Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. 2023/12/05 21:00:24 ignoring optional flag "sandboxArg"="0" 2023/12/05 21:00:24 parsed 1 programs [ 38.743935][ T23] kauditd_printk_skb: 75 callbacks suppressed [ 38.743940][ T23] audit: type=1400 audit(1701810024.990:151): avc: denied { mounton } for pid=344 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 38.776409][ T23] audit: type=1400 audit(1701810025.000:152): avc: denied { mount } for pid=344 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 38.800447][ T23] audit: type=1400 audit(1701810025.000:153): avc: denied { setattr } for pid=344 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.824426][ T23] audit: type=1400 audit(1701810025.000:154): avc: denied { read write } for pid=344 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.851584][ T344] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.851636][ T23] audit: type=1400 audit(1701810025.000:155): avc: denied { open } for pid=344 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2023/12/05 21:00:25 executed programs: 0 [ 38.887140][ T23] audit: type=1400 audit(1701810025.030:156): avc: denied { unlink } for pid=344 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.913586][ T23] audit: type=1400 audit(1701810025.030:157): avc: denied { relabelto } for pid=345 comm="mkswap" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.940519][ T23] audit: type=1400 audit(1701810025.170:158): avc: denied { mounton } for pid=349 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 38.951956][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.973439][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.981141][ T349] device bridge_slave_0 entered promiscuous mode [ 38.988180][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.995061][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.002327][ T349] device bridge_slave_1 entered promiscuous mode [ 39.027481][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.034589][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.041993][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.049568][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.063770][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.071232][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.078481][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.087292][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.102445][ T349] device veth0_vlan entered promiscuous mode [ 39.109056][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.117532][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.125514][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.132601][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.140720][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.148821][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.156144][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.163604][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.171762][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.179275][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.186630][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.194840][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.205628][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.215167][ T349] device veth1_macvtap entered promiscuous mode [ 39.223219][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.234598][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.254674][ T23] audit: type=1400 audit(1701810025.510:159): avc: denied { mounton } for pid=355 comm="syz-executor.0" path="/root/syzkaller-testdir1418240671/syzkaller.GnBODX/0/file1" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.259093][ T357] EXT4-fs (loop0): 1 truncate cleaned up [ 39.287707][ T357] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 39.303372][ T23] audit: type=1400 audit(1701810025.560:160): avc: denied { mount } for pid=355 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.316319][ T360] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 39.412031][ T363] EXT4-fs (loop0): 1 truncate cleaned up [ 39.417917][ T363] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 39.510197][ T369] EXT4-fs (loop0): 1 truncate cleaned up [ 39.515993][ T369] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 39.611802][ T375] EXT4-fs (loop0): 1 truncate cleaned up [ 39.617964][ T375] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 39.671560][ T381] EXT4-fs (loop0): 1 truncate cleaned up [ 39.677294][ T381] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 39.771403][ T388] EXT4-fs (loop0): 1 truncate cleaned up [ 39.777296][ T388] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 39.852835][ T394] EXT4-fs (loop0): 1 truncate cleaned up [ 39.858640][ T394] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 39.930925][ T400] EXT4-fs (loop0): 1 truncate cleaned up [ 39.936663][ T400] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.040469][ T406] EXT4-fs (loop0): 1 truncate cleaned up [ 40.046148][ T406] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.130284][ T412] EXT4-fs (loop0): 1 truncate cleaned up [ 40.135832][ T412] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.212164][ T418] EXT4-fs (loop0): 1 truncate cleaned up [ 40.218148][ T418] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.291532][ T424] EXT4-fs (loop0): 1 truncate cleaned up [ 40.297481][ T424] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.371407][ T430] EXT4-fs (loop0): 1 truncate cleaned up [ 40.377115][ T430] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.462255][ T436] EXT4-fs (loop0): 1 truncate cleaned up [ 40.467984][ T436] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.562143][ T442] EXT4-fs (loop0): 1 truncate cleaned up [ 40.567863][ T442] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.662376][ T448] EXT4-fs (loop0): 1 truncate cleaned up [ 40.667870][ T448] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.772619][ T455] EXT4-fs (loop0): 1 truncate cleaned up [ 40.778118][ T455] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.891140][ T461] EXT4-fs (loop0): 1 truncate cleaned up [ 40.897039][ T461] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 40.942006][ T467] EXT4-fs (loop0): 1 truncate cleaned up [ 40.947809][ T467] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.052521][ T473] EXT4-fs (loop0): 1 truncate cleaned up [ 41.058007][ T473] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.112666][ T479] EXT4-fs (loop0): 1 truncate cleaned up [ 41.118374][ T479] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.191498][ T485] EXT4-fs (loop0): 1 truncate cleaned up [ 41.196984][ T485] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.292660][ T491] EXT4-fs (loop0): 1 truncate cleaned up [ 41.298647][ T491] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.372226][ T497] EXT4-fs (loop0): 1 truncate cleaned up [ 41.377856][ T497] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.420990][ T503] EXT4-fs (loop0): 1 truncate cleaned up [ 41.426471][ T503] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.531475][ T509] EXT4-fs (loop0): 1 truncate cleaned up [ 41.537048][ T509] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.651266][ T515] EXT4-fs (loop0): 1 truncate cleaned up [ 41.656797][ T515] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.772619][ T522] EXT4-fs (loop0): 1 truncate cleaned up [ 41.778198][ T522] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.892404][ T528] EXT4-fs (loop0): 1 truncate cleaned up [ 41.898197][ T528] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 41.944759][ T534] EXT4-fs (loop0): 1 truncate cleaned up [ 41.950236][ T534] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.041600][ T540] EXT4-fs (loop0): 1 truncate cleaned up [ 42.047214][ T540] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.100245][ T546] EXT4-fs (loop0): 1 truncate cleaned up [ 42.106722][ T546] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.151669][ T552] EXT4-fs (loop0): 1 truncate cleaned up [ 42.157295][ T552] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.251675][ T558] EXT4-fs (loop0): 1 truncate cleaned up [ 42.257482][ T558] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.328827][ T564] EXT4-fs (loop0): 1 truncate cleaned up [ 42.335208][ T564] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.451041][ T569] EXT4-fs (loop0): 1 truncate cleaned up [ 42.456950][ T569] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.550422][ T575] EXT4-fs (loop0): 1 truncate cleaned up [ 42.556030][ T575] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.600450][ T581] EXT4-fs (loop0): 1 truncate cleaned up [ 42.606177][ T581] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.651056][ T587] EXT4-fs (loop0): 1 truncate cleaned up [ 42.656921][ T587] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.741110][ T594] EXT4-fs (loop0): 1 truncate cleaned up [ 42.746755][ T594] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.851880][ T600] EXT4-fs (loop0): 1 truncate cleaned up [ 42.857593][ T600] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 42.940351][ T606] EXT4-fs (loop0): 1 truncate cleaned up [ 42.945989][ T606] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 43.051668][ T612] EXT4-fs (loop0): 1 truncate cleaned up [ 43.057397][ T612] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 43.137862][ T618] EXT4-fs (loop0): 1 truncate cleaned up [ 43.143344][ T618] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 43.213320][ T624] EXT4-fs (loop0): 1 truncate cleaned up [ 43.219190][ T624] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 43.296607][ T630] EXT4-fs (loop0): 1 truncate cleaned up [ 43.302393][ T630] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 43.392633][ T637] EXT4-fs (loop0): 1 truncate cleaned up [ 43.398821][ T637] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 43.417860][ T640] ================================================================== [ 43.425860][ T640] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0xe7b/0x3da0 [ 43.433501][ T640] Read of size 18446744073709551568 at addr ffff8881202cc2e8 by task syz-executor.0/640 [ 43.443723][ T640] [ 43.446002][ T640] CPU: 0 PID: 640 Comm: syz-executor.0 Not tainted 5.10.200-syzkaller #0 [ 43.454525][ T640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 43.464739][ T640] Call Trace: [ 43.467855][ T640] dump_stack_lvl+0x81/0xac [ 43.472230][ T640] print_address_description.constprop.0+0x24/0x160 [ 43.478888][ T640] ? ext4_xattr_set_entry+0xe7b/0x3da0 [ 43.484437][ T640] kasan_report.cold+0x82/0xdb [ 43.489216][ T640] ? ext4_xattr_set_entry+0xe7b/0x3da0 [ 43.494507][ T640] kasan_check_range+0x148/0x190 [ 43.499359][ T640] memmove+0x24/0x60 [ 43.503356][ T640] ext4_xattr_set_entry+0xe7b/0x3da0 [ 43.508597][ T640] ? __getblk_gfp+0x1d/0x50 [ 43.513002][ T640] ? __ext4_get_inode_loc+0x44d/0x1070 [ 43.518294][ T640] ? ext4_xattr_release_block+0x940/0x940 [ 43.524219][ T640] ? ext4_xattr_check_entries+0x75/0x2d0 [ 43.529660][ T640] ? xattr_find_entry+0x3b/0x260 [ 43.534437][ T640] ext4_xattr_ibody_set+0xfd/0x350 [ 43.539559][ T640] ext4_xattr_set_handle+0x7aa/0x10f0 [ 43.544760][ T640] ? ext4_xattr_ibody_set+0x350/0x350 [ 43.550051][ T640] ? unwind_get_return_address+0x58/0xa0 [ 43.555960][ T640] ? create_prof_cpu_mask+0x20/0x20 [ 43.561074][ T640] ? dquot_initialize_needed+0x240/0x240 [ 43.566541][ T640] ? memcpy+0x4e/0x60 [ 43.570552][ T640] ? __ext4_journal_start_sb+0x33/0x2d0 [ 43.575950][ T640] ext4_xattr_set+0x151/0x310 [ 43.580539][ T640] ? ext4_xattr_set_credits+0x230/0x230 [ 43.585916][ T640] ? cap_inode_setxattr+0x21/0xb0 [ 43.590773][ T640] ext4_xattr_trusted_set+0x1e/0x20 [ 43.596006][ T640] __vfs_setxattr+0xe5/0x140 [ 43.600418][ T640] ? xattr_resolve_name+0x3f0/0x3f0 [ 43.605580][ T640] ? selinux_capable+0x44/0x70 [ 43.610419][ T640] ? security_capable+0x56/0xa0 [ 43.615103][ T640] __vfs_setxattr_noperm+0xeb/0x470 [ 43.620260][ T640] __vfs_setxattr_locked+0x154/0x1e0 [ 43.625374][ T640] vfs_setxattr+0x101/0x280 [ 43.629706][ T640] ? __vfs_setxattr_locked+0x1e0/0x1e0 [ 43.635082][ T640] ? strncpy_from_user+0x74/0x280 [ 43.640303][ T640] setxattr+0x1aa/0x320 [ 43.644463][ T640] ? vfs_setxattr+0x280/0x280 [ 43.649152][ T640] ? __check_object_size+0x1df/0x270 [ 43.654271][ T640] ? kmem_cache_alloc+0x17f/0x4f0 [ 43.659209][ T640] ? preempt_count_add+0x7a/0x100 [ 43.664158][ T640] ? __mnt_want_write+0x159/0x240 [ 43.669028][ T640] path_setxattr+0x132/0x150 [ 43.673442][ T640] ? setxattr+0x320/0x320 [ 43.677723][ T640] ? debug_smp_processor_id+0x17/0x20 [ 43.682902][ T640] __x64_sys_setxattr+0xbf/0x150 [ 43.687908][ T640] ? syscall_exit_to_user_mode+0x38/0x160 [ 43.694106][ T640] do_syscall_64+0x32/0x80 [ 43.698754][ T640] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 43.704748][ T640] RIP: 0033:0x7fe0842f7ae9 [ 43.709091][ T640] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.729922][ T640] RSP: 002b:00007fe07ba990c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 43.740355][ T640] RAX: ffffffffffffffda RBX: 00007fe084417050 RCX: 00007fe0842f7ae9 [ 43.748577][ T640] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 00000000200002c0 [ 43.756385][ T640] RBP: 00007fe08434347a R08: 0000000000000000 R09: 0000000000000000 [ 43.764293][ T640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.772096][ T640] R13: 000000000000000b R14: 00007fe084417050 R15: 00007fff6915ca58 [ 43.780025][ T640] [ 43.782269][ T640] The buggy address belongs to the page: [ 43.787917][ T640] page:ffffea000480b300 refcount:2 mapcount:0 mapping:ffff888100448b10 index:0x2 pfn:0x1202cc [ 43.798348][ T640] aops:def_blk_aops ino:0 [ 43.802683][ T640] flags: 0x4000000000002036(referenced|uptodate|lru|active|private) [ 43.810539][ T640] raw: 4000000000002036 ffffea000480f988 ffff88811ca09030 ffff888100448b10 [ 43.819084][ T640] raw: 0000000000000002 ffff888121c4f0a8 00000002ffffffff ffff88811c96c000 [ 43.827775][ T640] page dumped because: kasan: bad access detected [ 43.834269][ T640] page->mem_cgroup:ffff88811c96c000 [ 43.839588][ T640] page_owner tracks the page as allocated [ 43.845213][ T640] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 637, ts 43392551140, free_ts 43390433292 [ 43.862579][ T640] get_page_from_freelist+0x1fee/0x2ad0 [ 43.868152][ T640] __alloc_pages_nodemask+0x2ae/0x2360 [ 43.873597][ T640] pagecache_get_page+0x169/0x6f0 [ 43.878628][ T640] __getblk_slow+0x1ad/0x580 [ 43.883229][ T640] __getblk_gfp+0x3d/0x50 [ 43.887652][ T640] __ext4_get_inode_loc+0x44d/0x1070 [ 43.892785][ T640] __ext4_get_inode_loc_noinmem+0xaf/0x150 [ 43.898419][ T640] __ext4_iget+0x2f0/0x5b20 [ 43.902765][ T640] ext4_orphan_get+0x1f4/0x770 [ 43.907359][ T640] ext4_fill_super+0x7757/0xb7d0 [ 43.912131][ T640] mount_bdev+0x2b7/0x390 [ 43.916299][ T640] ext4_mount+0x10/0x20 [ 43.920289][ T640] legacy_get_tree+0xf5/0x1d0 [ 43.924982][ T640] vfs_get_tree+0x81/0x1b0 [ 43.929229][ T640] path_mount+0x49a/0x1da0 [ 43.933654][ T640] __x64_sys_mount+0x20e/0x280 [ 43.938254][ T640] page last free stack trace: [ 43.942857][ T640] free_pcp_prepare+0x1a7/0x230 [ 43.947628][ T640] free_unref_page_list+0x18a/0xae0 [ 43.952745][ T640] release_pages+0x374/0xb00 [ 43.957459][ T640] free_pages_and_swap_cache+0x180/0x1e0 [ 43.962923][ T640] tlb_finish_mmu+0x129/0x790 [ 43.967426][ T640] unmap_region+0x2ee/0x400 [ 43.971766][ T640] __do_munmap+0x48b/0x1050 [ 43.976106][ T640] __vm_munmap+0xfb/0x1a0 [ 43.980281][ T640] __x64_sys_munmap+0x62/0x80 [ 43.984788][ T640] do_syscall_64+0x32/0x80 [ 43.989039][ T640] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 43.994765][ T640] [ 43.996945][ T640] Memory state around the buggy address: [ 44.002412][ T640] ffff8881202cc180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.010396][ T640] ffff8881202cc200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.018998][ T640] >ffff8881202cc280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.026997][ T640] ^ [ 44.034413][ T640] ffff8881202cc300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2023/12/05 21:00:30 executed programs: 47 [ 44.042333][ T640] ffff8881202cc380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 44.050389][ T640] ================================================================== [ 44.058272][ T640] Disabling lock debugging due to kernel taint [ 44.065081][ T640] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1044: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.213484][ T644] EXT4-fs (loop0): 1 truncate cleaned up [ 44.219054][ T644] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.302380][ T650] EXT4-fs (loop0): 1 truncate cleaned up [ 44.308193][ T650] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.451113][ T656] EXT4-fs (loop0): 1 truncate cleaned up [ 44.456660][ T656] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.509333][ T662] EXT4-fs (loop0): 1 truncate cleaned up [ 44.514875][ T662] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.591611][ T668] EXT4-fs (loop0): 1 truncate cleaned up [ 44.597126][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.692505][ T674] EXT4-fs (loop0): 1 truncate cleaned up [ 44.698171][ T674] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.772852][ T680] EXT4-fs (loop0): 1 truncate cleaned up [ 44.778658][ T680] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.887900][ T686] EXT4-fs (loop0): 1 truncate cleaned up [ 44.893373][ T686] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 44.962626][ T692] EXT4-fs (loop0): 1 truncate cleaned up [ 44.968412][ T692] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.051426][ T698] EXT4-fs (loop0): 1 truncate cleaned up [ 45.057017][ T698] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.171948][ T705] EXT4-fs (loop0): 1 truncate cleaned up [ 45.177539][ T705] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.292400][ T711] EXT4-fs (loop0): 1 truncate cleaned up [ 45.297869][ T711] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.411695][ T717] EXT4-fs (loop0): 1 truncate cleaned up [ 45.417251][ T717] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.470364][ T723] EXT4-fs (loop0): 1 truncate cleaned up [ 45.476071][ T723] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.610599][ T729] EXT4-fs (loop0): 1 truncate cleaned up [ 45.616501][ T729] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.733692][ T735] EXT4-fs (loop0): 1 truncate cleaned up [ 45.739644][ T735] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 45.891900][ T741] EXT4-fs (loop0): 1 truncate cleaned up [ 45.897467][ T741] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,init_itable=0x0000000000000009,errors=continue [ 46.011843][ T747] EXT4-fs (loop0): 1 truncate cleaned up [ 46.085162][ T23] kauditd_printk_skb: 7 callbacks suppressed [ 46.085168][ T23] audit: type=1400 audit(1701810032.340:168): avc: denied { mounton } for pid=752 comm="syz-executor.0" path="/root/syzkaller-testdir1418240671/syzkaller.GnBODX/65/bus" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 46.117947][ T23] audit: type=1400 audit(1701810032.340:169): avc: denied { unmount } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 46.140382][ T758] EXT4-fs (loop0): 1 truncate cleaned up [ 46.148800][ T761] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 46.191498][ T764] EXT4-fs (loop0): 1 truncate cleaned up [ 46.198844][ T767] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 46.242336][ T770] EXT4-fs (loop0): 1 truncate cleaned up [ 46.291473][ T776] EXT4-fs (loop0): 1 truncate cleaned up [ 46.300401][ T779] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 46.410824][ T782] EXT4-fs (loop0): 1 truncate cleaned up [ 46.490445][ T788] EXT4-fs (loop0): 1 truncate cleaned up [ 46.551694][ T794] EXT4-fs (loop0): 1 truncate cleaned up [ 46.560873][ T797] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 46.570563][ T797] EXT4-fs error (device loop0): ext4_dirty_inode:6096: inode #15: comm syz-executor.0: mark_inode_dirty error [ 46.582984][ T797] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:475: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 46.596937][ T797] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 46.606487][ T797] EXT4-fs error (device loop0): ext4_dirty_inode:6096: inode #15: comm syz-executor.0: mark_inode_dirty error [ 46.731061][ T800] EXT4-fs (loop0): 1 truncate cleaned up [ 46.772290][ T806] EXT4-fs (loop0): 1 truncate cleaned up [ 46.851877][ T812] EXT4-fs (loop0): 1 truncate cleaned up [ 46.902007][ T818] EXT4-fs (loop0): 1 truncate cleaned up [ 47.010112][ T824] EXT4-fs (loop0): 1 truncate cleaned up [ 47.091152][ T831] EXT4-fs (loop0): 1 truncate cleaned up [ 47.131884][ T837] EXT4-fs (loop0): 1 truncate cleaned up [ 47.251699][ T843] EXT4-fs (loop0): 1 truncate cleaned up [ 47.313415][ T849] EXT4-fs (loop0): 1 truncate cleaned up [ 47.323120][ T852] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 47.372516][ T855] EXT4-fs (loop0): 1 truncate cleaned up [ 47.495436][ T861] EXT4-fs (loop0): 1 truncate cleaned up [ 47.566507][ T867] EXT4-fs (loop0): 1 truncate cleaned up [ 47.578005][ T870] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 47.653608][ T873] EXT4-fs (loop0): 1 truncate cleaned up [ 47.771862][ T879] EXT4-fs (loop0): 1 truncate cleaned up [ 47.813176][ T885] EXT4-fs (loop0): 1 truncate cleaned up [ 47.851638][ T891] EXT4-fs (loop0): 1 truncate cleaned up [ 47.900985][ T897] EXT4-fs (loop0): 1 truncate cleaned up [ 47.941581][ T903] EXT4-fs (loop0): 1 truncate cleaned up [ 47.952139][ T906] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 47.962047][ T906] EXT4-fs error (device loop0): ext4_dirty_inode:6096: inode #15: comm syz-executor.0: mark_inode_dirty error [ 47.974128][ T906] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:475: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 47.990054][ T906] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 48.000598][ T906] EXT4-fs error (device loop0): ext4_dirty_inode:6096: inode #15: comm syz-executor.0: mark_inode_dirty error [ 48.110698][ T910] EXT4-fs (loop0): 1 truncate cleaned up [ 48.172040][ T916] EXT4-fs (loop0): 1 truncate cleaned up [ 48.220142][ T922] EXT4-fs (loop0): 1 truncate cleaned up [ 48.227577][ T925] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 48.281437][ T928] EXT4-fs (loop0): 1 truncate cleaned up [ 48.289047][ T931] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 48.341591][ T934] EXT4-fs (loop0): 1 truncate cleaned up [ 48.350324][ T937] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 48.409971][ T940] EXT4-fs (loop0): 1 truncate cleaned up [ 48.501948][ T946] EXT4-fs (loop0): 1 truncate cleaned up [ 48.572041][ T952] EXT4-fs (loop0): 1 truncate cleaned up [ 48.650501][ T958] EXT4-fs (loop0): 1 truncate cleaned up [ 48.741230][ T964] EXT4-fs (loop0): 1 truncate cleaned up [ 48.782126][ T970] EXT4-fs (loop0): 1 truncate cleaned up [ 48.852716][ T976] EXT4-fs (loop0): 1 truncate cleaned up [ 48.940981][ T982] EXT4-fs (loop0): 1 truncate cleaned up [ 48.950269][ T985] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 48.960388][ T985] EXT4-fs error (device loop0): ext4_dirty_inode:6096: inode #15: comm syz-executor.0: mark_inode_dirty error [ 48.972876][ T985] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:475: comm syz-executor.0: Invalid block bitmap block 0 in block_group 0 [ 48.987303][ T985] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 48.996741][ T985] EXT4-fs error (device loop0): ext4_dirty_inode:6096: inode #15: comm syz-executor.0: mark_inode_dirty error 2023/12/05 21:00:35 executed programs: 105 [ 49.092228][ T989] EXT4-fs (loop0): 1 truncate cleaned up [ 49.170197][ T995] EXT4-fs (loop0): 1 truncate cleaned up [ 49.251176][ T1001] EXT4-fs (loop0): 1 truncate cleaned up [ 49.310916][ T1007] EXT4-fs (loop0): 1 truncate cleaned up [ 49.352200][ T1013] EXT4-fs (loop0): 1 truncate cleaned up [ 49.410663][ T1019] EXT4-fs (loop0): 1 truncate cleaned up [ 49.532472][ T1025] EXT4-fs (loop0): 1 truncate cleaned up [ 49.571851][ T1031] EXT4-fs (loop0): 1 truncate cleaned up [ 49.611155][ T1037] EXT4-fs (loop0): 1 truncate cleaned up [ 49.671052][ T1043] EXT4-fs (loop0): 1 truncate cleaned up [ 49.711000][ T1049] EXT4-fs (loop0): 1 truncate cleaned up [ 49.771016][ T1055] EXT4-fs (loop0): 1 truncate cleaned up [ 49.892092][ T1061] EXT4-fs (loop0): 1 truncate cleaned up [ 49.899850][ T1064] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 50.011095][ T1067] EXT4-fs (loop0): 1 truncate cleaned up [ 50.062048][ T1073] EXT4-fs (loop0): 1 truncate cleaned up [ 50.102257][ T1080] EXT4-fs (loop0): 1 truncate cleaned up [ 50.151179][ T1086] EXT4-fs (loop0): 1 truncate cleaned up [ 50.158814][ T1089] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 50.200996][ T1092] EXT4-fs (loop0): 1 truncate cleaned up [ 50.211042][ T1095] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 50.291969][ T1098] EXT4-fs (loop0): 1 truncate cleaned up [ 50.342248][ T1104] EXT4-fs (loop0): 1 truncate cleaned up [ 50.392185][ T1110] EXT4-fs (loop0): 1 truncate cleaned up [ 50.454020][ T1116] EXT4-fs (loop0): 1 truncate cleaned up [ 50.572334][ T1122] EXT4-fs (loop0): 1 truncate cleaned up [ 50.611098][ T1128] EXT4-fs (loop0): 1 truncate cleaned up [ 50.621412][ T1131] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 50.731378][ T1134] EXT4-fs (loop0): 1 truncate cleaned up [ 50.740117][ T1137] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 50.813362][ T1140] EXT4-fs (loop0): 1 truncate cleaned up [ 50.892750][ T1146] EXT4-fs (loop0): 1 truncate cleaned up [ 50.972743][ T1152] EXT4-fs (loop0): 1 truncate cleaned up [ 51.082411][ T1158] EXT4-fs (loop0): 1 truncate cleaned up [ 51.171333][ T1165] EXT4-fs (loop0): 1 truncate cleaned up [ 51.211650][ T1171] EXT4-fs (loop0): 1 truncate cleaned up [ 51.330854][ T1177] EXT4-fs (loop0): 1 truncate cleaned up [ 51.411321][ T1183] EXT4-fs (loop0): 1 truncate cleaned up [ 51.461054][ T1189] EXT4-fs (loop0): 1 truncate cleaned up [ 51.572501][ T1195] EXT4-fs (loop0): 1 truncate cleaned up [ 51.630692][ T1201] EXT4-fs (loop0): 1 truncate cleaned up [ 51.672355][ T1207] EXT4-fs (loop0): 1 truncate cleaned up [ 51.721787][ T1213] EXT4-fs (loop0): 1 truncate cleaned up [ 51.851347][ T1219] EXT4-fs (loop0): 1 truncate cleaned up [ 51.900721][ T1225] EXT4-fs (loop0): 1 truncate cleaned up [ 51.908461][ T1228] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 51.970856][ T1231] EXT4-fs (loop0): 1 truncate cleaned up [ 52.050938][ T1237] EXT4-fs (loop0): 1 truncate cleaned up [ 52.092801][ T1243] EXT4-fs (loop0): 1 truncate cleaned up [ 52.172054][ T1250] EXT4-fs (loop0): 1 truncate cleaned up [ 52.246846][ T1260] EXT4-fs (loop0): 1 truncate cleaned up [ 52.331607][ T1266] EXT4-fs (loop0): 1 truncate cleaned up [ 52.383304][ T1272] EXT4-fs (loop0): 1 truncate cleaned up [ 52.391681][ T1275] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 52.481972][ T1278] EXT4-fs (loop0): 1 truncate cleaned up [ 52.571494][ T1284] EXT4-fs (loop0): 1 truncate cleaned up [ 52.671084][ T1290] EXT4-fs (loop0): 1 truncate cleaned up [ 52.760929][ T1296] EXT4-fs (loop0): 1 truncate cleaned up [ 52.859460][ T1302] EXT4-fs (loop0): 1 truncate cleaned up [ 52.897206][ T1308] EXT4-fs (loop0): 1 truncate cleaned up [ 52.973163][ T1314] EXT4-fs (loop0): 1 truncate cleaned up [ 53.022478][ T1320] EXT4-fs (loop0): 1 truncate cleaned up [ 53.033290][ T1323] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 53.092385][ T1326] EXT4-fs (loop0): 1 truncate cleaned up [ 53.131526][ T1333] EXT4-fs (loop0): 1 truncate cleaned up [ 53.170692][ T1339] EXT4-fs (loop0): 1 truncate cleaned up [ 53.178749][ T1342] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5886: Corrupt filesystem [ 53.292347][ T1345] EXT4-fs (loop0): 1 truncate cleaned up [ 53.332522][ T1351] EXT4-fs (loop0): 1 truncate cleaned up