EXT4-fs (loop1): dirty_blocks=16 EXT4-fs (loop1): Block reservation details EXT4-fs (loop1): i_reserved_data_blocks=1 ------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2794! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 24977 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794 Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00 EXT4-fs error (device loop0): ext4_mb_generate_buddy:744: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters RSP: 0018:ffff88804fd6f588 EFLAGS: 00010293 RAX: ffff88804c8c24c0 RBX: 0000000000000001 RCX: ffffffff81e03070 RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 R13: dffffc0000000000 R14: ffff88808b0831f0 R15: 0000000000000000 FS: 00007f94d28d6700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2fd27000 CR3: 000000009a21e000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_writepages+0xe5/0x290 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x27d/0x350 mm/filemap.c:446 file_write_and_wait_range+0x93/0x100 mm/filemap.c:776 __generic_file_fsync+0x74/0x1f0 fs/libfs.c:985 ext4_sync_file+0xa35/0x1420 fs/ext4/fsync.c:118 vfs_fsync_range+0x13a/0x220 fs/sync.c:197 generic_write_sync include/linux/fs.h:2750 [inline] ext4_file_write_iter+0x726/0xf20 fs/ext4/file.c:283 call_write_iter include/linux/fs.h:1821 [inline] new_sync_write fs/read_write.c:474 [inline] __vfs_write+0x51b/0x770 fs/read_write.c:487 vfs_write+0x1f3/0x540 fs/read_write.c:549 ksys_write+0x12b/0x2a0 fs/read_write.c:599 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f94d43640f9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f94d28d6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f94d4483f80 RCX: 00007f94d43640f9 RDX: 0000000000000001 RSI: 0000000020004200 RDI: 0000000000000033 RBP: 00007f94d43bfae9 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffdf7f0328f R14: 00007f94d28d6300 R15: 0000000000022000 Modules linked in: ------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2794! ---[ end trace 6d37469a8c286765 ]--- invalid opcode: 0000 [#2] PREEMPT SMP KASAN CPU: 1 PID: 24965 Comm: syz-executor.1 Tainted: G D 4.19.211-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794 Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00 RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794 RSP: 0018:ffff88804fbbf8a8 EFLAGS: 00010293 RAX: ffff88804940c180 RBX: 0000000000000001 RCX: ffffffff81e03070 RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 R13: dffffc0000000000 R14: ffff88808b0831f0 R15: 0000000000000000 FS: 0000555555ac8400(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000c02ce7b000 CR3: 000000009a21e000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00 RSP: 0018:ffff88804fd6f588 EFLAGS: 00010293 RAX: ffff88804c8c24c0 RBX: 0000000000000001 RCX: ffffffff81e03070 do_writepages+0xe5/0x290 mm/page-writeback.c:2344 RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 __filemap_fdatawrite_range+0x27d/0x350 mm/filemap.c:446 R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 ext4_alloc_da_blocks+0x207/0x360 fs/ext4/inode.c:3273 ext4_release_file+0x1ed/0x340 fs/ext4/file.c:89 __fput+0x2ce/0x890 fs/file_table.c:278 task_work_run+0x148/0x1c0 kernel/task_work.c:113 R13: dffffc0000000000 R14: ffff88808b0831f0 R15: 0000000000000000 tracehook_notify_resume include/linux/tracehook.h:193 [inline] exit_to_usermode_loop+0x251/0x2a0 arch/x86/entry/common.c:167 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 FS: 00007f94d28d6700(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f94d4315fab CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 RSP: 002b:00007ffdf7f032f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 CR2: 00007f6ecf923000 CR3: 000000009a21e000 CR4: 00000000003406f0 RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007f94d4315fab RDX: 0000001b2e620000 RSI: 0000000000000000 RDI: 0000000000000005 RBP: 00007f94d4485980 R08: 0000000000000000 R09: 0000008d258362e5 R10: 0019e27b8341d598 R11: 0000000000000293 R12: 0000000000085ae0 DR0: 0000000000000001 DR1: 0000000000000000 DR2: 0000000000000000 R13: 00007ffdf7f033f0 R14: 00007ffdf7f03410 R15: 0000000000000032 Modules linked in: ---[ end trace 6d37469a8c286766 ]--- RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794 Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00 9pnet: Insufficient options for proto=fd RSP: 0018:ffff88804fd6f588 EFLAGS: 00010293 RAX: ffff88804c8c24c0 RBX: 0000000000000001 RCX: ffffffff81e03070 RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue R13: dffffc0000000000 R14: ffff88808b0831f0 R15: 0000000000000000 FS: 0000555555ac8400(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b2ff25000 CR3: 000000009a21e000 CR4: 00000000003406e0 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 ---------------- Code disassembly (best guess): 0: 0f 05 syscall 2: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax 8: 77 45 ja 0x4f a: c3 retq b: 0f 1f 40 00 nopl 0x0(%rax) f: 48 83 ec 18 sub $0x18,%rsp 13: 89 7c 24 0c mov %edi,0xc(%rsp) 17: e8 63 fc ff ff callq 0xfffffc7f 1c: 8b 7c 24 0c mov 0xc(%rsp),%edi 20: 41 89 c0 mov %eax,%r8d 23: b8 03 00 00 00 mov $0x3,%eax 28: 0f 05 syscall * 2a: 48 3d 00 f0 ff ff cmp $0xfffffffffffff000,%rax <-- trapping instruction 30: 77 35 ja 0x67 32: 44 89 c7 mov %r8d,%edi 35: 89 44 24 0c mov %eax,0xc(%rsp) 39: e8 a1 fc ff ff callq 0xfffffcdf 3e: 8b .byte 0x8b 3f: 44 rex.R