Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. 2025/02/02 23:20:44 ignoring optional flag "sandboxArg"="0" 2025/02/02 23:20:44 ignoring optional flag "type"="gce" 2025/02/02 23:20:44 parsed 1 programs [ 57.298254][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 57.298266][ T23] audit: type=1400 audit(1738538444.920:95): avc: denied { unlink } for pid=418 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/02/02 23:20:45 executed programs: 0 [ 57.385704][ T418] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.461431][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.468356][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.476281][ T424] device bridge_slave_0 entered promiscuous mode [ 57.483521][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.490350][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.498378][ T424] device bridge_slave_1 entered promiscuous mode [ 57.551999][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.558929][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.566300][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.573401][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.599131][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.606286][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.614618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.622392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.632731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.640825][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.647676][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.657075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.665250][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.672187][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.686653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.697065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.714924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.727229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.741799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.755578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.766052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.802399][ T23] audit: type=1400 audit(1738538445.430:96): avc: denied { mounton } for pid=429 comm="syz-executor.0" path="/root/syzkaller-testdir2301464680/syzkaller.9NDb1A/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 57.874701][ T430] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 57.885328][ T430] EXT4-fs (loop0): 1 truncate cleaned up [ 57.890784][ T430] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 57.913723][ T23] audit: type=1400 audit(1738538445.540:97): avc: denied { mount } for pid=429 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.935448][ T23] audit: type=1400 audit(1738538445.550:98): avc: denied { write } for pid=429 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.958132][ T23] audit: type=1400 audit(1738538445.550:99): avc: denied { add_name } for pid=429 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.979343][ T23] audit: type=1400 audit(1738538445.550:100): avc: denied { create } for pid=429 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.982756][ T424] ================================================================== [ 57.999898][ T23] audit: type=1400 audit(1738538445.550:101): avc: denied { write open } for pid=429 comm="syz-executor.0" path="/root/syzkaller-testdir2301464680/syzkaller.9NDb1A/0/file0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.007461][ T424] BUG: KASAN: slab-out-of-bounds in ext4_inlinedir_to_tree+0x555/0x1160 [ 58.007470][ T424] Read of size 68 at addr ffff8881dde02ec9 by task syz-executor.0/424 [ 58.007479][ T424] [ 58.035712][ T23] audit: type=1400 audit(1738538445.550:102): avc: denied { mounton } for pid=429 comm="syz-executor.0" path="/root/syzkaller-testdir2301464680/syzkaller.9NDb1A/0/file0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.043411][ T424] CPU: 0 PID: 424 Comm: syz-executor.0 Not tainted 5.4.289-syzkaller-05030-g3f2c17e79750 #0 [ 58.043417][ T424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 58.043420][ T424] Call Trace: [ 58.043440][ T424] dump_stack+0x1d8/0x241 [ 58.043458][ T424] ? __kasan_kmalloc+0x171/0x210 [ 58.051818][ T23] audit: type=1400 audit(1738538445.550:103): avc: denied { append } for pid=429 comm="syz-executor.0" path="/root/syzkaller-testdir2301464680/syzkaller.9NDb1A/0/file0/file0/memory.events" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.053764][ T424] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 58.081407][ T23] audit: type=1400 audit(1738538445.550:104): avc: denied { map } for pid=429 comm="syz-executor.0" path="/root/syzkaller-testdir2301464680/syzkaller.9NDb1A/0/file0/file0/bus" dev="devtmpfs" ino=8744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.091077][ T424] ? printk+0xd1/0x111 [ 58.091089][ T424] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 58.091098][ T424] ? wake_up_klogd+0xb2/0xf0 [ 58.091107][ T424] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 58.091127][ T424] print_address_description+0x8c/0x600 [ 58.201167][ T424] ? panic+0x89d/0x89d [ 58.205231][ T424] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 58.210744][ T424] __kasan_report+0xf3/0x120 [ 58.215118][ T424] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 58.220931][ T424] ? ext4_inlinedir_to_tree+0x555/0x1160 [ 58.226494][ T424] kasan_report+0x30/0x60 [ 58.230652][ T424] check_memory_region+0x272/0x280 [ 58.235598][ T424] memcpy+0x25/0x50 [ 58.239329][ T424] ext4_inlinedir_to_tree+0x555/0x1160 [ 58.244626][ T424] ? is_bpf_text_address+0x24c/0x260 [ 58.249745][ T424] ? ext4_convert_inline_data_nolock+0xd80/0xd80 [ 58.255999][ T424] ? unwind_get_return_address+0x49/0x80 [ 58.261468][ T424] ? arch_stack_walk+0xf5/0x140 [ 58.266158][ T424] ? __kasan_kmalloc+0x1d9/0x210 [ 58.270917][ T424] ? ksys_getdents64+0x21b/0x4c0 [ 58.275734][ T424] ? __kasan_kmalloc+0x171/0x210 [ 58.280648][ T424] ext4_htree_fill_tree+0x5b2/0x1770 [ 58.285774][ T424] ? ext4_handle_dirty_dirblock+0x6e0/0x6e0 [ 58.291514][ T424] ? kmem_cache_alloc_trace+0xdc/0x260 [ 58.296887][ T424] ? ext4_readdir+0x1d6c/0x3610 [ 58.301566][ T424] ext4_readdir+0x2c1d/0x3610 [ 58.306187][ T424] ? debug_smp_processor_id+0x20/0x20 [ 58.311465][ T424] ? debug_smp_processor_id+0x20/0x20 [ 58.316926][ T424] ? memset+0x1f/0x40 [ 58.320764][ T424] ? fsnotify+0x1280/0x1340 [ 58.325121][ T424] ? __fsnotify_parent+0xec/0x310 [ 58.330039][ T424] ? ext4_dir_llseek+0x500/0x500 [ 58.334812][ T424] ? down_read_killable+0x101/0x220 [ 58.339856][ T424] ? __fsnotify_parent+0x310/0x310 [ 58.344799][ T424] ? down_read_interruptible+0x220/0x220 [ 58.350507][ T424] ? security_file_permission+0x1dc/0x2f0 [ 58.356051][ T424] iterate_dir+0x266/0x4e0 [ 58.360327][ T424] ? ext4_dir_llseek+0x500/0x500 [ 58.365072][ T424] ksys_getdents64+0x21b/0x4c0 [ 58.369671][ T424] ? __ia32_sys_getdents+0x80/0x80 [ 58.374616][ T424] ? ksys_getdents64+0x4c0/0x4c0 [ 58.379391][ T424] ? __do_page_fault+0x725/0xbb0 [ 58.384177][ T424] __x64_sys_getdents64+0x76/0x80 [ 58.389025][ T424] do_syscall_64+0xca/0x1c0 [ 58.393363][ T424] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 58.399193][ T424] RIP: 0033:0x7fcf2bfba363 [ 58.403432][ T424] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 58.422889][ T424] RSP: 002b:00007ffcb107c718 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 58.431212][ T424] RAX: ffffffffffffffda RBX: 000055558e7b3890 RCX: 00007fcf2bfba363 [ 58.439016][ T424] RDX: 0000000000008000 RSI: 000055558e7b3890 RDI: 0000000000000006 [ 58.446829][ T424] RBP: 000055558e7b3864 R08: 0000000000000000 R09: 0000000000000000 [ 58.454640][ T424] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 58.462447][ T424] R13: 0000000000000016 R14: 000055558e7b3860 R15: 0000000000000008 [ 58.470273][ T424] [ 58.472519][ T424] Allocated by task 341: [ 58.476603][ T424] __kasan_kmalloc+0x171/0x210 [ 58.481201][ T424] __kmalloc_track_caller+0x100/0x2b0 [ 58.486431][ T424] __alloc_skb+0xb4/0x4d0 [ 58.490572][ T424] __napi_alloc_skb+0x141/0x580 [ 58.495264][ T424] page_to_skb+0x39/0x930 [ 58.499428][ T424] receive_buf+0xde0/0x51c0 [ 58.503769][ T424] virtnet_poll+0x5f9/0x1250 [ 58.508278][ T424] net_rx_action+0x53f/0x1160 [ 58.512793][ T424] __do_softirq+0x23b/0x6b7 [ 58.517123][ T424] [ 58.519295][ T424] Freed by task 341: [ 58.523049][ T424] __kasan_slab_free+0x1b5/0x270 [ 58.527807][ T424] kfree+0x123/0x370 [ 58.531538][ T424] __kfree_skb+0x4c/0x60 [ 58.535617][ T424] tcp_recvmsg+0x174c/0x35b0 [ 58.540055][ T424] inet_recvmsg+0x158/0x510 [ 58.544382][ T424] sock_read_iter+0x34e/0x430 [ 58.548907][ T424] __vfs_read+0x5cd/0x730 [ 58.553151][ T424] vfs_read+0x148/0x360 [ 58.557143][ T424] ksys_read+0x199/0x2c0 [ 58.561224][ T424] do_syscall_64+0xca/0x1c0 [ 58.565563][ T424] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 58.571286][ T424] [ 58.573466][ T424] The buggy address belongs to the object at ffff8881dde02800 [ 58.573466][ T424] which belongs to the cache kmalloc-1k of size 1024 [ 58.587703][ T424] The buggy address is located 713 bytes to the right of [ 58.587703][ T424] 1024-byte region [ffff8881dde02800, ffff8881dde02c00) [ 58.601509][ T424] The buggy address belongs to the page: [ 58.607079][ T424] page:ffffea0007778000 refcount:1 mapcount:0 mapping:ffff8881f5c02280 index:0x0 compound_mapcount: 0 [ 58.618000][ T424] flags: 0x8000000000010200(slab|head) [ 58.623309][ T424] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f5c02280 [ 58.631716][ T424] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 58.640212][ T424] page dumped because: kasan: bad access detected [ 58.646734][ T424] page_owner tracks the page as allocated [ 58.652284][ T424] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC) [ 58.666782][ T424] prep_new_page+0x18f/0x370 [ 58.671221][ T424] get_page_from_freelist+0x2d13/0x2d90 [ 58.676589][ T424] __alloc_pages_nodemask+0x393/0x840 [ 58.682149][ T424] alloc_slab_page+0x39/0x3c0 [ 58.686649][ T424] new_slab+0x97/0x440 [ 58.690568][ T424] ___slab_alloc+0x2fe/0x490 [ 58.694994][ T424] __slab_alloc+0x62/0xa0 [ 58.699225][ T424] __kmalloc_track_caller+0x16d/0x2b0 [ 58.704435][ T424] __alloc_skb+0xb4/0x4d0 [ 58.708599][ T424] __napi_alloc_skb+0x141/0x580 [ 58.713284][ T424] page_to_skb+0x39/0x930 [ 58.717451][ T424] receive_buf+0xde0/0x51c0 [ 58.721968][ T424] virtnet_poll+0x5f9/0x1250 [ 58.726399][ T424] net_rx_action+0x53f/0x1160 [ 58.730904][ T424] __do_softirq+0x23b/0x6b7 [ 58.735244][ T424] irq_exit+0x195/0x1c0 [ 58.739233][ T424] page last free stack trace: [ 58.743750][ T424] __free_pages_ok+0x847/0x950 [ 58.748349][ T424] skb_release_data+0x210/0x640 [ 58.753034][ T424] __kfree_skb+0x4c/0x60 [ 58.757147][ T424] tcp_recvmsg+0x174c/0x35b0 [ 58.761576][ T424] inet_recvmsg+0x158/0x510 [ 58.766078][ T424] sock_read_iter+0x34e/0x430 [ 58.770584][ T424] __vfs_read+0x5cd/0x730 [ 58.775225][ T424] vfs_read+0x148/0x360 [ 58.779208][ T424] ksys_read+0x199/0x2c0 [ 58.783365][ T424] do_syscall_64+0xca/0x1c0 [ 58.787803][ T424] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 58.793780][ T424] [ 58.795878][ T424] Memory state around the buggy address: [ 58.801625][ T424] ffff8881dde02d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.809779][ T424] ffff8881dde02e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.817714][ T424] >ffff8881dde02e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.825659][ T424] ^ [ 58.831920][ T424] ffff8881dde02f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.839813][ T424] ffff8881dde02f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 58.847706][ T424] ================================================================== [ 58.855691][ T424] Disabling lock debugging due to kernel taint [ 58.866190][ T424] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2301464680/syzkaller.9NDb1A/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 58.893830][ T424] EXT4-fs error (device loop0): empty_inline_dir:1847: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 58.914856][ T424] EXT4-fs warning (device loop0): empty_inline_dir:1854: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 58.930314][ T424] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 58.942579][ T424] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 59.901503][ T180] device bridge_slave_1 left promiscuous mode [ 59.907644][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.914984][ T180] device bridge_slave_0 left promiscuous mode [ 59.920918][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.174953][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.181855][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.189158][ T438] device bridge_slave_0 entered promiscuous mode [ 60.196097][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.203123][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.210569][ T438] device bridge_slave_1 entered promiscuous mode [ 60.264694][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.271603][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.278827][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.285941][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.319430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.327907][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.335773][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.346411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.354846][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.361714][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.371840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.380457][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.387330][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.402864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.412754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.430822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.443792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.458790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.473352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.484321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.574802][ T445] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 60.584681][ T445] EXT4-fs (loop0): 1 truncate cleaned up [ 60.590272][ T445] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 60.627800][ T438] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1044517403/syzkaller.LHJuM8/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 60.655106][ T438] EXT4-fs error (device loop0): empty_inline_dir:1847: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 60.675339][ T438] EXT4-fs warning (device loop0): empty_inline_dir:1854: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 60.691410][ T438] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 60.703492][ T438] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 61.561373][ T9] device bridge_slave_1 left promiscuous mode [ 61.567316][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.575026][ T9] device bridge_slave_0 left promiscuous mode [ 61.581111][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.901168][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.908109][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.915730][ T450] device bridge_slave_0 entered promiscuous mode [ 61.922844][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.929847][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.937281][ T450] device bridge_slave_1 entered promiscuous mode [ 61.999515][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.006480][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.013788][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.020614][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.042417][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.049487][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.062736][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.070097][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.079462][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.088088][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.096198][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.103165][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.112527][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.120920][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.129463][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.136395][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.150606][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.158692][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.167958][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.176217][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.193983][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.202423][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.214112][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.221995][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.235878][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.243936][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.257285][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.265608][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.275334][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.283927][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/02/02 23:20:50 executed programs: 6 [ 62.392086][ T457] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 62.401898][ T457] EXT4-fs (loop0): 1 truncate cleaned up [ 62.407347][ T457] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 62.510833][ T450] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir734033942/syzkaller.dg3iYL/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 62.538584][ T450] EXT4-fs error (device loop0): empty_inline_dir:1847: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 62.558990][ T450] EXT4-fs warning (device loop0): empty_inline_dir:1854: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 62.574520][ T450] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 62.586563][ T450] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 63.441454][ T180] device bridge_slave_1 left promiscuous mode [ 63.447428][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.454805][ T180] device bridge_slave_0 left promiscuous mode [ 63.460744][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.755386][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.762348][ T463] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.769926][ T463] device bridge_slave_0 entered promiscuous mode [ 63.776860][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.783793][ T463] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.791429][ T463] device bridge_slave_1 entered promiscuous mode [ 63.846264][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.853219][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.860570][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.867464][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.899721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.908295][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.916197][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.926402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.935138][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.942005][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.951609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.959760][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.966625][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.980829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.990454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.009323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.021753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.036962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.050693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.061565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.069861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.135111][ T468] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 64.145121][ T468] EXT4-fs (loop0): 1 truncate cleaned up [ 64.150740][ T468] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 64.189697][ T463] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir100109916/syzkaller.DfiSpP/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 64.217485][ T463] EXT4-fs error (device loop0): empty_inline_dir:1847: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 64.237904][ T463] EXT4-fs warning (device loop0): empty_inline_dir:1854: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 64.253613][ T463] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 64.265608][ T463] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 65.201500][ T180] device bridge_slave_1 left promiscuous mode [ 65.207814][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.215165][ T180] device bridge_slave_0 left promiscuous mode [ 65.221189][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.514174][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.521133][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.528875][ T475] device bridge_slave_0 entered promiscuous mode [ 65.536064][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.542927][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.550251][ T475] device bridge_slave_1 entered promiscuous mode [ 65.605187][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.612066][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.619226][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.626057][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.659511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.668107][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.675718][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.686006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.694113][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.700936][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.710162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.718594][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.725471][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.740156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.749810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.767991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.780147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.794831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.809075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.819595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.875771][ T480] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 65.886529][ T480] EXT4-fs (loop0): 1 truncate cleaned up [ 65.892249][ T480] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 65.929108][ T475] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2820199482/syzkaller.LaqyQo/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 65.956705][ T475] EXT4-fs error (device loop0): empty_inline_dir:1847: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 65.976950][ T475] EXT4-fs warning (device loop0): empty_inline_dir:1854: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 65.992740][ T475] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 66.004602][ T475] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 66.421334][ T74] cfg80211: failed to load regulatory.db [ 66.841454][ T9] device bridge_slave_1 left promiscuous mode [ 66.847399][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.854761][ T9] device bridge_slave_0 left promiscuous mode [ 66.860692][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.225896][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.232792][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.240108][ T486] device bridge_slave_0 entered promiscuous mode [ 67.247164][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.254036][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.261600][ T486] device bridge_slave_1 entered promiscuous mode [ 67.327059][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.333963][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.341084][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.347907][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.373018][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.380614][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.388044][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.397733][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.405892][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.412854][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.422475][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.430555][ T180] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.437501][ T180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.452267][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.462212][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.480207][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.492538][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.507156][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.520711][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.531638][ T180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/02/02 23:20:55 executed programs: 15 [ 67.664763][ T491] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.674828][ T491] EXT4-fs (loop0): 1 truncate cleaned up [ 67.680398][ T491] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,noblock_validity,noload,data_err=ignore,usrjquota=,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000003,,errors=continue [ 67.717470][ T486] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1437: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir248426121/syzkaller.3e5Stk/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 67.745200][ T486] EXT4-fs error (device loop0): empty_inline_dir:1847: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 67.765447][ T486] EXT4-fs warning (device loop0): empty_inline_dir:1854: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 67.781286][ T486] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block [ 67.793436][ T486] EXT4-fs error (device loop0): __ext4_iget:5217: inode #16: block 786432: comm syz-executor.0: invalid block