Warning: Permanently added '10.128.10.51' (ED25519) to the list of known hosts. 2025/02/22 17:06:47 ignoring optional flag "sandboxArg"="0" 2025/02/22 17:06:48 parsed 1 programs [ 104.404425][ T4553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 107.406576][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.414564][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.438083][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.458488][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.466777][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.477687][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.828289][ T4606] chnl_net:caif_netlink_parms(): no params data found [ 107.877777][ T4606] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.884921][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.893196][ T4606] device bridge_slave_0 entered promiscuous mode [ 107.901231][ T4606] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.908461][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.916805][ T4606] device bridge_slave_1 entered promiscuous mode [ 107.939104][ T4606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.950177][ T4606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.974185][ T4606] team0: Port device team_slave_0 added [ 107.982595][ T4606] team0: Port device team_slave_1 added [ 108.002304][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.009460][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.035554][ T4606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.047573][ T4606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.054551][ T4606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.080896][ T4606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.113889][ T4606] device hsr_slave_0 entered promiscuous mode [ 108.121069][ T4606] device hsr_slave_1 entered promiscuous mode [ 108.687222][ T4606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.698431][ T4606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.710301][ T4606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.722128][ T4606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.855867][ T4606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.871919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.883240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.897148][ T4606] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.938094][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.947970][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.960479][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.967626][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.976101][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.984938][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.996349][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.003440][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.012885][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.038739][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.051547][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.062816][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.073918][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.084885][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.095148][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.136088][ T4606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.148520][ T4606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.161102][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.171374][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.180528][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.192995][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.202273][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.221556][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.358361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.388981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.415082][ T4606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.469668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.481182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.503686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.513871][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.528247][ T4606] device veth0_vlan entered promiscuous mode [ 109.542061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.550769][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.569576][ T4606] device veth1_vlan entered promiscuous mode [ 109.624290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.637736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.668021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.677377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.689185][ T4606] device veth0_macvtap entered promiscuous mode [ 109.709956][ T4606] device veth1_macvtap entered promiscuous mode [ 109.736724][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.744121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.763054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.774887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.787423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.801079][ T4606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.813764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.838055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.850698][ T4606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.863850][ T4606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.873063][ T4606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.882519][ T4606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/02/22 17:06:58 executed programs: 0 [ 110.574620][ T4707] chnl_net:caif_netlink_parms(): no params data found [ 110.698756][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.707523][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.718000][ T4707] device bridge_slave_0 entered promiscuous mode [ 110.728879][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.738998][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.748502][ T4707] device bridge_slave_1 entered promiscuous mode [ 110.790971][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.831028][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.906555][ T4707] team0: Port device team_slave_0 added [ 110.921394][ T4707] team0: Port device team_slave_1 added [ 110.959285][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.975057][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.004714][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.028283][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.035258][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.086305][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.142681][ T4707] device hsr_slave_0 entered promiscuous mode [ 111.150271][ T4707] device hsr_slave_1 entered promiscuous mode [ 111.167003][ T4707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.174640][ T4707] Cannot create hsr debugfs directory [ 111.343242][ T4707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.456152][ T4171] Bluetooth: hci0: command 0x0409 tx timeout [ 114.536903][ T4239] Bluetooth: hci0: command 0x041b tx timeout [ 114.781511][ T4707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.116213][ T4707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.172029][ T4707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.261259][ T4707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.270567][ T4707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.293589][ T4707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.302830][ T4707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.368172][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.381847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.389817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.401592][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.420471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.429795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.439054][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.446166][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.454111][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.473478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.482493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.492039][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.499493][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.510612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.533659][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.545382][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.557166][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.566170][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.589694][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.599028][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.614317][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.625335][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.638225][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.647773][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.656822][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.665269][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.674004][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.765677][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.773239][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.788779][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.805398][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.814814][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.831829][ T155] device hsr_slave_0 left promiscuous mode [ 115.838300][ T155] device hsr_slave_1 left promiscuous mode [ 115.844611][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.852404][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.860723][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.868533][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.876850][ T155] device bridge_slave_1 left promiscuous mode [ 115.883084][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.892088][ T155] device bridge_slave_0 left promiscuous mode [ 115.898960][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.910923][ T155] device veth1_macvtap left promiscuous mode [ 115.917708][ T155] device veth0_macvtap left promiscuous mode [ 115.923761][ T155] device veth1_vlan left promiscuous mode [ 115.929827][ T155] device veth0_vlan left promiscuous mode [ 116.087237][ T155] team0 (unregistering): Port device team_slave_1 removed [ 116.102306][ T155] team0 (unregistering): Port device team_slave_0 removed [ 116.115172][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.129736][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.194061][ T155] bond0 (unregistering): Released all slaves [ 116.250662][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.259221][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.269110][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.278746][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.292244][ T4707] device veth0_vlan entered promiscuous mode [ 116.308802][ T4707] device veth1_vlan entered promiscuous mode [ 116.337745][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.346624][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.354799][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.364216][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.374770][ T4707] device veth0_macvtap entered promiscuous mode [ 116.388589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.404924][ T4707] device veth1_macvtap entered promiscuous mode [ 116.423747][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.433107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.442541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.455069][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.468243][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.478144][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.490000][ T4707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.499687][ T4707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.510395][ T4707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.519795][ T4707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.579516][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.595002][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.612603][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.616837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2025/02/22 17:07:04 executed programs: 2 [ 116.625941][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.629004][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 116.643288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 116.693249][ T4979] loop0: detected capacity change from 0 to 512 [ 116.729873][ T4979] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.15: inode #1: comm syz.0.15: iget: illegal inode # [ 116.759769][ T4979] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.15: error while reading EA inode 1 err=-117 [ 116.774410][ T4979] EXT4-fs (loop0): 1 orphan inode deleted [ 116.781789][ T4979] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.926301][ T4983] loop0: detected capacity change from 0 to 512 [ 116.964219][ T4983] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.16: inode #1: comm syz.0.16: iget: illegal inode # [ 116.978035][ T4983] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.16: error while reading EA inode 1 err=-117 [ 116.992403][ T4983] EXT4-fs (loop0): 1 orphan inode deleted [ 116.998527][ T4983] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.119369][ T4986] loop0: detected capacity change from 0 to 512 [ 117.152704][ T4986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.17: inode #1: comm syz.0.17: iget: illegal inode # [ 117.175765][ T4986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.17: error while reading EA inode 1 err=-117 [ 117.207476][ T4986] EXT4-fs (loop0): 1 orphan inode deleted [ 117.213220][ T4986] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.354158][ T4989] loop0: detected capacity change from 0 to 512 [ 117.480857][ T4989] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.18: inode #1: comm syz.0.18: iget: illegal inode # [ 117.498924][ T4989] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.18: error while reading EA inode 1 err=-117 [ 117.511700][ T4989] EXT4-fs (loop0): 1 orphan inode deleted [ 117.517598][ T4989] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.625152][ T4992] loop0: detected capacity change from 0 to 512 [ 117.728203][ T4992] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.19: inode #1: comm syz.0.19: iget: illegal inode # [ 117.758648][ T4992] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.19: error while reading EA inode 1 err=-117 [ 117.771997][ T4992] EXT4-fs (loop0): 1 orphan inode deleted [ 117.779460][ T4992] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.916740][ T4995] loop0: detected capacity change from 0 to 512 [ 117.944691][ T4995] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.20: inode #1: comm syz.0.20: iget: illegal inode # [ 117.967550][ T4995] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.20: error while reading EA inode 1 err=-117 [ 117.992668][ T4995] EXT4-fs (loop0): 1 orphan inode deleted [ 118.000745][ T4995] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.036661][ T4995] ================================================================== [ 118.044986][ T4995] BUG: KASAN: use-after-free in ext4_insert_dentry+0x366/0x6c0 [ 118.052577][ T4995] Write of size 250 at addr ffff88806ba56f18 by task syz.0.20/4995 [ 118.060497][ T4995] [ 118.062844][ T4995] CPU: 1 PID: 4995 Comm: syz.0.20 Not tainted 5.15.178-syzkaller #0 [ 118.070832][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.081076][ T4995] Call Trace: [ 118.084370][ T4995] [ 118.087298][ T4995] dump_stack_lvl+0x1e3/0x2d0 [ 118.091979][ T4995] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 118.097620][ T4995] ? _printk+0xd1/0x120 [ 118.101778][ T4995] ? __wake_up_klogd+0xcc/0x100 [ 118.106635][ T4995] ? panic+0x860/0x860 [ 118.110700][ T4995] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 118.116447][ T4995] print_address_description+0x63/0x3b0 [ 118.122027][ T4995] ? ext4_insert_dentry+0x366/0x6c0 [ 118.127231][ T4995] kasan_report+0x16b/0x1c0 [ 118.131734][ T4995] ? ext4_insert_dentry+0x366/0x6c0 [ 118.136938][ T4995] kasan_check_range+0x27e/0x290 [ 118.141877][ T4995] ? ext4_insert_dentry+0x366/0x6c0 [ 118.147093][ T4995] memcpy+0x3c/0x60 [ 118.150901][ T4995] ext4_insert_dentry+0x366/0x6c0 [ 118.155931][ T4995] add_dirent_to_buf+0x384/0x7d0 [ 118.160964][ T4995] ? ext4_dx_add_entry+0x1620/0x1620 [ 118.166254][ T4995] ? __ext4_handle_dirty_metadata+0x2ef/0x800 [ 118.172327][ T4995] make_indexed_dir+0xf34/0x15a0 [ 118.177279][ T4995] ? add_dirent_to_buf+0x7d0/0x7d0 [ 118.182388][ T4995] ? add_dirent_to_buf+0x54e/0x7d0 [ 118.187504][ T4995] ? ext4_dx_add_entry+0x1620/0x1620 [ 118.192876][ T4995] ? __ext4_read_dirblock+0x522/0x890 [ 118.198256][ T4995] ext4_add_entry+0xde2/0x12b0 [ 118.203038][ T4995] ? ext4_inc_count+0x190/0x190 [ 118.207899][ T4995] ? ext4_init_new_dir+0x7c8/0xa20 [ 118.213016][ T4995] ? ext4_init_dot_dotdot+0x4e0/0x4e0 [ 118.218398][ T4995] ext4_mkdir+0x54f/0xce0 [ 118.222752][ T4995] ? ext4_symlink+0xed0/0xed0 [ 118.227431][ T4995] ? inode_permission+0xf7/0x450 [ 118.232367][ T4995] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 118.237391][ T4995] ? security_inode_mkdir+0xb4/0x100 [ 118.242675][ T4995] vfs_mkdir+0x3b6/0x590 [ 118.246920][ T4995] do_mkdirat+0x260/0x520 [ 118.251257][ T4995] ? vfs_mkdir+0x590/0x590 [ 118.255670][ T4995] ? getname_flags+0x1ec/0x4e0 [ 118.260439][ T4995] __x64_sys_mkdirat+0x85/0x90 [ 118.265202][ T4995] do_syscall_64+0x3b/0xb0 [ 118.269622][ T4995] ? clear_bhb_loop+0x15/0x70 [ 118.274296][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.280200][ T4995] RIP: 0033:0x7f5cd0889809 [ 118.284628][ T4995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.304243][ T4995] RSP: 002b:00007f5ccfb07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 118.312690][ T4995] RAX: ffffffffffffffda RBX: 00007f5cd0a4efa0 RCX: 00007f5cd0889809 [ 118.320683][ T4995] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: ffffffffffffff9c [ 118.328658][ T4995] RBP: 00007f5cd08fc93e R08: 0000000000000000 R09: 0000000000000000 [ 118.336628][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.344597][ T4995] R13: 0000000000000000 R14: 00007f5cd0a4efa0 R15: 00007ffe89643ca8 [ 118.352585][ T4995] [ 118.355622][ T4995] [ 118.357939][ T4995] The buggy address belongs to the page: [ 118.363692][ T4995] page:ffffea0001ae9580 refcount:3 mapcount:0 mapping:ffff88801dfbdaf0 index:0x3f pfn:0x6ba56 [ 118.373943][ T4995] memcg:ffff88802ae80000 [ 118.378183][ T4995] aops:def_blk_aops ino:700000 [ 118.382948][ T4995] flags: 0xfff0000000202a(referenced|dirty|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 118.392849][ T4995] raw: 00fff0000000202a 0000000000000000 dead000000000122 ffff88801dfbdaf0 [ 118.401427][ T4995] raw: 000000000000003f ffff888074bd6bc8 00000003ffffffff ffff88802ae80000 [ 118.410018][ T4995] page dumped because: kasan: bad access detected [ 118.416430][ T4995] page_owner tracks the page as allocated [ 118.422400][ T4995] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4995, ts 118025581187, free_ts 117535361756 [ 118.439771][ T4995] get_page_from_freelist+0x3b78/0x3d40 [ 118.445322][ T4995] __alloc_pages+0x272/0x700 [ 118.449918][ T4995] __page_cache_alloc+0xd4/0x4a0 [ 118.454853][ T4995] pagecache_get_page+0xa91/0x1010 [ 118.459970][ T4995] __getblk_gfp+0x22a/0xaf0 [ 118.464472][ T4995] ext4_getblk+0x259/0x710 [ 118.468893][ T4995] ext4_bread+0x2a/0x170 [ 118.473217][ T4995] ext4_append+0x31f/0x5c0 [ 118.477632][ T4995] make_indexed_dir+0x515/0x15a0 [ 118.482580][ T4995] ext4_add_entry+0xde2/0x12b0 [ 118.487357][ T4995] ext4_mkdir+0x54f/0xce0 [ 118.491694][ T4995] vfs_mkdir+0x3b6/0x590 [ 118.495962][ T4995] do_mkdirat+0x260/0x520 [ 118.500308][ T4995] __x64_sys_mkdirat+0x85/0x90 [ 118.505100][ T4995] do_syscall_64+0x3b/0xb0 [ 118.509531][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.515524][ T4995] page last free stack trace: [ 118.520193][ T4995] free_unref_page_prepare+0xc34/0xcf0 [ 118.525651][ T4995] free_unref_page_list+0x1f7/0x8e0 [ 118.530856][ T4995] release_pages+0x1bb9/0x1f40 [ 118.535623][ T4995] tlb_finish_mmu+0x177/0x320 [ 118.540299][ T4995] exit_mmap+0x3cd/0x620 [ 118.544539][ T4995] __mmput+0x112/0x3b0 [ 118.548696][ T4995] exit_mm+0x688/0x7f0 [ 118.552851][ T4995] do_exit+0x626/0x2480 [ 118.557100][ T4995] do_group_exit+0x144/0x310 [ 118.561698][ T4995] __x64_sys_exit_group+0x3b/0x40 [ 118.566736][ T4995] do_syscall_64+0x3b/0xb0 [ 118.571170][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.577071][ T4995] [ 118.579391][ T4995] Memory state around the buggy address: [ 118.585022][ T4995] ffff88806ba56f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.593076][ T4995] ffff88806ba56f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.601217][ T4995] >ffff88806ba57000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 118.609267][ T4995] ^ [ 118.613326][ T4995] ffff88806ba57080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 118.621395][ T4995] ffff88806ba57100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 118.629445][ T4995] ================================================================== [ 118.637494][ T4995] Disabling lock debugging due to kernel taint [ 118.655662][ T4995] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.662951][ T4995] CPU: 0 PID: 4995 Comm: syz.0.20 Tainted: G B 5.15.178-syzkaller #0 [ 118.672346][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 118.682411][ T4995] Call Trace: [ 118.685685][ T4995] [ 118.688623][ T4995] dump_stack_lvl+0x1e3/0x2d0 [ 118.693295][ T4995] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 118.698947][ T4995] ? panic+0x860/0x860 [ 118.703075][ T4995] ? preempt_schedule_common+0xa6/0xd0 [ 118.708563][ T4995] ? preempt_schedule+0xd9/0xe0 [ 118.713426][ T4995] panic+0x318/0x860 [ 118.717320][ T4995] ? check_panic_on_warn+0x1d/0xa0 [ 118.722632][ T4995] ? fb_is_primary_device+0xd0/0xd0 [ 118.727859][ T4995] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 118.733870][ T4995] ? _raw_spin_unlock+0x40/0x40 [ 118.738731][ T4995] ? print_memory_metadata+0xe2/0x140 [ 118.744101][ T4995] check_panic_on_warn+0x7e/0xa0 [ 118.749051][ T4995] ? ext4_insert_dentry+0x366/0x6c0 [ 118.754265][ T4995] end_report+0x6d/0xf0 [ 118.758456][ T4995] kasan_report+0x18e/0x1c0 [ 118.762963][ T4995] ? ext4_insert_dentry+0x366/0x6c0 [ 118.768337][ T4995] kasan_check_range+0x27e/0x290 [ 118.773267][ T4995] ? ext4_insert_dentry+0x366/0x6c0 [ 118.778459][ T4995] memcpy+0x3c/0x60 [ 118.782269][ T4995] ext4_insert_dentry+0x366/0x6c0 [ 118.787294][ T4995] add_dirent_to_buf+0x384/0x7d0 [ 118.792225][ T4995] ? ext4_dx_add_entry+0x1620/0x1620 [ 118.797507][ T4995] ? __ext4_handle_dirty_metadata+0x2ef/0x800 [ 118.803566][ T4995] make_indexed_dir+0xf34/0x15a0 [ 118.808591][ T4995] ? add_dirent_to_buf+0x7d0/0x7d0 [ 118.813698][ T4995] ? add_dirent_to_buf+0x54e/0x7d0 [ 118.818803][ T4995] ? ext4_dx_add_entry+0x1620/0x1620 [ 118.824202][ T4995] ? __ext4_read_dirblock+0x522/0x890 [ 118.829580][ T4995] ext4_add_entry+0xde2/0x12b0 [ 118.834347][ T4995] ? ext4_inc_count+0x190/0x190 [ 118.839298][ T4995] ? ext4_init_new_dir+0x7c8/0xa20 [ 118.844408][ T4995] ? ext4_init_dot_dotdot+0x4e0/0x4e0 [ 118.849898][ T4995] ext4_mkdir+0x54f/0xce0 [ 118.854242][ T4995] ? ext4_symlink+0xed0/0xed0 [ 118.858947][ T4995] ? inode_permission+0xf7/0x450 [ 118.863907][ T4995] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 118.868947][ T4995] ? security_inode_mkdir+0xb4/0x100 [ 118.874238][ T4995] vfs_mkdir+0x3b6/0x590 [ 118.878488][ T4995] do_mkdirat+0x260/0x520 [ 118.882865][ T4995] ? vfs_mkdir+0x590/0x590 [ 118.887285][ T4995] ? getname_flags+0x1ec/0x4e0 [ 118.892044][ T4995] __x64_sys_mkdirat+0x85/0x90 [ 118.896803][ T4995] do_syscall_64+0x3b/0xb0 [ 118.901210][ T4995] ? clear_bhb_loop+0x15/0x70 [ 118.905878][ T4995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.911786][ T4995] RIP: 0033:0x7f5cd0889809 [ 118.916285][ T4995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.935877][ T4995] RSP: 002b:00007f5ccfb07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 118.944291][ T4995] RAX: ffffffffffffffda RBX: 00007f5cd0a4efa0 RCX: 00007f5cd0889809 [ 118.952250][ T4995] RDX: 5be60480b9579340 RSI: 0000000020000940 RDI: ffffffffffffff9c [ 118.960212][ T4995] RBP: 00007f5cd08fc93e R08: 0000000000000000 R09: 0000000000000000 [ 118.968177][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.976144][ T4995] R13: 0000000000000000 R14: 00007f5cd0a4efa0 R15: 00007ffe89643ca8 [ 118.984116][ T4995] [ 118.987526][ T4995] Kernel Offset: disabled [ 118.991864][ T4995] Rebooting in 86400 seconds..