Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. 2024/04/09 04:23:47 ignoring optional flag "sandboxArg"="0" 2024/04/09 04:23:48 parsed 1 programs 2024/04/09 04:23:48 executed programs: 0 [ 41.473313][ T30] audit: type=1400 audit(1712636628.071:152): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.508357][ T30] audit: type=1400 audit(1712636628.071:153): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.674511][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.681543][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.689238][ T349] device bridge_slave_0 entered promiscuous mode [ 41.704693][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.711563][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.718656][ T346] device bridge_slave_0 entered promiscuous mode [ 41.727456][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.734314][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.741603][ T349] device bridge_slave_1 entered promiscuous mode [ 41.750753][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.757581][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.764900][ T356] device bridge_slave_0 entered promiscuous mode [ 41.774143][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.781016][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.788084][ T344] device bridge_slave_0 entered promiscuous mode [ 41.794544][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.801509][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.808884][ T346] device bridge_slave_1 entered promiscuous mode [ 41.824839][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.831875][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.839373][ T356] device bridge_slave_1 entered promiscuous mode [ 41.845682][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.852703][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.860405][ T344] device bridge_slave_1 entered promiscuous mode [ 41.871390][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.878517][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.886899][ T357] device bridge_slave_0 entered promiscuous mode [ 41.912531][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.919416][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.926613][ T357] device bridge_slave_1 entered promiscuous mode [ 41.933517][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.940506][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.947839][ T352] device bridge_slave_0 entered promiscuous mode [ 41.954579][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.961532][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.968951][ T352] device bridge_slave_1 entered promiscuous mode [ 42.087932][ T30] audit: type=1400 audit(1712636628.681:154): avc: denied { write } for pid=346 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.093167][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.108664][ T30] audit: type=1400 audit(1712636628.691:155): avc: denied { read } for pid=346 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.115444][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.143300][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.150228][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.217376][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.224851][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.232017][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.238914][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.251581][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.258790][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.265961][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.272940][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.286338][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.293266][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.300291][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.307188][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.338772][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.345710][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.352855][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.359702][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.380950][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.387982][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.395531][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.402432][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.418128][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.425579][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.433185][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.440368][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.447348][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.454599][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.461751][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.474196][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.481427][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.488439][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.495829][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.503273][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.511158][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.518610][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.529097][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.537258][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.544502][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.559624][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.567650][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.574508][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.582414][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.590329][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.597702][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.606197][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.613209][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.620419][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.628978][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.635995][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.656098][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.669143][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.677231][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.685495][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.692540][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.699803][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.707823][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.715934][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.722791][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.730014][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.737805][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.746093][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.753923][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.781060][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.788420][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.795890][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.804661][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.812737][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.819594][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.826832][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.834893][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.842827][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.850967][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.859070][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.866134][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.873429][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.881510][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.889319][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.896487][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.903752][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.911941][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.920288][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.927220][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.934568][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.942861][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.950931][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.957758][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.965141][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.972800][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.980090][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.988120][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.996433][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.003491][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.023777][ T349] device veth0_vlan entered promiscuous mode [ 43.031880][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.040140][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.047997][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.055921][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.063780][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.077520][ T346] device veth0_vlan entered promiscuous mode [ 43.091619][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.100209][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.109507][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.117936][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.126234][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.134388][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.142294][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.150325][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.157987][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.166527][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.174731][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.181688][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.195856][ T356] device veth0_vlan entered promiscuous mode [ 43.214446][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.222770][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.230681][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.238139][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.246010][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.253623][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.261010][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.269553][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.277503][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.285458][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.304909][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.315559][ T356] device veth1_macvtap entered promiscuous mode [ 43.323483][ T349] device veth1_macvtap entered promiscuous mode [ 43.334080][ T346] device veth1_macvtap entered promiscuous mode [ 43.342500][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.351201][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.360149][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.368248][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.382911][ T344] device veth0_vlan entered promiscuous mode [ 43.394537][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.402437][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.410183][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.417355][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.425554][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.445628][ T344] device veth1_macvtap entered promiscuous mode [ 43.453995][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.462787][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.471554][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.479912][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.488291][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.496682][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.505600][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.513821][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.522142][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.530312][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.540072][ T30] audit: type=1400 audit(1712636630.141:156): avc: denied { mounton } for pid=349 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.547648][ T352] device veth0_vlan entered promiscuous mode [ 43.576320][ T357] device veth0_vlan entered promiscuous mode [ 43.582841][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.592988][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.596373][ T382] loop3: detected capacity change from 0 to 2048 [ 43.600602][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.611239][ T30] audit: type=1400 audit(1712636630.211:157): avc: denied { mounton } for pid=381 comm="syz-executor.3" path="/root/syzkaller-testdir814905560/syzkaller.VNXmLh/0/bus" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 43.641688][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.650872][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.659670][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.660617][ T382] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.668029][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.678522][ T30] audit: type=1400 audit(1712636630.281:158): avc: denied { mount } for pid=381 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.694167][ T357] device veth1_macvtap entered promiscuous mode [ 43.709202][ T382] ext4 filesystem being mounted at /root/syzkaller-testdir814905560/syzkaller.VNXmLh/0/bus supports timestamps until 2038 (0x7fffffff) [ 43.732125][ T30] audit: type=1400 audit(1712636630.331:159): avc: denied { write } for pid=381 comm="syz-executor.3" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.737990][ T352] device veth1_macvtap entered promiscuous mode [ 43.754296][ T30] audit: type=1400 audit(1712636630.331:160): avc: denied { add_name } for pid=381 comm="syz-executor.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.767205][ T391] loop2: detected capacity change from 0 to 2048 [ 43.781480][ T30] audit: type=1400 audit(1712636630.331:161): avc: denied { create } for pid=381 comm="syz-executor.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.808379][ T382] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz-executor.3: Invalid block bitmap block 5012810950875536 in block_group 0 [ 43.824568][ T382] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 34360905424 in block_group 0 [ 43.839707][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.840715][ T382] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 43.848198][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.857446][ T382] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #19: comm syz-executor.3: mark_inode_dirty error [ 43.866367][ T391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.877714][ T382] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 34360905424 in block_group 0 [ 43.888277][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.901722][ T382] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 43.909430][ T391] ext4 filesystem being mounted at /root/syzkaller-testdir1519979133/syzkaller.O9pfm2/0/bus supports timestamps until 2038 (0x7fffffff) [ 43.918514][ T382] EXT4-fs error (device loop3): ext4_ext_truncate:4402: inode #19: comm syz-executor.3: mark_inode_dirty error [ 43.932574][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.944744][ T382] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 34360905424 in block_group 0 [ 43.952144][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.965432][ T382] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 43.977969][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.982755][ T382] EXT4-fs error (device loop3): ext4_truncate:4292: inode #19: comm syz-executor.3: mark_inode_dirty error [ 44.002168][ T382] ================================================================== [ 44.010355][ T382] BUG: KASAN: use-after-free in ext4_find_extent+0xbab/0xdb0 [ 44.017878][ T382] Read of size 4 at addr ffff88811e4d7a58 by task syz-executor.3/382 [ 44.025779][ T382] [ 44.027940][ T382] CPU: 1 PID: 382 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.038194][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.048077][ T382] Call Trace: [ 44.051203][ T382] [ 44.054065][ T382] dump_stack_lvl+0x151/0x1b7 [ 44.058800][ T382] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.064217][ T382] ? __wake_up_klogd+0xd5/0x110 [ 44.069163][ T382] ? panic+0x751/0x751 [ 44.073189][ T382] print_address_description+0x87/0x3b0 [ 44.078636][ T382] kasan_report+0x179/0x1c0 [ 44.082980][ T382] ? __read_extent_tree_block+0x1e0/0x7b0 [ 44.088531][ T382] ? ext4_find_extent+0xbab/0xdb0 [ 44.093396][ T382] ? ext4_find_extent+0xbab/0xdb0 [ 44.098253][ T382] __asan_report_load4_noabort+0x14/0x20 [ 44.104173][ T382] ext4_find_extent+0xbab/0xdb0 [ 44.108958][ T382] ext4_ext_map_blocks+0x254/0x7250 [ 44.114289][ T382] ? uncharge_batch+0x4b0/0x4b0 [ 44.119009][ T382] ? stack_trace_snprint+0xf0/0xf0 [ 44.123973][ T382] ? __stack_depot_save+0x34/0x470 [ 44.129173][ T382] ? find_get_entry+0x3d3/0x3e0 [ 44.134289][ T382] ? ext4_ext_release+0x10/0x10 [ 44.138972][ T382] ? __kasan_slab_alloc+0xc3/0xe0 [ 44.143920][ T382] ? __kasan_slab_alloc+0xb1/0xe0 [ 44.148967][ T382] ? slab_post_alloc_hook+0x53/0x2c0 [ 44.154258][ T382] ? kmem_cache_alloc+0xf5/0x200 [ 44.159026][ T382] ? ext4_alloc_io_end_vec+0x2a/0x170 [ 44.164370][ T382] ? ext4_writepages+0x13b4/0x4000 [ 44.169655][ T382] ? do_writepages+0x40e/0x670 [ 44.174346][ T382] ? filemap_fdatawrite_wbc+0x248/0x2a0 [ 44.179900][ T382] ? file_write_and_wait_range+0x1cb/0x2b0 [ 44.185534][ T382] ? ext4_sync_file+0x1a2/0xa50 [ 44.190219][ T382] ? vfs_fsync_range+0x17b/0x190 [ 44.195084][ T382] ? ext4_buffered_write_iter+0x568/0x610 [ 44.200655][ T382] ? ext4_file_write_iter+0x443/0x1c80 [ 44.206752][ T382] ? vfs_write+0xd5d/0x1110 [ 44.212530][ T382] ? ksys_write+0x199/0x2c0 [ 44.217144][ T382] ? __x64_sys_write+0x7b/0x90 [ 44.222165][ T382] ? do_syscall_64+0x3d/0xb0 [ 44.226587][ T382] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.232751][ T382] ? _raw_read_unlock+0x25/0x40 [ 44.237435][ T382] ? ext4_es_lookup_extent+0x33b/0x940 [ 44.242737][ T382] ext4_map_blocks+0xaa7/0x1e00 [ 44.247547][ T382] ? ext4_issue_zeroout+0x250/0x250 [ 44.252539][ T382] ? ext4_inode_journal_mode+0x1a5/0x470 [ 44.258017][ T382] ext4_writepages+0x1628/0x4000 [ 44.262826][ T382] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 44.268426][ T382] ? ext4_readpage+0x230/0x230 [ 44.273550][ T382] ? ext4_readahead+0x110/0x110 [ 44.278382][ T382] ? __ext4_handle_dirty_metadata+0x2f1/0x830 [ 44.285034][ T382] ? ext4_fc_track_inode+0x200/0x200 [ 44.290384][ T382] ? up_read+0x55/0x170 [ 44.294463][ T382] ? ext4_readpage+0x230/0x230 [ 44.299409][ T382] do_writepages+0x40e/0x670 [ 44.304124][ T382] ? __writepage+0x130/0x130 [ 44.308792][ T382] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 44.313944][ T382] ? __kasan_check_write+0x14/0x20 [ 44.319314][ T382] ? _raw_spin_lock+0xa4/0x1b0 [ 44.324010][ T382] ? _raw_spin_unlock+0x4d/0x70 [ 44.328812][ T382] ? __get_user_nocheck_1+0x6/0x10 [ 44.333809][ T382] filemap_fdatawrite_wbc+0x248/0x2a0 [ 44.339453][ T382] file_write_and_wait_range+0x1cb/0x2b0 [ 44.345446][ T382] ? __filemap_set_wb_err+0x120/0x120 [ 44.350657][ T382] ext4_sync_file+0x1a2/0xa50 [ 44.355181][ T382] ? __kasan_slab_free+0x11/0x20 [ 44.360377][ T382] vfs_fsync_range+0x17b/0x190 [ 44.365255][ T382] ext4_buffered_write_iter+0x568/0x610 [ 44.370824][ T382] ext4_file_write_iter+0x443/0x1c80 [ 44.376085][ T382] ? avc_policy_seqno+0x1b/0x70 [ 44.380898][ T382] ? ext4_file_read_iter+0x4b0/0x4b0 [ 44.386318][ T382] ? fsnotify_perm+0x6a/0x5d0 [ 44.390950][ T382] ? iov_iter_init+0x53/0x190 [ 44.395881][ T382] vfs_write+0xd5d/0x1110 [ 44.400120][ T382] ? kmem_cache_free+0x116/0x2e0 [ 44.404894][ T382] ? file_end_write+0x1c0/0x1c0 [ 44.409670][ T382] ? mutex_lock+0xb6/0x1e0 [ 44.414325][ T382] ? wait_for_completion_killable_timeout+0x10/0x10 [ 44.421861][ T382] ? __fdget_pos+0x2e7/0x3a0 [ 44.426283][ T382] ? ksys_write+0x77/0x2c0 [ 44.430623][ T382] ksys_write+0x199/0x2c0 [ 44.434849][ T382] ? __ia32_sys_read+0x90/0x90 [ 44.439387][ T382] ? __kasan_check_read+0x11/0x20 [ 44.444598][ T382] __x64_sys_write+0x7b/0x90 [ 44.449021][ T382] do_syscall_64+0x3d/0xb0 [ 44.453367][ T382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.459433][ T382] RIP: 0033:0x7f980bec5859 [ 44.463808][ T382] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.483618][ T382] RSP: 002b:00007f980ba480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.492042][ T382] RAX: ffffffffffffffda RBX: 00007f980bfe4f80 RCX: 00007f980bec5859 [ 44.499853][ T382] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000006 [ 44.507780][ T382] RBP: 00007f980bf21ad0 R08: 0000000000000000 R09: 0000000000000000 [ 44.515943][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.523839][ T382] R13: 000000000000000b R14: 00007f980bfe4f80 R15: 00007ffc41097578 [ 44.533426][ T382] [ 44.536511][ T382] [ 44.539312][ T382] The buggy address belongs to the page: [ 44.545032][ T382] page:ffffea00047935c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x11e4d7 [ 44.555292][ T382] flags: 0x4000000000000000(zone=1) [ 44.560324][ T382] raw: 4000000000000000 ffffea0004795448 ffffea0004793588 0000000000000000 [ 44.569180][ T382] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 44.578765][ T382] page dumped because: kasan: bad access detected [ 44.585390][ T382] page_owner tracks the page as freed [ 44.590597][ T382] page last allocated via order 0, migratetype Movable, gfp_mask 0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 287, ts 23406293832, free_ts 23960855643 [ 44.607317][ T382] post_alloc_hook+0x1a3/0x1b0 [ 44.612118][ T382] prep_new_page+0x1b/0x110 [ 44.616736][ T382] get_page_from_freelist+0x3550/0x35d0 [ 44.622106][ T382] __alloc_pages+0x27e/0x8f0 [ 44.626677][ T382] handle_pte_fault+0xe1f/0x2340 [ 44.631533][ T382] do_handle_mm_fault+0x1fed/0x2330 [ 44.636569][ T382] exc_page_fault+0x26f/0x830 [ 44.641170][ T382] asm_exc_page_fault+0x27/0x30 [ 44.646071][ T382] page last free stack trace: [ 44.650887][ T382] free_unref_page_prepare+0x7c8/0x7d0 [ 44.657307][ T382] free_unref_page_list+0x14b/0xa60 [ 44.662794][ T382] release_pages+0x1310/0x1370 [ 44.667479][ T382] free_pages_and_swap_cache+0x8a/0xa0 [ 44.672857][ T382] tlb_finish_mmu+0x177/0x320 [ 44.677372][ T382] exit_mmap+0x3ef/0x6f0 [ 44.681448][ T382] __mmput+0x95/0x310 [ 44.685271][ T382] mmput+0x5b/0x170 [ 44.688912][ T382] do_exit+0xb9c/0x2ca0 [ 44.692909][ T382] do_group_exit+0x141/0x310 [ 44.697329][ T382] get_signal+0x7a3/0x1630 [ 44.701592][ T382] arch_do_signal_or_restart+0xbd/0x1680 [ 44.707224][ T382] exit_to_user_mode_loop+0xa0/0xe0 [ 44.712357][ T382] exit_to_user_mode_prepare+0x5a/0xa0 [ 44.717783][ T382] syscall_exit_to_user_mode+0x26/0x160 [ 44.723142][ T382] do_syscall_64+0x49/0xb0 [ 44.727505][ T382] [ 44.729763][ T382] Memory state around the buggy address: [ 44.735218][ T382] ffff88811e4d7900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.743133][ T382] ffff88811e4d7980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.751364][ T382] >ffff88811e4d7a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.759549][ T382] ^ [ 44.766330][ T382] ffff88811e4d7a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.774310][ T382] ffff88811e4d7b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 44.782333][ T382] ================================================================== [ 44.790546][ T382] Disabling lock debugging due to kernel taint [ 44.800576][ T382] ------------[ cut here ]------------ [ 44.800632][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 44.805877][ T382] kernel BUG at fs/ext4/inode.c:2421! [ 44.838773][ T382] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 44.845469][ T382] CPU: 1 PID: 382 Comm: syz-executor.3 Tainted: G B 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.857096][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.867372][ T382] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 44.873102][ T382] Code: 00 74 08 48 89 df e8 f4 d7 c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 cc 2d 08 00 eb 58 e8 05 db 87 ff <0f> 0b e8 fe da 87 ff eb 3b e8 f7 da 87 ff eb 72 e8 f0 da 87 ff 31 [ 44.892541][ T382] RSP: 0018:ffffc90000f07260 EFLAGS: 00010293 [ 44.898459][ T382] RAX: ffffffff81e8444b RBX: dffffc0000000000 RCX: ffff88810cc8a780 [ 44.906256][ T382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.914077][ T382] RBP: ffffc90000f07670 R08: ffffffff81e81e0b R09: ffffed10218463cb [ 44.922142][ T382] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 44.929957][ T382] R13: ffffc90000f07540 R14: 0000000000000000 R15: 0000000000000000 [ 44.937851][ T382] FS: 00007f980ba486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 44.946803][ T382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.953208][ T382] CR2: 0000000020011000 CR3: 0000000127158000 CR4: 00000000003506a0 [ 44.961206][ T382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.969018][ T382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.977092][ T382] Call Trace: [ 44.980206][ T382] [ 44.982995][ T382] ? __die_body+0x62/0xb0 [ 44.987342][ T382] ? die+0x88/0xb0 [ 44.991091][ T382] ? do_trap+0x103/0x330 [ 44.995168][ T382] ? ext4_writepages+0x3f4b/0x4000 [ 45.000110][ T382] ? handle_invalid_op+0x95/0xc0 [ 45.004884][ T382] ? ext4_writepages+0x3f4b/0x4000 [ 45.010098][ T382] ? exc_invalid_op+0x32/0x50 [ 45.014781][ T382] ? asm_exc_invalid_op+0x1b/0x20 [ 45.019765][ T382] ? ext4_writepages+0x190b/0x4000 [ 45.024654][ T382] ? ext4_writepages+0x3f4b/0x4000 [ 45.029851][ T382] ? ext4_writepages+0x3f4b/0x4000 [ 45.035724][ T382] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 45.041428][ T382] ? ext4_readpage+0x230/0x230 [ 45.046453][ T382] ? ext4_readahead+0x110/0x110 [ 45.051166][ T382] ? __ext4_handle_dirty_metadata+0x2f1/0x830 [ 45.057043][ T382] ? ext4_fc_track_inode+0x200/0x200 [ 45.062250][ T382] ? up_read+0x55/0x170 [ 45.066243][ T382] ? ext4_readpage+0x230/0x230 [ 45.070849][ T382] do_writepages+0x40e/0x670 [ 45.075371][ T382] ? __writepage+0x130/0x130 [ 45.079956][ T382] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 45.085081][ T382] ? __kasan_check_write+0x14/0x20 [ 45.090036][ T382] ? _raw_spin_lock+0xa4/0x1b0 [ 45.094626][ T382] ? _raw_spin_unlock+0x4d/0x70 [ 45.099582][ T382] ? __get_user_nocheck_1+0x6/0x10 [ 45.104528][ T382] filemap_fdatawrite_wbc+0x248/0x2a0 [ 45.110018][ T382] file_write_and_wait_range+0x1cb/0x2b0 [ 45.115593][ T382] ? __filemap_set_wb_err+0x120/0x120 [ 45.120784][ T382] ext4_sync_file+0x1a2/0xa50 [ 45.125383][ T382] ? __kasan_slab_free+0x11/0x20 [ 45.130345][ T382] vfs_fsync_range+0x17b/0x190 [ 45.135027][ T382] ext4_buffered_write_iter+0x568/0x610 [ 45.140405][ T382] ext4_file_write_iter+0x443/0x1c80 [ 45.145532][ T382] ? avc_policy_seqno+0x1b/0x70 [ 45.150297][ T382] ? ext4_file_read_iter+0x4b0/0x4b0 [ 45.155420][ T382] ? fsnotify_perm+0x6a/0x5d0 [ 45.159930][ T382] ? iov_iter_init+0x53/0x190 [ 45.164566][ T382] vfs_write+0xd5d/0x1110 [ 45.168799][ T382] ? kmem_cache_free+0x116/0x2e0 [ 45.173573][ T382] ? file_end_write+0x1c0/0x1c0 [ 45.178442][ T382] ? mutex_lock+0xb6/0x1e0 [ 45.182690][ T382] ? wait_for_completion_killable_timeout+0x10/0x10 [ 45.189128][ T382] ? __fdget_pos+0x2e7/0x3a0 [ 45.193623][ T382] ? ksys_write+0x77/0x2c0 [ 45.197878][ T382] ksys_write+0x199/0x2c0 [ 45.202055][ T382] ? __ia32_sys_read+0x90/0x90 [ 45.206999][ T382] ? __kasan_check_read+0x11/0x20 [ 45.212026][ T382] __x64_sys_write+0x7b/0x90 [ 45.216442][ T382] do_syscall_64+0x3d/0xb0 [ 45.220727][ T382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.226506][ T382] RIP: 0033:0x7f980bec5859 [ 45.230769][ T382] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.250299][ T382] RSP: 002b:00007f980ba480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.258816][ T382] RAX: ffffffffffffffda RBX: 00007f980bfe4f80 RCX: 00007f980bec5859 [ 45.266779][ T382] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000006 [ 45.274591][ T382] RBP: 00007f980bf21ad0 R08: 0000000000000000 R09: 0000000000000000 [ 45.282404][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.290301][ T382] R13: 000000000000000b R14: 00007f980bfe4f80 R15: 00007ffc41097578 [ 45.298192][ T382] [ 45.300981][ T382] Modules linked in: [ 45.305632][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.307225][ T382] ---[ end trace ee85b7ff2350f106 ]--- [ 45.316877][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.320150][ T382] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 45.327635][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.332656][ T382] Code: 00 74 08 48 89 df e8 f4 d7 c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 cc 2d 08 00 eb 58 e8 05 db 87 ff <0f> 0b e8 fe da 87 ff eb 3b e8 f7 da 87 ff eb 72 e8 f0 da 87 ff 31 [ 45.332673][ T382] RSP: 0018:ffffc90000f07260 EFLAGS: 00010293 [ 45.332689][ T382] RAX: ffffffff81e8444b RBX: dffffc0000000000 RCX: ffff88810cc8a780 [ 45.332701][ T382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.332710][ T382] RBP: ffffc90000f07670 R08: ffffffff81e81e0b R09: ffffed10218463cb [ 45.342162][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.360362][ T382] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 45.398492][ T397] loop2: detected capacity change from 0 to 2048 [ 45.405684][ T382] R13: ffffc90000f07540 R14: 0000000000000000 R15: 0000000000000000 [ 45.420247][ T382] FS: 00007f980ba486c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.429369][ T382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.435885][ T382] CR2: 0000000020011000 CR3: 0000000127158000 CR4: 00000000003506a0 [ 45.448116][ T382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.449107][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.460138][ T382] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.473485][ T382] Kernel panic - not syncing: Fatal exception [ 45.474872][ T400] loop0: detected capacity change from 0 to 2048 [ 45.479700][ T382] Kernel Offset: disabled [ 45.490196][ T382] Rebooting in 86400 seconds..