[ 18.970845][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 18.982293][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 18.990670][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 19.048915][ T407] syz-executor.0 (407) used greatest stack depth: 21768 bytes left [ 19.488327][ T9] device bridge_slave_1 left promiscuous mode [ 19.494298][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.501858][ T9] device bridge_slave_0 left promiscuous mode [ 19.507920][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.515612][ T9] device veth1_macvtap left promiscuous mode [ 19.521710][ T9] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. 2022/12/14 02:58:58 ignoring optional flag "sandboxArg"="0" 2022/12/14 02:58:58 parsed 1 programs 2022/12/14 02:58:58 executed programs: 0 [ 36.607619][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 36.607630][ T29] audit: type=1400 audit(1670986738.740:137): avc: denied { mounton } for pid=450 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.638981][ T29] audit: type=1400 audit(1670986738.750:138): avc: denied { mount } for pid=450 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.673909][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.681080][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.688576][ T453] device bridge_slave_0 entered promiscuous mode [ 36.695340][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.702279][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.709344][ T453] device bridge_slave_1 entered promiscuous mode [ 36.739106][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.746041][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.753167][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.760023][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.775692][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.783373][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.790719][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.797929][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.806063][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.814053][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.820925][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.836084][ T453] device veth0_vlan entered promiscuous mode [ 36.842677][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.850834][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.858463][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.865557][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.872790][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.880768][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.887504][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.894771][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.902444][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.913224][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.921696][ T453] device veth1_macvtap entered promiscuous mode [ 36.929893][ T130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.940185][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.951699][ T29] audit: type=1400 audit(1670986739.090:139): avc: denied { mount } for pid=453 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.981328][ T459] loop0: detected capacity change from 0 to 512 [ 36.988602][ T29] audit: type=1400 audit(1670986739.130:140): avc: denied { mounton } for pid=458 comm="syz-executor.0" path="/root/syzkaller-testdir3117016612/syzkaller.ef51wm/0/file0" dev="sda1" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.996297][ T459] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 36.996297][ T459] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.996297][ T459] [ 37.034334][ T459] EXT4-fs (loop0): Ignoring removed nobh option [ 37.040673][ T459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.054241][ T459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.065417][ T459] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2201: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 37.077720][ T459] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 37.090022][ T459] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,acl,debug_want_extra_isize=0x0000000000000080,lazytime,nobh,quota,,errors=continue. Quota mode: writeback. [ 37.108929][ T29] audit: type=1400 audit(1670986739.250:141): avc: denied { mount } for pid=458 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.132189][ T453] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 37.137870][ T29] audit: type=1400 audit(1670986739.250:142): avc: denied { setattr } for pid=458 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.143706][ T453] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 37.143725][ T453] CPU: 1 PID: 453 Comm: syz-executor.0 Not tainted 5.15.82-syzkaller #0 [ 37.166565][ T29] audit: type=1400 audit(1670986739.270:143): avc: denied { unmount } for pid=453 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.174559][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 37.174568][ T453] RIP: 0010:ext4_xattr_set_entry+0x276a/0x3950 [ 37.174592][ T453] Code: 8b 1b 48 83 c3 68 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 54 f1 b4 ff 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 37 f1 b4 ff 4c 8b 23 48 8b 44 24 [ 37.238620][ T453] RSP: 0018:ffffc9000039f120 EFLAGS: 00010206 [ 37.244707][ T453] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff888106bf0000 [ 37.252601][ T453] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff860f0374 [ 37.260415][ T453] RBP: ffffc9000039f3b0 R08: ffffffff816c7cf1 R09: ffffed102188d003 [ 37.268472][ T453] R10: ffffed102188d003 R11: 1ffff1102188d002 R12: ffffc9000039f2d4 [ 37.276361][ T453] R13: ffffffff860f0320 R14: ffff88810d250820 R15: dffffc0000000000 [ 37.284267][ T453] FS: 00005555571d5400(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 37.293140][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.299555][ T453] CR2: 00005555571de728 CR3: 000000011ecf3000 CR4: 00000000003506a0 [ 37.307371][ T453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.315265][ T453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.323172][ T453] Call Trace: [ 37.326290][ T453] [ 37.329069][ T453] ? __kmalloc+0x203/0x350 [ 37.333328][ T453] ? ext4_xattr_block_set+0x328/0x3820 [ 37.338740][ T453] ? ext4_expand_extra_isize_ea+0x1591/0x1f30 [ 37.344642][ T453] ? generic_shutdown_super+0x69/0x2e0 [ 37.350113][ T453] ? cleanup_mnt+0x45f/0x510 [ 37.354535][ T453] ? ext4_xattr_ibody_set+0x380/0x380 [ 37.359837][ T453] ? __kasan_kmalloc+0x9/0x10 [ 37.364536][ T453] ? __kmalloc+0x203/0x350 [ 37.368794][ T453] ? ext4_xattr_block_set+0x328/0x3820 [ 37.374190][ T453] ext4_xattr_block_set+0x8f8/0x3820 [ 37.379490][ T453] ? ext4_xattr_ibody_set+0x380/0x380 [ 37.384774][ T453] ? ext4_get_inode_loc+0x1d0/0x1d0 [ 37.389810][ T453] ? ext4_xattr_block_find+0x5b0/0x5b0 [ 37.395284][ T453] ? ext4_xattr_inode_get+0x2a2/0x960 [ 37.400572][ T453] ? ext4_xattr_block_find+0x113/0x5b0 [ 37.406042][ T453] ? __kasan_check_write+0x14/0x20 [ 37.411097][ T453] ext4_expand_extra_isize_ea+0x1591/0x1f30 [ 37.417057][ T453] ? __kasan_check_read+0x11/0x20 [ 37.421923][ T453] ? ext4_xattr_set+0x3e0/0x3e0 [ 37.426622][ T453] ? ext4_reserve_inode_write+0x30d/0x3d0 [ 37.432346][ T453] ? __kasan_check_write+0x14/0x20 [ 37.437393][ T453] __ext4_expand_extra_isize+0x29e/0x3d0 [ 37.442945][ T453] __ext4_mark_inode_dirty+0x4bf/0x7a0 [ 37.448322][ T453] ? ext4_blocks_for_truncate+0x2d0/0x2d0 [ 37.453973][ T453] ? __kasan_check_write+0x14/0x20 [ 37.458918][ T453] ? ext4_journal_check_start+0x16b/0x230 [ 37.464548][ T453] ? ext4_dirty_inode+0x8e/0x100 [ 37.469337][ T453] ? __ext4_journal_start_sb+0x14c/0x2a0 [ 37.475025][ T453] ext4_dirty_inode+0xbc/0x100 [ 37.479633][ T453] ? __ext4_expand_extra_isize+0x3d0/0x3d0 [ 37.485491][ T453] __mark_inode_dirty+0x1f9/0x9d0 [ 37.490334][ T453] iput+0x155/0x7d0 [ 37.493974][ T453] ? __kasan_check_write+0x14/0x20 [ 37.498932][ T453] dentry_unlink_inode+0x349/0x430 [ 37.503961][ T453] __dentry_kill+0x3e2/0x5d0 [ 37.508390][ T453] shrink_dentry_list+0x379/0x4d0 [ 37.513242][ T453] shrink_dcache_parent+0xcd/0x350 [ 37.518267][ T453] ? d_set_mounted+0x230/0x230 [ 37.522807][ T453] ? __kasan_check_write+0x14/0x20 [ 37.527844][ T453] ? up_write+0xa1/0x190 [ 37.531969][ T453] shrink_dcache_for_umount+0x7c/0x1a0 [ 37.537301][ T453] generic_shutdown_super+0x69/0x2e0 [ 37.542591][ T453] kill_block_super+0x80/0xe0 [ 37.547109][ T453] deactivate_locked_super+0xb0/0x100 [ 37.552312][ T453] deactivate_super+0xa5/0xd0 [ 37.556925][ T453] cleanup_mnt+0x45f/0x510 [ 37.561258][ T453] __cleanup_mnt+0x19/0x20 [ 37.565594][ T453] task_work_run+0x147/0x1b0 [ 37.570018][ T453] exit_to_user_mode_loop+0xfd/0x110 [ 37.575144][ T453] syscall_exit_to_user_mode+0x79/0xc0 [ 37.580435][ T453] do_syscall_64+0x50/0xd0 [ 37.584754][ T453] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 37.590425][ T453] RIP: 0033:0x7f8516e23547 [ 37.594757][ T453] Code: ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 37.614631][ T453] RSP: 002b:00007ffcd49ab848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 37.622979][ T453] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8516e23547 [ 37.630790][ T453] RDX: 00007ffcd49ab919 RSI: 000000000000000a RDI: 00007ffcd49ab910 [ 37.638794][ T453] RBP: 00007ffcd49ab910 R08: 00000000ffffffff R09: 00007ffcd49ab6e0 [ 37.646603][ T453] R10: 00005555571d6793 R11: 0000000000000246 R12: 00007f8516e7cb24 [ 37.654411][ T453] R13: 00007ffcd49ac9d0 R14: 00005555571d66f0 R15: 00007ffcd49aca10 [ 37.662318][ T453] [ 37.665173][ T453] Modules linked in: [ 37.671202][ T453] ---[ end trace bbe24e05c12a4dcf ]--- [ 37.676472][ T453] RIP: 0010:ext4_xattr_set_entry+0x276a/0x3950 [ 37.682542][ T453] Code: 8b 1b 48 83 c3 68 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 54 f1 b4 ff 48 8b 1b 48 83 c3 30 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 37 f1 b4 ff 4c 8b 23 48 8b 44 24 [ 37.702108][ T453] RSP: 0018:ffffc9000039f120 EFLAGS: 00010206 [ 37.708154][ T453] RAX: 0000000000000006 RBX: 0000000000000030 RCX: ffff888106bf0000 [ 37.716027][ T453] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff860f0374 [ 37.724016][ T453] RBP: ffffc9000039f3b0 R08: ffffffff816c7cf1 R09: ffffed102188d003 [ 37.732255][ T453] R10: ffffed102188d003 R11: 1ffff1102188d002 R12: ffffc9000039f2d4 [ 37.740307][ T453] R13: ffffffff860f0320 R14: ffff88810d250820 R15: dffffc0000000000 [ 37.748152][ T453] FS: 00005555571d5400(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 37.757004][ T453] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.763540][ T453] CR2: 0000561561fcf048 CR3: 000000011ecf3000 CR4: 00000000003506b0 [ 37.771342][ T453] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.779289][ T453] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.787115][ T453] Kernel panic - not syncing: Fatal exception [ 37.793289][ T453] Kernel Offset: disabled [ 37.797494][ T453] Rebooting in 86400 seconds..