Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 61.161533][ T3595] loop1: detected capacity change from 0 to 2048 [ 61.185265][ T3598] loop0: detected capacity change from 0 to 2048 [ 61.187322][ T3597] loop2: detected capacity change from 0 to 2048 [ 61.199065][ T3596] loop5: detected capacity change from 0 to 2048 [ 61.211633][ T3602] loop3: detected capacity change from 0 to 2048 [ 61.219010][ T3603] loop4: detected capacity change from 0 to 2048 [ 61.254528][ T3598] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.266934][ T3596] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.283434][ T3595] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.283440][ T3597] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.295318][ T3603] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.318208][ T3602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 61.379002][ T26] audit: type=1804 audit(1679861147.122:2): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor271" name="/root/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 61.428186][ T26] audit: type=1804 audit(1679861147.142:3): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 61.444233][ T3597] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1148: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.449430][ T26] audit: type=1804 audit(1679861147.142:4): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 61.485038][ T3623] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1148: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.501763][ T3624] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1148: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.519160][ T3625] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1148: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.531884][ T3602] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1148: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.537433][ T3603] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1148: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 61.565901][ T3602] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.578532][ T26] audit: type=1804 audit(1679861147.142:5): pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor271" name="/root/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 61.583902][ T3595] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.613591][ T3596] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.626532][ T3596] EXT4-fs (loop5): This should not happen!! Data will be lost [ 61.626532][ T3596] [ 61.637340][ T3603] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.648260][ T3598] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.650012][ T3596] EXT4-fs (loop5): Total free blocks count 0 [ 61.668763][ T3595] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.668763][ T3595] [ 61.679045][ T3597] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.679724][ T3603] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.679724][ T3603] [ 61.701790][ T3598] EXT4-fs (loop0): This should not happen!! Data will be lost [ 61.701790][ T3598] [ 61.712662][ T3602] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.712662][ T3602] [ 61.716559][ T3597] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.716559][ T3597] [ 61.723391][ T3595] EXT4-fs (loop1): Total free blocks count 0 [ 61.734611][ T26] audit: type=1804 audit(1679861147.142:6): pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 61.739131][ T3596] EXT4-fs (loop5): Free/Dirty block details [ 61.760391][ T3598] EXT4-fs (loop0): Total free blocks count 0 [ 61.766208][ T3602] EXT4-fs (loop3): Total free blocks count 0 [ 61.774589][ T3598] EXT4-fs (loop0): Free/Dirty block details [ 61.778043][ T3603] EXT4-fs (loop4): Total free blocks count 0 [ 61.783472][ T3597] EXT4-fs (loop2): Total free blocks count 0 [ 61.783490][ T3597] EXT4-fs (loop2): Free/Dirty block details [ 61.789828][ T3602] EXT4-fs (loop3): Free/Dirty block details [ 61.796230][ T3598] EXT4-fs (loop0): free_blocks=2415919104 [ 61.801880][ T3596] EXT4-fs (loop5): free_blocks=2415919104 [ 61.808219][ T3595] EXT4-fs (loop1): Free/Dirty block details [ 61.813830][ T3603] EXT4-fs (loop4): Free/Dirty block details [ 61.820108][ T3597] EXT4-fs (loop2): free_blocks=2415919104 [ 61.825585][ T3602] EXT4-fs (loop3): free_blocks=2415919104 [ 61.831648][ T26] audit: type=1804 audit(1679861147.152:7): pid=3597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor271" name="/root/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 61.837406][ T3596] EXT4-fs (loop5): dirty_blocks=16 [ 61.843247][ T3595] EXT4-fs (loop1): free_blocks=2415919104 [ 61.864625][ T3603] EXT4-fs (loop4): free_blocks=2415919104 [ 61.869929][ T3598] EXT4-fs (loop0): dirty_blocks=16 [ 61.875620][ T3603] EXT4-fs (loop4): dirty_blocks=16 [ 61.881583][ T26] audit: type=1804 audit(1679861147.152:8): pid=3597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 61.886706][ T3603] EXT4-fs (loop4): Block reservation details [ 61.891904][ T3602] EXT4-fs (loop3): dirty_blocks=16 [ 61.912642][ T3603] EXT4-fs (loop4): i_reserved_data_blocks=1 executing program [ 61.918843][ T3597] EXT4-fs (loop2): dirty_blocks=16 [ 61.931240][ T3595] EXT4-fs (loop1): dirty_blocks=16 [ 61.943101][ T3595] EXT4-fs (loop1): Block reservation details [ 61.949731][ T3595] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 61.954409][ T26] audit: type=1804 audit(1679861147.152:9): pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/file0/bus" dev="loop0" ino=18 res=1 errno=0 executing program executing program [ 61.956253][ T3598] EXT4-fs (loop0): Block reservation details [ 61.976919][ T3596] EXT4-fs (loop5): Block reservation details [ 61.988731][ T3598] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 61.997995][ T3597] EXT4-fs (loop2): Block reservation details [ 62.016788][ T3596] EXT4-fs (loop5): i_reserved_data_blocks=1 executing program [ 62.030344][ T3597] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 62.036876][ T3602] EXT4-fs (loop3): Block reservation details [ 62.059552][ T3602] EXT4-fs (loop3): i_reserved_data_blocks=1 executing program executing program [ 62.081222][ T26] audit: type=1804 audit(1679861147.152:10): pid=3597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/file0/bus" dev="loop2" ino=18 res=1 errno=0 executing program executing program executing program [ 62.192723][ T26] audit: type=1804 audit(1679861147.162:11): pid=3595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor271" name="/root/file0/bus" dev="loop1" ino=18 res=1 errno=0 executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 66.297253][ T1205] ------------[ cut here ]------------ [ 66.297876][ T9] ------------[ cut here ]------------ [ 66.302872][ T1205] kernel BUG at fs/ext4/inode.c:2732! [ 66.314950][ T155] ------------[ cut here ]------------ [ 66.322520][ T144] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.325113][ T9] kernel BUG at fs/ext4/inode.c:2732! [ 66.337487][ T155] kernel BUG at fs/ext4/inode.c:2732! [ 66.377053][ T3967] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.378654][ T155] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 66.391965][ T144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 66.391965][ T144] [ 66.395436][ T155] CPU: 1 PID: 155 Comm: kworker/u4:3 Not tainted 5.15.104-syzkaller #0 [ 66.395461][ T155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 66.395473][ T155] Workqueue: writeback wb_workfn (flush-7:0) [ 66.429754][ T155] RIP: 0010:ext4_writepages+0x3d02/0x3d10 [ 66.435498][ T155] Code: c7 d0 35 a8 8c 4c 89 f2 e8 ab 4d 0b 02 e9 bb fb ff ff e8 61 92 63 ff 0f 0b e8 ca a1 fa 07 e8 55 92 63 ff 0f 0b e8 4e 92 63 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 41 54 53 49 [ 66.455182][ T155] RSP: 0018:ffffc90001ffeec0 EFLAGS: 00010293 [ 66.461239][ T155] RAX: ffffffff821c2592 RBX: 0000008000000000 RCX: ffff888015ba5700 [ 66.469200][ T155] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 66.477176][ T155] RBP: ffffc90001fff2b0 R08: ffffffff821bef30 R09: ffffed100e31e00b [ 66.485165][ T155] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90001fff180 [ 66.493133][ T155] R13: ffffc90001fff670 R14: 0000008410000000 R15: 0000000000000001 [ 66.501191][ T155] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 66.510113][ T155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.516706][ T155] CR2: 00007f3e7c9f6000 CR3: 0000000019ff1000 CR4: 00000000003506e0 [ 66.524767][ T155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.532935][ T155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.540906][ T155] Call Trace: [ 66.544284][ T155] [ 66.547240][ T155] ? __might_sleep+0xc0/0xc0 [ 66.551835][ T155] ? __block_write_full_page+0x918/0x1090 [ 66.557559][ T155] ? validate_chain+0x112/0x58b0 [ 66.562501][ T155] ? reacquire_held_locks+0x660/0x660 [ 66.567875][ T155] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 66.573528][ T155] ? ext4_readpage+0x300/0x300 [ 66.578407][ T155] ? mark_lock+0x98/0x340 [ 66.582737][ T155] ? __lock_acquire+0x1295/0x1ff0 [ 66.587764][ T155] ? ext4_readpage+0x300/0x300 [ 66.592522][ T155] do_writepages+0x481/0x730 [ 66.597106][ T155] ? __writepage+0x120/0x120 [ 66.601690][ T155] ? wbc_attach_and_unlock_inode+0x3a4/0x600 [ 66.607663][ T155] ? __lock_acquire+0x1ff0/0x1ff0 [ 66.612680][ T155] ? do_raw_spin_unlock+0x137/0x8b0 [ 66.617870][ T155] __writeback_single_inode+0x15b/0xe30 [ 66.623422][ T155] writeback_sb_inodes+0xbf0/0x1a50 [ 66.628632][ T155] ? queue_io+0x560/0x560 [ 66.632962][ T155] ? up_read+0x20/0x20 [ 66.637039][ T155] ? __writeback_inodes_wb+0x400/0x400 [ 66.642546][ T155] __writeback_inodes_wb+0x114/0x400 [ 66.647842][ T155] wb_writeback+0x465/0xc50 [ 66.652343][ T155] ? rcu_lock_release+0x20/0x20 [ 66.657190][ T155] ? do_raw_spin_unlock+0x137/0x8b0 [ 66.662394][ T155] ? cpumask_next+0xc3/0xf0 [ 66.666903][ T155] wb_workfn+0xd07/0x1130 [ 66.671238][ T155] ? mark_lock+0x98/0x340 [ 66.675687][ T155] ? inode_wait_for_writeback+0x280/0x280 [ 66.681931][ T155] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 66.687908][ T155] ? print_irqtrace_events+0x210/0x210 [ 66.693377][ T155] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 66.699260][ T155] ? do_raw_spin_unlock+0x137/0x8b0 [ 66.705145][ T155] process_one_work+0x8a1/0x10c0 [ 66.710081][ T155] ? worker_detach_from_pool+0x260/0x260 [ 66.715792][ T155] ? _raw_spin_lock_irqsave+0x120/0x120 [ 66.721339][ T155] ? kthread_data+0x4e/0xc0 [ 66.725850][ T155] ? wq_worker_running+0x97/0x170 [ 66.730863][ T155] worker_thread+0xaca/0x1280 [ 66.735540][ T155] kthread+0x3f6/0x4f0 [ 66.739620][ T155] ? rcu_lock_release+0x20/0x20 [ 66.744464][ T155] ? kthread_blkcg+0xd0/0xd0 [ 66.749042][ T155] ret_from_fork+0x1f/0x30 [ 66.753457][ T155] [ 66.756465][ T155] Modules linked in: [ 66.760403][ T1205] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 66.766494][ T1205] CPU: 0 PID: 1205 Comm: kworker/u4:5 Tainted: G D 5.15.104-syzkaller #0 [ 66.776228][ T1205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 66.786300][ T1205] Workqueue: writeback wb_workfn (flush-7:1) [ 66.792320][ T1205] RIP: 0010:ext4_writepages+0x3d02/0x3d10 [ 66.798065][ T1205] Code: c7 d0 35 a8 8c 4c 89 f2 e8 ab 4d 0b 02 e9 bb fb ff ff e8 61 92 63 ff 0f 0b e8 ca a1 fa 07 e8 55 92 63 ff 0f 0b e8 4e 92 63 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 41 54 53 49 [ 66.817777][ T1205] RSP: 0018:ffffc9000530eec0 EFLAGS: 00010293 [ 66.823862][ T1205] RAX: ffffffff821c2592 RBX: 0000008000000000 RCX: ffff88801d550000 [ 66.832051][ T1205] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 66.840035][ T1205] RBP: ffffc9000530f2b0 R08: ffffffff821bef30 R09: ffffed100e31e289 [ 66.848178][ T1205] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000530f180 [ 66.856251][ T1205] R13: ffffc9000530f670 R14: 0000008410000000 R15: 0000000000000001 [ 66.864237][ T1205] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 66.873285][ T1205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.879895][ T1205] CR2: 00007f3e7c9f7718 CR3: 00000000243e5000 CR4: 00000000003506f0 [ 66.887946][ T1205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.896104][ T1205] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.904091][ T1205] Call Trace: [ 66.907385][ T1205] [ 66.910326][ T1205] ? __might_sleep+0xc0/0xc0 [ 66.914933][ T1205] ? __block_write_full_page+0x918/0x1090 [ 66.920680][ T1205] ? validate_chain+0x112/0x58b0 [ 66.925643][ T1205] ? reacquire_held_locks+0x660/0x660 [ 66.931215][ T1205] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 66.936989][ T1205] ? ext4_readpage+0x300/0x300 [ 66.941780][ T1205] ? mark_lock+0x98/0x340 [ 66.946129][ T1205] ? __lock_acquire+0x1295/0x1ff0 [ 66.951181][ T1205] ? ext4_readpage+0x300/0x300 [ 66.955997][ T1205] do_writepages+0x481/0x730 [ 66.960624][ T1205] ? __writepage+0x120/0x120 [ 66.965239][ T1205] ? wbc_attach_and_unlock_inode+0x3a4/0x600 [ 66.971239][ T1205] ? __lock_acquire+0x1ff0/0x1ff0 [ 66.976301][ T1205] ? do_raw_spin_unlock+0x137/0x8b0 [ 66.981515][ T1205] __writeback_single_inode+0x15b/0xe30 [ 66.987093][ T1205] writeback_sb_inodes+0xbf0/0x1a50 [ 66.992326][ T1205] ? queue_io+0x560/0x560 [ 66.996866][ T1205] ? up_read+0x20/0x20 [ 67.000958][ T1205] ? __writeback_inodes_wb+0x400/0x400 [ 67.006437][ T1205] __writeback_inodes_wb+0x114/0x400 [ 67.011749][ T1205] wb_writeback+0x465/0xc50 [ 67.016323][ T1205] ? rcu_lock_release+0x20/0x20 [ 67.021200][ T1205] ? do_raw_spin_unlock+0x137/0x8b0 [ 67.026509][ T1205] ? cpumask_next+0xc3/0xf0 [ 67.031046][ T1205] wb_workfn+0xd07/0x1130 [ 67.035400][ T1205] ? mark_lock+0x98/0x340 [ 67.039763][ T1205] ? inode_wait_for_writeback+0x280/0x280 [ 67.045705][ T1205] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 67.051713][ T1205] ? print_irqtrace_events+0x210/0x210 [ 67.057193][ T1205] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 67.063104][ T1205] ? do_raw_spin_unlock+0x137/0x8b0 [ 67.068326][ T1205] process_one_work+0x8a1/0x10c0 [ 67.073295][ T1205] ? worker_detach_from_pool+0x260/0x260 [ 67.078952][ T1205] ? _raw_spin_lock_irqsave+0x120/0x120 [ 67.084519][ T1205] ? kthread_data+0x4e/0xc0 [ 67.089140][ T1205] ? wq_worker_running+0x97/0x170 [ 67.094188][ T1205] worker_thread+0xaca/0x1280 [ 67.098902][ T1205] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 67.104831][ T1205] kthread+0x3f6/0x4f0 [ 67.108922][ T1205] ? rcu_lock_release+0x20/0x20 [ 67.114001][ T1205] ? kthread_blkcg+0xd0/0xd0 [ 67.118612][ T1205] ret_from_fork+0x1f/0x30 [ 67.123061][ T1205] [ 67.126087][ T1205] Modules linked in: executing program executing program executing program [ 67.130619][ T26] kauditd_printk_skb: 573 callbacks suppressed [ 67.130634][ T26] audit: type=1804 audit(1679861152.152:585): pid=3964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.158092][ T26] audit: type=1804 audit(1679861152.152:586): pid=3970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.255217][ T144] EXT4-fs (loop2): Total free blocks count 0 [ 67.260197][ T3967] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.260197][ T3967] [ 67.272905][ T26] audit: type=1804 audit(1679861152.152:587): pid=3970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.275708][ T9] invalid opcode: 0000 [#3] PREEMPT SMP KASAN [ 67.299308][ T9] CPU: 1 PID: 9 Comm: kworker/u4:0 Tainted: G D 5.15.104-syzkaller #0 [ 67.308790][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 67.309251][ T144] EXT4-fs (loop2): Free/Dirty block details [ 67.318868][ T9] Workqueue: writeback wb_workfn (flush-7:5) [ 67.318904][ T9] RIP: 0010:ext4_writepages+0x3d02/0x3d10 [ 67.325739][ T144] EXT4-fs (loop2): free_blocks=2415919104 [ 67.330769][ T9] Code: c7 d0 35 a8 8c 4c 89 f2 e8 ab 4d 0b 02 e9 bb fb ff ff e8 61 92 63 ff 0f 0b e8 ca a1 fa 07 e8 55 92 63 ff 0f 0b e8 4e 92 63 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 41 54 53 49 [ 67.330788][ T9] RSP: 0018:ffffc90000ce6ec0 EFLAGS: 00010293 [ 67.330807][ T9] RAX: ffffffff821c2592 RBX: 0000008000000000 RCX: ffff88813fe90000 [ 67.330821][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 67.330834][ T9] RBP: ffffc90000ce72b0 R08: ffffffff821bef30 R09: ffffed100e8c5c81 [ 67.336623][ T26] audit: type=1804 audit(1679861152.152:588): pid=3970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.342257][ T9] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000ce7180 [ 67.368791][ T144] EXT4-fs (loop2): dirty_blocks=16 [ 67.375890][ T9] R13: ffffc90000ce7670 R14: 0000008410000000 R15: 0000000000000001 [ 67.375908][ T9] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 67.395244][ T144] EXT4-fs (loop2): Block reservation details [ 67.412305][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.412326][ T9] CR2: 00007f3e84dbcf08 CR3: 000000007983c000 CR4: 00000000003506e0 [ 67.412344][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.412362][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.412375][ T9] Call Trace: [ 67.412381][ T9] [ 67.412389][ T9] ? __might_sleep+0xc0/0xc0 [ 67.422218][ T26] audit: type=1804 audit(1679861152.902:589): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.425464][ T9] ? __block_write_full_page+0x918/0x1090 [ 67.425500][ T9] ? validate_chain+0x112/0x58b0 [ 67.433700][ T26] audit: type=1804 audit(1679861152.922:590): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.442650][ T9] ? reacquire_held_locks+0x660/0x660 [ 67.442676][ T9] ? tag_pages_for_writeback+0x6a0/0x6a0 [ 67.442702][ T9] ? ext4_readpage+0x300/0x300 [ 67.515781][ T144] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 67.516137][ T9] ? mark_lock+0x98/0x340 [ 67.527516][ T26] audit: type=1804 audit(1679861152.922:591): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.541932][ T9] ? __lock_acquire+0x1295/0x1ff0 [ 67.541975][ T9] ? ext4_readpage+0x300/0x300 [ 67.541998][ T9] do_writepages+0x481/0x730 [ 67.602866][ T9] ? __writepage+0x120/0x120 [ 67.607494][ T9] ? wbc_attach_and_unlock_inode+0x3a4/0x600 [ 67.613502][ T9] ? __lock_acquire+0x1ff0/0x1ff0 [ 67.618565][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 67.623828][ T9] __writeback_single_inode+0x15b/0xe30 [ 67.629401][ T9] writeback_sb_inodes+0xbf0/0x1a50 [ 67.634674][ T9] ? queue_io+0x560/0x560 [ 67.639052][ T9] ? up_read+0x20/0x20 [ 67.643145][ T9] ? __writeback_inodes_wb+0x400/0x400 [ 67.648627][ T9] __writeback_inodes_wb+0x114/0x400 [ 67.648678][ T155] ---[ end trace bfbb3b7ce3203db1 ]--- [ 67.653929][ T9] wb_writeback+0x465/0xc50 [ 67.653958][ T9] ? rcu_lock_release+0x20/0x20 [ 67.668772][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 67.673997][ T9] ? cpumask_next+0xc3/0xf0 [ 67.678570][ T9] wb_workfn+0xd07/0x1130 [ 67.682933][ T9] ? mark_lock+0x98/0x340 [ 67.687294][ T9] ? inode_wait_for_writeback+0x280/0x280 [ 67.693048][ T9] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 67.699049][ T9] ? print_irqtrace_events+0x210/0x210 [ 67.704531][ T9] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 67.710448][ T9] ? do_raw_spin_unlock+0x137/0x8b0 [ 67.712362][ T26] audit: type=1804 audit(1679861152.922:592): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 67.715870][ T9] process_one_work+0x8a1/0x10c0 [ 67.741093][ T9] ? worker_detach_from_pool+0x260/0x260 [ 67.746782][ T9] ? _raw_spin_lock_irqsave+0x120/0x120 [ 67.752356][ T9] ? kthread_data+0x4e/0xc0 [ 67.756360][ T155] RIP: 0010:ext4_writepages+0x3d02/0x3d10 [ 67.756874][ T9] ? wq_worker_running+0x97/0x170 [ 67.762579][ T155] Code: c7 d0 35 a8 8c 4c 89 f2 e8 ab 4d 0b 02 e9 bb fb ff ff e8 61 92 63 ff 0f 0b e8 ca a1 fa 07 e8 55 92 63 ff 0f 0b e8 4e 92 63 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 41 54 53 49 [ 67.767585][ T9] worker_thread+0xaca/0x1280 [ 67.767618][ T9] kthread+0x3f6/0x4f0 [ 67.767636][ T9] ? rcu_lock_release+0x20/0x20 [ 67.800905][ T9] ? kthread_blkcg+0xd0/0xd0 executing program executing program executing program executing program executing program [ 67.805518][ T9] ret_from_fork+0x1f/0x30 [ 67.810058][ T9] [ 67.813090][ T9] Modules linked in: [ 67.874422][ T3967] EXT4-fs (loop3): Total free blocks count 0 [ 67.922733][ T3967] EXT4-fs (loop3): Free/Dirty block details [ 67.950726][ T26] audit: type=1804 audit(1679861152.982:593): pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 executing program executing program executing program executing program executing program [ 67.973930][ T3967] EXT4-fs (loop3): free_blocks=2415919104 [ 67.995618][ T3967] EXT4-fs (loop3): dirty_blocks=16 [ 68.044111][ T3967] EXT4-fs (loop3): Block reservation details [ 68.063285][ T155] RSP: 0018:ffffc90001ffeec0 EFLAGS: 00010293 [ 68.092334][ T3967] EXT4-fs (loop3): i_reserved_data_blocks=1 executing program executing program executing program executing program [ 68.144928][ T155] RAX: ffffffff821c2592 RBX: 0000008000000000 RCX: ffff888015ba5700 [ 68.156369][ T26] audit: type=1804 audit(1679861152.992:594): pid=3963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor271" name="/root/bus" dev="sda1" ino=1138 res=1 errno=0 [ 68.212251][ T155] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 68.246167][ T9] ---[ end trace bfbb3b7ce3203db2 ]--- executing program executing program executing program [ 68.287352][ T9] RIP: 0010:ext4_writepages+0x3d02/0x3d10 [ 68.289150][ T155] RBP: ffffc90001fff2b0 R08: ffffffff821bef30 R09: ffffed100e31e00b [ 68.307876][ T9] Code: c7 d0 35 a8 8c 4c 89 f2 e8 ab 4d 0b 02 e9 bb fb ff ff e8 61 92 63 ff 0f 0b e8 ca a1 fa 07 e8 55 92 63 ff 0f 0b e8 4e 92 63 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 41 54 53 49 executing program [ 68.409718][ T9] RSP: 0018:ffffc90001ffeec0 EFLAGS: 00010293 [ 68.427805][ T155] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90001fff180 [ 68.429542][ T9] RAX: ffffffff821c2592 RBX: 0000008000000000 RCX: ffff888015ba5700 [ 68.435850][ T155] R13: ffffc90001fff670 R14: 0000008410000000 R15: 0000000000000001 [ 68.435868][ T155] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 68.435886][ T155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.435899][ T155] CR2: 00007f3e7c9f7000 CR3: 000000007983c000 CR4: 00000000003506f0 [ 68.435917][ T155] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.435950][ T155] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.435967][ T155] Kernel panic - not syncing: Fatal exception [ 68.436254][ T155] Kernel Offset: disabled [ 68.502306][ T155] Rebooting in 86400 seconds..