][ T6106] loop0: detected capacity change from 0 to 32768 [ 161.085664][ T6110] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:30 executed programs: 83 [ 161.641055][ T6114] loop0: detected capacity change from 0 to 32768 [ 162.180846][ T6118] loop0: detected capacity change from 0 to 32768 [ 162.741249][ T6122] loop0: detected capacity change from 0 to 32768 [ 163.261090][ T6126] loop0: detected capacity change from 0 to 32768 [ 163.800878][ T6130] loop0: detected capacity change from 0 to 32768 [ 164.335858][ T6134] loop0: detected capacity change from 0 to 32768 [ 164.874561][ T6138] loop0: detected capacity change from 0 to 32768 [ 165.421777][ T6142] loop0: detected capacity change from 0 to 32768 [ 165.861121][ T6146] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:35 executed programs: 93 [ 166.409299][ T6150] loop0: detected capacity change from 0 to 32768 [ 166.931712][ T6154] loop0: detected capacity change from 0 to 32768 [ 167.461774][ T6158] loop0: detected capacity change from 0 to 32768 [ 167.970964][ T6162] loop0: detected capacity change from 0 to 32768 [ 168.545869][ T6166] loop0: detected capacity change from 0 to 32768 [ 169.101748][ T6170] loop0: detected capacity change from 0 to 32768 [ 169.644742][ T6174] loop0: detected capacity change from 0 to 32768 [ 170.163600][ T6178] loop0: detected capacity change from 0 to 32768 [ 170.713015][ T6182] loop0: detected capacity change from 0 to 32768 [ 171.240451][ T6186] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:41 executed programs: 103 [ 171.788745][ T6190] loop0: detected capacity change from 0 to 32768 [ 172.343100][ T6194] loop0: detected capacity change from 0 to 32768 [ 172.893027][ T6198] loop0: detected capacity change from 0 to 32768 [ 173.456961][ T6202] loop0: detected capacity change from 0 to 32768 [ 173.991508][ T6206] loop0: detected capacity change from 0 to 32768 [ 174.541705][ T6210] loop0: detected capacity change from 0 to 32768 [ 175.100973][ T6214] loop0: detected capacity change from 0 to 32768 [ 175.667842][ T6218] loop0: detected capacity change from 0 to 32768 [ 176.187843][ T6222] loop0: detected capacity change from 0 to 32768 [ 176.754972][ T6226] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:46 executed programs: 113 [ 177.292664][ T6230] loop0: detected capacity change from 0 to 32768 [ 177.848975][ T6234] loop0: detected capacity change from 0 to 32768 [ 178.392725][ T6238] loop0: detected capacity change from 0 to 32768 [ 178.951483][ T6242] loop0: detected capacity change from 0 to 32768 [ 179.497897][ T6246] loop0: detected capacity change from 0 to 32768 [ 180.037890][ T6250] loop0: detected capacity change from 0 to 32768 [ 180.566944][ T6254] loop0: detected capacity change from 0 to 32768 [ 181.110918][ T6258] loop0: detected capacity change from 0 to 32768 [ 181.621259][ T6262] loop0: detected capacity change from 0 to 32768 [ 182.176780][ T6266] loop0: detected capacity change from 0 to 32768 [ 182.707144][ T6270] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:52 executed programs: 123 [ 183.264186][ T6274] loop0: detected capacity change from 0 to 32768 [ 183.813676][ T6278] loop0: detected capacity change from 0 to 32768 [ 184.384161][ T6282] loop0: detected capacity change from 0 to 32768 [ 184.921870][ T6286] loop0: detected capacity change from 0 to 32768 [ 185.467580][ T6290] loop0: detected capacity change from 0 to 32768 [ 185.979866][ T6294] loop0: detected capacity change from 0 to 32768 [ 186.545682][ T6298] loop0: detected capacity change from 0 to 32768 [ 187.097479][ T6302] loop0: detected capacity change from 0 to 32768 [ 187.601808][ T6306] loop0: detected capacity change from 0 to 32768 2023/11/09 09:20:57 executed programs: 133 [ 188.175491][ T6310] loop0: detected capacity change from 0 to 32768 [ 188.712761][ T6314] loop0: detected capacity change from 0 to 32768 [ 189.242315][ T6318] loop0: detected capacity change from 0 to 32768 [ 189.792374][ T6322] loop0: detected capacity change from 0 to 32768 [ 190.318536][ T6326] loop0: detected capacity change from 0 to 32768 [ 190.885843][ T6330] loop0: detected capacity change from 0 to 32768 [ 191.446444][ T6334] loop0: detected capacity change from 0 to 32768 [ 191.975638][ T6338] loop0: detected capacity change from 0 to 32768 [ 192.518711][ T6342] loop0: detected capacity change from 0 to 32768 [ 192.956273][ T6346] loop0: detected capacity change from 0 to 32768 [ 193.506740][ T6350] loop0: detected capacity change from 0 to 32768 2023/11/09 09:21:02 executed programs: 143 [ 194.052498][ T6354] loop0: detected capacity change from 0 to 32768 [ 194.579433][ T6358] loop0: detected capacity change from 0 to 32768 [ 194.895030][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.902269][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.140850][ T6362] loop0: detected capacity change from 0 to 32768 [ 195.701874][ T6366] loop0: detected capacity change from 0 to 32768 [ 196.260360][ T6370] loop0: detected capacity change from 0 to 32768 [ 196.798510][ T6374] loop0: detected capacity change from 0 to 32768 [ 197.347603][ T6378] loop0: detected capacity change from 0 to 32768 [ 197.904658][ T6382] loop0: detected capacity change from 0 to 32768 [ 198.434324][ T6386] loop0: detected capacity change from 0 to 32768 2023/11/09 09:21:08 executed programs: 153 [ 198.988364][ T6390] loop0: detected capacity change from 0 to 32768 [ 199.536478][ T6394] loop0: detected capacity change from 0 to 32768 [ 199.839744][ T109] ================================================================== [ 199.848470][ T109] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0xa1f/0xb10 [ 199.856311][ T109] Read of size 4 at addr ffff88807e74b094 by task jfsCommit/109 [ 199.864055][ T109] [ 199.866395][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 199.876681][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 199.887038][ T109] Call Trace: [ 199.890419][ T109] [ 199.893361][ T109] dump_stack_lvl+0xd9/0x1b0 [ 199.898066][ T109] print_report+0xc4/0x620 [ 199.902516][ T109] ? __virt_addr_valid+0x5e/0x2d0 [ 199.907926][ T109] ? __phys_addr+0xc6/0x140 [ 199.912481][ T109] kasan_report+0xda/0x110 [ 199.916931][ T109] ? jfs_lazycommit+0xa1f/0xb10 [ 199.921901][ T109] ? jfs_lazycommit+0xa1f/0xb10 [ 199.926774][ T109] jfs_lazycommit+0xa1f/0xb10 [ 199.931558][ T109] ? txCommit+0x4fd0/0x4fd0 [ 199.936161][ T109] ? wake_up_state+0x10/0x10 [ 199.940789][ T109] ? lockdep_hardirqs_on+0x7d/0x100 [ 199.946206][ T109] ? __kthread_parkme+0x14b/0x220 [ 199.951777][ T109] ? txCommit+0x4fd0/0x4fd0 [ 199.956540][ T109] kthread+0x33c/0x440 [ 199.960636][ T109] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.965877][ T109] ? kthread_complete_and_exit+0x40/0x40 [ 199.971553][ T109] ret_from_fork+0x45/0x80 [ 199.976181][ T109] ? kthread_complete_and_exit+0x40/0x40 [ 199.981929][ T109] ret_from_fork_asm+0x11/0x20 [ 199.986739][ T109] [ 199.989780][ T109] [ 199.992285][ T109] Allocated by task 6394: [ 199.996709][ T109] kasan_save_stack+0x33/0x50 [ 200.001509][ T109] kasan_set_track+0x25/0x30 [ 200.006310][ T109] __kasan_kmalloc+0xa3/0xb0 [ 200.011540][ T109] jfs_fill_super+0xe5/0xd20 [ 200.016265][ T109] mount_bdev+0x1f3/0x2e0 [ 200.020805][ T109] legacy_get_tree+0x109/0x220 [ 200.025593][ T109] vfs_get_tree+0x8c/0x370 [ 200.030040][ T109] path_mount+0x1492/0x1ed0 [ 200.034569][ T109] __x64_sys_mount+0x293/0x310 [ 200.039353][ T109] do_syscall_64+0x3f/0x110 [ 200.044143][ T109] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 200.050276][ T109] [ 200.052878][ T109] Freed by task 6395: [ 200.056877][ T109] kasan_save_stack+0x33/0x50 [ 200.061947][ T109] kasan_set_track+0x25/0x30 [ 200.066762][ T109] kasan_save_free_info+0x28/0x40 [ 200.072035][ T109] ____kasan_slab_free+0x138/0x190 [ 200.077727][ T109] __kmem_cache_free+0xcc/0x3d0 [ 200.082606][ T109] generic_shutdown_super+0x161/0x3c0 [ 200.088630][ T109] kill_block_super+0x3b/0x90 [ 200.093514][ T109] deactivate_locked_super+0xbc/0x1a0 [ 200.099100][ T109] deactivate_super+0xde/0x100 [ 200.104448][ T109] cleanup_mnt+0x222/0x450 [ 200.109002][ T109] task_work_run+0x14d/0x240 [ 200.113810][ T109] do_exit+0xa92/0x2ae0 [ 200.118184][ T109] do_group_exit+0xd4/0x2a0 [ 200.123161][ T109] get_signal+0x23ba/0x2790 [ 200.127867][ T109] arch_do_signal_or_restart+0x90/0x7f0 [ 200.133538][ T109] exit_to_user_mode_prepare+0x11f/0x240 [ 200.139283][ T109] irqentry_exit_to_user_mode+0x9/0x40 [ 200.144846][ T109] asm_exc_page_fault+0x26/0x30 [ 200.149846][ T109] [ 200.152171][ T109] Last potentially related work creation: [ 200.158674][ T109] kasan_save_stack+0x33/0x50 [ 200.163471][ T109] __kasan_record_aux_stack+0x78/0x80 [ 200.169917][ T109] __call_rcu_common.constprop.0+0x9a/0x790 [ 200.176201][ T109] fib_create_info+0x2275/0x4d50 [ 200.181362][ T109] fib_table_insert+0x1d7/0x1d70 [ 200.186509][ T109] fib_magic+0x4d2/0x5c0 [ 200.191133][ T109] fib_add_ifaddr+0x174/0x560 [ 200.196179][ T109] fib_netdev_event+0x394/0x710 [ 200.201939][ T109] notifier_call_chain+0xb6/0x3b0 [ 200.207247][ T109] call_netdevice_notifiers_info+0xbe/0x130 [ 200.213871][ T109] __dev_notify_flags+0x12d/0x2e0 [ 200.219089][ T109] dev_change_flags+0x122/0x170 [ 200.224760][ T109] do_setlink+0x1a2f/0x3fa0 [ 200.229468][ T109] __rtnl_newlink+0xc1f/0x1930 [ 200.234347][ T109] rtnl_newlink+0x67/0xa0 [ 200.238698][ T109] rtnetlink_rcv_msg+0x3c7/0xe00 [ 200.243741][ T109] netlink_rcv_skb+0x16b/0x440 [ 200.248719][ T109] netlink_unicast+0x53b/0x810 [ 200.253515][ T109] netlink_sendmsg+0x93c/0xe40 [ 200.258299][ T109] __sock_sendmsg+0xd5/0x180 [ 200.262903][ T109] __sys_sendto+0x255/0x340 [ 200.267427][ T109] __x64_sys_sendto+0xe0/0x1b0 [ 200.272304][ T109] do_syscall_64+0x3f/0x110 [ 200.276924][ T109] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 200.283626][ T109] [ 200.285953][ T109] The buggy address belongs to the object at ffff88807e74b000 [ 200.285953][ T109] which belongs to the cache kmalloc-256 of size 256 [ 200.300091][ T109] The buggy address is located 148 bytes inside of [ 200.300091][ T109] freed 256-byte region [ffff88807e74b000, ffff88807e74b100) [ 200.314060][ T109] [ 200.316766][ T109] The buggy address belongs to the physical page: [ 200.323609][ T109] page:ffffea0001f9d2c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e74b [ 200.333943][ T109] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 200.341573][ T109] page_type: 0x8() [ 200.345306][ T109] raw: 00fff00000000800 ffff888013040500 ffffea0001f9ac10 ffffea00009fa1d0 [ 200.357538][ T109] raw: 0000000000000000 ffff88807e74b000 0000000100000008 0000000000000000 [ 200.366287][ T109] page dumped because: kasan: bad access detected [ 200.372695][ T109] page_owner tracks the page as allocated [ 200.378403][ T109] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x3420c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5422, tgid 5422 (syz-executor.0), ts 109486726738, free_ts 109302847959 [ 200.400468][ T109] post_alloc_hook+0x2cf/0x340 [ 200.405408][ T109] get_page_from_freelist+0xa25/0x36c0 [ 200.410957][ T109] __alloc_pages+0x1d0/0x4a0 [ 200.415646][ T109] cache_grow_begin+0x99/0x3a0 [ 200.420420][ T109] cache_alloc_refill+0x294/0x3a0 [ 200.425615][ T109] __kmem_cache_alloc_node+0x3ba/0x460 [ 200.431158][ T109] __kmalloc+0x4f/0x100 [ 200.435317][ T109] fib_create_info+0x852/0x4d50 [ 200.440166][ T109] fib_table_insert+0x1d7/0x1d70 [ 200.445102][ T109] fib_magic+0x4d2/0x5c0 [ 200.449342][ T109] fib_add_ifaddr+0x174/0x560 [ 200.454019][ T109] fib_netdev_event+0x394/0x710 [ 200.458888][ T109] notifier_call_chain+0xb6/0x3b0 [ 200.463910][ T109] call_netdevice_notifiers_info+0xbe/0x130 [ 200.469806][ T109] __dev_notify_flags+0x12d/0x2e0 [ 200.475443][ T109] dev_change_flags+0x122/0x170 [ 200.480550][ T109] page last free stack trace: [ 200.485381][ T109] free_unref_page_prepare+0x4f8/0xa90 [ 200.490841][ T109] free_unref_page+0x33/0x3b0 [ 200.495521][ T109] slabs_destroy+0x85/0xc0 [ 200.499931][ T109] ___cache_free+0x2b7/0x420 [ 200.504608][ T109] qlist_free_all+0x4c/0x1b0 [ 200.509364][ T109] kasan_quarantine_reduce+0x18e/0x1d0 [ 200.514817][ T109] __kasan_slab_alloc+0x65/0x90 [ 200.519755][ T109] __kmem_cache_alloc_node+0x163/0x460 [ 200.525393][ T109] __kmalloc+0x4f/0x100 [ 200.529736][ T109] tomoyo_encode2+0x100/0x3d0 [ 200.534580][ T109] tomoyo_encode+0x29/0x50 [ 200.539079][ T109] tomoyo_realpath_from_path+0x196/0x710 [ 200.544704][ T109] tomoyo_path_number_perm+0x241/0x580 [ 200.550168][ T109] security_file_ioctl+0x72/0xb0 [ 200.555099][ T109] __x64_sys_ioctl+0xbb/0x210 [ 200.559864][ T109] do_syscall_64+0x3f/0x110 [ 200.564468][ T109] [ 200.566965][ T109] Memory state around the buggy address: [ 200.572673][ T109] ffff88807e74af80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 200.580732][ T109] ffff88807e74b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.589046][ T109] >ffff88807e74b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.597186][ T109] ^ [ 200.601766][ T109] ffff88807e74b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.609828][ T109] ffff88807e74b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.618142][ T109] ================================================================== [ 200.626293][ T109] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.633650][ T109] CPU: 0 PID: 109 Comm: jfsCommit Not tainted 6.6.0-syzkaller-15494-g6bc986ab839c #0 [ 200.645121][ T109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 200.655341][ T109] Call Trace: [ 200.658800][ T109] [ 200.662341][ T109] dump_stack_lvl+0xd9/0x1b0 [ 200.667024][ T109] panic+0x6dc/0x790 [ 200.670950][ T109] ? panic_smp_self_stop+0xa0/0xa0 [ 200.676085][ T109] ? rcu_is_watching+0x12/0xb0 [ 200.680842][ T109] ? reacquire_held_locks+0x4b0/0x4b0 [ 200.686300][ T109] ? dump_page+0x6dd/0x1310 [ 200.690803][ T109] ? check_panic_on_warn+0x1f/0xb0 [ 200.695910][ T109] check_panic_on_warn+0xab/0xb0 [ 200.700850][ T109] end_report+0x108/0x150 [ 200.705443][ T109] kasan_report+0xea/0x110 [ 200.709867][ T109] ? jfs_lazycommit+0xa1f/0xb10 [ 200.714975][ T109] ? jfs_lazycommit+0xa1f/0xb10 [ 200.719907][ T109] jfs_lazycommit+0xa1f/0xb10 [ 200.724583][ T109] ? txCommit+0x4fd0/0x4fd0 [ 200.729082][ T109] ? wake_up_state+0x10/0x10 [ 200.733936][ T109] ? lockdep_hardirqs_on+0x7d/0x100 [ 200.739132][ T109] ? __kthread_parkme+0x14b/0x220 [ 200.744237][ T109] ? txCommit+0x4fd0/0x4fd0 [ 200.748830][ T109] kthread+0x33c/0x440 [ 200.753070][ T109] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.758269][ T109] ? kthread_complete_and_exit+0x40/0x40 [ 200.763995][ T109] ret_from_fork+0x45/0x80 [ 200.768499][ T109] ? kthread_complete_and_exit+0x40/0x40 [ 200.774140][ T109] ret_from_fork_asm+0x11/0x20 [ 200.779258][ T109] [ 200.782672][ T109] Kernel Offset: disabled [ 200.787416][ T109] Rebooting in 86400 seconds..