Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. 2025/03/07 01:18:18 ignoring optional flag "sandboxArg"="0" 2025/03/07 01:18:18 ignoring optional flag "type"="gce" 2025/03/07 01:18:19 parsed 1 programs [ 45.775391][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 45.775408][ T28] audit: type=1400 audit(1741310299.052:94): avc: denied { unlink } for pid=347 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/03/07 01:18:19 executed programs: 0 [ 45.839670][ T347] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.906680][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.913725][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.921564][ T353] device bridge_slave_0 entered promiscuous mode [ 45.929190][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.936146][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.943526][ T353] device bridge_slave_1 entered promiscuous mode [ 45.993153][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.000481][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.007829][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.015029][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.036792][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.044028][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.051543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.059217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.068303][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.076680][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.083848][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.092565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.100919][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.108272][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.121263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.131124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.145871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.157615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.166119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.173496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.182371][ T353] device veth0_vlan entered promiscuous mode [ 46.193119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.202726][ T353] device veth1_macvtap entered promiscuous mode [ 46.212648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.223363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.248920][ T359] loop0: detected capacity change from 0 to 512 [ 46.255791][ T28] audit: type=1400 audit(1741310299.532:95): avc: denied { mounton } for pid=358 comm="syz-executor.0" path="/root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.285502][ T359] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.296051][ T359] EXT4-fs (loop0): 1 truncate cleaned up [ 46.301878][ T359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.310674][ T28] audit: type=1400 audit(1741310299.582:96): avc: denied { mount } for pid=358 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.333080][ T28] audit: type=1400 audit(1741310299.602:97): avc: denied { write } for pid=358 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.356154][ T28] audit: type=1400 audit(1741310299.602:98): avc: denied { add_name } for pid=358 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.377505][ T28] audit: type=1400 audit(1741310299.602:99): avc: denied { create } for pid=358 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.379660][ T353] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 46.399108][ T28] audit: type=1400 audit(1741310299.602:100): avc: denied { write open } for pid=358 comm="syz-executor.0" path="/root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.426371][ T353] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 46.455372][ T28] audit: type=1400 audit(1741310299.602:101): avc: denied { mounton } for pid=358 comm="syz-executor.0" path="/root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.474612][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.502630][ T28] audit: type=1400 audit(1741310299.602:102): avc: denied { append } for pid=358 comm="syz-executor.0" path="/root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0/memory.events" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.518323][ T353] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 46.547092][ T28] audit: type=1400 audit(1741310299.602:103): avc: denied { map } for pid=358 comm="syz-executor.0" path="/root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 46.575261][ T353] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 46.623672][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.639511][ T353] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 46.667831][ T353] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 46.689315][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.705632][ T353] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 46.734622][ T353] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 46.755195][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.770837][ T353] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir909335876/syzkaller.yXTQqc/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 46.798446][ T353] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 46.819006][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.834993][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.851455][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.868674][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.885857][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.902267][ T353] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 46.987294][ T353] EXT4-fs (loop0): unmounting filesystem. [ 46.995360][ T353] syz-executor.0 (353) used greatest stack depth: 21040 bytes left [ 47.485543][ T10] device bridge_slave_1 left promiscuous mode [ 47.491644][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.498998][ T10] device bridge_slave_0 left promiscuous mode [ 47.505450][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.513218][ T10] device veth1_macvtap left promiscuous mode [ 47.519230][ T10] device veth0_vlan left promiscuous mode [ 48.056908][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.064033][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.071988][ T367] device bridge_slave_0 entered promiscuous mode [ 48.079158][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.086311][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.093545][ T367] device bridge_slave_1 entered promiscuous mode [ 48.143130][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.150112][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.157481][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.164407][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.185668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.193410][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.200800][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.210046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.218297][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.225347][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.234070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.242325][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.249369][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.261955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.271322][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.287047][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.298413][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.306729][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.314358][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.322991][ T367] device veth0_vlan entered promiscuous mode [ 48.333341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.342729][ T367] device veth1_macvtap entered promiscuous mode [ 48.352489][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.362545][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.387661][ T373] loop0: detected capacity change from 0 to 512 [ 48.395752][ T373] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.405661][ T373] EXT4-fs (loop0): 1 truncate cleaned up [ 48.411127][ T373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.432149][ T367] ================================================================== [ 48.440149][ T367] BUG: KASAN: slab-out-of-bounds in ext4_inlinedir_to_tree+0x563/0x1230 [ 48.448309][ T367] Read of size 68 at addr ffff888126921ec9 by task syz-executor.0/367 [ 48.456666][ T367] [ 48.458826][ T367] CPU: 0 PID: 367 Comm: syz-executor.0 Not tainted 6.1.128-syzkaller-1167798-g471a10d3af3b #0 [ 48.469523][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 48.479435][ T367] Call Trace: [ 48.482593][ T367] [ 48.485429][ T367] dump_stack_lvl+0x151/0x1b7 [ 48.489944][ T367] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 48.495231][ T367] ? _printk+0xd1/0x111 [ 48.499227][ T367] ? __virt_addr_valid+0x242/0x2f0 [ 48.504197][ T367] print_report+0x158/0x4e0 [ 48.508626][ T367] ? __virt_addr_valid+0x242/0x2f0 [ 48.513948][ T367] ? kasan_complete_mode_report_info+0x57/0x1b0 [ 48.520207][ T367] ? ext4_inlinedir_to_tree+0x563/0x1230 [ 48.525751][ T367] kasan_report+0x13c/0x170 [ 48.530454][ T367] ? ext4_inlinedir_to_tree+0x563/0x1230 [ 48.536253][ T367] kasan_check_range+0x294/0x2a0 [ 48.541191][ T367] ? ext4_inlinedir_to_tree+0x563/0x1230 [ 48.546666][ T367] memcpy+0x2d/0x70 [ 48.550305][ T367] ext4_inlinedir_to_tree+0x563/0x1230 [ 48.555688][ T367] ? kernel_text_address+0xa9/0xe0 [ 48.560728][ T367] ? __kernel_text_address+0xd/0x40 [ 48.566065][ T367] ? unwind_get_return_address+0x4d/0x90 [ 48.571536][ T367] ? ext4_convert_inline_data_nolock+0xa70/0xa70 [ 48.577677][ T367] ? ext4_readdir+0x1f40/0x3860 [ 48.582359][ T367] ? kasan_set_track+0x60/0x70 [ 48.587220][ T367] ? kasan_set_track+0x4b/0x70 [ 48.592095][ T367] ? kasan_save_alloc_info+0x1f/0x30 [ 48.597394][ T367] ? __kasan_kmalloc+0x9c/0xb0 [ 48.601985][ T367] ? kmalloc_trace+0x44/0xa0 [ 48.606440][ T367] ? __se_sys_getdents64+0x1c1/0x460 [ 48.611551][ T367] ? __x64_sys_getdents64+0x7b/0x90 [ 48.616742][ T367] ? x64_sys_call+0x5ae/0x9a0 [ 48.621365][ T367] ? do_syscall_64+0x3b/0xb0 [ 48.625792][ T367] ext4_htree_fill_tree+0x5d1/0x13e0 [ 48.631138][ T367] ? ext4_handle_dirty_dirblock+0x6e0/0x6e0 [ 48.636945][ T367] ? kasan_save_alloc_info+0x1f/0x30 [ 48.642347][ T367] ext4_readdir+0x2e6f/0x3860 [ 48.646862][ T367] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 48.652248][ T367] ? down_read_killable+0x1206/0x1ff0 [ 48.657742][ T367] ? ext4_dir_llseek+0x540/0x540 [ 48.662672][ T367] ? down_read_interruptible+0x1ed0/0x1ed0 [ 48.668417][ T367] ? cgroup_rstat_updated+0xe5/0x370 [ 48.673631][ T367] ? __mod_memcg_lruvec_state+0xce/0x100 [ 48.679428][ T367] ? memcg_rstat_updated+0x57/0x120 [ 48.684455][ T367] ? avc_policy_seqno+0x1b/0x70 [ 48.689913][ T367] ? security_file_permission+0x86/0xb0 [ 48.695740][ T367] iterate_dir+0x265/0x600 [ 48.699988][ T367] ? ext4_dir_llseek+0x540/0x540 [ 48.704768][ T367] __se_sys_getdents64+0x1c1/0x460 [ 48.709809][ T367] ? __x64_sys_getdents64+0x90/0x90 [ 48.715008][ T367] ? filldir+0x670/0x670 [ 48.719361][ T367] ? debug_smp_processor_id+0x17/0x20 [ 48.724833][ T367] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.730819][ T367] ? exit_to_user_mode_prepare+0x39/0xa0 [ 48.736507][ T367] __x64_sys_getdents64+0x7b/0x90 [ 48.741447][ T367] x64_sys_call+0x5ae/0x9a0 [ 48.745804][ T367] do_syscall_64+0x3b/0xb0 [ 48.750040][ T367] ? clear_bhb_loop+0x55/0xb0 [ 48.754570][ T367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.760464][ T367] RIP: 0033:0x7f723eaa9363 [ 48.764855][ T367] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 48.784888][ T367] RSP: 002b:00007ffe0d9e6148 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 48.793194][ T367] RAX: ffffffffffffffda RBX: 000055555f2a8890 RCX: 00007f723eaa9363 [ 48.801333][ T367] RDX: 0000000000008000 RSI: 000055555f2a8890 RDI: 0000000000000006 [ 48.809326][ T367] RBP: 000055555f2a8864 R08: 0000000000000000 R09: 0000000000000000 [ 48.817256][ T367] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 48.825330][ T367] R13: 0000000000000016 R14: 000055555f2a8860 R15: 0000000000000008 [ 48.833277][ T367] [ 48.836133][ T367] [ 48.838304][ T367] The buggy address belongs to the object at ffff888126921ec8 [ 48.838304][ T367] which belongs to the cache lsm_inode_cache of size 56 [ 48.852895][ T367] The buggy address is located 1 bytes inside of [ 48.852895][ T367] 56-byte region [ffff888126921ec8, ffff888126921f00) [ 48.866210][ T367] [ 48.868369][ T367] The buggy address belongs to the physical page: [ 48.874623][ T367] page:ffffea00049a4840 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126921 [ 48.885057][ T367] flags: 0x4000000000000200(slab|zone=1) [ 48.890532][ T367] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881002a9500 [ 48.899244][ T367] raw: 0000000000000000 00000000802e002e 00000001ffffffff 0000000000000000 [ 48.907702][ T367] page dumped because: kasan: bad access detected [ 48.914077][ T367] page_owner tracks the page as allocated [ 48.919691][ T367] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 360, tgid 360 (udevd), ts 48400808894, free_ts 0 [ 48.938023][ T367] post_alloc_hook+0x213/0x220 [ 48.942687][ T367] prep_new_page+0x1b/0x110 [ 48.947051][ T367] get_page_from_freelist+0x3a98/0x3b10 [ 48.952873][ T367] __alloc_pages+0x234/0x610 [ 48.957850][ T367] alloc_slab_page+0x6c/0xf0 [ 48.962243][ T367] new_slab+0x90/0x3e0 [ 48.966205][ T367] ___slab_alloc+0x6f9/0xb80 [ 48.970671][ T367] __slab_alloc+0x5d/0xa0 [ 48.974916][ T367] kmem_cache_alloc+0x1be/0x320 [ 48.979688][ T367] security_inode_alloc+0x29/0x120 [ 48.985058][ T367] inode_init_always+0x720/0x970 [ 48.989763][ T367] new_inode_pseudo+0x98/0x1d0 [ 48.994483][ T367] new_inode+0x28/0x1c0 [ 48.998475][ T367] shmem_get_inode+0x32d/0xc20 [ 49.003510][ T367] shmem_mknod+0x5c/0x1d0 [ 49.007772][ T367] shmem_mkdir+0x2c/0x60 [ 49.011843][ T367] page_owner free stack trace missing [ 49.017051][ T367] [ 49.019216][ T367] Memory state around the buggy address: [ 49.024886][ T367] ffff888126921d80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 fc [ 49.033118][ T367] ffff888126921e00: fc fc fc 00 00 00 00 00 00 00 fc fc fc fc 00 00 [ 49.041113][ T367] >ffff888126921e80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 49.049127][ T367] ^ [ 49.055559][ T367] ffff888126921f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.063539][ T367] ffff888126921f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 49.071434][ T367] ================================================================== [ 49.080477][ T367] Disabling lock debugging due to kernel taint [ 49.086897][ T367] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2204317447/syzkaller.oTyg8X/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 49.114976][ T367] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 49.135599][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.151063][ T367] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2204317447/syzkaller.oTyg8X/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 49.179279][ T367] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 49.199692][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.215212][ T367] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2204317447/syzkaller.oTyg8X/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 49.242899][ T367] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 49.263441][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.278621][ T367] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2204317447/syzkaller.oTyg8X/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 49.307268][ T367] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 49.327608][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.342840][ T367] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2204317447/syzkaller.oTyg8X/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 49.371029][ T367] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 49.391743][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.407738][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.423544][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.439944][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.456705][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.472839][ T367] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 49.577489][ T367] EXT4-fs (loop0): unmounting filesystem. [ 50.075530][ T10] device bridge_slave_1 left promiscuous mode [ 50.081556][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.089339][ T10] device bridge_slave_0 left promiscuous mode [ 50.095332][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.103444][ T10] device veth1_macvtap left promiscuous mode [ 50.109755][ T10] device veth0_vlan left promiscuous mode [ 50.647364][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.655118][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.663331][ T378] device bridge_slave_0 entered promiscuous mode [ 50.672803][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.685619][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.694954][ T378] device bridge_slave_1 entered promiscuous mode [ 50.751706][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.758902][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.766260][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.773372][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.796518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.804277][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.811846][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.820959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.829396][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.836685][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.845777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.854279][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.862233][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.876200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.886619][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.901633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.913311][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.921575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.929566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.938296][ T378] device veth0_vlan entered promiscuous mode [ 50.949686][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.959203][ T378] device veth1_macvtap entered promiscuous mode [ 50.969225][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.979128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/03/07 01:18:24 executed programs: 5 [ 51.005125][ T383] loop0: detected capacity change from 0 to 512 [ 51.012259][ T383] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 51.022097][ T383] EXT4-fs (loop0): 1 truncate cleaned up [ 51.027940][ T383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.050164][ T378] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1220666939/syzkaller.fLtGp2/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 51.078518][ T378] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 51.099171][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.115220][ T378] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1220666939/syzkaller.fLtGp2/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 51.143633][ T378] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 51.164147][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.179910][ T378] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1220666939/syzkaller.fLtGp2/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 51.207703][ T378] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 51.228296][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.243678][ T378] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1220666939/syzkaller.fLtGp2/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 51.271624][ T378] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 51.292382][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.308267][ T378] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1220666939/syzkaller.fLtGp2/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 51.336058][ T378] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 51.356658][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.373330][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.389881][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.406039][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.421951][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.438347][ T378] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 51.577168][ T378] EXT4-fs (loop0): unmounting filesystem. [ 52.145410][ T10] device bridge_slave_1 left promiscuous mode [ 52.151467][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.159981][ T10] device bridge_slave_0 left promiscuous mode [ 52.166370][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.174073][ T10] device veth1_macvtap left promiscuous mode [ 52.180097][ T10] device veth0_vlan left promiscuous mode [ 52.643410][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.650665][ T389] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.658100][ T389] device bridge_slave_0 entered promiscuous mode [ 52.665114][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.672046][ T389] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.679431][ T389] device bridge_slave_1 entered promiscuous mode [ 52.730774][ T389] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.737944][ T389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.745326][ T389] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.752702][ T389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.774421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.781913][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.789672][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.799011][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.807131][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.814071][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.822867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.831405][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.838445][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.851728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.862426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.878657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.890783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.899784][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.907653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.916358][ T389] device veth0_vlan entered promiscuous mode [ 52.927186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.936605][ T389] device veth1_macvtap entered promiscuous mode [ 52.946831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.957253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.981850][ T394] loop0: detected capacity change from 0 to 512 [ 52.989392][ T394] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 52.999119][ T394] EXT4-fs (loop0): 1 truncate cleaned up [ 53.005064][ T394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 53.026423][ T389] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2069751071/syzkaller.bHF75C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 53.055177][ T389] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 53.076373][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.092442][ T389] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2069751071/syzkaller.bHF75C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 53.120553][ T389] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 53.141326][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.156816][ T389] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2069751071/syzkaller.bHF75C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 53.184060][ T389] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 53.204354][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.220309][ T389] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2069751071/syzkaller.bHF75C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 53.248320][ T389] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 53.268335][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.284153][ T389] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir2069751071/syzkaller.bHF75C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 53.312483][ T389] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 53.333161][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.348920][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.364784][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.381113][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.397302][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.412909][ T389] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 53.536768][ T389] EXT4-fs (loop0): unmounting filesystem. [ 54.065406][ T8] device bridge_slave_1 left promiscuous mode [ 54.071638][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.079551][ T8] device bridge_slave_0 left promiscuous mode [ 54.085702][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.093935][ T8] device veth1_macvtap left promiscuous mode [ 54.099932][ T8] device veth0_vlan left promiscuous mode [ 54.604740][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.612087][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.620065][ T400] device bridge_slave_0 entered promiscuous mode [ 54.627338][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.634470][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.641978][ T400] device bridge_slave_1 entered promiscuous mode [ 54.694402][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.701540][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.708864][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.715807][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.737425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.745652][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.752712][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.761682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.769989][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.776950][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.785849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.793955][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.800858][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.813488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.823343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.838545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.850115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.858579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.866546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.875446][ T400] device veth0_vlan entered promiscuous mode [ 54.886394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.896237][ T400] device veth1_macvtap entered promiscuous mode [ 54.906422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.916708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.941455][ T405] loop0: detected capacity change from 0 to 512 [ 54.949235][ T405] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.959342][ T405] EXT4-fs (loop0): 1 truncate cleaned up [ 54.965547][ T405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 54.986568][ T400] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3805883532/syzkaller.zdsQVQ/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 55.014156][ T400] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 55.034392][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.050078][ T400] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3805883532/syzkaller.zdsQVQ/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 55.078543][ T400] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 55.099342][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.114850][ T400] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3805883532/syzkaller.zdsQVQ/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 55.143017][ T400] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 55.163662][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.178858][ T400] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3805883532/syzkaller.zdsQVQ/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 55.206835][ T400] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 55.227177][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.243052][ T400] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir3805883532/syzkaller.zdsQVQ/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 55.270712][ T400] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 55.291379][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.307843][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.323564][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.339562][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.356128][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.373025][ T400] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 55.477128][ T400] EXT4-fs (loop0): unmounting filesystem. [ 55.985285][ T397] device bridge_slave_1 left promiscuous mode [ 55.991428][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.999010][ T397] device bridge_slave_0 left promiscuous mode [ 56.005067][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.012858][ T397] device veth1_macvtap left promiscuous mode [ 56.018860][ T397] device veth0_vlan left promiscuous mode [ 56.543030][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.550430][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.558156][ T411] device bridge_slave_0 entered promiscuous mode [ 56.565414][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.572612][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.580038][ T411] device bridge_slave_1 entered promiscuous mode [ 56.630104][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.637264][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.644478][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.651672][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.673470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.681613][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.689955][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.700170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.708776][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.715814][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.726170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.734363][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.741377][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.754116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.763353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.778982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.790847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.799282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.807398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.816379][ T411] device veth0_vlan entered promiscuous mode [ 56.827765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.837645][ T411] device veth1_macvtap entered promiscuous mode [ 56.847982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.859325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/03/07 01:18:30 executed programs: 12 [ 56.884599][ T416] loop0: detected capacity change from 0 to 512 [ 56.892069][ T416] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 56.902489][ T416] EXT4-fs (loop0): 1 truncate cleaned up [ 56.908583][ T416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 56.930421][ T411] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1765895773/syzkaller.uC8O7C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 56.959784][ T411] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 56.980915][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 56.981480][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 56.981496][ T28] audit: type=1400 audit(1741310310.252:110): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.002419][ T411] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1765895773/syzkaller.uC8O7C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 57.025545][ T28] audit: type=1400 audit(1741310310.252:111): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.075002][ T411] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 57.095498][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.111343][ T411] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1765895773/syzkaller.uC8O7C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 57.139369][ T411] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 57.160289][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.175732][ T411] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1765895773/syzkaller.uC8O7C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 57.203641][ T411] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 57.224125][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.240195][ T411] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz-executor.0: path /root/syzkaller-testdir1765895773/syzkaller.uC8O7C/0/file0/file0: bad entry in directory: directory entry overrun - offset=34816, inode=2538880996, rec_len=34812, size=128 fake=0 [ 57.268262][ T411] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz-executor.0: bad entry in directory: directory entry overrun - offset=4, inode=2538880996, rec_len=34812, size=60 fake=0 [ 57.289333][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.305862][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.322073][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.338004][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.353855][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.370280][ T411] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 2538880996, rec_len 34812, name_len 234inline size 60 [ 57.457091][ T411] EXT4-fs (loop0): unmounting filesystem. [ 57.955725][ T397] device bridge_slave_1 left promiscuous mode [ 57.961809][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.969419][ T397] device bridge_slave_0 left promiscuous mode [ 57.975537][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.983503][ T397] device veth1_macvtap left promiscuous mode [ 57.989618][ T397] device veth0_vlan left promiscuous mode