Warning: Permanently added '10.128.10.21' (ED25519) to the list of known hosts.
2025/03/07 07:54:50 ignoring optional flag "sandboxArg"="0"
2025/03/07 07:54:50 ignoring optional flag "type"="gce"
2025/03/07 07:54:50 parsed 1 programs
[   57.704757][ T1882] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
2025/03/07 07:54:56 executed programs: 0
[   66.672280][ T2863] loop0: detected capacity change from 0 to 512
[   66.686036][ T2863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.726671][ T2863] loop0: detected capacity change from 512 to 511
[   66.737199][ T2409] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0
[   66.758168][ T2409] ==================================================================
[   66.766223][ T2409] BUG: KASAN: use-after-free in ext4_read_inline_data+0x1a5/0x280
[   66.774186][ T2409] Read of size 324 at addr ffff88812617bc05 by task syz-executor/2409
[   66.782304][ T2409] 
[   66.784616][ T2409] CPU: 1 UID: 0 PID: 2409 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller #0
[   66.784621][ T2409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   66.784629][ T2409] Call Trace:
[   66.784634][ T2409]  <TASK>
[   66.784636][ T2409]  dump_stack_lvl+0x108/0x280
[   66.784645][ T2409]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.784650][ T2409]  ? __pfx__printk+0x10/0x10
[   66.784654][ T2409]  ? __virt_addr_valid+0x141/0x270
[   66.784660][ T2409]  ? __virt_addr_valid+0x229/0x270
[   66.784664][ T2409]  print_report+0x16e/0x5b0
[   66.784670][ T2409]  ? __virt_addr_valid+0x141/0x270
[   66.784674][ T2409]  ? __virt_addr_valid+0x229/0x270
[   66.784678][ T2409]  ? ext4_read_inline_data+0x1a5/0x280
[   66.784684][ T2409]  kasan_report+0x143/0x180
[   66.784689][ T2409]  ? ext4_read_inline_data+0x1a5/0x280
[   66.784693][ T2409]  kasan_check_range+0x282/0x290
[   66.784696][ T2409]  ? ext4_read_inline_data+0x1a5/0x280
[   66.784700][ T2409]  __asan_memcpy+0x29/0x70
[   66.784705][ T2409]  ext4_read_inline_data+0x1a5/0x280
[   66.784709][ T2409]  ext4_inlinedir_to_tree+0x2f6/0xe10
[   66.784714][ T2409]  ? __pfx_ext4_inlinedir_to_tree+0x10/0x10
[   66.784721][ T2409]  ext4_htree_fill_tree+0x4db/0x1240
[   66.784726][ T2409]  ? __lock_acquire+0x61d/0xc70
[   66.784730][ T2409]  ? __pfx_register_lock_class+0x10/0x10
[   66.784734][ T2409]  ? __pfx_ext4_htree_fill_tree+0x10/0x10
[   66.784738][ T2409]  ? __lock_acquire+0x61d/0xc70
[   66.784741][ T2409]  ? inode_query_iversion+0xd3/0x170
[   66.784746][ T2409]  ext4_readdir+0x253c/0x2fb0
[   66.784751][ T2409]  ? __mutex_lock+0x65c/0x1bb0
[   66.784757][ T2409]  ? fdget_pos+0x1c6/0x280
[   66.784762][ T2409]  ? __pfx___mutex_lock+0x10/0x10
[   66.784766][ T2409]  ? __pfx_ext4_readdir+0x10/0x10
[   66.784769][ T2409]  ? __pfx_down_read_killable+0x10/0x10
[   66.784773][ T2409]  ? reacquire_held_locks+0x3a3/0x5b0
[   66.784778][ T2409]  ? __pfx_reacquire_held_locks+0x10/0x10
[   66.784782][ T2409]  iterate_dir+0x18e/0x490
[   66.784785][ T2409]  __se_sys_getdents64+0x1b3/0x400
[   66.784790][ T2409]  ? __pfx___se_sys_getdents64+0x10/0x10
[   66.784792][ T2409]  ? __up_read+0x28b/0x370
[   66.784798][ T2409]  ? __pfx_filldir64+0x10/0x10
[   66.784801][ T2409]  do_syscall_64+0x8d/0x170
[   66.784807][ T2409]  ? clear_bhb_loop+0x55/0xb0
[   66.784813][ T2409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.784817][ T2409] RIP: 0033:0x7f7e76c8c013
[   66.784825][ T2409] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[   66.784829][ T2409] RSP: 002b:00007ffef2d8e748 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   66.784837][ T2409] RAX: ffffffffffffffda RBX: 0000555569fc0520 RCX: 00007f7e76c8c013
[   66.784840][ T2409] RDX: 0000000000008000 RSI: 0000555569fc0520 RDI: 0000000000000006
[   66.784843][ T2409] RBP: 0000555569fc04f4 R08: 0000000000000000 R09: 0000000000000000
[   66.784845][ T2409] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[   66.784848][ T2409] R13: 0000000000000016 R14: 0000555569fc04f0 R15: 00007ffef2d91ae0
[   66.784851][ T2409]  </TASK>
[   66.784853][ T2409] 
[   67.084526][ T2409] The buggy address belongs to the physical page:
[   67.090927][ T2409] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x55d001d5e pfn:0x12617b
[   67.100469][ T2409] flags: 0x200000000000000(node=0|zone=2)
[   67.106170][ T2409] raw: 0200000000000000 ffffea0004981688 ffffea0004985e88 0000000000000000
[   67.114730][ T2409] raw: 000000055d001d5e 0000000000000000 00000000ffffffff 0000000000000000
[   67.123282][ T2409] page dumped because: kasan: bad access detected
[   67.129674][ T2409] page_owner tracks the page as freed
[   67.135011][ T2409] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 2374, tgid 2374 (udevd), ts 62384448453, free_ts 65806595404
[   67.152076][ T2409]  post_alloc_hook+0x108/0x120
[   67.156813][ T2409]  get_page_from_freelist+0x3b4a/0x3d80
[   67.162327][ T2409]  __alloc_frozen_pages_noprof+0x256/0x650
[   67.168103][ T2409]  alloc_pages_mpol+0x14d/0x3b0
[   67.172924][ T2409]  vma_alloc_folio_noprof+0x2b9/0x430
[   67.178262][ T2409]  folio_prealloc+0x23/0xf0
[   67.182737][ T2409]  do_wp_page+0xb6d/0x2f40
[   67.187206][ T2409]  handle_mm_fault+0x1645/0x3230
[   67.192111][ T2409]  exc_page_fault+0x3fa/0x780
[   67.196766][ T2409]  asm_exc_page_fault+0x26/0x30
[   67.201584][ T2409] page last free pid 2374 tgid 2374 stack trace:
[   67.207876][ T2409]  free_unref_folios+0xb24/0x1340
[   67.212869][ T2409]  folios_put_refs+0x409/0x510
[   67.217690][ T2409]  free_pages_and_swap_cache+0x275/0x4d0
[   67.223306][ T2409]  tlb_flush_mmu+0x2ad/0x4e0
[   67.228134][ T2409]  tlb_finish_mmu+0xb6/0x1c0
[   67.232701][ T2409]  exit_mmap+0x48e/0xa40
[   67.236917][ T2409]  __mmput+0x61/0x290
[   67.240873][ T2409]  exit_mm+0x114/0x1b0
[   67.245001][ T2409]  do_exit+0x7d8/0x2550
[   67.249220][ T2409]  do_group_exit+0x1ba/0x280
[   67.253778][ T2409]  __x64_sys_exit_group+0x3f/0x40
[   67.258771][ T2409]  x64_sys_call+0x26a8/0x26b0
[   67.263501][ T2409]  do_syscall_64+0x8d/0x170
[   67.268159][ T2409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.274020][ T2409] 
[   67.276321][ T2409] Memory state around the buggy address:
[   67.281937][ T2409]  ffff88812617bb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   67.289987][ T2409]  ffff88812617bb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   67.298032][ T2409] >ffff88812617bc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   67.306069][ T2409]                    ^
[   67.310105][ T2409]  ffff88812617bc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   67.318141][ T2409]  ffff88812617bd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   67.326178][ T2409] ==================================================================
[   67.334463][ T2409] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   67.341858][ T2409] Kernel Offset: disabled
[   67.346251][ T2409] Rebooting in 86400 seconds..