Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts.
2024/12/14 10:37:39 ignoring optional flag "sandboxArg"="0"
2024/12/14 10:37:39 parsed 1 programs
[ 104.008214][ T4558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 106.289233][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.297199][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.327208][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 106.341963][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 106.350224][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 106.360131][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 106.909151][ T4599] chnl_net:caif_netlink_parms(): no params data found
[ 106.969639][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.976808][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 106.987217][ T4599] device bridge_slave_0 entered promiscuous mode
[ 106.996024][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.003617][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.012199][ T4599] device bridge_slave_1 entered promiscuous mode
[ 107.038882][ T4599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 107.050624][ T4599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 107.077129][ T4599] team0: Port device team_slave_0 added
[ 107.086057][ T4599] team0: Port device team_slave_1 added
[ 107.111148][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 107.118183][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 107.145040][ T4599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 107.158316][ T4599] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 107.165700][ T4599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 107.192054][ T4599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 107.223800][ T4599] device hsr_slave_0 entered promiscuous mode
[ 107.230809][ T4599] device hsr_slave_1 entered promiscuous mode
[ 107.949161][ T4599] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 107.981707][ T4599] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 107.991894][ T4599] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 108.003789][ T4599] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 108.124011][ T4599] 8021q: adding VLAN 0 to HW filter on device bond0
[ 108.139650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 108.150117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 108.161221][ T4599] 8021q: adding VLAN 0 to HW filter on device team0
[ 108.196121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 108.207036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 108.216689][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.223858][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 108.234101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 108.251157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 108.263552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 108.272971][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.280127][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 108.319970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 108.332722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 108.352406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 108.364798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 108.374889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 108.386796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 108.395998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 108.405117][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 108.413542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 108.426306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 108.435280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 108.444940][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 108.589439][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 108.596912][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 108.615379][ T4599] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 108.635791][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 108.645827][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 108.684295][ T4599] device veth0_vlan entered promiscuous mode
[ 108.691659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 108.702062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 108.729583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 108.740079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 108.750631][ T4599] device veth1_vlan entered promiscuous mode
[ 108.776378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 108.786670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 108.796959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 108.808874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 108.822319][ T4599] device veth0_macvtap entered promiscuous mode
[ 108.870760][ T4599] device veth1_macvtap entered promiscuous mode
[ 108.894088][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 108.903353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 108.912828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 108.923482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 108.933497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 108.949704][ T4599] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 108.958790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 108.969379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 108.982113][ T4599] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.991580][ T4599] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.000878][ T4599] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.010001][ T4599] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2024/12/14 10:37:50 executed programs: 0
[ 110.398707][ T4749] chnl_net:caif_netlink_parms(): no params data found
[ 110.528445][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.535607][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.559041][ T4749] device bridge_slave_0 entered promiscuous mode
[ 110.571563][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.587497][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.607216][ T4749] device bridge_slave_1 entered promiscuous mode
[ 110.671193][ T4749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.691853][ T4749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.765101][ T4749] team0: Port device team_slave_0 added
[ 110.775745][ T4749] team0: Port device team_slave_1 added
[ 110.821485][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.830587][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.860917][ T4749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.888666][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.895648][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.931090][ T4749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.983155][ T4749] device hsr_slave_0 entered promiscuous mode
[ 110.991292][ T4749] device hsr_slave_1 entered promiscuous mode
[ 110.998399][ T4749] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 111.006449][ T4749] Cannot create hsr debugfs directory
[ 111.087049][ T3032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 112.258833][ T4609] Bluetooth: hci0: command 0x0409 tx timeout
[ 114.337558][ T4607] Bluetooth: hci0: command 0x041b tx timeout
[ 114.462985][ T3032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.503513][ T3032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 114.573543][ T3032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.444191][ T4749] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 115.453756][ T4749] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 115.475980][ T4749] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 115.485267][ T4749] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 115.570230][ T4749] 8021q: adding VLAN 0 to HW filter on device bond0
[ 115.583358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 115.591197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 115.601967][ T4749] 8021q: adding VLAN 0 to HW filter on device team0
[ 115.625344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 115.634106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 115.643092][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 115.650195][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 115.661709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 115.670816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 115.679834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 115.688629][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 115.695671][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 115.718630][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 115.730747][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 115.742411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 115.752650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 115.762632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 115.776755][ T3032] device hsr_slave_0 left promiscuous mode
[ 115.783761][ T3032] device hsr_slave_1 left promiscuous mode
[ 115.790794][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 115.798364][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 115.806037][ T3032] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 115.814310][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 115.822136][ T3032] device bridge_slave_1 left promiscuous mode
[ 115.828448][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state
[ 115.836993][ T3032] device bridge_slave_0 left promiscuous mode
[ 115.843642][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state
[ 115.855773][ T3032] device veth1_macvtap left promiscuous mode
[ 115.862082][ T3032] device veth0_macvtap left promiscuous mode
[ 115.869030][ T3032] device veth1_vlan left promiscuous mode
[ 115.874941][ T3032] device veth0_vlan left promiscuous mode
[ 116.035429][ T3032] team0 (unregistering): Port device team_slave_1 removed
[ 116.049962][ T3032] team0 (unregistering): Port device team_slave_0 removed
[ 116.063144][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 116.078269][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 116.136962][ T3032] bond0 (unregistering): Released all slaves
[ 116.181448][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 116.190211][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 116.202933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 116.211861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 116.225201][ T4749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 116.239014][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 116.246768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 116.255749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 116.338779][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 116.346222][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 116.370956][ T4749] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 116.391075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 116.399819][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 116.418026][ T4240] Bluetooth: hci0: command 0x040f tx timeout
[ 116.420265][ T4749] device veth0_vlan entered promiscuous mode
[ 116.430619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 116.439043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 116.448505][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 116.456512][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 116.471308][ T4749] device veth1_vlan entered promiscuous mode
[ 116.500523][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 116.508982][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 116.516959][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 116.525611][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 116.542931][ T4749] device veth0_macvtap entered promiscuous mode
[ 116.551957][ T4749] device veth1_macvtap entered promiscuous mode
[ 116.566926][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 116.574410][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 116.582675][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 116.590953][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 116.600546][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 116.613415][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 116.624957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 116.634137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 116.646951][ T4749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.656275][ T4749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.665331][ T4749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.675323][ T4749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 116.741092][ T692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.756890][ T692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.777187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2024/12/14 10:37:56 executed programs: 2
[ 116.787990][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.795985][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.807241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 116.863365][ T5022] loop0: detected capacity change from 0 to 512
[ 117.042112][ T5022] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.15: inode #1: comm syz.0.15: iget: illegal inode #
[ 117.060111][ T5022] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.15: error while reading EA inode 1 err=-117
[ 117.073944][ T5022] EXT4-fs (loop0): 1 orphan inode deleted
[ 117.082374][ T5022] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 117.222885][ T5026] loop0: detected capacity change from 0 to 512
[ 117.246628][ T5026] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.16: inode #1: comm syz.0.16: iget: illegal inode #
[ 117.261500][ T5026] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.16: error while reading EA inode 1 err=-117
[ 117.274365][ T5026] EXT4-fs (loop0): 1 orphan inode deleted
[ 117.282496][ T5026] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 117.389551][ T5029] loop0: detected capacity change from 0 to 512
[ 117.478898][ T5029] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.17: inode #1: comm syz.0.17: iget: illegal inode #
[ 117.492670][ T5029] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 1 err=-117
[ 117.507238][ T5029] EXT4-fs (loop0): 1 orphan inode deleted
[ 117.513621][ T5029] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 117.617685][ T5032] loop0: detected capacity change from 0 to 512
[ 117.696195][ T5032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.18: inode #1: comm syz.0.18: iget: illegal inode #
[ 117.713896][ T5032] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.18: error while reading EA inode 1 err=-117
[ 117.727307][ T5032] EXT4-fs (loop0): 1 orphan inode deleted
[ 117.734783][ T5032] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 117.763163][ T5032] ==================================================================
[ 117.771490][ T5032] BUG: KASAN: use-after-free in ext4_insert_dentry+0x366/0x6c0
[ 117.779073][ T5032] Write of size 250 at addr ffff88805c264f18 by task syz.0.18/5032
[ 117.787059][ T5032]
[ 117.789423][ T5032] CPU: 0 PID: 5032 Comm: syz.0.18 Not tainted 5.15.173-syzkaller #0
[ 117.797426][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 117.807496][ T5032] Call Trace:
[ 117.810878][ T5032]
[ 117.813926][ T5032] dump_stack_lvl+0x1e3/0x2d0
[ 117.818616][ T5032] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 117.824259][ T5032] ? _printk+0xd1/0x120
[ 117.828502][ T5032] ? __wake_up_klogd+0xcc/0x100
[ 117.833348][ T5032] ? panic+0x860/0x860
[ 117.837418][ T5032] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 117.842912][ T5032] print_address_description+0x63/0x3b0
[ 117.848474][ T5032] ? ext4_insert_dentry+0x366/0x6c0
[ 117.853765][ T5032] kasan_report+0x16b/0x1c0
[ 117.858278][ T5032] ? ext4_insert_dentry+0x366/0x6c0
[ 117.863508][ T5032] kasan_check_range+0x27e/0x290
[ 117.868446][ T5032] ? ext4_insert_dentry+0x366/0x6c0
[ 117.873675][ T5032] memcpy+0x3c/0x60
[ 117.877502][ T5032] ext4_insert_dentry+0x366/0x6c0
[ 117.882553][ T5032] add_dirent_to_buf+0x384/0x7d0
[ 117.887503][ T5032] ? ext4_dx_add_entry+0x1620/0x1620
[ 117.892794][ T5032] ? __ext4_handle_dirty_metadata+0x2ef/0x800
[ 117.898880][ T5032] make_indexed_dir+0xf34/0x15a0
[ 117.903927][ T5032] ? add_dirent_to_buf+0x7d0/0x7d0
[ 117.909047][ T5032] ? add_dirent_to_buf+0x54e/0x7d0
[ 117.914158][ T5032] ? ext4_dx_add_entry+0x1620/0x1620
[ 117.919453][ T5032] ? __ext4_read_dirblock+0x522/0x890
[ 117.924925][ T5032] ext4_add_entry+0xde2/0x12b0
[ 117.929688][ T5032] ? ext4_inc_count+0x190/0x190
[ 117.934561][ T5032] ? ext4_init_new_dir+0x7c8/0xa20
[ 117.939667][ T5032] ? ext4_init_dot_dotdot+0x4e0/0x4e0
[ 117.945038][ T5032] ext4_mkdir+0x54f/0xce0
[ 117.949368][ T5032] ? ext4_symlink+0xed0/0xed0
[ 117.954133][ T5032] ? inode_permission+0xf7/0x450
[ 117.959157][ T5032] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 117.964206][ T5032] ? security_inode_mkdir+0xb4/0x100
[ 117.969502][ T5032] vfs_mkdir+0x3b6/0x590
[ 117.973758][ T5032] do_mkdirat+0x260/0x520
[ 117.978086][ T5032] ? vfs_mkdir+0x590/0x590
[ 117.982510][ T5032] ? getname_flags+0x1ec/0x4e0
[ 117.987402][ T5032] __x64_sys_mkdirat+0x85/0x90
[ 117.992211][ T5032] do_syscall_64+0x3b/0xb0
[ 117.996635][ T5032] ? clear_bhb_loop+0x15/0x70
[ 118.001311][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 118.007207][ T5032] RIP: 0033:0x7fd8357eb809
[ 118.011649][ T5032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 118.031630][ T5032] RSP: 002b:00007fd834a69058 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 118.040862][ T5032] RAX: ffffffffffffffda RBX: 00007fd8359b0fa0 RCX: 00007fd8357eb809
[ 118.048841][ T5032] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: ffffffffffffff9c
[ 118.056813][ T5032] RBP: 00007fd83585e93e R08: 0000000000000000 R09: 0000000000000000
[ 118.064784][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 118.072759][ T5032] R13: 0000000000000000 R14: 00007fd8359b0fa0 R15: 00007ffd6602f498
[ 118.080735][ T5032]
[ 118.083748][ T5032]
[ 118.086056][ T5032] The buggy address belongs to the page:
[ 118.091689][ T5032] page:ffffea0001709900 refcount:3 mapcount:0 mapping:ffff888017874f30 index:0x3f pfn:0x5c264
[ 118.101916][ T5032] memcg:ffff888075920000
[ 118.106147][ T5032] aops:def_blk_aops ino:700000
[ 118.110904][ T5032] flags: 0xfff0000000202a(referenced|dirty|active|private|node=0|zone=1|lastcpupid=0x7ff)
[ 118.120798][ T5032] raw: 00fff0000000202a 0000000000000000 dead000000000122 ffff888017874f30
[ 118.129370][ T5032] raw: 000000000000003f ffff8880711ad0e8 00000003ffffffff ffff888075920000
[ 118.138124][ T5032] page dumped because: kasan: bad access detected
[ 118.144524][ T5032] page_owner tracks the page as allocated
[ 118.150233][ T5032] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5032, ts 117762651204, free_ts 117386519017
[ 118.167692][ T5032] get_page_from_freelist+0x3b78/0x3d40
[ 118.173240][ T5032] __alloc_pages+0x272/0x700
[ 118.177902][ T5032] __page_cache_alloc+0xd4/0x4a0
[ 118.182830][ T5032] pagecache_get_page+0xa91/0x1010
[ 118.187936][ T5032] __getblk_gfp+0x22a/0xaf0
[ 118.192431][ T5032] ext4_getblk+0x259/0x710
[ 118.196836][ T5032] ext4_bread+0x2a/0x170
[ 118.201064][ T5032] ext4_append+0x31f/0x5c0
[ 118.205490][ T5032] make_indexed_dir+0x515/0x15a0
[ 118.210425][ T5032] ext4_add_entry+0xde2/0x12b0
[ 118.215213][ T5032] ext4_mkdir+0x54f/0xce0
[ 118.219532][ T5032] vfs_mkdir+0x3b6/0x590
[ 118.223770][ T5032] do_mkdirat+0x260/0x520
[ 118.228089][ T5032] __x64_sys_mkdirat+0x85/0x90
[ 118.232837][ T5032] do_syscall_64+0x3b/0xb0
[ 118.237262][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 118.243184][ T5032] page last free stack trace:
[ 118.247942][ T5032] free_unref_page_prepare+0xc34/0xcf0
[ 118.253844][ T5032] free_unref_page_list+0x1f7/0x8e0
[ 118.259044][ T5032] release_pages+0x1bb9/0x1f40
[ 118.264022][ T5032] tlb_finish_mmu+0x177/0x320
[ 118.268791][ T5032] unmap_region+0x304/0x350
[ 118.273468][ T5032] __do_munmap+0x12db/0x1740
[ 118.278060][ T5032] __vm_munmap+0x134/0x230
[ 118.282484][ T5032] __x64_sys_munmap+0x67/0x70
[ 118.287244][ T5032] do_syscall_64+0x3b/0xb0
[ 118.291772][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 118.297662][ T5032]
[ 118.299980][ T5032] Memory state around the buggy address:
[ 118.305599][ T5032] ffff88805c264f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 118.313662][ T5032] ffff88805c264f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 118.321723][ T5032] >ffff88805c265000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 118.329780][ T5032] ^
[ 118.334106][ T5032] ffff88805c265080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 118.342246][ T5032] ffff88805c265100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 118.350383][ T5032] ==================================================================
[ 118.358433][ T5032] Disabling lock debugging due to kernel taint
[ 118.369690][ T5032] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 118.376923][ T5032] CPU: 0 PID: 5032 Comm: syz.0.18 Tainted: G B 5.15.173-syzkaller #0
[ 118.386316][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 118.396639][ T5032] Call Trace:
[ 118.399908][ T5032]
[ 118.402826][ T5032] dump_stack_lvl+0x1e3/0x2d0
[ 118.407513][ T5032] ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[ 118.413142][ T5032] ? panic+0x860/0x860
[ 118.417217][ T5032] ? preempt_schedule_common+0xa6/0xd0
[ 118.422705][ T5032] ? preempt_schedule+0xd9/0xe0
[ 118.427551][ T5032] panic+0x318/0x860
[ 118.431457][ T5032] ? check_panic_on_warn+0x1d/0xa0
[ 118.436606][ T5032] ? fb_is_primary_device+0xd0/0xd0
[ 118.441802][ T5032] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 118.447774][ T5032] ? _raw_spin_unlock+0x40/0x40
[ 118.452614][ T5032] ? print_memory_metadata+0xe2/0x140
[ 118.458066][ T5032] check_panic_on_warn+0x7e/0xa0
[ 118.463109][ T5032] ? ext4_insert_dentry+0x366/0x6c0
[ 118.468305][ T5032] end_report+0x6d/0xf0
[ 118.472447][ T5032] kasan_report+0x18e/0x1c0
[ 118.476936][ T5032] ? ext4_insert_dentry+0x366/0x6c0
[ 118.482136][ T5032] kasan_check_range+0x27e/0x290
[ 118.487065][ T5032] ? ext4_insert_dentry+0x366/0x6c0
[ 118.492253][ T5032] memcpy+0x3c/0x60
[ 118.496056][ T5032] ext4_insert_dentry+0x366/0x6c0
[ 118.501081][ T5032] add_dirent_to_buf+0x384/0x7d0
[ 118.506010][ T5032] ? ext4_dx_add_entry+0x1620/0x1620
[ 118.511282][ T5032] ? __ext4_handle_dirty_metadata+0x2ef/0x800
[ 118.517363][ T5032] make_indexed_dir+0xf34/0x15a0
[ 118.522323][ T5032] ? add_dirent_to_buf+0x7d0/0x7d0
[ 118.527426][ T5032] ? add_dirent_to_buf+0x54e/0x7d0
[ 118.532546][ T5032] ? ext4_dx_add_entry+0x1620/0x1620
[ 118.537956][ T5032] ? __ext4_read_dirblock+0x522/0x890
[ 118.543322][ T5032] ext4_add_entry+0xde2/0x12b0
[ 118.548083][ T5032] ? ext4_inc_count+0x190/0x190
[ 118.552935][ T5032] ? ext4_init_new_dir+0x7c8/0xa20
[ 118.558150][ T5032] ? ext4_init_dot_dotdot+0x4e0/0x4e0
[ 118.563551][ T5032] ext4_mkdir+0x54f/0xce0
[ 118.567911][ T5032] ? ext4_symlink+0xed0/0xed0
[ 118.572679][ T5032] ? inode_permission+0xf7/0x450
[ 118.577617][ T5032] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 118.582655][ T5032] ? security_inode_mkdir+0xb4/0x100
[ 118.587941][ T5032] vfs_mkdir+0x3b6/0x590
[ 118.592186][ T5032] do_mkdirat+0x260/0x520
[ 118.596541][ T5032] ? vfs_mkdir+0x590/0x590
[ 118.600968][ T5032] ? getname_flags+0x1ec/0x4e0
[ 118.605728][ T5032] __x64_sys_mkdirat+0x85/0x90
[ 118.610486][ T5032] do_syscall_64+0x3b/0xb0
[ 118.614901][ T5032] ? clear_bhb_loop+0x15/0x70
[ 118.619594][ T5032] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 118.625479][ T5032] RIP: 0033:0x7fd8357eb809
[ 118.630065][ T5032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 118.649660][ T5032] RSP: 002b:00007fd834a69058 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 118.658065][ T5032] RAX: ffffffffffffffda RBX: 00007fd8359b0fa0 RCX: 00007fd8357eb809
[ 118.666020][ T5032] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: ffffffffffffff9c
[ 118.674087][ T5032] RBP: 00007fd83585e93e R08: 0000000000000000 R09: 0000000000000000
[ 118.682085][ T5032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 118.690264][ T5032] R13: 0000000000000000 R14: 00007fd8359b0fa0 R15: 00007ffd6602f498
[ 118.698291][ T5032]
[ 118.701706][ T5032] Kernel Offset: disabled
[ 118.706059][ T5032] Rebooting in 86400 seconds..