Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. 2024/12/14 10:25:33 ignoring optional flag "sandboxArg"="0" 2024/12/14 10:25:34 parsed 1 programs [ 104.599090][ T4561] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 106.743042][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.770312][ T1403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.774553][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.779467][ T1403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.788430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.801553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.685824][ T4613] chnl_net:caif_netlink_parms(): no params data found [ 107.749377][ T4613] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.756711][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.764823][ T4613] device bridge_slave_0 entered promiscuous mode [ 107.773023][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.781553][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.789895][ T4613] device bridge_slave_1 entered promiscuous mode [ 107.821355][ T4613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.834048][ T4613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.862754][ T4613] team0: Port device team_slave_0 added [ 107.871965][ T4613] team0: Port device team_slave_1 added [ 107.893040][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.900415][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.927128][ T4613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.939636][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.946820][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.973871][ T4613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.013944][ T4613] device hsr_slave_0 entered promiscuous mode [ 108.021017][ T4613] device hsr_slave_1 entered promiscuous mode [ 108.163554][ T518] ODEBUG: Out of memory. ODEBUG disabled [ 108.637350][ T4613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.648449][ T4613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.662115][ T4613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.673854][ T4613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.747754][ T4613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.762659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.772574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.783917][ T4613] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.797511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.807408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.818145][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.825270][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.848749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.857571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.867951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.878568][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.885706][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.896446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.906555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.917048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.928040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.977242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.988029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.997879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.006896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.016896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.026928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.036089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.046774][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.227573][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.236226][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.250136][ T4613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.272254][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.281996][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.328345][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.336817][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.348172][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.356731][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.367580][ T4613] device veth0_vlan entered promiscuous mode [ 109.407994][ T4613] device veth1_vlan entered promiscuous mode [ 109.456125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.464393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.473285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.486068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.497088][ T4613] device veth0_macvtap entered promiscuous mode [ 109.527950][ T4613] device veth1_macvtap entered promiscuous mode [ 109.548583][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.556542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.567169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.575842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.585104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.596984][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.604298][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.614568][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.627683][ T4613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.639006][ T4613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.648307][ T4613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.657825][ T4613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2024/12/14 10:25:44 executed programs: 0 [ 110.683683][ T4726] chnl_net:caif_netlink_parms(): no params data found [ 110.799385][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.806643][ T4726] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.815022][ T4726] device bridge_slave_0 entered promiscuous mode [ 110.823697][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.833995][ T4726] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.842290][ T4726] device bridge_slave_1 entered promiscuous mode [ 110.877194][ T4726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.891297][ T4726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.927452][ T4726] team0: Port device team_slave_0 added [ 110.938135][ T4726] team0: Port device team_slave_1 added [ 110.969067][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.976245][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.014533][ T4726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.031226][ T4726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.038691][ T4726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.070148][ T4726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.125405][ T4726] device hsr_slave_0 entered promiscuous mode [ 111.132340][ T4726] device hsr_slave_1 entered promiscuous mode [ 111.157942][ T4726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.174391][ T4726] Cannot create hsr debugfs directory [ 111.279859][ T4726] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.495354][ T4244] Bluetooth: hci0: command 0x0409 tx timeout [ 114.574868][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 114.749274][ T4726] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.069644][ T4726] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.121244][ T4726] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.231583][ T4726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.240892][ T4726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.249924][ T4726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.268413][ T4726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.328555][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.346073][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.354202][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.363908][ T4726] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.374242][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.383208][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.392967][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.400121][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.408491][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.426314][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.435138][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.443516][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.450642][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.461632][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.473903][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.495767][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.505439][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.514002][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.525954][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.536650][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.557116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.566061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.577812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.586530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.597667][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.679990][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.687650][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.702354][ T4726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.713124][ T518] device hsr_slave_0 left promiscuous mode [ 115.719684][ T518] device hsr_slave_1 left promiscuous mode [ 115.726389][ T518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.733796][ T518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.743565][ T518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.752006][ T518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.761459][ T518] device bridge_slave_1 left promiscuous mode [ 115.768052][ T518] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.777598][ T518] device bridge_slave_0 left promiscuous mode [ 115.784051][ T518] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.797251][ T518] device veth1_macvtap left promiscuous mode [ 115.803301][ T518] device veth0_macvtap left promiscuous mode [ 115.809818][ T518] device veth1_vlan left promiscuous mode [ 115.815999][ T518] device veth0_vlan left promiscuous mode [ 115.948962][ T518] team0 (unregistering): Port device team_slave_1 removed [ 115.962244][ T518] team0 (unregistering): Port device team_slave_0 removed [ 115.974018][ T518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.988253][ T518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.046593][ T518] bond0 (unregistering): Released all slaves [ 116.098602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.107391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.123839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.132761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.141795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.150424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.160781][ T4726] device veth0_vlan entered promiscuous mode [ 116.174837][ T4726] device veth1_vlan entered promiscuous mode [ 116.197896][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.206056][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.214094][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.222981][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.233833][ T4726] device veth0_macvtap entered promiscuous mode [ 116.245332][ T4726] device veth1_macvtap entered promiscuous mode [ 116.263382][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.271292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.280442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.288639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.297622][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.309477][ T4726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.320640][ T4726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.329557][ T4726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.338850][ T4726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.348139][ T4726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.370312][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.379414][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2024/12/14 10:25:50 executed programs: 2 [ 116.441798][ T1403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.450482][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.459573][ T1403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.461017][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.471302][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 116.482446][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.544426][ T4987] loop0: detected capacity change from 0 to 512 [ 116.636876][ T4987] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.15: inode #1: comm syz.0.15: iget: illegal inode # [ 116.652241][ T4987] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.15: error while reading EA inode 1 err=-117 [ 116.655005][ T4243] Bluetooth: hci0: command 0x040f tx timeout [ 116.672364][ T4987] EXT4-fs (loop0): 1 orphan inode deleted [ 116.678854][ T4987] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.885271][ T4991] loop0: detected capacity change from 0 to 512 [ 116.967954][ T4991] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.16: inode #1: comm syz.0.16: iget: illegal inode # [ 116.981905][ T4991] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.16: error while reading EA inode 1 err=-117 [ 116.997026][ T4991] EXT4-fs (loop0): 1 orphan inode deleted [ 117.002784][ T4991] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.039401][ T4991] ================================================================== [ 117.047717][ T4991] BUG: KASAN: use-after-free in ext4_insert_dentry+0x366/0x6c0 [ 117.055305][ T4991] Write of size 250 at addr ffff88806a2f6f18 by task syz.0.16/4991 [ 117.063221][ T4991] [ 117.065695][ T4991] CPU: 1 PID: 4991 Comm: syz.0.16 Not tainted 5.15.173-syzkaller #0 [ 117.073686][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.083756][ T4991] Call Trace: [ 117.087047][ T4991] [ 117.089990][ T4991] dump_stack_lvl+0x1e3/0x2d0 [ 117.094691][ T4991] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 117.100338][ T4991] ? _printk+0xd1/0x120 [ 117.104510][ T4991] ? __wake_up_klogd+0xcc/0x100 [ 117.109420][ T4991] ? panic+0x860/0x860 [ 117.113598][ T4991] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 117.119177][ T4991] print_address_description+0x63/0x3b0 [ 117.124748][ T4991] ? ext4_insert_dentry+0x366/0x6c0 [ 117.130077][ T4991] kasan_report+0x16b/0x1c0 [ 117.134885][ T4991] ? ext4_insert_dentry+0x366/0x6c0 [ 117.140128][ T4991] kasan_check_range+0x27e/0x290 [ 117.145090][ T4991] ? ext4_insert_dentry+0x366/0x6c0 [ 117.150310][ T4991] memcpy+0x3c/0x60 [ 117.154491][ T4991] ext4_insert_dentry+0x366/0x6c0 [ 117.159631][ T4991] add_dirent_to_buf+0x384/0x7d0 [ 117.164605][ T4991] ? ext4_dx_add_entry+0x1620/0x1620 [ 117.170003][ T4991] ? __ext4_handle_dirty_metadata+0x2ef/0x800 [ 117.176089][ T4991] make_indexed_dir+0xf34/0x15a0 [ 117.181060][ T4991] ? add_dirent_to_buf+0x7d0/0x7d0 [ 117.186194][ T4991] ? add_dirent_to_buf+0x54e/0x7d0 [ 117.191425][ T4991] ? ext4_dx_add_entry+0x1620/0x1620 [ 117.196731][ T4991] ? __ext4_read_dirblock+0x522/0x890 [ 117.202159][ T4991] ext4_add_entry+0xde2/0x12b0 [ 117.206947][ T4991] ? ext4_inc_count+0x190/0x190 [ 117.212008][ T4991] ? ext4_init_new_dir+0x7c8/0xa20 [ 117.217171][ T4991] ? ext4_init_dot_dotdot+0x4e0/0x4e0 [ 117.222586][ T4991] ext4_mkdir+0x54f/0xce0 [ 117.226959][ T4991] ? ext4_symlink+0xed0/0xed0 [ 117.231675][ T4991] ? inode_permission+0xf7/0x450 [ 117.236636][ T4991] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 117.241700][ T4991] ? security_inode_mkdir+0xb4/0x100 [ 117.247003][ T4991] vfs_mkdir+0x3b6/0x590 [ 117.251265][ T4991] do_mkdirat+0x260/0x520 [ 117.255619][ T4991] ? vfs_mkdir+0x590/0x590 [ 117.260069][ T4991] ? getname_flags+0x1ec/0x4e0 [ 117.264862][ T4991] __x64_sys_mkdirat+0x85/0x90 [ 117.269658][ T4991] do_syscall_64+0x3b/0xb0 [ 117.274117][ T4991] ? clear_bhb_loop+0x15/0x70 [ 117.278827][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.284747][ T4991] RIP: 0033:0x7f6e7caea809 [ 117.289189][ T4991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.308918][ T4991] RSP: 002b:00007f6e7bd68058 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 117.317633][ T4991] RAX: ffffffffffffffda RBX: 00007f6e7ccaffa0 RCX: 00007f6e7caea809 [ 117.325615][ T4991] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: ffffffffffffff9c [ 117.333612][ T4991] RBP: 00007f6e7cb5d93e R08: 0000000000000000 R09: 0000000000000000 [ 117.341594][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.349664][ T4991] R13: 0000000000000000 R14: 00007f6e7ccaffa0 R15: 00007ffc15bacd18 [ 117.357760][ T4991] [ 117.360791][ T4991] [ 117.363140][ T4991] The buggy address belongs to the page: [ 117.368787][ T4991] page:ffffea0001a8bd80 refcount:3 mapcount:0 mapping:ffff888140895af0 index:0x3f pfn:0x6a2f6 [ 117.379036][ T4991] memcg:ffff888077470000 [ 117.383299][ T4991] aops:def_blk_aops ino:700000 [ 117.388076][ T4991] flags: 0xfff0000000202a(referenced|dirty|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 117.398005][ T4991] raw: 00fff0000000202a 0000000000000000 dead000000000122 ffff888140895af0 [ 117.406599][ T4991] raw: 000000000000003f ffff88801cdf1658 00000003ffffffff ffff888077470000 [ 117.415188][ T4991] page dumped because: kasan: bad access detected [ 117.421616][ T4991] page_owner tracks the page as allocated [ 117.427334][ T4991] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4991, ts 117038896146, free_ts 117038035356 [ 117.444768][ T4991] get_page_from_freelist+0x3b78/0x3d40 [ 117.450343][ T4991] __alloc_pages+0x272/0x700 [ 117.455156][ T4991] __page_cache_alloc+0xd4/0x4a0 [ 117.460300][ T4991] pagecache_get_page+0xa91/0x1010 [ 117.465442][ T4991] __getblk_gfp+0x22a/0xaf0 [ 117.469957][ T4991] ext4_getblk+0x259/0x710 [ 117.474384][ T4991] ext4_bread+0x2a/0x170 [ 117.478639][ T4991] ext4_append+0x31f/0x5c0 [ 117.483078][ T4991] make_indexed_dir+0x515/0x15a0 [ 117.488147][ T4991] ext4_add_entry+0xde2/0x12b0 [ 117.492922][ T4991] ext4_mkdir+0x54f/0xce0 [ 117.497360][ T4991] vfs_mkdir+0x3b6/0x590 [ 117.501606][ T4991] do_mkdirat+0x260/0x520 [ 117.505933][ T4991] __x64_sys_mkdirat+0x85/0x90 [ 117.510698][ T4991] do_syscall_64+0x3b/0xb0 [ 117.515110][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.521176][ T4991] page last free stack trace: [ 117.525844][ T4991] free_unref_page_prepare+0xc34/0xcf0 [ 117.531307][ T4991] free_unref_page_list+0x1f7/0x8e0 [ 117.536522][ T4991] release_pages+0x1bb9/0x1f40 [ 117.541383][ T4991] __pagevec_release+0x80/0xf0 [ 117.546353][ T4991] shmem_undo_range+0x67a/0x1b50 [ 117.551295][ T4991] shmem_evict_inode+0x21b/0xa00 [ 117.556229][ T4991] evict+0x529/0x930 [ 117.560122][ T4991] __dentry_kill+0x436/0x650 [ 117.564798][ T4991] dentry_kill+0xbb/0x290 [ 117.569216][ T4991] dput+0xd8/0x1a0 [ 117.572943][ T4991] do_renameat2+0xe1c/0x1700 [ 117.577528][ T4991] __x64_sys_rename+0x82/0x90 [ 117.582200][ T4991] do_syscall_64+0x3b/0xb0 [ 117.586610][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.592593][ T4991] [ 117.594927][ T4991] Memory state around the buggy address: [ 117.600548][ T4991] ffff88806a2f6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.608602][ T4991] ffff88806a2f6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 117.616745][ T4991] >ffff88806a2f7000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.624795][ T4991] ^ [ 117.628853][ T4991] ffff88806a2f7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.636909][ T4991] ffff88806a2f7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.644960][ T4991] ================================================================== [ 117.653007][ T4991] Disabling lock debugging due to kernel taint [ 117.673079][ T4991] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 117.680400][ T4991] CPU: 1 PID: 4991 Comm: syz.0.16 Tainted: G B 5.15.173-syzkaller #0 [ 117.689873][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.699962][ T4991] Call Trace: [ 117.703237][ T4991] [ 117.706167][ T4991] dump_stack_lvl+0x1e3/0x2d0 [ 117.710860][ T4991] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 117.716504][ T4991] ? panic+0x860/0x860 [ 117.720575][ T4991] ? preempt_schedule_common+0xa6/0xd0 [ 117.726173][ T4991] ? preempt_schedule+0xd9/0xe0 [ 117.731047][ T4991] panic+0x318/0x860 [ 117.734966][ T4991] ? check_panic_on_warn+0x1d/0xa0 [ 117.740124][ T4991] ? fb_is_primary_device+0xd0/0xd0 [ 117.745332][ T4991] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 117.751327][ T4991] ? _raw_spin_unlock+0x40/0x40 [ 117.756177][ T4991] ? print_memory_metadata+0xe2/0x140 [ 117.761629][ T4991] check_panic_on_warn+0x7e/0xa0 [ 117.766565][ T4991] ? ext4_insert_dentry+0x366/0x6c0 [ 117.771782][ T4991] end_report+0x6d/0xf0 [ 117.776204][ T4991] kasan_report+0x18e/0x1c0 [ 117.780724][ T4991] ? ext4_insert_dentry+0x366/0x6c0 [ 117.785921][ T4991] kasan_check_range+0x27e/0x290 [ 117.790856][ T4991] ? ext4_insert_dentry+0x366/0x6c0 [ 117.796042][ T4991] memcpy+0x3c/0x60 [ 117.799839][ T4991] ext4_insert_dentry+0x366/0x6c0 [ 117.804858][ T4991] add_dirent_to_buf+0x384/0x7d0 [ 117.809812][ T4991] ? ext4_dx_add_entry+0x1620/0x1620 [ 117.815088][ T4991] ? __ext4_handle_dirty_metadata+0x2ef/0x800 [ 117.821156][ T4991] make_indexed_dir+0xf34/0x15a0 [ 117.826123][ T4991] ? add_dirent_to_buf+0x7d0/0x7d0 [ 117.831229][ T4991] ? add_dirent_to_buf+0x54e/0x7d0 [ 117.836340][ T4991] ? ext4_dx_add_entry+0x1620/0x1620 [ 117.841634][ T4991] ? __ext4_read_dirblock+0x522/0x890 [ 117.847040][ T4991] ext4_add_entry+0xde2/0x12b0 [ 117.851810][ T4991] ? ext4_inc_count+0x190/0x190 [ 117.856662][ T4991] ? ext4_init_new_dir+0x7c8/0xa20 [ 117.861774][ T4991] ? ext4_init_dot_dotdot+0x4e0/0x4e0 [ 117.867147][ T4991] ext4_mkdir+0x54f/0xce0 [ 117.871561][ T4991] ? ext4_symlink+0xed0/0xed0 [ 117.876236][ T4991] ? inode_permission+0xf7/0x450 [ 117.881167][ T4991] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 117.886189][ T4991] ? security_inode_mkdir+0xb4/0x100 [ 117.891465][ T4991] vfs_mkdir+0x3b6/0x590 [ 117.895701][ T4991] do_mkdirat+0x260/0x520 [ 117.900023][ T4991] ? vfs_mkdir+0x590/0x590 [ 117.904429][ T4991] ? getname_flags+0x1ec/0x4e0 [ 117.909203][ T4991] __x64_sys_mkdirat+0x85/0x90 [ 117.913964][ T4991] do_syscall_64+0x3b/0xb0 [ 117.918390][ T4991] ? clear_bhb_loop+0x15/0x70 [ 117.923116][ T4991] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.929020][ T4991] RIP: 0033:0x7f6e7caea809 [ 117.933439][ T4991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.953132][ T4991] RSP: 002b:00007f6e7bd68058 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 117.961790][ T4991] RAX: ffffffffffffffda RBX: 00007f6e7ccaffa0 RCX: 00007f6e7caea809 [ 117.969762][ T4991] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: ffffffffffffff9c [ 117.977902][ T4991] RBP: 00007f6e7cb5d93e R08: 0000000000000000 R09: 0000000000000000 [ 117.985876][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.993863][ T4991] R13: 0000000000000000 R14: 00007f6e7ccaffa0 R15: 00007ffc15bacd18 [ 118.001930][ T4991] [ 118.005331][ T4991] Kernel Offset: disabled [ 118.009679][ T4991] Rebooting in 86400 seconds..