Warning: Permanently added '[localhost]:36271' (ED25519) to the list of known hosts. 2024/06/13 12:43:37 ignoring optional flag "sandboxArg"="0" 2024/06/13 12:43:37 parsed 1 programs [ 87.484958][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 87.484974][ T39] audit: type=1400 audit(1718282617.725:101): avc: denied { setattr } for pid=5233 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 87.499776][ T39] audit: type=1400 audit(1718282617.745:102): avc: denied { mounton } for pid=5239 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 87.539344][ T39] audit: type=1400 audit(1718282617.745:103): avc: denied { mount } for pid=5239 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 87.551692][ T39] audit: type=1400 audit(1718282617.765:104): avc: denied { mounton } for pid=5232 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 87.559787][ T5232] cgroup: Unknown subsys name 'net' [ 87.561216][ T39] audit: type=1400 audit(1718282617.785:105): avc: denied { mount } for pid=5232 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.572318][ T39] audit: type=1400 audit(1718282617.815:106): avc: denied { unmount } for pid=5232 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.581103][ T39] audit: type=1400 audit(1718282617.815:107): avc: denied { create } for pid=5256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.592211][ T39] audit: type=1400 audit(1718282617.815:108): avc: denied { write } for pid=5256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.600624][ T39] audit: type=1400 audit(1718282617.815:109): avc: denied { read } for pid=5256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.608232][ T39] audit: type=1400 audit(1718282617.845:110): avc: denied { read } for pid=4914 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 87.625919][ T5260] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 87.771736][ T5232] cgroup: Unknown subsys name 'rlimit' [ 88.793859][ T5250] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.345611][ T5274] chnl_net:caif_netlink_parms(): no params data found [ 89.520013][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.524278][ T5274] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.530435][ T5274] bridge_slave_0: entered allmulticast mode [ 89.535272][ T5274] bridge_slave_0: entered promiscuous mode [ 89.542190][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.545641][ T5274] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.549243][ T5274] bridge_slave_1: entered allmulticast mode [ 89.553495][ T5274] bridge_slave_1: entered promiscuous mode [ 89.625453][ T5274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.632932][ T5274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.693899][ T5274] team0: Port device team_slave_0 added [ 89.699294][ T5274] team0: Port device team_slave_1 added [ 89.762509][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.765617][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.780500][ T5274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.791744][ T5274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.794549][ T5274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.804726][ T5274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.881747][ T5274] hsr_slave_0: entered promiscuous mode [ 89.885804][ T5274] hsr_slave_1: entered promiscuous mode [ 90.093895][ T5274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.108244][ T5274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.115274][ T5274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.122798][ T5274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.154762][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.158560][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.162863][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.166143][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.236920][ T5274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.257146][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.264358][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.284164][ T5274] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.305319][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.309066][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.314394][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.317608][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.494619][ T5274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.538061][ T5274] veth0_vlan: entered promiscuous mode [ 90.555012][ T5274] veth1_vlan: entered promiscuous mode [ 90.586757][ T5274] veth0_macvtap: entered promiscuous mode [ 90.594336][ T5274] veth1_macvtap: entered promiscuous mode [ 90.615630][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.626577][ T5274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.633227][ T5274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.637864][ T5274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.641763][ T5274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.645440][ T5274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.752101][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.831222][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.941443][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.022727][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.970234][ T5312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.976110][ T5312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.982364][ T5312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.988895][ T5312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.993342][ T5312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.997075][ T5312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.284529][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.289015][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.325155][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.329997][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/06/13 12:43:42 executed programs: 0 [ 92.752503][ T5312] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.756260][ T5312] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.760338][ T5312] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.764229][ T5312] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.769214][ T5312] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.772729][ T5312] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.922750][ T56] cfg80211: failed to load regulatory.db [ 92.941019][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 93.051382][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.054677][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.059261][ T5333] bridge_slave_0: entered allmulticast mode [ 93.063540][ T5333] bridge_slave_0: entered promiscuous mode [ 93.068981][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.072764][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.076441][ T5333] bridge_slave_1: entered allmulticast mode [ 93.081196][ T5333] bridge_slave_1: entered promiscuous mode [ 93.148485][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.156057][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.221843][ T5333] team0: Port device team_slave_0 added [ 93.227981][ T5333] team0: Port device team_slave_1 added [ 93.279335][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.281704][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.293517][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.299355][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.302289][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.314781][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.382965][ T5333] hsr_slave_0: entered promiscuous mode [ 93.386448][ T5333] hsr_slave_1: entered promiscuous mode [ 93.390070][ T5333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.394004][ T5333] Cannot create hsr debugfs directory [ 94.838856][ T5312] Bluetooth: hci0: command tx timeout [ 95.945651][ T1109] bridge_slave_1: left allmulticast mode [ 95.948782][ T1109] bridge_slave_1: left promiscuous mode [ 95.952513][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.960926][ T1109] bridge_slave_0: left allmulticast mode [ 95.963088][ T1109] bridge_slave_0: left promiscuous mode [ 95.965692][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.226553][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.234259][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.240368][ T1109] bond0 (unregistering): Released all slaves [ 96.279588][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 96.279603][ T39] audit: type=1400 audit(1718282626.525:125): avc: denied { search } for pid=4914 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.363218][ T39] audit: type=1400 audit(1718282626.605:126): avc: denied { read } for pid=5343 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.373499][ T39] audit: type=1400 audit(1718282626.605:127): avc: denied { open } for pid=5343 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.384557][ T39] audit: type=1400 audit(1718282626.605:128): avc: denied { getattr } for pid=5343 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.396160][ T39] audit: type=1400 audit(1718282626.615:129): avc: denied { write } for pid=5342 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.407662][ T39] audit: type=1400 audit(1718282626.615:130): avc: denied { add_name } for pid=5342 comm="dhcpcd-run-hook" name="resolv.conf.eth2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.436509][ T1109] hsr_slave_0: left promiscuous mode [ 96.440132][ T1109] hsr_slave_1: left promiscuous mode [ 96.443919][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.447212][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.449426][ T39] audit: type=1400 audit(1718282626.695:131): avc: denied { remove_name } for pid=5345 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1659 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.465379][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.469733][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.502882][ T1109] veth1_macvtap: left promiscuous mode [ 96.505945][ T1109] veth0_macvtap: left promiscuous mode [ 96.508885][ T1109] veth1_vlan: left promiscuous mode [ 96.511599][ T1109] veth0_vlan: left promiscuous mode [ 96.931955][ T5312] Bluetooth: hci0: command tx timeout [ 97.151842][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 97.204312][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 97.902819][ T5333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.909631][ T5333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.914938][ T5333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.925481][ T5333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.023236][ T5333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.046717][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.056333][ T826] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.060644][ T826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.080753][ T826] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.084071][ T826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.455226][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.523741][ T5333] veth0_vlan: entered promiscuous mode [ 98.533084][ T5333] veth1_vlan: entered promiscuous mode [ 98.576705][ T5333] veth0_macvtap: entered promiscuous mode [ 98.584078][ T5333] veth1_macvtap: entered promiscuous mode [ 98.610859][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.621876][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.634511][ T5333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.638997][ T5333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.643001][ T5333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.648156][ T5333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.704995][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.708733][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.732991][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.736076][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.796430][ T5369] loop0: detected capacity change from 0 to 2048 [ 98.821063][ T5370] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 98.832290][ T39] audit: type=1400 audit(1718282629.075:132): avc: denied { write } for pid=5368 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.842111][ T39] audit: type=1400 audit(1718282629.075:133): avc: denied { add_name } for pid=5368 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.851974][ T39] audit: type=1400 audit(1718282629.075:134): avc: denied { create } for pid=5368 comm="syz-executor" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 98.899156][ T5369] loop0: detected capacity change from 2048 to 0 2024/06/13 12:43:49 executed programs: 1 [ 98.912941][ T5333] syz-executor: attempt to access beyond end of device [ 98.912941][ T5333] loop0: rw=0, sector=100, nr_sectors = 2 limit=0 [ 98.918165][ T5333] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=226) [ 98.921495][ T5333] NILFS (loop0): error -5 truncating bmap (ino=15) [ 98.925136][ T5333] syz-executor: attempt to access beyond end of device [ 98.925136][ T5333] loop0: rw=0, sector=66, nr_sectors = 2 limit=0 [ 98.930529][ T5333] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 98.933944][ T5333] NILFS (loop0): error -5 truncating bmap (ino=16) [ 98.936795][ T5333] syz-executor: attempt to access beyond end of device [ 98.936795][ T5333] loop0: rw=0, sector=90, nr_sectors = 2 limit=0 [ 98.942184][ T5333] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=34) [ 98.945841][ T5333] NILFS (loop0): error -5 truncating bmap (ino=17) [ 98.957513][ T5370] segctord: attempt to access beyond end of device [ 98.957513][ T5370] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 98.963502][ T5370] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 98.969305][ T5370] segctord: attempt to access beyond end of device [ 98.969305][ T5370] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 98.978878][ T5370] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 98.983647][ T5370] segctord: attempt to access beyond end of device [ 98.983647][ T5370] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 98.990037][ T5370] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 98.995539][ T5370] segctord: attempt to access beyond end of device [ 98.995539][ T5370] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 99.003391][ T5312] Bluetooth: hci0: command tx timeout [ 99.003566][ T5370] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 99.012611][ T5333] syz-executor: attempt to access beyond end of device [ 99.012611][ T5333] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 99.018690][ T5333] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 99.023349][ T5333] syz-executor: attempt to access beyond end of device [ 99.023349][ T5333] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 99.029063][ T5333] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 99.032789][ T5333] syz-executor: attempt to access beyond end of device [ 99.032789][ T5333] loop0: rw=0, sector=84, nr_sectors = 2 limit=0 [ 99.038912][ T5333] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 99.042726][ T5333] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=0) [ 99.046012][ T5333] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 99.052767][ T5333] Buffer I/O error on dev loop0, logical block 1020, lost sync page write [ 99.056756][ T5333] NILFS (loop0): unable to write superblock: err=-5 [ 99.060434][ T5333] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 99.063913][ T5333] NILFS (loop0): unable to write superblock: err=-5 [ 99.126289][ T5333] ================================================================== [ 99.130168][ T5333] BUG: KASAN: slab-use-after-free in lru_add_fn+0x192/0xd70 [ 99.133495][ T5333] Read of size 8 at addr ffff888037e42b18 by task syz-executor/5333 [ 99.138620][ T5333] [ 99.139605][ T5333] CPU: 3 PID: 5333 Comm: syz-executor Not tainted 6.10.0-rc3-syzkaller-g2ccbdf43d5e7-dirty #0 [ 99.143744][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 99.149053][ T5333] Call Trace: [ 99.150569][ T5333] [ 99.151957][ T5333] dump_stack_lvl+0x116/0x1f0 [ 99.154786][ T5333] print_report+0xc3/0x620 [ 99.157049][ T5333] ? __virt_addr_valid+0x5e/0x580 [ 99.159567][ T5333] ? __phys_addr+0xc6/0x150 [ 99.161969][ T5333] kasan_report+0xd9/0x110 [ 99.164216][ T5333] ? lru_add_fn+0x192/0xd70 [ 99.166402][ T5333] ? lru_add_fn+0x192/0xd70 [ 99.168685][ T5333] kasan_check_range+0xef/0x1a0 [ 99.170972][ T5333] lru_add_fn+0x192/0xd70 [ 99.172995][ T5333] ? folio_lruvec_lock_irqsave+0x16a/0x240 [ 99.175557][ T5333] folio_batch_move_lru+0x243/0x400 [ 99.177912][ T5333] ? __pfx_lru_add_fn+0x10/0x10 [ 99.180143][ T5333] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 99.182786][ T5333] ? __pfx_lock_acquire+0x10/0x10 [ 99.185159][ T5333] ? filemap_remove_folio+0x162/0x210 [ 99.187905][ T5333] ? __pfx_lock_release+0x10/0x10 [ 99.190475][ T5333] lru_add_drain_cpu+0x534/0x860 [ 99.192769][ T5333] lru_add_drain+0x109/0x440 [ 99.194821][ T5333] __folio_batch_release+0x68/0xb0 [ 99.197320][ T5333] shmem_undo_range+0x5a1/0x1160 [ 99.199648][ T5333] ? __pfx_shmem_undo_range+0x10/0x10 [ 99.202140][ T5333] ? __pfx_mark_lock+0x10/0x10 [ 99.204572][ T5333] ? __pfx___lock_acquire+0x10/0x10 [ 99.207076][ T5333] ? __pfx___lock_acquire+0x10/0x10 [ 99.209990][ T5333] ? __pfx___lock_acquire+0x10/0x10 [ 99.212640][ T5333] shmem_evict_inode+0x3a3/0xbb0 [ 99.214983][ T5333] ? find_held_lock+0x2d/0x110 [ 99.217125][ T5333] ? __pfx_shmem_evict_inode+0x10/0x10 [ 99.220404][ T5333] ? evict+0x2b7/0x6c0 [ 99.222340][ T5333] ? __pfx_lock_release+0x10/0x10 [ 99.224740][ T5333] ? __pfx_wake_bit_function+0x10/0x10 [ 99.227445][ T5333] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.230015][ T5333] ? __pfx_shmem_evict_inode+0x10/0x10 [ 99.232571][ T5333] evict+0x2ed/0x6c0 [ 99.234317][ T5333] iput.part.0+0x5a8/0x7f0 [ 99.236159][ T5333] ? __pfx_generic_delete_inode+0x10/0x10 [ 99.238655][ T5333] iput+0x5c/0x80 [ 99.240245][ T5333] dentry_unlink_inode+0x295/0x480 [ 99.242425][ T5333] __dentry_kill+0x1d0/0x600 [ 99.244399][ T5333] dput.part.0+0x4b1/0x9b0 [ 99.246444][ T5333] dput+0x1f/0x30 [ 99.248568][ T5333] __fput+0x54e/0xbb0 [ 99.250474][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.252740][ T5333] task_work_run+0x14e/0x250 [ 99.254800][ T5333] ? __pfx_task_work_run+0x10/0x10 [ 99.257075][ T5333] syscall_exit_to_user_mode+0x278/0x2a0 [ 99.259598][ T5333] do_syscall_64+0xda/0x250 [ 99.261641][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.264491][ T5333] RIP: 0033:0x7f6f3cc7cc4b [ 99.266724][ T5333] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 99.275234][ T5333] RSP: 002b:00007ffef95738f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.279007][ T5333] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f6f3cc7cc4b [ 99.282810][ T5333] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 99.287030][ T5333] RBP: 00007ffef95739ac R08: 0000000000000000 R09: 00007ffef9573697 [ 99.290917][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 99.294506][ T5333] R13: 00000000000181b0 R14: 0000000000018130 R15: 0000000000000005 [ 99.298117][ T5333] [ 99.299531][ T5333] [ 99.300637][ T5333] Allocated by task 5369: [ 99.302574][ T5333] kasan_save_stack+0x33/0x60 [ 99.304665][ T5333] kasan_save_track+0x14/0x30 [ 99.306799][ T5333] __kasan_slab_alloc+0x89/0x90 [ 99.309012][ T5333] kmem_cache_alloc_lru_noprof+0x121/0x2f0 [ 99.311675][ T5333] nilfs_alloc_inode+0x26/0x150 [ 99.313852][ T5333] alloc_inode+0x5d/0x230 [ 99.315740][ T5333] iget5_locked+0x1c9/0x2c0 [ 99.317820][ T5333] nilfs_iget_locked+0xa1/0xe0 [ 99.319770][ T5333] nilfs_ifile_read+0x2f/0x1e0 [ 99.321706][ T5333] nilfs_attach_checkpoint+0x12d/0x1d0 [ 99.323875][ T5333] nilfs_get_tree+0x951/0x1000 [ 99.325795][ T5333] vfs_get_tree+0x8f/0x380 [ 99.327595][ T5333] path_mount+0x14e6/0x1f20 [ 99.329482][ T5333] __x64_sys_mount+0x297/0x320 [ 99.331735][ T5333] do_syscall_64+0xcd/0x250 [ 99.333998][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.336677][ T5333] [ 99.337721][ T5333] Freed by task 12: [ 99.339426][ T5333] kasan_save_stack+0x33/0x60 [ 99.341542][ T5333] kasan_save_track+0x14/0x30 [ 99.343622][ T5333] kasan_save_free_info+0x3b/0x60 [ 99.345859][ T5333] poison_slab_object+0xf7/0x160 [ 99.348099][ T5333] __kasan_slab_free+0x32/0x50 [ 99.350306][ T5333] kmem_cache_free+0x12f/0x3a0 [ 99.352474][ T5333] i_callback+0x43/0x70 [ 99.354396][ T5333] rcu_core+0x828/0x16b0 [ 99.356226][ T5333] handle_softirqs+0x216/0x8f0 [ 99.358286][ T5333] do_softirq+0xb2/0xf0 [ 99.360085][ T5333] __local_bh_enable_ip+0x100/0x120 [ 99.362370][ T5333] addrconf_dad_work+0x4c2/0x1500 [ 99.364789][ T5333] process_one_work+0x9fb/0x1b60 [ 99.366931][ T5333] worker_thread+0x6c8/0xf70 [ 99.368889][ T5333] kthread+0x2c1/0x3a0 [ 99.370677][ T5333] ret_from_fork+0x45/0x80 [ 99.372692][ T5333] ret_from_fork_asm+0x1a/0x30 [ 99.374887][ T5333] [ 99.375970][ T5333] Last potentially related work creation: [ 99.378398][ T5333] kasan_save_stack+0x33/0x60 [ 99.380478][ T5333] __kasan_record_aux_stack+0xba/0xd0 [ 99.382752][ T5333] __call_rcu_common.constprop.0+0x9a/0x790 [ 99.385228][ T5333] destroy_inode+0x12c/0x1b0 [ 99.387184][ T5333] iput.part.0+0x5a8/0x7f0 [ 99.389139][ T5333] iput+0x5c/0x80 [ 99.390759][ T5333] nilfs_put_root+0xae/0xe0 [ 99.392803][ T5333] nilfs_detach_log_writer+0x5ef/0xaa0 [ 99.395126][ T5333] nilfs_put_super+0x43/0x1b0 [ 99.397103][ T5333] generic_shutdown_super+0x159/0x3d0 [ 99.399352][ T5333] kill_block_super+0x3b/0x90 [ 99.401355][ T5333] deactivate_locked_super+0xbe/0x1a0 [ 99.403863][ T5333] deactivate_super+0xde/0x100 [ 99.406272][ T5333] cleanup_mnt+0x222/0x450 [ 99.408432][ T5333] task_work_run+0x14e/0x250 [ 99.410622][ T5333] syscall_exit_to_user_mode+0x278/0x2a0 [ 99.412873][ T5333] do_syscall_64+0xda/0x250 [ 99.414729][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.417270][ T5333] [ 99.418320][ T5333] The buggy address belongs to the object at ffff888037e42670 [ 99.418320][ T5333] which belongs to the cache nilfs2_inode_cache of size 1512 [ 99.424625][ T5333] The buggy address is located 1192 bytes inside of [ 99.424625][ T5333] freed 1512-byte region [ffff888037e42670, ffff888037e42c58) [ 99.430535][ T5333] [ 99.431635][ T5333] The buggy address belongs to the physical page: [ 99.434618][ T5333] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37e40 [ 99.439398][ T5333] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 99.442970][ T5333] memcg:ffff888020dade01 [ 99.444747][ T5333] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 99.448002][ T5333] page_type: 0xffffefff(slab) [ 99.450026][ T5333] raw: 00fff00000000040 ffff8880192ad540 dead000000000122 0000000000000000 [ 99.453601][ T5333] raw: 0000000000000000 0000000080130013 00000001ffffefff ffff888020dade01 [ 99.457326][ T5333] head: 00fff00000000040 ffff8880192ad540 dead000000000122 0000000000000000 [ 99.461691][ T5333] head: 0000000000000000 0000000080130013 00000001ffffefff ffff888020dade01 [ 99.466042][ T5333] head: 00fff00000000003 ffffea0000df9001 ffffffffffffffff 0000000000000000 [ 99.469777][ T5333] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 99.473491][ T5333] page dumped because: kasan: bad access detected [ 99.476242][ T5333] page_owner tracks the page as allocated [ 99.478772][ T5333] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5369, tgid 5368 (syz-executor), ts 98810143084, free_ts 0 [ 99.488535][ T5333] post_alloc_hook+0x2d1/0x350 [ 99.490713][ T5333] get_page_from_freelist+0x136a/0x2e50 [ 99.493173][ T5333] __alloc_pages_noprof+0x22b/0x2460 [ 99.495691][ T5333] alloc_slab_page+0x56/0x110 [ 99.497872][ T5333] new_slab+0x84/0x260 [ 99.499817][ T5333] ___slab_alloc+0xdac/0x1870 [ 99.502300][ T5333] __slab_alloc.constprop.0+0x56/0xb0 [ 99.505127][ T5333] kmem_cache_alloc_lru_noprof+0x2a0/0x2f0 [ 99.508035][ T5333] nilfs_alloc_inode+0x26/0x150 [ 99.510302][ T5333] alloc_inode+0x5d/0x230 [ 99.512293][ T5333] iget5_locked+0x1c9/0x2c0 [ 99.514343][ T5333] nilfs_iget_locked+0xa1/0xe0 [ 99.516515][ T5333] nilfs_dat_read+0x88/0x360 [ 99.518532][ T5333] load_nilfs+0x399/0x12d0 [ 99.520585][ T5333] nilfs_get_tree+0x8c9/0x1000 [ 99.522739][ T5333] vfs_get_tree+0x8f/0x380 [ 99.524789][ T5333] page_owner free stack trace missing [ 99.527656][ T5333] [ 99.529191][ T5333] Memory state around the buggy address: [ 99.532374][ T5333] ffff888037e42a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.535946][ T5333] ffff888037e42a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.539061][ T5333] >ffff888037e42b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.542455][ T5333] ^ [ 99.544737][ T5333] ffff888037e42b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 99.548528][ T5333] ffff888037e42c00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 99.551718][ T5333] ================================================================== [ 99.555454][ T5333] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 99.558341][ T5333] CPU: 3 PID: 5333 Comm: syz-executor Not tainted 6.10.0-rc3-syzkaller-g2ccbdf43d5e7-dirty #0 [ 99.562422][ T5333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 99.567280][ T5333] Call Trace: [ 99.568922][ T5333] [ 99.570382][ T5333] dump_stack_lvl+0x3d/0x1f0 [ 99.572507][ T5333] panic+0x6f5/0x7a0 [ 99.574294][ T5333] ? __pfx_panic+0x10/0x10 [ 99.576325][ T5333] ? rcu_is_watching+0x12/0xc0 [ 99.578441][ T5333] ? __pfx_lock_release+0x10/0x10 [ 99.580681][ T5333] ? check_panic_on_warn+0x1f/0xb0 [ 99.583012][ T5333] check_panic_on_warn+0xab/0xb0 [ 99.585670][ T5333] end_report+0x117/0x180 [ 99.587805][ T5333] kasan_report+0xe9/0x110 [ 99.589945][ T5333] ? lru_add_fn+0x192/0xd70 [ 99.592034][ T5333] ? lru_add_fn+0x192/0xd70 [ 99.594068][ T5333] kasan_check_range+0xef/0x1a0 [ 99.596308][ T5333] lru_add_fn+0x192/0xd70 [ 99.598349][ T5333] ? folio_lruvec_lock_irqsave+0x16a/0x240 [ 99.601036][ T5333] folio_batch_move_lru+0x243/0x400 [ 99.603499][ T5333] ? __pfx_lru_add_fn+0x10/0x10 [ 99.606316][ T5333] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 99.609549][ T5333] ? __pfx_lock_acquire+0x10/0x10 [ 99.611897][ T5333] ? filemap_remove_folio+0x162/0x210 [ 99.614281][ T5333] ? __pfx_lock_release+0x10/0x10 [ 99.616588][ T5333] lru_add_drain_cpu+0x534/0x860 [ 99.618830][ T5333] lru_add_drain+0x109/0x440 [ 99.620919][ T5333] __folio_batch_release+0x68/0xb0 [ 99.623213][ T5333] shmem_undo_range+0x5a1/0x1160 [ 99.625473][ T5333] ? __pfx_shmem_undo_range+0x10/0x10 [ 99.627900][ T5333] ? __pfx_mark_lock+0x10/0x10 [ 99.630110][ T5333] ? __pfx___lock_acquire+0x10/0x10 [ 99.632592][ T5333] ? __pfx___lock_acquire+0x10/0x10 [ 99.635049][ T5333] ? __pfx___lock_acquire+0x10/0x10 [ 99.637599][ T5333] shmem_evict_inode+0x3a3/0xbb0 [ 99.639770][ T5333] ? find_held_lock+0x2d/0x110 [ 99.641942][ T5333] ? __pfx_shmem_evict_inode+0x10/0x10 [ 99.644399][ T5333] ? evict+0x2b7/0x6c0 [ 99.646207][ T5333] ? __pfx_lock_release+0x10/0x10 [ 99.648367][ T5333] ? __pfx_wake_bit_function+0x10/0x10 [ 99.650735][ T5333] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.653168][ T5333] ? __pfx_shmem_evict_inode+0x10/0x10 [ 99.655549][ T5333] evict+0x2ed/0x6c0 [ 99.657304][ T5333] iput.part.0+0x5a8/0x7f0 [ 99.659433][ T5333] ? __pfx_generic_delete_inode+0x10/0x10 [ 99.662076][ T5333] iput+0x5c/0x80 [ 99.663672][ T5333] dentry_unlink_inode+0x295/0x480 [ 99.665784][ T5333] __dentry_kill+0x1d0/0x600 [ 99.667648][ T5333] dput.part.0+0x4b1/0x9b0 [ 99.669649][ T5333] dput+0x1f/0x30 [ 99.671261][ T5333] __fput+0x54e/0xbb0 [ 99.673036][ T5333] ? _raw_spin_unlock_irq+0x23/0x50 [ 99.675456][ T5333] task_work_run+0x14e/0x250 [ 99.677522][ T5333] ? __pfx_task_work_run+0x10/0x10 [ 99.679571][ T5333] syscall_exit_to_user_mode+0x278/0x2a0 [ 99.681934][ T5333] do_syscall_64+0xda/0x250 [ 99.683924][ T5333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.686733][ T5333] RIP: 0033:0x7f6f3cc7cc4b [ 99.688829][ T5333] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 99.697466][ T5333] RSP: 002b:00007ffef95738f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.700190][ T5333] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f6f3cc7cc4b [ 99.702765][ T5333] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003 [ 99.705544][ T5333] RBP: 00007ffef95739ac R08: 0000000000000000 R09: 00007ffef9573697 [ 99.708436][ T5333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 99.711928][ T5333] R13: 00000000000181b0 R14: 0000000000018130 R15: 0000000000000005 [ 99.715615][ T5333] [ 99.717789][ T5333] Kernel Offset: disabled [ 99.719824][ T5333] Rebooting in 86400 seconds..