DUID 00:04:fb:87:82:62:74:5a:87:37:86:23:e7:72:30:e3:bc:00 forked to background, child pid 4645 [ 31.210730][ T4646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.224846][ T4646] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 48.971339][ T5071] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5071 'syz-executor281' [ 49.021916][ T5072] loop1: detected capacity change from 0 to 2048 [ 49.043511][ T5073] loop0: detected capacity change from 0 to 2048 [ 49.058089][ T5071] loop5: detected capacity change from 0 to 2048 [ 49.060269][ T5080] loop3: detected capacity change from 0 to 2048 [ 49.066392][ T5079] loop4: detected capacity change from 0 to 2048 [ 49.077540][ T5078] loop2: detected capacity change from 0 to 2048 [ 49.108610][ T5072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 49.109589][ T5073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 49.121432][ T5079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 49.134869][ T5080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 49.164201][ T27] audit: type=1804 audit(1680148633.509:2): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor281" name="/root/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 49.190751][ T27] audit: type=1804 audit(1680148633.509:3): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor281" name="/root/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 49.211333][ T27] audit: type=1804 audit(1680148633.509:4): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor281" name="/root/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 49.232541][ T27] audit: type=1804 audit(1680148633.509:5): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor281" name="/root/bus/bus" dev="loop4" ino=18 res=1 errno=0 [ 49.247676][ T5079] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.252926][ T27] audit: type=1804 audit(1680148633.569:6): pid=5072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor281" name="/root/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 49.287798][ T5078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 49.291778][ T5095] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.302246][ T5073] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.329370][ T27] audit: type=1804 audit(1680148633.569:7): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor281" name="/root/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 49.329407][ T27] audit: type=1804 audit(1680148633.569:8): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor281" name="/root/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 49.329432][ T27] audit: type=1804 audit(1680148633.569:9): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor281" name="/root/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 49.329457][ T27] audit: type=1804 audit(1680148633.569:10): pid=5080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor281" name="/root/bus/bus" dev="loop3" ino=18 res=1 errno=0 [ 49.351750][ T5071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. [ 49.370654][ T5097] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1098: group 0, [ 49.390845][ T5073] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.408970][ T5097] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.453381][ T5079] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.461027][ T5078] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1098: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.469477][ T5080] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.494499][ T5079] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.494499][ T5079] [ 49.504709][ T5072] ------------[ cut here ]------------ [ 49.510514][ T5072] kernel BUG at fs/ext4/inline.c:225! [ 49.514491][ T5078] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 49.515903][ T5072] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 49.515919][ T5072] CPU: 1 PID: 5072 Comm: syz-executor281 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0 [ 49.539097][ T5099] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1098: group 0, [ 49.544536][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 49.544549][ T5072] RIP: 0010:ext4_write_inline_data_end+0xe52/0x10e0 [ 49.552821][ T5099] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.562819][ T5072] Code: e8 d3 c1 53 ff 48 89 d8 48 25 ff 0f 00 00 0f 84 80 00 00 00 e8 7f bd 53 ff e9 e3 01 00 00 e8 75 bd 53 ff 0f 0b e8 6e bd 53 ff <0f> 0b f3 0f 1e fa 48 8b 1c 24 48 89 de 48 81 e6 ff 0f 00 00 31 ff [ 49.562834][ T5072] RSP: 0018:ffffc90003c5f220 EFLAGS: 00010293 [ 49.562850][ T5072] RAX: ffffffff82369582 RBX: 000000000000005a RCX: ffff888077d057c0 [ 49.611801][ T5072] RDX: 0000000000000000 RSI: 000000000000005a RDI: 0000000000000063 [ 49.619770][ T5072] RBP: ffffc90003c5f348 R08: ffffffff82368b27 R09: ffffed1004de6471 [ 49.627744][ T5072] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 49.635714][ T5072] R13: ffff888074cd4690 R14: 0000000000000063 R15: ffff888074cd48e8 [ 49.643707][ T5072] FS: 00007f1f34c67700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 49.652635][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.659209][ T5072] CR2: 00007f1f2c945e40 CR3: 000000002276e000 CR4: 00000000003506e0 [ 49.667170][ T5072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.675139][ T5072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.683104][ T5072] Call Trace: [ 49.686377][ T5072] [ 49.689305][ T5072] ? put_page+0x260/0x260 [ 49.693720][ T5072] ? ext4_da_write_begin+0x960/0x960 [ 49.699002][ T5072] generic_perform_write+0x3ed/0x5e0 [ 49.704290][ T5072] ? generic_file_direct_write+0x460/0x460 [ 49.710092][ T5072] ? clear_nonspinnable+0x60/0x60 [ 49.715115][ T5072] ? ext4_write_checks+0x255/0x2c0 [ 49.720225][ T5072] ext4_buffered_write_iter+0x122/0x3a0 [ 49.725775][ T5072] ext4_file_write_iter+0x1d6/0x1930 [ 49.731081][ T5072] ? kasan_set_track+0x61/0x70 [ 49.735865][ T5072] ? kasan_set_track+0x4f/0x70 [ 49.740625][ T5072] ? __kasan_kmalloc+0x98/0xb0 [ 49.745391][ T5072] ? __kmalloc+0xb9/0x230 [ 49.749742][ T5072] ? direct_splice_actor+0xe7/0x1c0 [ 49.754982][ T5072] ? splice_direct_to_actor+0x4c4/0xbd0 [ 49.760581][ T5072] ? do_splice_direct+0x283/0x3d0 [ 49.765623][ T5072] ? do_sendfile+0x620/0xff0 [ 49.770206][ T5072] ? __se_sys_sendfile64+0x17c/0x1e0 [ 49.775511][ T5072] ? do_syscall_64+0x41/0xc0 [ 49.780118][ T5072] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.786185][ T5072] ? ext4_file_read_iter+0x670/0x670 [ 49.791466][ T5072] do_iter_write+0x6ea/0xc50 [ 49.796061][ T5072] ? vfs_iter_write+0xa0/0xa0 [ 49.800741][ T5072] ? vfs_iter_write+0x6d/0xa0 [ 49.805413][ T5072] iter_file_splice_write+0x843/0xfe0 [ 49.810793][ T5072] ? splice_from_pipe+0x230/0x230 [ 49.815813][ T5072] ? direct_splice_read+0xa10/0xa10 [ 49.821030][ T5072] ? splice_from_pipe+0x230/0x230 [ 49.826055][ T5072] direct_splice_actor+0xe7/0x1c0 [ 49.831090][ T5072] splice_direct_to_actor+0x4c4/0xbd0 [ 49.836475][ T5072] ? do_splice_direct+0x3d0/0x3d0 [ 49.841494][ T5072] ? pipe_to_sendpage+0x350/0x350 [ 49.846515][ T5072] ? fsnotify_perm+0x67/0x590 [ 49.851189][ T5072] ? bpf_lsm_file_permission+0x9/0x10 [ 49.856566][ T5072] do_splice_direct+0x283/0x3d0 [ 49.861428][ T5072] ? splice_direct_to_actor+0xbd0/0xbd0 [ 49.866990][ T5072] ? rcu_read_lock_any_held+0xb7/0x160 [ 49.872458][ T5072] do_sendfile+0x620/0xff0 [ 49.876874][ T5072] ? do_pwritev+0x360/0x360 [ 49.881368][ T5072] ? restore_fpregs_from_fpstate+0x100/0x250 [ 49.887362][ T5072] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 49.893346][ T5072] __se_sys_sendfile64+0x17c/0x1e0 [ 49.898460][ T5072] ? __x64_sys_sendfile64+0xb0/0xb0 [ 49.903663][ T5072] ? syscall_enter_from_user_mode+0x32/0x230 [ 49.909640][ T5072] ? lockdep_hardirqs_on+0x98/0x140 [ 49.914836][ T5072] ? syscall_enter_from_user_mode+0x32/0x230 [ 49.920814][ T5072] do_syscall_64+0x41/0xc0 [ 49.925257][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.931184][ T5072] RIP: 0033:0x7f1f34cbb2d9 [ 49.935618][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 49.955213][ T5072] RSP: 002b:00007f1f34c67208 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 49.963638][ T5072] RAX: ffffffffffffffda RBX: 00007f1f34d3f6e8 RCX: 00007f1f34cbb2d9 [ 49.971604][ T5072] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 49.979561][ T5072] RBP: 00007f1f34d3f6e0 R08: 0000000000000000 R09: 0000000000000000 [ 49.987522][ T5072] R10: 0000000080000041 R11: 0000000000000246 R12: 00007f1f34d3f6ec [ 49.995478][ T5072] R13: 00007ffc9d0228af R14: 00007f1f34c67300 R15: 0000000000022000 [ 50.003466][ T5072] [ 50.006513][ T5072] Modules linked in: [ 50.010608][ T5072] ---[ end trace 0000000000000000 ]--- [ 50.016079][ T5072] RIP: 0010:ext4_write_inline_data_end+0xe52/0x10e0 [ 50.017107][ T27] audit: type=1804 audit(1680148633.569:11): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor281" name="/root/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 50.022739][ T5072] Code: e8 d3 c1 53 ff 48 89 d8 48 25 ff 0f 00 00 0f 84 80 00 00 00 e8 7f bd 53 ff e9 e3 01 00 00 e8 75 bd 53 ff 0f 0b e8 6e bd 53 ff <0f> 0b f3 0f 1e fa 48 8b 1c 24 48 89 de 48 81 e6 ff 0f 00 00 31 ff [ 50.022757][ T5072] RSP: 0018:ffffc90003c5f220 EFLAGS: 00010293 [ 50.022774][ T5072] RAX: ffffffff82369582 RBX: 000000000000005a RCX: ffff888077d057c0 [ 50.022784][ T5072] RDX: 0000000000000000 RSI: 000000000000005a RDI: 0000000000000063 [ 50.022792][ T5072] RBP: ffffc90003c5f348 R08: ffffffff82368b27 R09: ffffed1004de6471 [ 50.022803][ T5072] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 50.022813][ T5072] R13: ffff888074cd4690 R14: 0000000000000063 R15: ffff888074cd48e8 [ 50.022824][ T5072] FS: 00007f1f34c67700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 50.090815][ T5078] EXT4-fs (loop2): This should not happen!! Data will be lost [ 50.090815][ T5078] [ 50.092811][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.092834][ T5072] CR2: 00007f1f2c945e40 CR3: 000000002276e000 CR4: 00000000003506e0 [ 50.092848][ T5072] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.092858][ T5072] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.092871][ T5072] Kernel panic - not syncing: Fatal exception [ 50.100990][ T5072] Kernel Offset: disabled [ 50.168233][ T5072] Rebooting in 86400 seconds..