Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. 2024/09/15 14:34:30 ignoring optional flag "sandboxArg"="0" 2024/09/15 14:34:30 parsed 1 programs [ 45.355748][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 45.355760][ T23] audit: type=1400 audit(1726410870.680:95): avc: denied { unlink } for pid=407 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/09/15 14:34:30 executed programs: 0 [ 45.498401][ T407] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.575264][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.582821][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.591041][ T414] device bridge_slave_0 entered promiscuous mode [ 45.598571][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.605983][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.613982][ T414] device bridge_slave_1 entered promiscuous mode [ 45.670242][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.677110][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.684275][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.691107][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.718142][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.726814][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.734851][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.742460][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.753098][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.761316][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.768201][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.783780][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.792161][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.799346][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.807440][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.817472][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.835624][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.855285][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.864588][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.882597][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.891243][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.954047][ T23] audit: type=1400 audit(1726410871.280:96): avc: denied { mounton } for pid=419 comm="syz-executor.0" path="/root/syzkaller-testdir530379923/syzkaller.MVlLGP/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 45.984638][ T420] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 45.995895][ T420] EXT4-fs (loop0): 1 truncate cleaned up [ 46.001447][ T420] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 46.024450][ T23] audit: type=1400 audit(1726410871.350:97): avc: denied { mount } for pid=419 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.048291][ T23] audit: type=1400 audit(1726410871.350:98): avc: denied { write } for pid=419 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.050205][ T414] ================================================================== [ 46.070595][ T23] audit: type=1400 audit(1726410871.350:99): avc: denied { add_name } for pid=419 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.078452][ T414] BUG: KASAN: use-after-free in ext4_inlinedir_to_tree+0x555/0x1160 [ 46.078470][ T414] Read of size 68 at addr ffff8881f0e82ec9 by task syz-executor.0/414 [ 46.099248][ T23] audit: type=1400 audit(1726410871.350:100): avc: denied { create } for pid=419 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.107608][ T414] [ 46.107627][ T414] CPU: 0 PID: 414 Comm: syz-executor.0 Not tainted 5.4.281-syzkaller-04949-gc8a568fb88e9 #0 [ 46.107633][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.107645][ T414] Call Trace: [ 46.107668][ T414] dump_stack+0x1d8/0x241 [ 46.107686][ T414] ? __kasan_kmalloc+0x171/0x210 [ 46.115999][ T23] audit: type=1400 audit(1726410871.350:101): avc: denied { write open } for pid=419 comm="syz-executor.0" path="/root/syzkaller-testdir530379923/syzkaller.MVlLGP/0/file0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.136183][ T414] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 46.136194][ T414] ? printk+0xd1/0x111 [ 46.136203][ T414] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 46.136221][ T414] ? wake_up_klogd+0xb2/0xf0 [ 46.138380][ T23] audit: type=1400 audit(1726410871.350:102): avc: denied { mounton } for pid=419 comm="syz-executor.0" path="/root/syzkaller-testdir530379923/syzkaller.MVlLGP/0/file0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.149096][ T414] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 46.149106][ T414] print_address_description+0x8c/0x600 [ 46.149123][ T414] ? panic+0x89d/0x89d [ 46.160169][ T23] audit: type=1400 audit(1726410871.350:103): avc: denied { append } for pid=419 comm="syz-executor.0" path="/root/syzkaller-testdir530379923/syzkaller.MVlLGP/0/file0/file0/memory.events" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.163898][ T414] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 46.163909][ T414] __kasan_report+0xf3/0x120 [ 46.163926][ T414] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 46.168052][ T23] audit: type=1400 audit(1726410871.350:104): avc: denied { map } for pid=419 comm="syz-executor.0" path="/root/syzkaller-testdir530379923/syzkaller.MVlLGP/0/file0/file0/bus" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.173153][ T414] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 46.173163][ T414] kasan_report+0x30/0x60 [ 46.173180][ T414] check_memory_region+0x272/0x280 [ 46.357873][ T414] memcpy+0x25/0x50 [ 46.361508][ T414] ext4_inlinedir_to_tree+0x555/0x1160 [ 46.366802][ T414] ? is_bpf_text_address+0x24c/0x260 [ 46.372614][ T414] ? ext4_convert_inline_data_nolock+0xd80/0xd80 [ 46.378863][ T414] ? unwind_get_return_address+0x49/0x80 [ 46.384338][ T414] ? arch_stack_walk+0xf5/0x140 [ 46.389371][ T414] ? __kasan_kmalloc+0x1d9/0x210 [ 46.394139][ T414] ? ksys_getdents64+0x21b/0x4c0 [ 46.398908][ T414] ? __kasan_kmalloc+0x171/0x210 [ 46.403684][ T414] ext4_htree_fill_tree+0x5b2/0x1770 [ 46.408808][ T414] ? ext4_handle_dirty_dirblock+0x6e0/0x6e0 [ 46.414635][ T414] ? kmem_cache_alloc_trace+0xdc/0x260 [ 46.419918][ T414] ? ext4_readdir+0x1d6c/0x3610 [ 46.424964][ T414] ext4_readdir+0x2c1d/0x3610 [ 46.429927][ T414] ? debug_smp_processor_id+0x20/0x20 [ 46.435103][ T414] ? debug_smp_processor_id+0x20/0x20 [ 46.440475][ T414] ? memset+0x1f/0x40 [ 46.444313][ T414] ? fsnotify+0x1280/0x1340 [ 46.448639][ T414] ? __fsnotify_parent+0xec/0x310 [ 46.453592][ T414] ? ext4_dir_llseek+0x500/0x500 [ 46.458642][ T414] ? down_read_killable+0x101/0x220 [ 46.463665][ T414] ? __fsnotify_parent+0x310/0x310 [ 46.468701][ T414] ? down_read_interruptible+0x220/0x220 [ 46.474278][ T414] ? security_file_permission+0x1dc/0x2f0 [ 46.480091][ T414] iterate_dir+0x266/0x4e0 [ 46.484429][ T414] ? ext4_dir_llseek+0x500/0x500 [ 46.489310][ T414] ksys_getdents64+0x21b/0x4c0 [ 46.494374][ T414] ? __ia32_sys_getdents+0x80/0x80 [ 46.499542][ T414] ? ksys_getdents64+0x4c0/0x4c0 [ 46.504672][ T414] ? __do_page_fault+0x725/0xbb0 [ 46.509538][ T414] __x64_sys_getdents64+0x76/0x80 [ 46.514815][ T414] do_syscall_64+0xca/0x1c0 [ 46.519260][ T414] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.525147][ T414] RIP: 0033:0x7f1d2db48363 [ 46.529431][ T414] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 46.549791][ T414] RSP: 002b:00007ffeb32403b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 46.558133][ T414] RAX: ffffffffffffffda RBX: 0000555556d34890 RCX: 00007f1d2db48363 [ 46.566236][ T414] RDX: 0000000000008000 RSI: 0000555556d34890 RDI: 0000000000000006 [ 46.574461][ T414] RBP: 0000555556d34864 R08: 0000000000000000 R09: 0000000000000000 [ 46.582547][ T414] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 46.590627][ T414] R13: 0000000000000016 R14: 0000555556d34860 R15: 0000000000000008 [ 46.598933][ T414] [ 46.601226][ T414] Allocated by task 394: [ 46.605433][ T414] __kasan_kmalloc+0x171/0x210 [ 46.610028][ T414] kmem_cache_alloc+0xd9/0x250 [ 46.614811][ T414] getname_flags+0xb8/0x4e0 [ 46.619383][ T414] do_sys_open+0x357/0x810 [ 46.623877][ T414] do_syscall_64+0xca/0x1c0 [ 46.628432][ T414] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.634144][ T414] [ 46.636316][ T414] Freed by task 394: [ 46.640044][ T414] __kasan_slab_free+0x1b5/0x270 [ 46.645069][ T414] kmem_cache_free+0x10b/0x2c0 [ 46.649706][ T414] do_sys_open+0x65e/0x810 [ 46.653957][ T414] do_syscall_64+0xca/0x1c0 [ 46.658298][ T414] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.664014][ T414] [ 46.666249][ T414] The buggy address belongs to the object at ffff8881f0e82200 [ 46.666249][ T414] which belongs to the cache names_cache of size 4096 [ 46.680571][ T414] The buggy address is located 3273 bytes inside of [ 46.680571][ T414] 4096-byte region [ffff8881f0e82200, ffff8881f0e83200) [ 46.693891][ T414] The buggy address belongs to the page: [ 46.699567][ T414] page:ffffea0007c3a000 refcount:1 mapcount:0 mapping:ffff8881f5d04c80 index:0x0 compound_mapcount: 0 [ 46.710650][ T414] flags: 0x8000000000010200(slab|head) [ 46.716475][ T414] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5d04c80 [ 46.724875][ T414] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 46.733753][ T414] page dumped because: kasan: bad access detected [ 46.740166][ T414] page_owner tracks the page as allocated [ 46.746020][ T414] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL) [ 46.762951][ T414] prep_new_page+0x18f/0x370 [ 46.767512][ T414] get_page_from_freelist+0x2d13/0x2d90 [ 46.773258][ T414] __alloc_pages_nodemask+0x393/0x840 [ 46.778763][ T414] alloc_slab_page+0x39/0x3c0 [ 46.783366][ T414] new_slab+0x97/0x440 [ 46.787438][ T414] ___slab_alloc+0x2fe/0x490 [ 46.792071][ T414] __slab_alloc+0x62/0xa0 [ 46.796250][ T414] kmem_cache_alloc+0x109/0x250 [ 46.801244][ T414] getname_flags+0xb8/0x4e0 [ 46.806019][ T414] do_sys_open+0x357/0x810 [ 46.810210][ T414] do_syscall_64+0xca/0x1c0 [ 46.814533][ T414] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 46.820273][ T414] page last free stack trace: [ 46.824896][ T414] __free_pages_ok+0x847/0x950 [ 46.829579][ T414] __free_pages+0x91/0x140 [ 46.833925][ T414] __free_slab+0x221/0x2e0 [ 46.838193][ T414] unfreeze_partials+0x14e/0x180 [ 46.842938][ T414] put_cpu_partial+0x44/0x180 [ 46.847521][ T414] __slab_free+0x297/0x360 [ 46.851809][ T414] qlist_free_all+0x43/0xb0 [ 46.856309][ T414] quarantine_reduce+0x1d9/0x210 [ 46.861189][ T414] __kasan_kmalloc+0x41/0x210 [ 46.865908][ T414] kmem_cache_alloc+0xd9/0x250 [ 46.870611][ T414] __alloc_skb+0x7a/0x4d0 [ 46.874774][ T414] alloc_skb_with_frags+0x92/0x550 [ 46.879820][ T414] sock_alloc_send_pskb+0x831/0x950 [ 46.884857][ T414] unix_stream_sendmsg+0x5b1/0xef0 [ 46.889875][ T414] sock_write_iter+0x344/0x470 [ 46.894571][ T414] __vfs_write+0x5d3/0x750 [ 46.899087][ T414] [ 46.901265][ T414] Memory state around the buggy address: [ 46.906879][ T414] ffff8881f0e82d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.914730][ T414] ffff8881f0e82e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.922639][ T414] >ffff8881f0e82e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.930612][ T414] ^ [ 46.937120][ T414] ffff8881f0e82f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.945023][ T414] ffff8881f0e82f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.953024][ T414] ================================================================== [ 46.961026][ T414] Disabling lock debugging due to kernel taint [ 46.972648][ T414] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir530379923/syzkaller.MVlLGP/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 47.000546][ T414] EXT4-fs error (device loop0): empty_inline_dir:1832: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 47.021449][ T414] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 47.036955][ T414] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 47.049150][ T414] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 47.933362][ T9] device bridge_slave_1 left promiscuous mode [ 47.939364][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.947175][ T9] device bridge_slave_0 left promiscuous mode [ 47.953349][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.236857][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.244116][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.251613][ T428] device bridge_slave_0 entered promiscuous mode [ 48.258856][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.265753][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.273625][ T428] device bridge_slave_1 entered promiscuous mode [ 48.330574][ T428] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.337459][ T428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.344597][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.351557][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.380846][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.390027][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.397955][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.409186][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.417368][ T106] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.424327][ T106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.435462][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.444208][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.451042][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.473909][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.482486][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.498478][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.511552][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.527480][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.547144][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.556670][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.615599][ T433] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.627301][ T433] EXT4-fs (loop0): 1 truncate cleaned up [ 48.633116][ T433] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 48.671823][ T428] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3128112756/syzkaller.hUMELT/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 48.699932][ T428] EXT4-fs error (device loop0): empty_inline_dir:1832: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 48.720733][ T428] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 48.737463][ T428] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 48.750056][ T428] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 49.733975][ T9] device bridge_slave_1 left promiscuous mode [ 49.740057][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.748000][ T9] device bridge_slave_0 left promiscuous mode [ 49.754590][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.004492][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.011497][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.019215][ T439] device bridge_slave_0 entered promiscuous mode [ 50.026100][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.032976][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.040814][ T439] device bridge_slave_1 entered promiscuous mode [ 50.097905][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.105247][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.112300][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.119096][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.127370][ T106] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.134697][ T106] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.165923][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.173543][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.184228][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.193987][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.202127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.209262][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.233618][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.242222][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.251584][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.258766][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.266370][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.275127][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.283275][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.291693][ T106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.304373][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.312509][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.334059][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.342141][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.350572][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.359124][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.373025][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.381717][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.390487][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.399071][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/09/15 14:34:35 executed programs: 6 [ 50.457086][ T445] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 50.467116][ T445] EXT4-fs (loop0): 1 truncate cleaned up [ 50.473317][ T445] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 50.521766][ T439] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3117941453/syzkaller.f00jxv/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 50.551166][ T439] EXT4-fs error (device loop0): empty_inline_dir:1832: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 50.572681][ T439] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 50.589578][ T439] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 50.602398][ T439] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 51.494265][ T179] device bridge_slave_1 left promiscuous mode [ 51.500872][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.508618][ T179] device bridge_slave_0 left promiscuous mode [ 51.514858][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.835878][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.842927][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.850340][ T450] device bridge_slave_0 entered promiscuous mode [ 51.857316][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.864156][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.871550][ T450] device bridge_slave_1 entered promiscuous mode [ 51.925770][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.932608][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.940533][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.947461][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.973825][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.982018][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.989938][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.014283][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.022379][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.029313][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.037130][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.045504][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.052535][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.060110][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.068104][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.088319][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.100577][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.117085][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.130707][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.141103][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.149399][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.215182][ T456] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 52.226805][ T456] EXT4-fs (loop0): 1 truncate cleaned up [ 52.232306][ T456] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 52.268941][ T450] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3534457463/syzkaller.mLsyIp/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 52.297584][ T450] EXT4-fs error (device loop0): empty_inline_dir:1832: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 52.317971][ T450] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 52.333384][ T450] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 52.345785][ T450] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 53.213283][ T179] device bridge_slave_1 left promiscuous mode [ 53.219448][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.227383][ T179] device bridge_slave_0 left promiscuous mode [ 53.233767][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.534868][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.541881][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.549489][ T461] device bridge_slave_0 entered promiscuous mode [ 53.556464][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.563334][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.571053][ T461] device bridge_slave_1 entered promiscuous mode [ 53.627567][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.635015][ T461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.642635][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.649629][ T461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.682289][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.690628][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.699207][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.715056][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.723566][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.730503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.738834][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.747114][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.754148][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.774190][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.782063][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.791948][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.813526][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.821338][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.837587][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.846033][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.897024][ T466] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 53.908779][ T466] EXT4-fs (loop0): 1 truncate cleaned up [ 53.914411][ T466] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 53.953267][ T461] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3879085202/syzkaller.QF1MvL/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 53.981876][ T461] EXT4-fs error (device loop0): empty_inline_dir:1832: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 54.002254][ T461] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 54.017546][ T461] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 54.029564][ T461] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 54.893237][ T9] device bridge_slave_1 left promiscuous mode [ 54.899408][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.906896][ T9] device bridge_slave_0 left promiscuous mode [ 54.913045][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.214863][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.221944][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.229846][ T473] device bridge_slave_0 entered promiscuous mode [ 55.237370][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.245179][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.252568][ T473] device bridge_slave_1 entered promiscuous mode [ 55.309612][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.316483][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.323974][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.330786][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.360742][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.370095][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.377716][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.388065][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.396363][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.403252][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.412755][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.421159][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.428555][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.443384][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.464161][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.473542][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.493801][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.502743][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.511035][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.525129][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/09/15 14:34:40 executed programs: 15 [ 55.595178][ T478] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.605184][ T478] EXT4-fs (loop0): 1 truncate cleaned up [ 55.610711][ T478] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 55.649134][ T473] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3556120486/syzkaller.Hy4spw/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 55.677594][ T473] EXT4-fs error (device loop0): empty_inline_dir:1832: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 55.698446][ T473] EXT4-fs warning (device loop0): empty_inline_dir:1839: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.714629][ T473] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 55.726850][ T473] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block