Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. 2025/05/28 13:41:22 ignoring optional flag "sandboxArg"="0" 2025/05/28 13:41:22 ignoring optional flag "type"="gce" 2025/05/28 13:41:22 parsed 1 programs 2025/05/28 13:41:22 executed programs: 0 [ 43.386769][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.393836][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.401418][ T335] device bridge_slave_0 entered promiscuous mode [ 43.412923][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.420090][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.427677][ T334] device bridge_slave_0 entered promiscuous mode [ 43.436040][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.443274][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.451207][ T334] device bridge_slave_1 entered promiscuous mode [ 43.457934][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.464984][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.472578][ T332] device bridge_slave_0 entered promiscuous mode [ 43.479333][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.486376][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.494642][ T335] device bridge_slave_1 entered promiscuous mode [ 43.517091][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.524249][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.531687][ T332] device bridge_slave_1 entered promiscuous mode [ 43.586927][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.594083][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.601570][ T338] device bridge_slave_0 entered promiscuous mode [ 43.617178][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.624340][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.632021][ T336] device bridge_slave_0 entered promiscuous mode [ 43.642287][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.649373][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.656911][ T338] device bridge_slave_1 entered promiscuous mode [ 43.670515][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.677744][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.685406][ T336] device bridge_slave_1 entered promiscuous mode [ 43.808688][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.815970][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.823596][ T337] device bridge_slave_0 entered promiscuous mode [ 43.830750][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.837840][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.845208][ T337] device bridge_slave_1 entered promiscuous mode [ 43.932563][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.939656][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.946979][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.954194][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.011750][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.018828][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.026100][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.033542][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.048806][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.055868][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.063251][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.070607][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.084575][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.091688][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.099116][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.106235][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.123058][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.130319][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.137704][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.145018][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.157220][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.164281][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.171610][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.178662][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.198769][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.206263][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.213945][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.221522][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.238678][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.245825][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.253203][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.260690][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.268165][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.275333][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.283138][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.290823][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.298520][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.305951][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.351937][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.360564][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.367892][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.376117][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.384305][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.392197][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.400518][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.409163][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.416371][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.424077][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.431876][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.439470][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.447913][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.456268][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.463373][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.470972][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.478479][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.508946][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.516588][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.524410][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.532959][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.541882][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.549071][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.556811][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.565057][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.572214][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.579580][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.588038][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.596166][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.603938][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.611598][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.619862][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.627002][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.634445][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.643073][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.651525][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.659742][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.667836][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.676226][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.684551][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.691735][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.699270][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.707895][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.716059][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.723134][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.730571][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.739257][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.747951][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.755105][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.762588][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.790225][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.797867][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.805394][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.814053][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.822491][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.829821][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.837482][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.846037][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.854283][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.861330][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.869330][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.877629][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.885723][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.893991][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.902180][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.910579][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.918850][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.946438][ T337] device veth0_vlan entered promiscuous mode [ 44.954250][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.962789][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.970604][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.978754][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.987097][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.995263][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.003450][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.011451][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.019980][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.028595][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.037078][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.045096][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.058316][ T334] device veth0_vlan entered promiscuous mode [ 45.075431][ T332] device veth0_vlan entered promiscuous mode [ 45.083189][ T338] device veth0_vlan entered promiscuous mode [ 45.092885][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.101004][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.109052][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.116706][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.125242][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.133474][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.141124][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.148993][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.157199][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.164592][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.172138][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.180280][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.191435][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.210524][ T338] device veth1_macvtap entered promiscuous mode [ 45.221481][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.231288][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.240477][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.249483][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.258265][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.268146][ T337] device veth1_macvtap entered promiscuous mode [ 45.285906][ T334] device veth1_macvtap entered promiscuous mode [ 45.293053][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.301574][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.310743][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.319385][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.327870][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.336178][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.346877][ T335] device veth0_vlan entered promiscuous mode [ 45.363350][ T336] device veth0_vlan entered promiscuous mode [ 45.369700][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.378104][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.386358][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.394506][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.402894][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.411277][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.419685][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.427329][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.434715][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.442518][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.453056][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.461437][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.472254][ T332] device veth1_macvtap entered promiscuous mode [ 45.484144][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.492613][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.501038][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.509050][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.517674][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.536389][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.545991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.564055][ T336] device veth1_macvtap entered promiscuous mode [ 45.588106][ T335] device veth1_macvtap entered promiscuous mode [ 45.595244][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.609264][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.611014][ T359] loop3: detected capacity change from 0 to 2048 [ 45.617988][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.627551][ T362] loop4: detected capacity change from 0 to 2048 [ 45.632783][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.639332][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 45.639348][ T30] audit: type=1400 audit(1748439685.415:88): avc: denied { mounton } for pid=358 comm="syz-executor.3" path="/root/syzkaller-testdir2483485519/syzkaller.GZEghL/0/bus" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 45.654826][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.688078][ T278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.705695][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.717745][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.731092][ T365] loop0: detected capacity change from 0 to 2048 [ 45.737609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.745954][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.754557][ T359] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.762148][ T362] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.766769][ T30] audit: type=1400 audit(1748439685.545:89): avc: denied { mount } for pid=358 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.776214][ T362] ext4 filesystem being mounted at /root/syzkaller-testdir180122333/syzkaller.wIrk3h/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.803248][ T359] ext4 filesystem being mounted at /root/syzkaller-testdir2483485519/syzkaller.GZEghL/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.824046][ T30] audit: type=1400 audit(1748439685.585:90): avc: denied { write } for pid=360 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.854471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.854473][ T365] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 45.854544][ T365] ext4 filesystem being mounted at /root/syzkaller-testdir3600093769/syzkaller.frDqkv/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.864030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.893473][ T30] audit: type=1400 audit(1748439685.585:91): avc: denied { add_name } for pid=360 comm="syz-executor.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.917538][ T362] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #19: block 199: comm syz-executor.4: lblock 7 mapped to illegal pblock 199 (length 1) [ 45.933055][ T278] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #19: block 192: comm kworker/u4:3: lblock 0 mapped to illegal pblock 192 (length 1) [ 45.933676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.956623][ T362] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 7 with max blocks 1 with error 117 [ 45.970336][ T375] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #19: block 207: comm kworker/u4:5: lblock 15 mapped to illegal pblock 207 (length 1) [ 45.972069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.987302][ T359] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #19: block 225: comm syz-executor.3: lblock 17 mapped to illegal pblock 225 (length 1) [ 45.994647][ T362] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.994647][ T362] [ 46.030378][ T30] audit: type=1400 audit(1748439685.585:92): avc: denied { create } for pid=360 comm="syz-executor.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.036054][ T278] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4874: inode #19: block 0: len 1: ext4_ext_map_blocks returned -117 [ 46.053284][ T375] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4874: inode #19: block 15: len 1: ext4_ext_map_blocks returned -117 [ 46.078533][ T365] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #19: block 233: comm syz-executor.0: lblock 25 mapped to illegal pblock 233 (length 1) [ 46.092682][ T278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm kworker/u4:3: Invalid inode table block 34360905424 in block_group 0 [ 46.097056][ T8] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4874: inode #19: block 22: len 1: ext4_ext_map_blocks returned -28 [ 46.116307][ T359] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 17 with max blocks 1 with error 117 [ 46.121503][ T30] audit: type=1400 audit(1748439685.585:93): avc: denied { read write open } for pid=360 comm="syz-executor.4" path="/root/syzkaller-testdir180122333/syzkaller.wIrk3h/0/bus/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.141498][ T359] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.141498][ T359] [ 46.179353][ T8] EXT4-fs error (device loop0): __ext4_get_inode_loc:4352: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 46.192732][ T278] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 46.203972][ T375] EXT4-fs error (device loop3): __ext4_get_inode_loc:4352: comm kworker/u4:5: Invalid inode table block 34360905424 in block_group 0 [ 46.218501][ T365] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 25 with max blocks 1 with error 117 [ 46.230973][ T383] loop2: detected capacity change from 0 to 2048 [ 46.231482][ T8] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 46.241443][ T278] EXT4-fs error (device loop4): ext4_convert_unwritten_extents:4875: inode #19: comm kworker/u4:3: mark_inode_dirty error [ 46.250711][ T375] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 46.262246][ T384] loop1: detected capacity change from 0 to 2048 [ 46.269944][ T365] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.269944][ T365] [ 46.276245][ T386] loop5: detected capacity change from 0 to 2048 [ 46.286147][ T8] EXT4-fs error (device loop0): ext4_convert_unwritten_extents:4875: inode #19: comm kworker/u4:0: mark_inode_dirty error [ 46.295098][ T30] audit: type=1400 audit(1748439685.585:94): avc: denied { mounton } for pid=360 comm="syz-executor.4" path="/root/syzkaller-testdir180122333/syzkaller.wIrk3h/0/bus/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.323253][ T375] EXT4-fs error (device loop3): ext4_convert_unwritten_extents:4875: inode #19: comm kworker/u4:5: mark_inode_dirty error [ 46.346630][ T278] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 46.361095][ T30] audit: type=1400 audit(1748439685.585:95): avc: denied { append } for pid=360 comm="syz-executor.4" path="/root/syzkaller-testdir180122333/syzkaller.wIrk3h/0/bus/file0/blkio.throttle.io_service_bytes_recursive" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.362721][ T278] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #19: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.391972][ T8] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -28) [ 46.411176][ T384] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.419001][ T375] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 46.430935][ T384] ext4 filesystem being mounted at /root/syzkaller-testdir3020257600/syzkaller.pkWDY6/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.457600][ T278] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4874: inode #19: block 1: len 1: ext4_ext_map_blocks returned -117 [ 46.471502][ T370] EXT4-fs error (device loop3): ext4_map_blocks:740: inode #19: block 16: comm kworker/u4:4: lblock 16 mapped to illegal pblock 16 (length 1) [ 46.475273][ T8] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4874: inode #19: block 23: len 1: ext4_ext_map_blocks returned -28 [ 46.490052][ T383] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.502075][ T386] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 46.510802][ T278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm kworker/u4:3: Invalid inode table block 34360905424 in block_group 0 [ 46.526936][ T370] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4874: inode #19: block 16: len 1: ext4_ext_map_blocks returned -117 [ 46.535055][ T30] audit: type=1400 audit(1748439686.135:96): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.549016][ T383] ext4 filesystem being mounted at /root/syzkaller-testdir2948494527/syzkaller.9EXCfX/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.574565][ T30] audit: type=1400 audit(1748439686.135:97): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.607512][ T386] ext4 filesystem being mounted at /root/syzkaller-testdir2344131082/syzkaller.efNPL7/0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.622515][ T278] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 46.636109][ T370] EXT4-fs error (device loop3): __ext4_get_inode_loc:4352: comm kworker/u4:4: Invalid inode table block 34360905424 in block_group 0 [ 46.650906][ T8] EXT4-fs error (device loop0): __ext4_get_inode_loc:4352: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 46.658343][ T278] EXT4-fs error (device loop4): ext4_convert_unwritten_extents:4875: inode #19: comm kworker/u4:3: mark_inode_dirty error [ 46.664711][ T370] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 46.688766][ T383] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #19: block 228: comm syz-executor.2: lblock 20 mapped to illegal pblock 228 (length 1) [ 46.699960][ T370] EXT4-fs error (device loop3): ext4_convert_unwritten_extents:4875: inode #19: comm kworker/u4:4: mark_inode_dirty error [ 46.722145][ T370] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 46.723325][ T8] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 46.739413][ T278] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 46.747843][ T383] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 20 with max blocks 1 with error 117 [ 46.758025][ T278] EXT4-fs error (device loop4): ext4_map_blocks:740: inode #19: block 2: comm kworker/u4:3: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.770916][ T383] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.770916][ T383] [ 46.785249][ T278] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4874: inode #19: block 2: len 1: ext4_ext_map_blocks returned -117 [ 46.794577][ T8] EXT4-fs error (device loop0): ext4_convert_unwritten_extents:4875: inode #19: comm kworker/u4:0: mark_inode_dirty error [ 46.820586][ T10] EXT4-fs error (device loop3): __ext4_get_inode_loc:4352: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 46.821157][ T386] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #19: block 207: comm syz-executor.5: lblock 15 mapped to illegal pblock 207 (length 1) [ 46.835143][ T278] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 46.862826][ T8] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -28) [ 46.863003][ T278] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4874: inode #19: block 3: len 1: ext4_ext_map_blocks returned -117 [ 46.882379][ T386] EXT4-fs error (device loop5): __ext4_get_inode_loc:4352: comm syz-executor.5: Invalid inode table block 34360905424 in block_group 0 [ 46.903044][ T278] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 46.916337][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4352: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 46.917502][ T386] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 46.930325][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4352: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 46.940945][ T8] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4874: inode #19: block 24: len 1: ext4_ext_map_blocks returned -28 [ 46.956247][ T278] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4874: inode #19: block 4: len 1: ext4_ext_map_blocks returned -117 [ 46.986188][ T398] loop1: detected capacity change from 0 to 2048 [ 46.986468][ T386] EXT4-fs error (device loop5): ext4_ext_truncate:4454: inode #19: comm syz-executor.5: mark_inode_dirty error [ 46.994135][ T8] EXT4-fs error (device loop0): __ext4_get_inode_loc:4352: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 47.020220][ T278] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 47.023364][ T386] EXT4-fs error (device loop5): __ext4_get_inode_loc:4352: comm syz-executor.5: Invalid inode table block 34360905424 in block_group 0 [ 47.042377][ T278] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4874: inode #19: block 5: len 1: ext4_ext_map_blocks returned -117 [ 47.053117][ T8] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 47.061842][ T278] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 47.083858][ T8] EXT4-fs error (device loop0): ext4_convert_unwritten_extents:4875: inode #19: comm kworker/u4:0: mark_inode_dirty error [ 47.097175][ T398] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.108267][ T386] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 47.112747][ T398] ext4 filesystem being mounted at /root/syzkaller-testdir3020257600/syzkaller.pkWDY6/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.133267][ T278] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4874: inode #19: block 6: len 1: ext4_ext_map_blocks returned -117 [ 47.146408][ T403] loop2: detected capacity change from 0 to 2048 [ 47.153661][ T386] EXT4-fs error (device loop5): ext4_truncate:4304: inode #19: comm syz-executor.5: mark_inode_dirty error [ 47.158985][ T404] loop3: detected capacity change from 0 to 2048 [ 47.172114][ T278] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 47.186109][ T8] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -28) [ 47.211128][ T404] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.222259][ T404] ext4 filesystem being mounted at /root/syzkaller-testdir2483485519/syzkaller.GZEghL/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.238504][ T386] ================================================================== [ 47.246602][ T386] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 47.254360][ T386] Read of size 4 at addr ffff88812576ba58 by task syz-executor.5/386 [ 47.262444][ T386] [ 47.264794][ T386] CPU: 1 PID: 386 Comm: syz-executor.5 Not tainted 5.15.184-syzkaller-1080580-g4032a894ccb2 #0 [ 47.275229][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.285313][ T386] Call Trace: [ 47.288604][ T386] [ 47.291539][ T386] __dump_stack+0x21/0x30 [ 47.295874][ T386] dump_stack_lvl+0xee/0x150 [ 47.300468][ T386] ? show_regs_print_info+0x20/0x20 [ 47.300511][ T403] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.305686][ T386] ? load_image+0x3a0/0x3a0 [ 47.320729][ T386] print_address_description+0x7f/0x2c0 [ 47.326344][ T386] ? ext4_find_extent+0xbeb/0xe20 [ 47.331481][ T386] kasan_report+0xf1/0x140 [ 47.336057][ T386] ? __read_extent_tree_block+0x1e8/0x790 [ 47.341824][ T386] ? ext4_find_extent+0xbeb/0xe20 [ 47.346960][ T386] __asan_report_load4_noabort+0x14/0x20 [ 47.349473][ T410] loop4: detected capacity change from 0 to 2048 [ 47.352754][ T386] ext4_find_extent+0xbeb/0xe20 [ 47.352784][ T386] ext4_ext_map_blocks+0x1de/0x6270 [ 47.364747][ T403] ext4 filesystem being mounted at /root/syzkaller-testdir2948494527/syzkaller.9EXCfX/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.369211][ T386] ? __stack_depot_save+0x34/0x480 [ 47.369239][ T386] ? __mem_cgroup_uncharge_list+0x39/0xc0 [ 47.394914][ T386] ? __kasan_slab_alloc+0xcf/0xf0 [ 47.399944][ T386] ? __kasan_slab_alloc+0xbd/0xf0 [ 47.404965][ T386] ? slab_post_alloc_hook+0x4f/0x2b0 [ 47.410247][ T386] ? kmem_cache_alloc+0xf7/0x260 [ 47.415184][ T386] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 47.420641][ T386] ? ext4_writepages+0xec8/0x2f90 [ 47.425751][ T386] ? do_writepages+0x48a/0x6c0 [ 47.430510][ T386] ? vfs_fsync_range+0x190/0x1a0 [ 47.435442][ T386] ? ext4_buffered_write_iter+0x5d0/0x670 [ 47.441154][ T386] ? ext4_file_write_iter+0x18c/0x14c0 [ 47.446605][ T386] ? ext4_ext_release+0x10/0x10 [ 47.451451][ T386] ? x64_sys_call+0x8ef/0x9a0 [ 47.456139][ T386] ? do_syscall_64+0x4c/0xa0 [ 47.460753][ T386] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.466820][ T386] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 47.472362][ T386] ext4_map_blocks+0x97b/0x1b20 [ 47.477313][ T386] ? slab_post_alloc_hook+0x6d/0x2b0 [ 47.482597][ T386] ? should_failslab+0x9/0x20 [ 47.487358][ T386] ? ext4_issue_zeroout+0x250/0x250 [ 47.492549][ T386] ? ext4_inode_journal_mode+0x19a/0x480 [ 47.498267][ T386] ext4_writepages+0x11e7/0x2f90 [ 47.503203][ T386] ? ext4_readpage+0x220/0x220 [ 47.507960][ T386] ? ext4_readahead+0x110/0x110 [ 47.512812][ T386] ? up_read+0x56/0x1d0 [ 47.516980][ T386] ? do_user_addr_fault+0xa64/0x1180 [ 47.522272][ T386] ? do_kern_addr_fault+0x80/0x80 [ 47.527295][ T386] ? ext4_readpage+0x220/0x220 [ 47.532052][ T386] do_writepages+0x48a/0x6c0 [ 47.536636][ T386] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 47.541925][ T386] ? __ext4_mark_inode_dirty+0x443/0x610 [ 47.547550][ T386] ? __writepage+0x130/0x130 [ 47.552134][ T386] ? __kasan_check_write+0x14/0x20 [ 47.557238][ T386] ? _raw_spin_lock+0x8e/0xe0 [ 47.561910][ T386] ? _raw_spin_unlock+0x4d/0x70 [ 47.566756][ T386] filemap_fdatawrite_wbc+0x1f4/0x250 [ 47.572122][ T386] file_write_and_wait_range+0x129/0x1e0 [ 47.577784][ T386] ? __filemap_set_wb_err+0x110/0x110 [ 47.583149][ T386] ? fault_in_iov_iter_readable+0x23e/0x280 [ 47.589040][ T386] ext4_sync_file+0x1a9/0xa10 [ 47.593813][ T386] vfs_fsync_range+0x190/0x1a0 [ 47.598588][ T386] ext4_buffered_write_iter+0x5d0/0x670 [ 47.604232][ T386] ext4_file_write_iter+0x18c/0x14c0 [ 47.609628][ T386] ? futex_exit_release+0x1d0/0x1d0 [ 47.614835][ T386] ? avc_policy_seqno+0x1b/0x70 [ 47.619682][ T386] ? ext4_file_read_iter+0x510/0x510 [ 47.624972][ T386] ? memset+0x35/0x40 [ 47.628952][ T386] ? iov_iter_init+0xbc/0x180 [ 47.633627][ T386] vfs_write+0x802/0xf70 [ 47.637892][ T386] ? file_end_write+0x1b0/0x1b0 [ 47.642766][ T386] ? wait_for_completion_killable_timeout+0x10/0x10 [ 47.649983][ T386] ? __fget_files+0x2c4/0x320 [ 47.654678][ T386] ? __fdget_pos+0x2d2/0x380 [ 47.659364][ T386] ? ksys_write+0x71/0x240 [ 47.663807][ T386] ksys_write+0x140/0x240 [ 47.668146][ T386] ? __ia32_sys_read+0x90/0x90 [ 47.672913][ T386] ? __kasan_check_write+0x14/0x20 [ 47.678024][ T386] ? switch_fpu_return+0x15d/0x2c0 [ 47.683134][ T386] __x64_sys_write+0x7b/0x90 [ 47.687720][ T386] x64_sys_call+0x8ef/0x9a0 [ 47.692230][ T386] do_syscall_64+0x4c/0xa0 [ 47.696641][ T386] ? clear_bhb_loop+0x50/0xa0 [ 47.701344][ T386] ? clear_bhb_loop+0x50/0xa0 [ 47.706145][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.712137][ T386] RIP: 0033:0x7fb527972859 [ 47.716827][ T386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.736867][ T386] RSP: 002b:00007fb5274f50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.745302][ T386] RAX: ffffffffffffffda RBX: 00007fb527a91f80 RCX: 00007fb527972859 [ 47.753476][ T386] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000005 [ 47.761449][ T386] RBP: 00007fb5279cead0 R08: 0000000000000000 R09: 0000000000000000 [ 47.769421][ T386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.777576][ T386] R13: 000000000000000b R14: 00007fb527a91f80 R15: 00007ffeb352b048 [ 47.785573][ T386] [ 47.788589][ T386] [ 47.790992][ T386] The buggy address belongs to the page: [ 47.796615][ T386] page:ffffea000495dac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12576b [ 47.806977][ T386] flags: 0x4000000000000000(zone=1) [ 47.812184][ T386] raw: 4000000000000000 ffffea000495db08 ffffea000495da88 0000000000000000 [ 47.820757][ T386] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 47.829326][ T386] page dumped because: kasan: bad access detected [ 47.835727][ T386] page_owner info is not present (never set?) [ 47.841780][ T386] [ 47.844109][ T386] Memory state around the buggy address: [ 47.849726][ T386] ffff88812576b900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.857776][ T386] ffff88812576b980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.865927][ T386] >ffff88812576ba00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.874007][ T386] ^ [ 47.881149][ T386] ffff88812576ba80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.889202][ T386] ffff88812576bb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.897563][ T386] ================================================================== [ 47.905724][ T386] Disabling lock debugging due to kernel taint [ 47.912917][ T378] EXT4-fs error (device loop1): __ext4_get_inode_loc:4352: comm kworker/u4:7: Invalid inode table block 34360905424 in block_group 0 [ 47.916889][ T386] ------------[ cut here ]------------ [ 47.933326][ T386] kernel BUG at fs/ext4/inode.c:2433! [ 47.960257][ T386] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 47.961176][ T410] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.966478][ T386] CPU: 0 PID: 386 Comm: syz-executor.5 Tainted: G B 5.15.184-syzkaller-1080580-g4032a894ccb2 #0 [ 47.966507][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.966518][ T386] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 47.966546][ T386] Code: 00 74 08 48 89 df e8 22 09 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 4a 9b 07 00 eb 51 e8 73 97 8f ff <0f> 0b e8 6c 97 8f ff eb 2f e8 65 97 8f ff eb 5f e8 5e 97 8f ff 31 [ 47.966562][ T386] RSP: 0018:ffffc900010e7340 EFLAGS: 00010293 [ 47.966580][ T386] RAX: ffffffff81d90d6d RBX: ffff8881131d6a88 RCX: ffff888112290000 [ 47.966594][ T386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 47.966606][ T386] RBP: ffffc900010e76b0 R08: dffffc0000000000 R09: ffffed102263ad4a [ 47.966620][ T386] R10: ffffed102263ad4a R11: 1ffff1102263ad49 R12: dffffc0000000000 [ 48.012016][ T403] EXT4-fs error (device loop2): __ext4_get_inode_loc:4352: comm syz-executor.2: Invalid inode table block 34360905424 in block_group 0 [ 48.024853][ T386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.024870][ T386] FS: 00007fb5274f56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 48.024887][ T386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.024901][ T386] CR2: 000000c000039000 CR3: 00000001250eb000 CR4: 00000000003506b0 [ 48.024919][ T386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.024930][ T386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.024942][ T386] Call Trace: [ 48.024948][ T386] [ 48.024961][ T386] ? ext4_readpage+0x220/0x220 [ 48.024985][ T386] ? ext4_readahead+0x110/0x110 [ 48.025004][ T386] ? up_read+0x56/0x1d0 [ 48.025022][ T386] ? do_user_addr_fault+0xa64/0x1180 [ 48.025047][ T386] ? do_kern_addr_fault+0x80/0x80 [ 48.025070][ T386] ? ext4_readpage+0x220/0x220 2025/05/28 13:41:27 executed programs: 13 [ 48.025089][ T386] do_writepages+0x48a/0x6c0 [ 48.025112][ T386] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 48.025132][ T386] ? __ext4_mark_inode_dirty+0x443/0x610 [ 48.025151][ T386] ? __writepage+0x130/0x130 [ 48.025171][ T386] ? __kasan_check_write+0x14/0x20 [ 48.025190][ T386] ? _raw_spin_lock+0x8e/0xe0 [ 48.033226][ T415] loop0: detected capacity change from 0 to 2048 [ 48.039474][ T386] ? _raw_spin_unlock+0x4d/0x70 [ 48.039505][ T386] filemap_fdatawrite_wbc+0x1f4/0x250 [ 48.047637][ T410] ext4 filesystem being mounted at /root/syzkaller-testdir180122333/syzkaller.wIrk3h/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.055533][ T386] file_write_and_wait_range+0x129/0x1e0 [ 48.055558][ T386] ? __filemap_set_wb_err+0x110/0x110 [ 48.186026][ T415] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.190541][ T386] ? fault_in_iov_iter_readable+0x23e/0x280 [ 48.190575][ T386] ext4_sync_file+0x1a9/0xa10 [ 48.197160][ T415] ext4 filesystem being mounted at /root/syzkaller-testdir3600093769/syzkaller.frDqkv/1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.201823][ T386] vfs_fsync_range+0x190/0x1a0 [ 48.201853][ T386] ext4_buffered_write_iter+0x5d0/0x670 [ 48.278738][ T386] ext4_file_write_iter+0x18c/0x14c0 [ 48.284061][ T386] ? futex_exit_release+0x1d0/0x1d0 [ 48.289456][ T386] ? avc_policy_seqno+0x1b/0x70 [ 48.294399][ T386] ? ext4_file_read_iter+0x510/0x510 [ 48.299692][ T386] ? memset+0x35/0x40 [ 48.303700][ T386] ? iov_iter_init+0xbc/0x180 [ 48.308382][ T386] vfs_write+0x802/0xf70 [ 48.312833][ T386] ? file_end_write+0x1b0/0x1b0 [ 48.317681][ T386] ? wait_for_completion_killable_timeout+0x10/0x10 [ 48.324380][ T386] ? __fget_files+0x2c4/0x320 [ 48.329060][ T386] ? __fdget_pos+0x2d2/0x380 [ 48.333649][ T386] ? ksys_write+0x71/0x240 [ 48.338070][ T386] ksys_write+0x140/0x240 [ 48.342397][ T386] ? __ia32_sys_read+0x90/0x90 [ 48.347154][ T386] ? __kasan_check_write+0x14/0x20 [ 48.352460][ T386] ? switch_fpu_return+0x15d/0x2c0 [ 48.357800][ T386] __x64_sys_write+0x7b/0x90 [ 48.362401][ T386] x64_sys_call+0x8ef/0x9a0 [ 48.366899][ T386] do_syscall_64+0x4c/0xa0 [ 48.371684][ T386] ? clear_bhb_loop+0x50/0xa0 [ 48.376445][ T386] ? clear_bhb_loop+0x50/0xa0 [ 48.381120][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.387014][ T386] RIP: 0033:0x7fb527972859 [ 48.391508][ T386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.411309][ T386] RSP: 002b:00007fb5274f50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 48.419729][ T386] RAX: ffffffffffffffda RBX: 00007fb527a91f80 RCX: 00007fb527972859 [ 48.427738][ T386] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000005 [ 48.435709][ T386] RBP: 00007fb5279cead0 R08: 0000000000000000 R09: 0000000000000000 [ 48.443775][ T386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.451746][ T386] R13: 000000000000000b R14: 00007fb527a91f80 R15: 00007ffeb352b048 [ 48.459825][ T386] [ 48.462843][ T386] Modules linked in: [ 48.467844][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc:4352: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 48.479107][ T386] ---[ end trace a28132bbd43c75b9 ]--- [ 48.491357][ T278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4352: comm kworker/u4:3: Invalid inode table block 34360905424 in block_group 0 [ 48.491485][ T378] EXT4-fs error (device loop0): __ext4_get_inode_loc:4352: comm kworker/u4:7: Invalid inode table block 34360905424 in block_group 0 [ 48.521528][ T386] RIP: 0010:ext4_writepages+0x2eed/0x2f90 [ 48.527961][ T386] Code: 00 74 08 48 89 df e8 22 09 ce ff 48 8b 3b 48 8b 74 24 28 48 8b 54 24 30 44 89 e9 45 89 f0 e8 4a 9b 07 00 eb 51 e8 73 97 8f ff <0f> 0b e8 6c 97 8f ff eb 2f e8 65 97 8f ff eb 5f e8 5e 97 8f ff 31 [ 48.550954][ T420] loop3: detected capacity change from 0 to 2048 [ 48.556835][ T386] RSP: 0018:ffffc900010e7340 EFLAGS: 00010293 [ 48.560266][ T422] loop1: detected capacity change from 0 to 2048 [ 48.563451][ T386] RAX: ffffffff81d90d6d RBX: ffff8881131d6a88 RCX: ffff888112290000 [ 48.578385][ T386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.586467][ T386] RBP: ffffc900010e76b0 R08: dffffc0000000000 R09: ffffed102263ad4a [ 48.595905][ T386] R10: ffffed102263ad4a R11: 1ffff1102263ad49 R12: dffffc0000000000 [ 48.597812][ T420] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.604480][ T386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 48.615107][ T420] ext4 filesystem being mounted at /root/syzkaller-testdir2483485519/syzkaller.GZEghL/2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.637969][ T386] FS: 00007fb5274f56c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.652656][ T386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.669071][ T428] loop0: detected capacity change from 0 to 2048 [ 48.675477][ T386] CR2: 00007fbe38879000 CR3: 00000001250eb000 CR4: 00000000003506a0 [ 48.683538][ T386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.691864][ T386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.700334][ T386] Kernel panic - not syncing: Fatal exception [ 48.711865][ T386] Kernel Offset: disabled [ 48.716214][ T386] Rebooting in 86400 seconds..