[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.117' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.803157] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 26.825657] EXT4-fs (loop0): orphan cleanup on readonly fs [ 26.831512] ------------[ cut here ]------------ [ 26.836327] kernel BUG at fs/ext4/extents_status.c:200! [ 26.841876] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 26.847222] Modules linked in: [ 26.850409] CPU: 1 PID: 7983 Comm: syz-executor207 Not tainted 4.14.291-syzkaller #0 [ 26.858257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 26.867580] task: ffff888096a40240 task.stack: ffff888093250000 [ 26.873621] RIP: 0010:__es_tree_search.isra.0+0x199/0x1c0 [ 26.879127] RSP: 0018:ffff888093257138 EFLAGS: 00010297 [ 26.884463] RAX: ffff888096a40240 RBX: 000000002b754e16 RCX: 00000000000038cf [ 26.891705] RDX: 0000000000000000 RSI: 000000008e4a46a0 RDI: ffff888097c344ec [ 26.898949] RBP: 0000000000000000 R08: ffffffff8b9be178 R09: 00000000000403fe [ 26.906192] R10: ffff888096a40b18 R11: ffff888096a40240 R12: ffff888097c344d0 [ 26.913436] R13: 000000008e4a46a0 R14: dffffc0000000000 R15: 0000ffff8e4a46a0 [ 26.920690] FS: 0000555556d50300(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 [ 26.928890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.934744] CR2: 00005595f56d2160 CR3: 00000000b4f53000 CR4: 00000000003406e0 [ 26.941988] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.949232] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.956474] Call Trace: [ 26.959043] ext4_es_cache_extent+0x133/0x460 [ 26.963517] ? deref_stack_reg+0x124/0x1a0 [ 26.967743] ? ext4_es_insert_extent+0x530/0x530 [ 26.972473] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 26.978328] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 26.983748] ext4_cache_extents+0x113/0x260 [ 26.988039] ext4_find_extent+0x820/0xbc0 [ 26.992175] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 26.997615] ext4_ext_map_blocks+0x19a/0x6b10 [ 27.002097] ? __lock_acquire+0x2190/0x3f20 [ 27.006394] ? ext4_find_delalloc_cluster+0x180/0x180 [ 27.011563] ? trace_hardirqs_on+0x10/0x10 [ 27.015772] ? unwind_next_frame+0xe54/0x17d0 [ 27.020239] ? ext4_es_lookup_extent+0x321/0xac0 [ 27.024974] ? lock_acquire+0x170/0x3f0 [ 27.028923] ? lock_acquire+0x170/0x3f0 [ 27.032873] ? ext4_map_blocks+0x29f/0x1730 [ 27.037176] ext4_map_blocks+0xb19/0x1730 [ 27.041299] ? ext4_issue_zeroout+0x150/0x150 [ 27.045772] ? __lock_acquire+0x5fc/0x3f20 [ 27.049982] ext4_getblk+0x314/0x3f0 [ 27.053672] ? ext4_iomap_begin+0x7f0/0x7f0 [ 27.057966] ? trace_hardirqs_on+0x10/0x10 [ 27.062175] ext4_bread+0x6c/0x1b0 [ 27.065688] ? ext4_getblk+0x3f0/0x3f0 [ 27.069551] ext4_quota_read+0x1e4/0x2a0 [ 27.073586] v2_read_header+0x6f/0xe0 [ 27.077372] v2_check_quota_file+0x60/0x120 [ 27.081666] ? v2_read_header+0xe0/0xe0 [ 27.085609] ? do_raw_spin_unlock+0x164/0x220 [ 27.090084] ? _raw_spin_unlock+0x29/0x40 [ 27.094209] vfs_load_quota_inode+0x4e4/0xeb0 [ 27.098677] dquot_enable+0x15f/0x1b0 [ 27.102453] ext4_enable_quotas+0x452/0x6a0 [ 27.106747] ? ext4_clear_journal_err+0x2a0/0x2a0 [ 27.111560] ? ext4_decode_error+0x160/0x160 [ 27.115942] ? device_node_gen_full_name+0x210/0x290 [ 27.121018] ? ext4_register_sysfs+0x1fe/0x2b0 [ 27.125572] ext4_fill_super+0x7cb4/0xb3c0 [ 27.129786] ? ext4_calculate_overhead+0x10b0/0x10b0 [ 27.134878] ? lock_downgrade+0x740/0x740 [ 27.139003] ? snprintf+0xa5/0xd0 [ 27.142439] ? vsprintf+0x30/0x30 [ 27.145872] ? ns_test_super+0x50/0x50 [ 27.149741] ? set_blocksize+0x125/0x380 [ 27.153778] mount_bdev+0x2b3/0x360 [ 27.157380] ? ext4_calculate_overhead+0x10b0/0x10b0 [ 27.162457] mount_fs+0x92/0x2a0 [ 27.165798] vfs_kern_mount.part.0+0x5b/0x470 [ 27.170281] do_mount+0xe65/0x2a30 [ 27.173796] ? retint_kernel+0x2d/0x2d [ 27.177654] ? copy_mount_string+0x40/0x40 [ 27.181872] ? memset+0x20/0x40 [ 27.185126] ? copy_mount_options+0x1fa/0x2f0 [ 27.189594] ? copy_mnt_ns+0xa30/0xa30 [ 27.193455] SyS_mount+0xa8/0x120 [ 27.196879] ? copy_mnt_ns+0xa30/0xa30 [ 27.200738] do_syscall_64+0x1d5/0x640 [ 27.204598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 27.209758] RIP: 0033:0x7efc2c4025da [ 27.213442] RSP: 002b:00007ffdff207798 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 27.221136] RAX: ffffffffffffffda RBX: 00007ffdff2077f0 RCX: 00007efc2c4025da [ 27.228389] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffdff2077b0 [ 27.235635] RBP: 00007ffdff2077b0 R08: 00007ffdff2077f0 R09: 0000000800000015 [ 27.242879] R10: 0000000000000081 R11: 0000000000000206 R12: 0000000000000004 [ 27.250135] R13: 0000000000000003 R14: 0000000000000003 R15: 000000000000041c [ 27.257389] Code: 01 48 05 49 89 c4 eb dd e8 25 e9 c7 ff e9 fb fe ff ff e8 1b e9 c7 ff e9 26 ff ff ff e8 81 e9 c7 ff e9 af fe ff ff e8 67 33 9e ff <0f> 0b e8 70 e9 c7 ff e9 45 ff ff ff e8 f6 e8 c7 ff eb 90 e8 4f [ 27.276449] RIP: __es_tree_search.isra.0+0x199/0x1c0 RSP: ffff888093257138 [ 27.283531] ---[ end trace 87d3b71a6bd04acd ]--- [ 27.288273] Kernel panic - not syncing: Fatal exception [ 27.293767] Kernel Offset: disabled [ 27.297372] Rebooting in 86400 seconds..