audit: type=1804 audit(1673242008.171:7): pid=9745 uid=0 auid=4294967295 ses=4294967295 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir3443837396/syzkaller.d27r47/8/file0/bus" dev="loop1" ino=18 res=1
EXT4-fs error (device loop1): ext4_mb_generate_buddy:754: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
------------[ cut here ]------------
kernel BUG at fs/ext4/inline.c:231!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
Modules linked in:
CPU: 0 PID: 9733 Comm: syz-executor.1 Not tainted 4.14.302-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
task: ffff8880b3f40480 task.stack: ffff888094dd8000
RIP: 0010:ext4_write_inline_data+0x2e6/0x380 fs/ext4/inline.c:231
RSP: 0018:ffff888094ddf4b0 EFLAGS: 00010246
RAX: 0000000000040000 RBX: ffff88803b80d930 RCX: ffffc90007090000
RDX: 0000000000040000 RSI: ffffffff81b94726 RDI: ffff88803b80ddf8
RBP: 000000000001c026 R08: 000000000000006a R09: 0000000000000000
R10: ffff888094ddf488 R11: 0000000000000000 R12: 000000000000006a
R13: ffff888094ddf538 R14: ffff88803b80ddf6 R15: ffff88803b80d798
FS:  00007f3bea027700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f2e7aa40058 CR3: 00000000a95af000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 ext4_write_inline_data_end+0x1db/0x490 fs/ext4/inline.c:769
 ext4_da_write_inline_data_end+0x30/0x410 fs/ext4/inline.c:966
 ext4_da_write_end+0x3b5/0x8e0 fs/ext4/inode.c:3244
 generic_perform_write+0x274/0x430 mm/filemap.c:3066
 __generic_file_write_iter+0x227/0x590 mm/filemap.c:3180
 ext4_file_write_iter+0x276/0xd20 fs/ext4/file.c:270
 call_write_iter include/linux/fs.h:1780 [inline]
 do_iter_readv_writev+0x4cf/0x5f0 fs/read_write.c:675
 do_iter_write+0x152/0x550 fs/read_write.c:954
 vfs_iter_write+0x70/0xa0 fs/read_write.c:967
 iter_file_splice_write+0x52b/0xa90 fs/splice.c:749
 do_splice_from fs/splice.c:851 [inline]
 direct_splice_actor+0x115/0x160 fs/splice.c:1018
 splice_direct_to_actor+0x27c/0x730 fs/splice.c:973
 do_splice_direct+0x164/0x210 fs/splice.c:1061
 do_sendfile+0x47f/0xb30 fs/read_write.c:1441
 SYSC_sendfile64 fs/read_write.c:1502 [inline]
 SyS_sendfile64+0xff/0x110 fs/read_write.c:1488
 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292
 entry_SYSCALL_64_after_hwframe+0x5e/0xd3
RIP: 0033:0x7f3bebab50c9
RSP: 002b:00007f3bea027168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
RAX: ffffffffffffffda RBX: 00007f3bebbd4f80 RCX: 00007f3bebab50c9
RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
RBP: 00007f3bebb10ae9 R08: 0000000000000000 R09: 0000000000000000
R10: 00008400fffffffa R11: 0000000000000246 R12: 0000000000000000
R13: 00007fff30e2472f R14: 00007f3bea027300 R15: 0000000000022000
Code: 5f e9 3f 13 9c ff e8 3a 13 9c ff 45 8d 64 2c c4 b8 3c 00 00 00 29 e8 89 04 24 e9 e7 fe ff ff e8 21 13 9c ff 0f 0b e8 1a 13 9c ff <0f> 0b e8 33 d3 c5 ff e9 2a fe ff ff 4c 89 f7 e8 26 d3 c5 ff e9 
RIP: ext4_write_inline_data+0x2e6/0x380 fs/ext4/inline.c:231 RSP: ffff888094ddf4b0
---[ end trace ba4ec590ac04652b ]---