Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. 2024/05/27 18:47:04 ignoring optional flag "sandboxArg"="0" 2024/05/27 18:47:05 parsed 1 programs 2024/05/27 18:47:05 executed programs: 0 [ 39.902925][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 39.902947][ T28] audit: type=1400 audit(1716835625.111:94): avc: denied { unlink } for pid=343 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.941622][ T343] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.000994][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.007966][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.015439][ T349] device bridge_slave_0 entered promiscuous mode [ 40.023081][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.029939][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.037622][ T349] device bridge_slave_1 entered promiscuous mode [ 40.087122][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.094559][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.101742][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.108905][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.130033][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.137397][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.145037][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.152613][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.161583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.169944][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.177040][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.185701][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.194022][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.201025][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.223655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.231974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.240397][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.247749][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.256291][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.264448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.272623][ T349] device veth0_vlan entered promiscuous mode [ 40.284378][ T294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.293691][ T349] device veth1_macvtap entered promiscuous mode [ 40.303614][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.317361][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.338898][ T355] loop0: detected capacity change from 0 to 512 [ 40.345351][ T28] audit: type=1400 audit(1716835625.551:95): avc: denied { mounton } for pid=354 comm="syz-executor.0" path="/root/syzkaller-testdir1489955783/syzkaller.HXanHG/0/bus" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 40.373075][ T357] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 40.373638][ T28] audit: type=1400 audit(1716835625.551:96): avc: denied { map } for pid=354 comm="syz-executor.0" path="/root/syzkaller-testdir1489955783/syzkaller.HXanHG/0/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.444286][ T28] audit: type=1400 audit(1716835625.651:97): avc: denied { unmount } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 40.493562][ T365] loop0: detected capacity change from 0 to 512 [ 40.587069][ T380] loop0: detected capacity change from 0 to 512 [ 40.687236][ T408] loop0: detected capacity change from 0 to 512 [ 40.797562][ T438] loop0: detected capacity change from 0 to 512 [ 40.812773][ T28] audit: type=1400 audit(1716835626.021:98): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 40.823514][ T441] loop0: detected capacity change from 0 to 512 [ 40.923191][ T453] loop0: detected capacity change from 0 to 512 [ 41.089976][ T501] loop0: detected capacity change from 0 to 512 [ 41.358133][ T580] loop0: detected capacity change from 0 to 512 [ 41.491009][ T616] loop0: detected capacity change from 0 to 512 [ 41.491436][ T615] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 41.556470][ T619] loop0: detected capacity change from 0 to 512 [ 41.578204][ T622] loop0: detected capacity change from 0 to 512 [ 41.585230][ T623] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 41.948292][ T716] loop0: detected capacity change from 0 to 512 [ 42.002833][ T719] loop0: detected capacity change from 0 to 512 [ 42.060988][ T722] loop0: detected capacity change from 0 to 512 [ 42.668330][ T894] loop0: detected capacity change from 0 to 512 [ 42.668830][ T895] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 42.766144][ T918] loop0: detected capacity change from 0 to 512 [ 42.965459][ T966] loop0: detected capacity change from 0 to 512 [ 42.994680][ T972] loop0: detected capacity change from 0 to 512 [ 43.037359][ T981] loop0: detected capacity change from 0 to 512 [ 43.121348][ T993] loop0: detected capacity change from 0 to 512 [ 43.121822][ T994] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 43.183549][ T996] loop0: detected capacity change from 0 to 512 [ 43.202516][ T999] loop0: detected capacity change from 0 to 512 [ 43.337395][ T1026] loop0: detected capacity change from 0 to 512 [ 43.358087][ T1029] loop0: detected capacity change from 0 to 512 [ 43.495381][ T1059] loop0: detected capacity change from 0 to 512 [ 43.515786][ T1062] loop0: detected capacity change from 0 to 512 [ 43.718621][ T1108] loop0: detected capacity change from 0 to 512 [ 44.013592][ T1192] loop0: detected capacity change from 0 to 512 [ 44.025072][ T28] audit: type=1400 audit(1716835629.231:99): avc: denied { mounton } for pid=1191 comm="syz-executor.0" path="/root/syzkaller-testdir1489955783/syzkaller.HXanHG/277/file0" dev="sda1" ino=1940 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 44.060825][ T1192] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor.0: iget: special inode unallocated [ 44.083038][ T1192] EXT4-fs (loop0): get root inode failed [ 44.096003][ T1192] EXT4-fs (loop0): mount failed [ 44.161138][ T1205] loop0: detected capacity change from 0 to 512 [ 44.168077][ T1206] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 44.254778][ T1217] loop0: detected capacity change from 0 to 512 [ 44.275542][ T1220] loop0: detected capacity change from 0 to 512 [ 44.412726][ T1259] loop0: detected capacity change from 0 to 512 [ 44.413242][ T1260] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 44.547242][ T1295] loop0: detected capacity change from 0 to 512 [ 44.566050][ T1298] loop0: detected capacity change from 0 to 512 [ 44.575350][ T1298] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 12 (err -116) [ 44.587823][ T1298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.597605][ T28] audit: type=1400 audit(1716835629.801:100): avc: denied { mount } for pid=1297 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.643970][ T28] audit: type=1400 audit(1716835629.851:101): avc: denied { unmount } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.664606][ T349] EXT4-fs (loop0): unmounting filesystem. [ 44.690724][ T1307] loop0: detected capacity change from 0 to 512 [ 44.762721][ T1325] loop0: detected capacity change from 0 to 512 [ 44.763186][ T1326] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 44.828807][ T1328] loop0: detected capacity change from 0 to 512 2024/05/27 18:47:10 executed programs: 329 [ 44.944154][ T1349] loop0: detected capacity change from 0 to 512 [ 45.008218][ T1364] loop0: detected capacity change from 0 to 512 [ 45.028554][ T1367] loop0: detected capacity change from 0 to 512 [ 45.153730][ T1391] loop0: detected capacity change from 0 to 512 [ 45.325933][ T1436] loop0: detected capacity change from 0 to 512 [ 45.345107][ T1439] loop0: detected capacity change from 0 to 512 [ 45.359321][ T1439] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 12 (err -116) [ 45.371707][ T1439] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.404518][ T349] EXT4-fs (loop0): unmounting filesystem. [ 45.440633][ T1450] loop0: detected capacity change from 0 to 512 [ 45.499214][ T1453] loop0: detected capacity change from 0 to 512 [ 45.519567][ T1456] loop0: detected capacity change from 0 to 512 [ 45.604135][ T1468] loop0: detected capacity change from 0 to 512 [ 45.644774][ T1478] loop0: detected capacity change from 0 to 512 [ 45.697205][ T1490] loop0: detected capacity change from 0 to 512 [ 45.736168][ T1499] loop0: detected capacity change from 0 to 512 [ 45.880733][ T1529] loop0: detected capacity change from 0 to 512 [ 45.881151][ T1530] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 45.908846][ T1532] loop0: detected capacity change from 0 to 512 [ 45.960080][ T1535] loop0: detected capacity change from 0 to 512 [ 46.537912][ T1703] loop0: detected capacity change from 0 to 512 [ 46.559438][ T1706] loop0: detected capacity change from 0 to 512 [ 46.559915][ T1707] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 46.637142][ T1724] loop0: detected capacity change from 0 to 512 [ 46.715281][ T1746] loop0: detected capacity change from 0 to 512 [ 47.027364][ T1836] loop0: detected capacity change from 0 to 512 [ 47.083078][ T1839] loop0: detected capacity change from 0 to 512 [ 47.141051][ T1842] loop0: detected capacity change from 0 to 512 [ 47.141552][ T1843] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 47.918297][ T2059] loop0: detected capacity change from 0 to 512 [ 47.974367][ T2062] loop0: detected capacity change from 0 to 512 [ 48.031862][ T2065] loop0: detected capacity change from 0 to 512 [ 48.105537][ T2074] loop0: detected capacity change from 0 to 512 [ 48.163499][ T2077] loop0: detected capacity change from 0 to 512 [ 48.766614][ T2249] loop0: detected capacity change from 0 to 512 [ 49.319314][ T2408] loop0: detected capacity change from 0 to 512 [ 49.319732][ T2409] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 49.349100][ T2411] loop0: detected capacity change from 0 to 512 [ 49.355672][ T2412] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 49.458458][ T2429] loop0: detected capacity change from 0 to 512 [ 49.778186][ T2514] loop0: detected capacity change from 0 to 512 [ 49.778643][ T2515] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 2024/05/27 18:47:15 executed programs: 731 [ 49.979027][ T2562] loop0: detected capacity change from 0 to 512 [ 50.067468][ T2586] loop0: detected capacity change from 0 to 512 [ 50.067985][ T2587] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 50.197546][ T2610] loop0: detected capacity change from 0 to 512 [ 50.407517][ T2673] loop0: detected capacity change from 0 to 512 [ 50.407984][ T2674] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 50.519112][ T2700] loop0: detected capacity change from 0 to 512 [ 50.539336][ T2703] loop0: detected capacity change from 0 to 512 [ 50.550342][ T2703] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor.0: iget: special inode unallocated [ 50.563362][ T2703] EXT4-fs (loop0): get root inode failed [ 50.568890][ T2703] EXT4-fs (loop0): mount failed [ 50.611199][ T2707] loop0: detected capacity change from 0 to 512 [ 50.676370][ T2714] loop0: detected capacity change from 0 to 512 [ 50.676907][ T2715] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 50.825052][ T2753] loop0: detected capacity change from 0 to 512 [ 50.853997][ T2759] loop0: detected capacity change from 0 to 512 [ 50.854520][ T2760] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 51.004122][ T2786] loop0: detected capacity change from 0 to 512 [ 51.004565][ T2787] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 51.146042][ T2813] loop0: detected capacity change from 0 to 512 [ 51.210985][ T2819] loop0: detected capacity change from 0 to 512 [ 51.344543][ T2846] loop0: detected capacity change from 0 to 512 [ 51.383523][ T2855] loop0: detected capacity change from 0 to 512 [ 51.494662][ T2885] loop0: detected capacity change from 0 to 512 [ 51.515426][ T2888] loop0: detected capacity change from 0 to 512 [ 51.527549][ T2888] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 12 (err -116) [ 51.541304][ T2888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.575232][ T349] EXT4-fs (loop0): unmounting filesystem. [ 51.601311][ T2896] loop0: detected capacity change from 0 to 512 [ 51.797320][ T2951] loop0: detected capacity change from 0 to 512 [ 52.141307][ T3050] loop0: detected capacity change from 0 to 512 [ 52.160135][ T3053] loop0: detected capacity change from 0 to 512 [ 52.170987][ T3053] EXT4-fs (loop0): 1 truncate cleaned up [ 52.176775][ T3053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.215290][ T349] EXT4-fs (loop0): unmounting filesystem. [ 52.230963][ T3057] loop0: detected capacity change from 0 to 512 [ 52.231500][ T3058] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 52.312106][ T3075] loop0: detected capacity change from 0 to 512 [ 52.313301][ T3076] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 52.613874][ T3159] loop0: detected capacity change from 0 to 512 [ 52.614325][ T3160] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 52.687857][ T3166] loop0: detected capacity change from 0 to 512 [ 52.849449][ T3211] loop0: detected capacity change from 0 to 512 [ 53.207546][ T3316] loop0: detected capacity change from 0 to 512 [ 53.265390][ T3328] loop0: detected capacity change from 0 to 512 [ 53.370903][ T3355] loop0: detected capacity change from 0 to 512 [ 53.642984][ T3433] loop0: detected capacity change from 0 to 512 [ 53.773041][ T3467] loop0: detected capacity change from 0 to 512 [ 53.792760][ T3470] loop0: detected capacity change from 0 to 512 [ 53.854255][ T3485] loop0: detected capacity change from 0 to 512 [ 53.867459][ T3485] ================================================================== [ 53.875653][ T3485] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x13c0/0x3ef0 [ 53.883726][ T3485] Read of size 18446744073709551584 at addr ffff888125e47fc8 by task syz-executor.0/3485 [ 53.893613][ T3485] [ 53.895962][ T3485] CPU: 1 PID: 3485 Comm: syz-executor.0 Not tainted 6.1.75-syzkaller-1151070-g68c821783c76 #0 [ 53.906106][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 53.916369][ T3485] Call Trace: [ 53.919563][ T3485] [ 53.922342][ T3485] dump_stack_lvl+0x151/0x1b7 [ 53.926858][ T3485] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 53.932160][ T3485] ? _printk+0xd1/0x111 [ 53.936142][ T3485] ? __virt_addr_valid+0x242/0x2f0 [ 53.941087][ T3485] print_report+0x158/0x4e0 [ 53.945438][ T3485] ? __virt_addr_valid+0x242/0x2f0 [ 53.950375][ T3485] ? kasan_addr_to_slab+0xd/0x80 [ 53.955148][ T3485] ? ext4_xattr_set_entry+0x13c0/0x3ef0 [ 53.960564][ T3485] kasan_report+0x13c/0x170 [ 53.964875][ T3485] ? ext4_xattr_set_entry+0x13c0/0x3ef0 [ 53.970434][ T3485] kasan_check_range+0x294/0x2a0 [ 53.975201][ T3485] ? ext4_xattr_set_entry+0x13c0/0x3ef0 [ 53.980585][ T3485] memmove+0x2d/0x70 [ 53.984570][ T3485] ext4_xattr_set_entry+0x13c0/0x3ef0 [ 53.990243][ T3485] ? ext4_xattr_ibody_set+0x390/0x390 [ 53.995593][ T3485] ? ext4_get_inode_loc+0x190/0x190 [ 54.000642][ T3485] ? ext4_xattr_block_find+0x320/0x320 [ 54.005933][ T3485] ? xattr_find_entry+0x2ab/0x300 [ 54.010786][ T3485] ext4_xattr_ibody_set+0x124/0x390 [ 54.015822][ T3485] ext4_expand_extra_isize_ea+0x1147/0x1c40 [ 54.022072][ T3485] ? ext4_xattr_set+0x3d0/0x3d0 [ 54.026765][ T3485] ? rwsem_write_trylock+0x15b/0x290 [ 54.031979][ T3485] ? dquot_initialize_needed+0x13d/0x370 [ 54.037781][ T3485] __ext4_expand_extra_isize+0x31a/0x420 [ 54.043249][ T3485] __ext4_mark_inode_dirty+0x4bb/0x7d0 [ 54.048546][ T3485] ? sb_end_intwrite+0x130/0x130 [ 54.053405][ T3485] ? current_time+0x1af/0x2f0 [ 54.058104][ T3485] ? atime_needs_update+0x810/0x810 [ 54.063498][ T3485] ? ext4_inline_data_truncate+0x539/0xd60 [ 54.069133][ T3485] ? memcpy+0x56/0x70 [ 54.072964][ T3485] ext4_inline_data_truncate+0x552/0xd60 [ 54.078423][ T3485] ? ext4_inline_data_iomap+0x4e0/0x4e0 [ 54.083793][ T3485] ? __ext4_iget+0x2cfc/0x3ee0 [ 54.088407][ T3485] ext4_truncate+0x337/0xfb0 [ 54.092821][ T3485] ? __ext4_mark_inode_dirty+0x7d0/0x7d0 [ 54.098397][ T3485] ext4_process_orphan+0x1d3/0x2f0 [ 54.103588][ T3485] ext4_orphan_cleanup+0xa50/0x11b0 [ 54.108657][ T3485] ? ext4_orphan_del+0xc50/0xc50 [ 54.113400][ T3485] ? errseq_check_and_advance+0x64/0x130 [ 54.118951][ T3485] ext4_fill_super+0x7d46/0x8460 [ 54.123729][ T3485] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 54.129791][ T3485] ? snprintf+0xd6/0x120 [ 54.133876][ T3485] ? set_blocksize+0x1cb/0x360 [ 54.138482][ T3485] ? sb_set_blocksize+0xa8/0xf0 [ 54.143160][ T3485] get_tree_bdev+0x440/0x680 [ 54.147645][ T3485] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 54.153692][ T3485] ext4_get_tree+0x1c/0x20 [ 54.157918][ T3485] vfs_get_tree+0x88/0x290 [ 54.162173][ T3485] do_new_mount+0x2ba/0xb30 [ 54.166509][ T3485] ? do_move_mount_old+0x160/0x160 [ 54.171562][ T3485] ? security_capable+0x87/0xb0 [ 54.176232][ T3485] ? ns_capable+0x89/0xe0 [ 54.180395][ T3485] path_mount+0x671/0x1070 [ 54.184915][ T3485] ? user_path_at_empty+0x14e/0x1a0 [ 54.190041][ T3485] __se_sys_mount+0x2c4/0x3b0 [ 54.194716][ T3485] ? __x64_sys_mount+0xd0/0xd0 [ 54.199322][ T3485] ? debug_smp_processor_id+0x17/0x20 [ 54.204534][ T3485] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 54.210509][ T3485] __x64_sys_mount+0xbf/0xd0 [ 54.214937][ T3485] do_syscall_64+0x3d/0xb0 [ 54.219198][ T3485] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.224919][ T3485] RIP: 0033:0x7f4fc567f46a [ 54.229267][ T3485] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.248898][ T3485] RSP: 002b:00007f4fc640fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 54.257138][ T3485] RAX: ffffffffffffffda RBX: 00007f4fc640ff80 RCX: 00007f4fc567f46a [ 54.265043][ T3485] RDX: 0000000020000180 RSI: 00000000200000c0 RDI: 00007f4fc640ff40 [ 54.272850][ T3485] RBP: 0000000020000180 R08: 00007f4fc640ff80 R09: 0000000000000000 [ 54.281375][ T3485] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 54.289263][ T3485] R13: 00007f4fc640ff40 R14: 000000000000046a R15: 0000000020000300 [ 54.297081][ T3485] [ 54.299940][ T3485] [ 54.302189][ T3485] The buggy address belongs to the physical page: [ 54.308482][ T3485] page:ffffea00049791c0 refcount:3 mapcount:1 mapping:ffff888100549c50 index:0x1 pfn:0x125e47 [ 54.318625][ T3485] memcg:ffff888109fac000 [ 54.322775][ T3485] aops:def_blk_aops ino:700000 [ 54.327631][ T3485] flags: 0x560000000002205e(referenced|uptodate|dirty|lru|workingset|private|mappedtodisk|zone=1) [ 54.338851][ T3485] raw: 560000000002205e ffffea00047ee788 ffffea00047308c8 ffff888100549c50 [ 54.347265][ T3485] raw: 0000000000000001 ffff888112b4b888 0000000300000000 ffff888109fac000 [ 54.355768][ T3485] page dumped because: kasan: bad access detected [ 54.362101][ T3485] page_owner tracks the page as allocated [ 54.367890][ T3485] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 3485, tgid 3484 (syz-executor.0), ts 53862176030, free_ts 53854112718 [ 54.388226][ T3485] post_alloc_hook+0x213/0x220 [ 54.392809][ T3485] prep_new_page+0x1b/0x110 [ 54.397421][ T3485] get_page_from_freelist+0x27ea/0x2870 [ 54.402980][ T3485] __alloc_pages+0x3a1/0x780 [ 54.407582][ T3485] __folio_alloc+0x15/0x40 [ 54.412177][ T3485] __filemap_get_folio+0x827/0xae0 [ 54.417125][ T3485] pagecache_get_page+0x2f/0x110 [ 54.421996][ T3485] __getblk_gfp+0x205/0x7d0 [ 54.426339][ T3485] __ext4_get_inode_loc+0x4ed/0xe40 [ 54.431555][ T3485] __ext4_iget+0x4ff/0x3ee0 [ 54.436315][ T3485] ext4_fill_super+0x669c/0x8460 [ 54.441290][ T3485] get_tree_bdev+0x440/0x680 [ 54.445703][ T3485] ext4_get_tree+0x1c/0x20 [ 54.449961][ T3485] vfs_get_tree+0x88/0x290 [ 54.454218][ T3485] do_new_mount+0x2ba/0xb30 [ 54.458549][ T3485] path_mount+0x671/0x1070 [ 54.462973][ T3485] page last free stack trace: [ 54.467491][ T3485] free_unref_page_prepare+0x83d/0x850 [ 54.473041][ T3485] free_unref_page_list+0xf1/0x7b0 [ 54.477990][ T3485] release_pages+0xf7f/0xfe0 [ 54.482424][ T3485] free_pages_and_swap_cache+0x8a/0xa0 [ 54.487717][ T3485] tlb_finish_mmu+0x1e0/0x3f0 [ 54.492221][ T3485] unmap_region+0x2c1/0x310 [ 54.496612][ T3485] do_mas_align_munmap+0xd05/0x1400 [ 54.501596][ T3485] do_mas_munmap+0x23e/0x2b0 [ 54.506196][ T3485] __vm_munmap+0x263/0x3a0 [ 54.510786][ T3485] __x64_sys_munmap+0x6b/0x80 [ 54.515241][ T3485] do_syscall_64+0x3d/0xb0 [ 54.519488][ T3485] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.525220][ T3485] [ 54.527471][ T3485] Memory state around the buggy address: [ 54.532947][ T3485] ffff888125e47e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.540841][ T3485] ffff888125e47f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.548940][ T3485] >ffff888125e47f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 54.556904][ T3485] ^ [ 54.563592][ T3485] ffff888125e48000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.571615][ T3485] ffff888125e48080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.579596][ T3485] ================================================================== [ 54.589149][ T3485] Disabling lock debugging due to kernel taint [ 54.595759][ T3485] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr [ 54.609225][ T3485] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1745: inode #12: comm syz-executor.0: unable to update i_inline_off [ 54.623168][ T3485] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 54.636177][ T3485] EXT4-fs (loop0): 1 truncate cleaned up [ 54.641686][ T3485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 54.655933][ T349] EXT4-fs (loop0): unmounting filesystem. [ 54.786925][ T3527] loop0: detected capacity change from 0 to 512 2024/05/27 18:47:20 executed programs: 1065 [ 54.960051][ T3575] loop0: detected capacity change from 0 to 512 [ 55.030968][ T3581] loop0: detected capacity change from 0 to 512 [ 55.110136][ T3602] loop0: detected capacity change from 0 to 512 [ 55.110643][ T3603] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 55.187654][ T3620] loop0: detected capacity change from 0 to 512 [ 55.269476][ T3632] loop0: detected capacity change from 0 to 512 [ 55.397915][ T3659] loop0: detected capacity change from 0 to 512 [ 55.456163][ T3662] loop0: detected capacity change from 0 to 512 [ 55.524795][ T3671] loop0: detected capacity change from 0 to 512 [ 55.613552][ T3683] loop0: detected capacity change from 0 to 512 [ 55.623872][ T3683] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor.0: iget: special inode unallocated [ 55.638058][ T3683] EXT4-fs (loop0): get root inode failed [ 55.644261][ T3683] EXT4-fs (loop0): mount failed [ 55.677261][ T3688] loop0: detected capacity change from 0 to 512 [ 55.695957][ T3691] loop0: detected capacity change from 0 to 512 [ 55.886923][ T3736] loop0: detected capacity change from 0 to 512 [ 56.195202][ T3814] loop0: detected capacity change from 0 to 512 [ 56.216172][ T3817] loop0: detected capacity change from 0 to 512 [ 56.383431][ T3856] loop0: detected capacity change from 0 to 512 [ 56.384018][ T3857] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 56.587037][ T3913] loop0: detected capacity change from 0 to 512 [ 56.648277][ T3928] loop0: detected capacity change from 0 to 512 [ 56.710512][ T3944] loop0: detected capacity change from 0 to 512 [ 56.729264][ T3947] loop0: detected capacity change from 0 to 512 [ 56.780433][ T3950] loop0: detected capacity change from 0 to 512 [ 56.999853][ T4004] loop0: detected capacity change from 0 to 512 [ 57.000394][ T4005] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 57.237133][ T4070] loop0: detected capacity change from 0 to 512 [ 57.290000][ T4082] loop0: detected capacity change from 0 to 512 [ 57.349131][ T4085] loop0: detected capacity change from 0 to 512 [ 57.360372][ T4085] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 12 (err -116) [ 57.372807][ T4085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.403469][ T349] EXT4-fs (loop0): unmounting filesystem. [ 57.580853][ T4138] loop0: detected capacity change from 0 to 512 [ 57.601301][ T4141] loop0: detected capacity change from 0 to 512 [ 57.684838][ T4151] loop0: detected capacity change from 0 to 512 [ 57.967393][ T4223] loop0: detected capacity change from 0 to 512 [ 57.986683][ T4226] loop0: detected capacity change from 0 to 512 [ 58.137227][ T4259] loop0: detected capacity change from 0 to 512 [ 58.137698][ T4260] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 58.194174][ T4271] loop0: detected capacity change from 0 to 512 [ 58.297935][ T4286] loop0: detected capacity change from 0 to 512 [ 58.318212][ T4289] loop0: detected capacity change from 0 to 512 [ 58.327680][ T4289] EXT4-fs (loop0): 1 truncate cleaned up [ 58.335809][ T4289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.379341][ T349] EXT4-fs (loop0): unmounting filesystem. [ 58.487069][ T4320] loop0: detected capacity change from 0 to 512 [ 58.487601][ T4321] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 58.556656][ T4335] loop0: detected capacity change from 0 to 512 [ 58.576523][ T4338] loop0: detected capacity change from 0 to 512 [ 58.588519][ T4338] EXT4-fs (loop0): 1 truncate cleaned up [ 58.594345][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.643794][ T349] EXT4-fs (loop0): unmounting filesystem. [ 58.693388][ T4352] loop0: detected capacity change from 0 to 512 [ 58.693833][ T4353] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 58.760746][ T4355] loop0: detected capacity change from 0 to 512 [ 59.138443][ T4457] loop0: detected capacity change from 0 to 512 [ 59.158641][ T4460] loop0: detected capacity change from 0 to 512 [ 59.220428][ T4466] loop0: detected capacity change from 0 to 512 [ 59.304527][ T4478] loop0: detected capacity change from 0 to 512 [ 59.526823][ T4541] loop0: detected capacity change from 0 to 512 [ 59.527201][ T4542] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 59.555936][ T4544] loop0: detected capacity change from 0 to 512 [ 59.655414][ T4562] loop0: detected capacity change from 0 to 512 [ 59.675621][ T4565] loop0: detected capacity change from 0 to 512 [ 59.735141][ T4581] loop0: detected capacity change from 0 to 512 [ 59.735754][ T4582] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 59.801696][ T4584] loop0: detected capacity change from 0 to 512 [ 59.874395][ T4602] loop0: detected capacity change from 0 to 512 2024/05/27 18:47:25 executed programs: 1409 [ 60.173259][ T4662] loop0: detected capacity change from 0 to 512 [ 60.197642][ T4665] loop0: detected capacity change from 0 to 512 [ 60.219228][ T4668] loop0: detected capacity change from 0 to 512 [ 60.389729][ T4707] loop0: detected capacity change from 0 to 512 [ 60.430555][ T4716] loop0: detected capacity change from 0 to 512 [ 60.437146][ T4717] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 60.699020][ T4783] loop0: detected capacity change from 0 to 512 [ 60.756947][ T4786] loop0: detected capacity change from 0 to 512 [ 61.134052][ T4885] loop0: detected capacity change from 0 to 512 [ 61.174895][ T4894] loop0: detected capacity change from 0 to 512 [ 61.254764][ T4915] loop0: detected capacity change from 0 to 512 [ 61.360528][ T4945] loop0: detected capacity change from 0 to 512 [ 61.379994][ T4948] loop0: detected capacity change from 0 to 512 [ 61.390923][ T4948] EXT4-fs (loop0): 1 truncate cleaned up [ 61.396774][ T4948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 61.437462][ T349] EXT4-fs (loop0): unmounting filesystem. [ 61.453682][ T4953] loop0: detected capacity change from 0 to 512 [ 61.534765][ T4965] loop0: detected capacity change from 0 to 512 [ 61.635914][ T4992] loop0: detected capacity change from 0 to 512 [ 61.907796][ T5071] loop0: detected capacity change from 0 to 512 [ 62.085741][ T5107] loop0: detected capacity change from 0 to 512 [ 62.137088][ T5119] loop0: detected capacity change from 0 to 512 [ 62.137570][ T5120] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 62.384253][ T5188] loop0: detected capacity change from 0 to 512 [ 62.424384][ T5197] loop0: detected capacity change from 0 to 512 [ 62.433908][ T5197] EXT4-fs (loop0): 1 truncate cleaned up [ 62.439458][ T5197] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 62.488333][ T349] EXT4-fs (loop0): unmounting filesystem. [ 62.536541][ T5210] loop0: detected capacity change from 0 to 512 [ 62.603179][ T5216] loop0: detected capacity change from 0 to 512 [ 62.695260][ T5231] loop0: detected capacity change from 0 to 512 [ 62.777786][ T5244] loop0: detected capacity change from 0 to 512 [ 62.976893][ T5301] loop0: detected capacity change from 0 to 512 [ 63.006342][ T5304] loop0: detected capacity change from 0 to 512 [ 63.058868][ T5307] loop0: detected capacity change from 0 to 512 [ 63.139594][ T5328] loop0: detected capacity change from 0 to 512 [ 63.140127][ T5329] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 63.507910][ T5433] loop0: detected capacity change from 0 to 512 [ 63.527095][ T5436] loop0: detected capacity change from 0 to 512 [ 63.536511][ T5436] EXT4-fs (loop0): 1 truncate cleaned up [ 63.542290][ T5436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 63.589967][ T349] EXT4-fs (loop0): unmounting filesystem. [ 63.656752][ T5456] loop0: detected capacity change from 0 to 512 [ 63.716021][ T5460] loop0: detected capacity change from 0 to 512 [ 63.771558][ T5463] loop0: detected capacity change from 0 to 512 [ 63.772347][ T5464] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2