Starting OpenBSD Secure Shell server... Starting Permit User Sessions... [ OK ] Started Permit User Sessions. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty3. [ OK ] Started OpenBSD Secure Shell server. Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts. 2021/08/21 13:23:53 parsed 1 programs 2021/08/21 13:23:53 executed programs: 0 [* ] A start job is running for dev-ttyS0.device (8s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (8s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (9s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (10s / 1min 30s)[ 17.245850][ T22] audit: type=1400 audit(1629552233.564:8): avc: denied { execmem } for pid=349 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 17.254577][ T351] cgroup1: Unknown subsys name 'perf_event' [ 17.273066][ T351] cgroup1: Unknown subsys name 'net_cls' [ 17.314970][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.322350][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 17.329888][ T351] device bridge_slave_0 entered promiscuous mode [ 17.336684][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.343846][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 17.351370][ T351] device bridge_slave_1 entered promiscuous mode [ 17.389808][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.396877][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 17.404263][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.411301][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 17.431803][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 17.439120][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 17.446775][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 17.455208][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 17.470564][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 17.478657][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 17.485695][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 17.493163][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 17.501698][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 17.508702][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 17.516687][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 17.540577][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 17.548862][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 17.556919][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 17.565970][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 17.575746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 17.587758][ T101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ *** ] A start job is running for dev-ttyS0.device (10s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (11s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (11s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (12s / 1min 30s)[ **] A start job is running for dev-ttyS0.device (13s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (13s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (14s / 1min 30s)[ 21.903322][ T351] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #13865: block 9868: comm syz-executor.0: lblock 0 mapped to illegal pblock 9868 (length 1) [ 21.919485][ T351] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1014: inode #13865: lblock 0: comm syz-executor.0: error -117 reading directory block [ 21.933962][ T351] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #13859: block 9861: comm syz-executor.0: lblock 0 mapped to illegal pblock 9861 (length 1) [ *** ] A start job is running for dev-ttyS0.device (15s / 1min 30s)[ 22.031321][ T351] syz-executor.0 (351) used greatest stack depth: 20080 bytes left [ 22.032861][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #13858: block 9860: comm syz-execprog: lblock 0 mapped to illegal pblock 9860 (length 1) [ 22.055289][ T340] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1014: inode #13858: lblock 0: comm syz-execprog: error -117 reading directory block [ 22.069679][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ 22.085936][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #13858: block 9860: comm syz-execprog: lblock 0 mapped to illegal pblock 9860 (length 1) [ 22.101863][ T340] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1014: inode #13858: lblock 0: comm syz-execprog: error -117 reading directory block [ 22.116332][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ 22.133090][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #13858: block 9860: comm syz-execprog: lblock 0 mapped to illegal pblock 9860 (length 1) [ 22.149015][ T340] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1014: inode #13858: lblock 0: comm syz-execprog: error -117 reading directory block [*** ] A start job is running for dev-ttyS0.device (15s / 1min 30s)[ 22.714155][ T153] device bridge_slave_1 left promiscuous mode [ 22.720278][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.728006][ T153] device bridge_slave_0 left promiscuous mode [ 22.734395][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.168479][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [** ] A start job is running for dev-ttyS0.device (16s / 1min 30s)[* ] A start job is running for dev-ttyS0.device (16s / 1min 30s)[ 24.188740][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [** ] A start job is running for dev-ttyS0.device (17s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (18s / 1min 30s)[ 25.208889][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ *** ] A start job is running for dev-ttyS0.device (18s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (19s / 1min 30s)[ ***] A start job is running for dev-ttyS0.device (19s / 1min 30s)[ 27.232393][ T340] EXT4-fs error: 1 callbacks suppressed [ 27.232410][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ **] A start job is running for dev-ttyS0.device (20s / 1min 30s)[ *] A start job is running for dev-ttyS0.device (21s / 1min 30s)[ 28.256815][ T342] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ **] A start job is running for dev-ttyS0.device (21s / 1min 30s)[ 29.275375][ T342] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ ***] A start job is running for dev-ttyS0.device (22s / 1min 30s)[ *** ] A start job is running for dev-ttyS0.device (23s / 1min 30s)[ 30.293596][ T342] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ *** ] A start job is running for dev-ttyS0.device (23s / 1min 30s)[*** ] A start job is running for dev-ttyS0.device (24s / 1min 30s)[ 31.311582][ T342] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [** ] A start job is running for dev-ttyS0.device (24s / 1min 30s)[ 32.329494][ T342] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) 2021/08/21 13:24:09 executor failed 11 times: failed to create temp dir: mkdir syzkaller-testdir198156769: structure needs cleaning [* ] A start job is running for dev-ttyS0.device (25s / 1min 30s)[** ] A start job is running for dev-ttyS0.device (26s / 1min 30s)[ 33.346858][ T340] EXT4-fs error (device sda1): ext4_map_blocks:615: inode #16722: block 9831: comm syz-execprog: lblock 0 mapped to illegal pblock 9831 (length 1) [ 33.381228][ T348] ------------[ cut here ]------------ [ 33.386689][ T348] kernel BUG at fs/ext4/ext4.h:2978! [ 33.392377][ T348] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 33.398427][ T348] CPU: 0 PID: 348 Comm: syz-execprog Not tainted 5.4.125-syzkaller-00013-g3ce13296e72d #0 [ 33.408280][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.418431][ T348] RIP: 0010:ext4_mb_load_buddy_gfp+0xdf0/0xe10 [ 33.424551][ T348] Code: ff e8 44 f5 cc ff e9 45 f4 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8c f4 ff ff e8 4a f5 cc ff e9 82 f4 ff ff e8 d0 34 9e ff <0f> 0b e8 c9 34 9e ff 0f 0b e8 c2 34 9e ff 0f 0b e8 bb 34 9e ff 0f [ 33.444214][ T348] RSP: 0018:ffff8881e5f376e8 EFLAGS: 00010293 [ 33.450251][ T348] RAX: ffffffff81c71f10 RBX: 0000000000000010 RCX: ffff8881e55c0fc0 [ 33.458192][ T348] RDX: 0000000000000000 RSI: 00000000fffe8f8f RDI: 0000000000000010 [ 33.466133][ T348] RBP: ffff8881ee136000 R08: ffffffff81c711f3 R09: ffffed103d90e103 [ 33.474071][ T348] R10: ffffed103d90e103 R11: 0000000000000000 R12: 1ffff1103dc2687e [ 33.482008][ T348] R13: ffff8881ee134018 R14: 00000000fffe8f8f R15: ffff8881ee1343f0 [ 33.489948][ T348] FS: 000000c00024e890(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.498846][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.505405][ T348] CR2: 00007f88ec176000 CR3: 00000001ec247000 CR4: 00000000001406f0 [ 33.513378][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.521321][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.529257][ T348] Call Trace: [ 33.532520][ T348] ? ext4_get_group_number+0xdb/0x190 [ 33.537870][ T348] ext4_discard_preallocations+0x63d/0x1240 [ 33.543728][ T348] ? memset+0x1f/0x40 [ 33.547674][ T348] ? fsnotify+0x1332/0x13f0 [ 33.552149][ T348] ? ext4_exit_mballoc+0xf0/0xf0 [ 33.557054][ T348] ? __fsnotify_parent+0x310/0x310 [ 33.562133][ T348] ext4_release_file+0x160/0x300 [ 33.567037][ T348] ? ext4_file_open+0x5f0/0x5f0 [ 33.571856][ T348] __fput+0x27d/0x6c0 [ 33.575826][ T348] task_work_run+0x186/0x1b0 [ 33.580382][ T348] do_exit+0xcb9/0x2bf0 [ 33.584507][ T348] ? pipe_read+0xc6e/0xd50 [ 33.588891][ T348] ? mm_update_next_owner+0x5c0/0x5c0 [ 33.594230][ T348] ? avc_denied+0x1c0/0x1c0 [ 33.598699][ T348] ? _raw_spin_lock_irq+0xa4/0x1b0 [ 33.603782][ T348] ? _raw_spin_lock_irqsave+0x210/0x210 [ 33.609295][ T348] do_group_exit+0x15c/0x2c0 [ 33.613867][ T348] get_signal+0x164f/0x1fc0 [ 33.618339][ T348] ? __fsnotify_update_child_dentry_flags+0x2d0/0x2d0 [ 33.625077][ T348] ? ptrace_notify+0x340/0x340 [ 33.629808][ T348] ? check_preemption_disabled+0x154/0x330 [ 33.635578][ T348] ? security_file_permission+0x1e9/0x300 [ 33.641261][ T348] do_signal+0x8d/0x610 [ 33.645481][ T348] ? signal_fault+0x1e0/0x1e0 [ 33.650154][ T348] ? __x64_sys_futex+0x1d/0xf0 [ 33.654897][ T348] prepare_exit_to_usermode+0x207/0x310 [ 33.660418][ T348] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 33.666281][ T348] RIP: 0033:0x46d823 [ 33.670149][ T348] Code: Bad RIP value. [ 33.674199][ T348] RSP: 002b:000000c000317d98 EFLAGS: 00000286 ORIG_RAX: 00000000000000ca [ 33.682574][ T348] RAX: fffffffffffffe00 RBX: 000000c00024e800 RCX: 000000000046d823 [ 33.690513][ T348] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000c00024e948 [ 33.698451][ T348] RBP: 000000c000317de0 R08: 0000000000000000 R09: 0000000000000000 [ 33.706405][ T348] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000003 [ 33.714362][ T348] R13: 000000c0000b3500 R14: 000000c000081aa0 R15: 0000000000000000 [ 33.722568][ T348] Modules linked in: [ 33.730523][ T348] ---[ end trace 7146ab0e8b7aabc4 ]--- [ 33.735991][ T348] RIP: 0010:ext4_mb_load_buddy_gfp+0xdf0/0xe10 [ 33.742369][ T348] Code: ff e8 44 f5 cc ff e9 45 f4 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 8c f4 ff ff e8 4a f5 cc ff e9 82 f4 ff ff e8 d0 34 9e ff <0f> 0b e8 c9 34 9e ff 0f 0b e8 c2 34 9e ff 0f 0b e8 bb 34 9e ff 0f [ 33.762319][ T348] RSP: 0018:ffff8881e5f376e8 EFLAGS: 00010293 [ 33.768551][ T348] RAX: ffffffff81c71f10 RBX: 0000000000000010 RCX: ffff8881e55c0fc0 [ 33.776748][ T348] RDX: 0000000000000000 RSI: 00000000fffe8f8f RDI: 0000000000000010 [ 33.785001][ T348] RBP: ffff8881ee136000 R08: ffffffff81c711f3 R09: ffffed103d90e103 [*[0;1;3[ 33.793373][ T348] R10: ffffed103d90e103 R11: 0000000000000000 R12: 1ffff1103dc2687e 1m** [ 33.802629][ T348] R13: ffff8881ee134018 R14: 00000000fffe8f8f R15: ffff8881ee1343f0 ] A start [ 33.812000][ T348] FS: 000000c00024e890(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 job is running f[ 33.822435][ T348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 or dev-ttyS0.dev[ 33.830371][ T348] CR2: 00000000009c31d8 CR3: 00000001ef20d000 CR4: 00000000001406e0 ice (26s / 1min [ 33.839746][ T348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 30s)[ 33.849082][ T348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.857350][ T348] Kernel panic - not syncing: Fatal exception [ 33.864613][ T348] Kernel Offset: disabled [ 33.869003][ T348] Rebooting in 86400 seconds..