Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 2024/08/30 06:26:36 ignoring optional flag "sandboxArg"="0" 2024/08/30 06:26:36 parsed 1 programs 2024/08/30 06:26:36 executed programs: 0 [ 47.563969][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.570878][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.578031][ T356] device bridge_slave_0 entered promiscuous mode [ 47.586297][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.593204][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.600741][ T356] device bridge_slave_1 entered promiscuous mode [ 47.618945][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.625926][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.633320][ T355] device bridge_slave_0 entered promiscuous mode [ 47.640071][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.647074][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.654580][ T355] device bridge_slave_1 entered promiscuous mode [ 47.734287][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.741184][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.748340][ T361] device bridge_slave_0 entered promiscuous mode [ 47.756520][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.763417][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.770863][ T361] device bridge_slave_1 entered promiscuous mode [ 47.823529][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.830381][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.837736][ T365] device bridge_slave_0 entered promiscuous mode [ 47.862261][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.869121][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.876617][ T365] device bridge_slave_1 entered promiscuous mode [ 47.891662][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.898543][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.905949][ T364] device bridge_slave_0 entered promiscuous mode [ 47.925800][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.932853][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.939923][ T364] device bridge_slave_1 entered promiscuous mode [ 47.962638][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.969576][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.977185][ T366] device bridge_slave_0 entered promiscuous mode [ 47.999350][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.006341][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.013637][ T366] device bridge_slave_1 entered promiscuous mode [ 48.167107][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.174078][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.181195][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.187934][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.199321][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.206196][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.213314][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.220152][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.247932][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.254824][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.262001][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.268789][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.289770][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.296729][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.303837][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.310717][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.333507][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.340496][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.347566][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.354368][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.373893][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.381589][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.388599][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.395694][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.402803][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.409936][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.417186][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.424248][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.431528][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.438673][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.446484][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.453845][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.470781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.479199][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.486076][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.514085][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.522267][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.529095][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.536416][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.543700][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.551016][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.559160][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.566041][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.573189][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.581243][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.588068][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.624977][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.632559][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.639771][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.647211][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.660902][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.669103][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.677688][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.684582][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.691752][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.699855][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.708413][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.715279][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.722602][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.730779][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.738800][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.745656][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.752807][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.760958][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.769078][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.776407][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.803111][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.811116][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.819488][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.827487][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.835780][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.843713][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.851571][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.858748][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.866060][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.873912][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.881787][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.889889][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.897932][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.904788][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.912191][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.920297][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.928338][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.935184][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.942472][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.950433][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.958616][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.976836][ T356] device veth0_vlan entered promiscuous mode [ 48.990103][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.997558][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.004970][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.013623][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.021696][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.028531][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.035804][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.043992][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.052215][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.060403][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.068507][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.075461][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.082682][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.090390][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.098307][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.106202][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.114077][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.121953][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.129976][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.137379][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.147093][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.166699][ T356] device veth1_macvtap entered promiscuous mode [ 49.173804][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.182885][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.191148][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.206215][ T365] device veth0_vlan entered promiscuous mode [ 49.223804][ T361] device veth0_vlan entered promiscuous mode [ 49.241669][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.249530][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.256966][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.265985][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.274041][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.282373][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.290256][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.298389][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.306227][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.314521][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.322712][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.330839][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.339289][ T365] device veth1_macvtap entered promiscuous mode [ 49.353160][ T366] device veth0_vlan entered promiscuous mode [ 49.359735][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.367797][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.375153][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.382751][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.389943][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.397369][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.418850][ T355] device veth0_vlan entered promiscuous mode [ 49.433950][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.442313][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.450267][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.457912][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.465291][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.474082][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.482252][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.490069][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.497911][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.506068][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.514363][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.522512][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.531989][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.539382][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.546806][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.563461][ T366] device veth1_macvtap entered promiscuous mode [ 49.572957][ T364] device veth0_vlan entered promiscuous mode [ 49.580114][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.589050][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.599139][ T355] device veth1_macvtap entered promiscuous mode [ 49.612693][ T361] device veth1_macvtap entered promiscuous mode [ 49.622420][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 49.622436][ T30] audit: type=1400 audit(1724999198.562:91): avc: denied { mounton } for pid=365 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 49.635718][ T364] device veth1_macvtap entered promiscuous mode [ 49.658340][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.666814][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.675423][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.709580][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.719317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.721437][ T390] loop3: detected capacity change from 0 to 2048 [ 49.728060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.734574][ T30] audit: type=1400 audit(1724999198.672:92): avc: denied { mounton } for pid=388 comm="syz-executor.3" path="/root/syzkaller-testdir829606320/syzkaller.1W0pCN/0/bus" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 49.742364][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.776937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.782734][ T390] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 49.785432][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.795738][ T30] audit: type=1400 audit(1724999198.732:93): avc: denied { mount } for pid=388 comm="syz-executor.3" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.803772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.825166][ T390] ext4 filesystem being mounted at /root/syzkaller-testdir829606320/syzkaller.1W0pCN/0/bus supports timestamps until 2038 (0x7fffffff) [ 49.832952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.847324][ T30] audit: type=1400 audit(1724999198.792:94): avc: denied { write } for pid=388 comm="syz-executor.3" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.876493][ T30] audit: type=1400 audit(1724999198.792:95): avc: denied { add_name } for pid=388 comm="syz-executor.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.915319][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.923817][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.944081][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.955104][ T45] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:2: Invalid inode table block 34360905424 in block_group 0 [ 49.957757][ T399] loop2: detected capacity change from 0 to 2048 [ 49.972377][ T397] loop0: detected capacity change from 0 to 2048 [ 49.975905][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.981761][ T30] audit: type=1400 audit(1724999198.792:96): avc: denied { create } for pid=388 comm="syz-executor.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.012568][ T30] audit: type=1400 audit(1724999198.792:97): avc: denied { mounton } for pid=388 comm="syz-executor.3" path="/root/syzkaller-testdir829606320/syzkaller.1W0pCN/0/bus/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.067642][ T403] loop5: detected capacity change from 0 to 2048 [ 50.075350][ T399] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.075668][ T30] audit: type=1400 audit(1724999198.792:98): avc: denied { read append open } for pid=388 comm="syz-executor.3" path="/root/syzkaller-testdir829606320/syzkaller.1W0pCN/0/bus/file0/blkio.bfq.io_service_bytes_recursive" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.124711][ T406] loop4: detected capacity change from 0 to 2048 [ 50.134469][ T397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.137319][ T401] loop1: detected capacity change from 0 to 2048 [ 50.146414][ T399] ext4 filesystem being mounted at /root/syzkaller-testdir1153160945/syzkaller.OW5NrV/0/bus supports timestamps until 2038 (0x7fffffff) [ 50.155871][ T412] loop3: detected capacity change from 0 to 2048 [ 50.173260][ T397] ext4 filesystem being mounted at /root/syzkaller-testdir457885727/syzkaller.m5PzLb/0/bus supports timestamps until 2038 (0x7fffffff) [ 50.173353][ T30] audit: type=1400 audit(1724999198.892:99): avc: denied { unmount } for pid=365 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.188826][ T403] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.224235][ T403] ext4 filesystem being mounted at /root/syzkaller-testdir2133693694/syzkaller.xvuzoa/0/bus supports timestamps until 2038 (0x7fffffff) [ 50.226427][ T401] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.243372][ T30] audit: type=1400 audit(1724999199.062:100): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 50.258358][ T406] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.276011][ T401] ext4 filesystem being mounted at /root/syzkaller-testdir3598750078/syzkaller.ryFHyu/0/bus supports timestamps until 2038 (0x7fffffff) [ 50.282504][ T406] ext4 filesystem being mounted at /root/syzkaller-testdir967686342/syzkaller.sXKIM5/0/bus supports timestamps until 2038 (0x7fffffff) [ 50.303316][ T397] EXT4-fs error (device loop0): ext4_map_blocks:716: inode #19: block 207: comm syz-executor.0: lblock 15 mapped to illegal pblock 207 (length 1) [ 50.334249][ T397] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 34360905424 in block_group 0 [ 50.352620][ T397] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.353064][ T412] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.364476][ T397] EXT4-fs error (device loop0): ext4_ext_truncate:4431: inode #19: comm syz-executor.0: mark_inode_dirty error [ 50.384797][ T403] EXT4-fs error (device loop5): ext4_map_blocks:716: inode #19: block 243: comm syz-executor.5: lblock 35 mapped to illegal pblock 243 (length 1) [ 50.385182][ T406] EXT4-fs error (device loop4): ext4_map_blocks:716: inode #19: block 226: comm syz-executor.4: lblock 18 mapped to illegal pblock 226 (length 1) [ 50.401371][ T397] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 34360905424 in block_group 0 [ 50.421514][ T412] ext4 filesystem being mounted at /root/syzkaller-testdir829606320/syzkaller.1W0pCN/1/bus supports timestamps until 2038 (0x7fffffff) [ 50.432299][ T399] EXT4-fs error (device loop2): ext4_map_blocks:716: inode #19: block 240: comm syz-executor.2: lblock 32 mapped to illegal pblock 240 (length 1) [ 50.441617][ T406] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm syz-executor.4: Invalid inode table block 34360905424 in block_group 0 [ 50.461452][ T401] EXT4-fs error (device loop1): ext4_map_blocks:716: inode #19: block 246: comm syz-executor.1: lblock 38 mapped to illegal pblock 246 (length 1) [ 50.473546][ T399] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor.2: Invalid inode table block 34360905424 in block_group 0 [ 50.495398][ T406] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.499741][ T397] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.517258][ T406] EXT4-fs error (device loop4): ext4_ext_truncate:4431: inode #19: comm syz-executor.4: mark_inode_dirty error [ 50.517812][ T401] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 38 with max blocks 1 with error 117 [ 50.536342][ T403] EXT4-fs error (device loop5): __ext4_get_inode_loc:4340: comm syz-executor.5: Invalid inode table block 34360905424 in block_group 0 [ 50.542005][ T401] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.542005][ T401] [ 50.565122][ T397] EXT4-fs error (device loop0): ext4_truncate:4292: inode #19: comm syz-executor.0: mark_inode_dirty error [ 50.577613][ T406] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm syz-executor.4: Invalid inode table block 34360905424 in block_group 0 [ 50.581955][ T399] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.594544][ T403] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.601563][ T399] EXT4-fs error (device loop2): ext4_ext_truncate:4431: inode #19: comm syz-executor.2: mark_inode_dirty error [ 50.610187][ T397] EXT4-fs error (device loop0): ext4_find_extent:929: inode #19: comm syz-executor.0: pblk 208 bad header/extent: invalid magic - magic 6f69, entries 29795, max 9324(0), depth 20297(0) [ 50.622057][ T406] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.622416][ T406] EXT4-fs error (device loop4): ext4_truncate:4292: inode #19: comm syz-executor.4: mark_inode_dirty error [ 50.646728][ T403] EXT4-fs error (device loop5): ext4_ext_truncate:4431: inode #19: comm syz-executor.5: mark_inode_dirty error [ 50.652487][ T406] ================================================================== [ 50.661139][ T399] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor.2: Invalid inode table block 34360905424 in block_group 0 [ 50.672181][ T406] BUG: KASAN: use-after-free in ext4_find_extent+0xbab/0xdb0 [ 50.672231][ T406] Read of size 4 at addr ffff888126431a58 by task syz-executor.4/406 [ 50.672247][ T406] [ 50.672252][ T406] CPU: 1 PID: 406 Comm: syz-executor.4 Not tainted 5.15.156-syzkaller-1070798-g29d153aabd54 #0 [ 50.680255][ T397] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 15 with error 117 [ 50.693717][ T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.693738][ T406] Call Trace: [ 50.693748][ T406] [ 50.693756][ T406] dump_stack_lvl+0x151/0x1c0 [ 50.701284][ T397] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.701284][ T397] [ 50.708807][ T406] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.708837][ T406] ? __wake_up_klogd+0xd5/0x110 [ 50.708859][ T406] ? panic+0x760/0x760 [ 50.713675][ T399] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.721139][ T406] print_address_description+0x87/0x3b0 [ 50.721175][ T406] kasan_report+0x179/0x1c0 [ 50.721194][ T406] ? __read_extent_tree_block+0x1e0/0x7b0 [ 50.721217][ T406] ? ext4_find_extent+0xbab/0xdb0 [ 50.721238][ T406] ? ext4_find_extent+0xbab/0xdb0 [ 50.721260][ T406] __asan_report_load4_noabort+0x14/0x20 [ 50.721282][ T406] ext4_find_extent+0xbab/0xdb0 [ 50.721305][ T406] ext4_ext_map_blocks+0x269/0x74a0 [ 50.721329][ T406] ? stack_trace_save+0x113/0x1c0 [ 50.721351][ T406] ? __stack_depot_save+0x34/0x470 [ 50.733686][ T403] EXT4-fs error (device loop5): __ext4_get_inode_loc:4340: comm syz-executor.5: Invalid inode table block 34360905424 in block_group 0 [ 50.743352][ T406] ? find_get_entry+0x3d3/0x3e0 [ 50.743378][ T406] ? ext4_ext_release+0x10/0x10 [ 50.743401][ T406] ? __kasan_slab_alloc+0xc3/0xe0 [ 50.743420][ T406] ? __kasan_slab_alloc+0xb1/0xe0 [ 50.758448][ T403] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 50.763317][ T406] ? slab_post_alloc_hook+0x53/0x2c0 [ 50.763349][ T406] ? kmem_cache_alloc+0xf5/0x200 [ 50.763369][ T406] ? ext4_alloc_io_end_vec+0x2a/0x170 [ 50.769200][ T403] EXT4-fs error (device loop5): ext4_truncate:4292: inode #19: comm syz-executor.5: mark_inode_dirty error [ 50.773998][ T406] ? ext4_writepages+0x13b4/0x4000 [ 50.774027][ T406] ? do_writepages+0x40e/0x670 [ 50.774045][ T406] ? filemap_fdatawrite_wbc+0x248/0x2a0 [ 50.774066][ T406] ? file_write_and_wait_range+0x1cb/0x2b0 [ 50.779177][ T403] ------------[ cut here ]------------ [ 50.787294][ T406] ? ext4_sync_file+0x1a2/0xa50 [ 50.787324][ T406] ? vfs_fsync_range+0x17b/0x190 [ 50.787344][ T406] ? ext4_buffered_write_iter+0x568/0x610 [ 50.787363][ T406] ? ext4_file_write_iter+0x443/0x1c80 [ 50.787380][ T406] ? vfs_write+0xd5d/0x1110 [ 50.787397][ T406] ? ksys_write+0x199/0x2c0 [ 50.793849][ T399] EXT4-fs error (device loop2): ext4_truncate:4292: inode #19: comm syz-executor.2: mark_inode_dirty error [ 50.796998][ T406] ? __x64_sys_write+0x7b/0x90 [ 50.797023][ T406] ? x64_sys_call+0x2f/0x9a0 [ 50.803461][ T399] ------------[ cut here ]------------ [ 50.807614][ T406] ? do_syscall_64+0x3b/0xb0 [ 50.812715][ T403] kernel BUG at fs/ext4/inode.c:2421! [ 50.817963][ T406] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.822803][ T399] kernel BUG at fs/ext4/inode.c:2421! [ 50.827670][ T406] ? _raw_read_unlock+0x25/0x40 [ 50.832619][ T403] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.837463][ T406] ? ext4_es_lookup_extent+0x33b/0x940 [ 50.851101][ T403] CPU: 0 PID: 403 Comm: syz-executor.5 Not tainted 5.15.156-syzkaller-1070798-g29d153aabd54 #0 [ 50.855791][ T406] ext4_map_blocks+0xaa7/0x1e00 [ 50.860466][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 50.865425][ T406] ? ext4_issue_zeroout+0x250/0x250 [ 50.870272][ T403] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 50.879475][ T406] ? ext4_inode_journal_mode+0x1a5/0x470 [ 50.884590][ T403] Code: 00 74 08 48 89 df e8 d4 cf c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 2c 36 08 00 eb 58 e8 75 a0 87 ff <0f> 0b e8 6e a0 87 ff eb 3b e8 67 a0 87 ff eb 72 e8 60 a0 87 ff 31 [ 50.889365][ T406] ext4_writepages+0x1628/0x4000 [ 50.894572][ T403] RSP: 0018:ffffc90000fd7240 EFLAGS: 00010293 [ 50.905867][ T406] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 50.910984][ T403] [ 50.910990][ T403] RAX: ffffffff81e8c79b RBX: dffffc0000000000 RCX: ffff8881105f13c0 [ 50.915582][ T406] ? ext4_readpage+0x230/0x230 [ 50.920958][ T403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.926600][ T406] ? ext4_readahead+0x110/0x110 [ 50.931898][ T403] RBP: ffffc90000fd7650 R08: ffffffff81e8a15b R09: ffffed1021cd4bd4 [ 50.936583][ T406] ? down_read_trylock+0x3d6/0x7d0 [ 50.941353][ T403] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 50.946911][ T406] ? up_read+0x5d/0x220 [ 50.952332][ T403] R13: ffffc90000fd7520 R14: 0000000000000000 R15: 0000000000000000 [ 50.956668][ T406] ? ext4_readpage+0x230/0x230 [ 50.961002][ T403] FS: 00007fbc64f636c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.972402][ T406] do_writepages+0x40e/0x670 [ 50.977003][ T403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.981436][ T406] ? __writepage+0x130/0x130 [ 50.986813][ T403] CR2: 0000555557556818 CR3: 0000000125ed6000 CR4: 00000000003506b0 [ 50.991238][ T406] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 50.996447][ T403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.002434][ T406] ? __kasan_check_write+0x14/0x20 [ 51.007808][ T403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.012508][ T406] ? _raw_spin_lock+0xa4/0x1b0 [ 51.018418][ T403] Call Trace: [ 51.018426][ T403] [ 51.023697][ T406] ? _raw_spin_unlock+0x4d/0x70 [ 51.033850][ T403] ? __die_body+0x62/0xb0 [ 51.038631][ T406] ? __get_user_nocheck_1+0x6/0x10 [ 51.048524][ T403] ? die+0x88/0xb0 [ 51.053560][ T406] filemap_fdatawrite_wbc+0x248/0x2a0 [ 51.059117][ T403] ? do_trap+0x103/0x330 [ 51.065018][ T406] file_write_and_wait_range+0x1cb/0x2b0 [ 51.084469][ T403] ? ext4_writepages+0x3f4b/0x4000 [ 51.089243][ T406] ? __filemap_set_wb_err+0x120/0x120 [ 51.095139][ T403] ? handle_invalid_op+0x95/0xc0 [ 51.100614][ T406] ext4_sync_file+0x1a2/0xa50 [ 51.102769][ T403] ? ext4_writepages+0x3f4b/0x4000 [ 51.110693][ T406] ? kasan_set_track+0x5d/0x70 [ 51.115294][ T403] ? exc_invalid_op+0x32/0x50 [ 51.123096][ T406] vfs_fsync_range+0x17b/0x190 [ 51.127909][ T403] ? asm_exc_invalid_op+0x1b/0x20 [ 51.135769][ T406] ext4_buffered_write_iter+0x568/0x610 [ 51.140712][ T403] ? ext4_writepages+0x190b/0x4000 [ 51.148611][ T406] ext4_file_write_iter+0x443/0x1c80 [ 51.152610][ T403] ? ext4_writepages+0x3f4b/0x4000 [ 51.161111][ T406] ? avc_policy_seqno+0x1b/0x70 [ 51.165707][ T403] ? ext4_writepages+0x3f4b/0x4000 [ 51.174472][ T406] ? ext4_file_read_iter+0x4b0/0x4b0 [ 51.178903][ T403] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 51.185331][ T406] ? fsnotify_perm+0x6a/0x5d0 [ 51.189754][ T403] ? ext4_readpage+0x230/0x230 [ 51.197560][ T406] ? iov_iter_init+0x53/0x190 [ 51.202681][ T403] ? ext4_readahead+0x110/0x110 [ 51.210502][ T406] vfs_write+0xd5d/0x1110 [ 51.215445][ T403] ? down_read_trylock+0x3d6/0x7d0 [ 51.223341][ T406] ? putname+0xfa/0x150 [ 51.227936][ T403] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 51.231170][ T406] ? file_end_write+0x1c0/0x1c0 [ 51.233949][ T403] ? up_read+0x5d/0x220 [ 51.238717][ T406] ? mutex_lock+0xb6/0x1e0 [ 51.242972][ T403] ? ext4_readpage+0x230/0x230 [ 51.247919][ T406] ? wait_for_completion_killable_timeout+0x10/0x10 [ 51.251477][ T403] do_writepages+0x40e/0x670 [ 51.256686][ T406] ? __fdget_pos+0x2e7/0x3a0 [ 51.260773][ T403] ? __writepage+0x130/0x130 [ 51.266234][ T406] ? ksys_write+0x77/0x2c0 [ 51.271212][ T403] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 51.276483][ T406] ksys_write+0x199/0x2c0 [ 51.281256][ T403] ? __kasan_check_write+0x14/0x20 [ 51.285760][ T406] ? __kasan_check_write+0x14/0x20 [ 51.290808][ T403] ? _raw_spin_lock+0xa4/0x1b0 [ 51.295401][ T406] ? __ia32_sys_read+0x90/0x90 [ 51.299917][ T403] ? _raw_spin_unlock+0x4d/0x70 [ 51.304516][ T406] ? __kasan_check_read+0x11/0x20 [ 51.309375][ T403] ? __get_user_nocheck_1+0x6/0x10 [ 51.314778][ T406] __x64_sys_write+0x7b/0x90 [ 51.319791][ T403] filemap_fdatawrite_wbc+0x248/0x2a0 [ 51.325015][ T406] x64_sys_call+0x2f/0x9a0 [ 51.329946][ T403] file_write_and_wait_range+0x1cb/0x2b0 [ 51.334642][ T406] do_syscall_64+0x3b/0xb0 [ 51.339583][ T403] ? __filemap_set_wb_err+0x120/0x120 [ 51.344799][ T406] ? clear_bhb_loop+0x35/0x90 [ 51.350367][ T403] ext4_sync_file+0x1a2/0xa50 [ 51.354898][ T406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.359479][ T403] ? kasan_set_track+0x5d/0x70 [ 51.364016][ T406] RIP: 0033:0x7fa33da9c859 [ 51.368677][ T403] vfs_fsync_range+0x17b/0x190 [ 51.372847][ T406] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.378047][ T403] ext4_buffered_write_iter+0x568/0x610 [ 51.382040][ T406] RSP: 002b:00007fa33d61f0c8 EFLAGS: 00000246 [ 51.387686][ T403] ext4_file_write_iter+0x443/0x1c80 [ 51.392368][ T406] ORIG_RAX: 0000000000000001 [ 51.396363][ T403] ? avc_policy_seqno+0x1b/0x70 [ 51.400613][ T406] RAX: ffffffffffffffda RBX: 00007fa33dbbbf80 RCX: 00007fa33da9c859 [ 51.405214][ T403] ? ext4_file_read_iter+0x4b0/0x4b0 [ 51.411721][ T406] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000006 [ 51.416157][ T403] ? fsnotify_perm+0x6a/0x5d0 [ 51.420582][ T406] RBP: 00007fa33daf8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 51.425003][ T403] ? iov_iter_init+0x53/0x190 [ 51.429259][ T406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.434386][ T403] vfs_write+0xd5d/0x1110 [ 51.438559][ T406] R13: 000000000000000b R14: 00007fa33dbbbf80 R15: 00007ffca2ddd968 [ 51.443499][ T403] ? putname+0xfa/0x150 [ 51.448550][ T406] [ 51.453148][ T403] ? file_end_write+0x1c0/0x1c0 [ 51.457745][ T406] [ 51.457751][ T406] The buggy address belongs to the page: [ 51.462518][ T403] ? mutex_lock+0xb6/0x1e0 [ 51.467476][ T406] page:ffffea0004990c40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x126431 [ 51.472597][ T403] ? wait_for_completion_killable_timeout+0x10/0x10 [ 51.477237][ T406] flags: 0x4000000000000000(zone=1) [ 51.482428][ T403] ? __fdget_pos+0x2e7/0x3a0 [ 51.486705][ T406] raw: 4000000000000000 ffffea0004990c88 ffffea0004990c08 0000000000000000 [ 51.492143][ T403] ? ksys_write+0x77/0x2c0 [ 51.496402][ T406] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 51.501603][ T403] ksys_write+0x199/0x2c0 [ 51.506117][ T406] page dumped because: kasan: bad access detected [ 51.510747][ T403] ? __kasan_check_write+0x14/0x20 [ 51.516454][ T406] page_owner info is not present (never set?) [ 51.521043][ T403] ? __ia32_sys_read+0x90/0x90 [ 51.525509][ T406] [ 51.525514][ T406] Memory state around the buggy address: [ 51.530106][ T403] ? __kasan_check_read+0x11/0x20 [ 51.549546][ T406] ffff888126431900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.554935][ T403] __x64_sys_write+0x7b/0x90 [ 51.560828][ T406] ffff888126431980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.565947][ T403] x64_sys_call+0x2f/0x9a0 [ 51.570462][ T406] >ffff888126431a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.575155][ T403] do_syscall_64+0x3b/0xb0 [ 51.582952][ T406] ^ [ 51.588086][ T403] ? clear_bhb_loop+0x35/0x90 [ 51.595894][ T406] ffff888126431a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.600398][ T403] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.608327][ T406] ffff888126431b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.612810][ T403] RIP: 0033:0x7fbc653e0859 [ 51.620630][ T406] ================================================================== [ 51.645843][ T406] EXT4-fs error (device loop4): ext4_map_blocks:716: inode #19: comm syz-executor.4: lblock 0 mapped to illegal pblock 0 (length 16) [ 51.646312][ T403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.858328][ T403] RSP: 002b:00007fbc64f630c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.866588][ T403] RAX: ffffffffffffffda RBX: 00007fbc654fff80 RCX: 00007fbc653e0859 [ 51.874380][ T403] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000006 [ 51.882190][ T403] RBP: 00007fbc6543cad0 R08: 0000000000000000 R09: 0000000000000000 [ 51.890009][ T403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.897814][ T403] R13: 000000000000000b R14: 00007fbc654fff80 R15: 00007ffd9456be88 [ 51.905718][ T403] [ 51.908575][ T403] Modules linked in: [ 51.912364][ T399] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 51.918312][ T399] CPU: 1 PID: 399 Comm: syz-executor.2 Tainted: G B D 5.15.156-syzkaller-1070798-g29d153aabd54 #0 [ 51.930021][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 51.930730][ T8] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 51.939916][ T399] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 51.959005][ T399] Code: 00 74 08 48 89 df e8 d4 cf c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 2c 36 08 00 eb 58 e8 75 a0 87 ff <0f> 0b e8 6e a0 87 ff eb 3b e8 67 a0 87 ff eb 72 e8 60 a0 87 ff 31 [ 51.978551][ T399] RSP: 0018:ffffc90000fa7240 EFLAGS: 00010293 [ 51.984564][ T399] RAX: ffffffff81e8c79b RBX: dffffc0000000000 RCX: ffff88810b58e2c0 [ 51.992609][ T399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.000463][ T399] RBP: ffffc90000fa7650 R08: ffffffff81e8a15b R09: ffffed1024a93ec0 [ 52.008316][ T399] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 52.016141][ T399] R13: ffffc90000fa7520 R14: 0000000000000000 R15: 0000000000000000 [ 52.023944][ T399] FS: 00007f7c2ebff6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.025249][ T8] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 52.032879][ T399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.032899][ T399] CR2: 0000563d3248ccc8 CR3: 0000000123379000 CR4: 00000000003506a0 [ 52.032915][ T399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.032926][ T399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.032938][ T399] Call Trace: [ 52.032944][ T399] [ 52.032951][ T399] ? __die_body+0x62/0xb0 [ 52.087337][ T399] ? die+0x88/0xb0 [ 52.090991][ T399] ? do_trap+0x103/0x330 [ 52.095156][ T399] ? ext4_writepages+0x3f4b/0x4000 [ 52.100104][ T399] ? handle_invalid_op+0x95/0xc0 [ 52.104875][ T399] ? ext4_writepages+0x3f4b/0x4000 [ 52.109821][ T399] ? exc_invalid_op+0x32/0x50 [ 52.114333][ T399] ? asm_exc_invalid_op+0x1b/0x20 [ 52.119199][ T399] ? ext4_writepages+0x190b/0x4000 [ 52.124316][ T399] ? ext4_writepages+0x3f4b/0x4000 [ 52.129529][ T399] ? ext4_writepages+0x3f4b/0x4000 [ 52.134562][ T399] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 52.140042][ T399] ? ext4_readpage+0x230/0x230 [ 52.144720][ T399] ? ext4_readahead+0x110/0x110 [ 52.149406][ T399] ? down_read_trylock+0x3d6/0x7d0 [ 52.154348][ T399] ? up_read+0x5d/0x220 [ 52.158351][ T399] ? ext4_readpage+0x230/0x230 [ 52.162940][ T399] do_writepages+0x40e/0x670 [ 52.167369][ T399] ? __writepage+0x130/0x130 [ 52.171888][ T399] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 52.177112][ T399] ? __kasan_check_write+0x14/0x20 [ 52.182131][ T399] ? _raw_spin_lock+0xa4/0x1b0 [ 52.186805][ T399] ? _raw_spin_unlock+0x4d/0x70 [ 52.191624][ T399] ? __get_user_nocheck_1+0x6/0x10 [ 52.196557][ T399] filemap_fdatawrite_wbc+0x248/0x2a0 [ 52.201759][ T399] file_write_and_wait_range+0x1cb/0x2b0 [ 52.207583][ T399] ? __filemap_set_wb_err+0x120/0x120 [ 52.212814][ T399] ext4_sync_file+0x1a2/0xa50 [ 52.217306][ T399] ? kasan_set_track+0x5d/0x70 [ 52.222011][ T399] vfs_fsync_range+0x17b/0x190 [ 52.226614][ T399] ext4_buffered_write_iter+0x568/0x610 [ 52.231997][ T399] ext4_file_write_iter+0x443/0x1c80 [ 52.237118][ T399] ? avc_policy_seqno+0x1b/0x70 [ 52.241814][ T399] ? ext4_file_read_iter+0x4b0/0x4b0 [ 52.247094][ T399] ? fsnotify_perm+0x6a/0x5d0 [ 52.251703][ T399] ? iov_iter_init+0x53/0x190 [ 52.256212][ T399] vfs_write+0xd5d/0x1110 [ 52.260372][ T399] ? putname+0xfa/0x150 [ 52.264453][ T399] ? file_end_write+0x1c0/0x1c0 [ 52.269227][ T399] ? mutex_lock+0xb6/0x1e0 [ 52.273488][ T399] ? wait_for_completion_killable_timeout+0x10/0x10 [ 52.279906][ T399] ? __fdget_pos+0x2e7/0x3a0 [ 52.284342][ T399] ? ksys_write+0x77/0x2c0 [ 52.288579][ T399] ksys_write+0x199/0x2c0 [ 52.292745][ T399] ? __kasan_check_write+0x14/0x20 [ 52.297696][ T399] ? __ia32_sys_read+0x90/0x90 [ 52.302328][ T399] ? __kasan_check_read+0x11/0x20 [ 52.307156][ T399] __x64_sys_write+0x7b/0x90 [ 52.311578][ T399] x64_sys_call+0x2f/0x9a0 [ 52.315836][ T399] do_syscall_64+0x3b/0xb0 [ 52.320099][ T399] ? clear_bhb_loop+0x35/0x90 [ 52.324598][ T399] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.330334][ T399] RIP: 0033:0x7f7c2f07c859 [ 52.334671][ T399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.354280][ T399] RSP: 002b:00007f7c2ebff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 52.362614][ T399] RAX: ffffffffffffffda RBX: 00007f7c2f19bf80 RCX: 00007f7c2f07c859 [ 52.370422][ T399] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000006 [ 52.378234][ T399] RBP: 00007f7c2f0d8ad0 R08: 0000000000000000 R09: 0000000000000000 [ 52.386167][ T399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.393987][ T399] R13: 000000000000000b R14: 00007f7c2f19bf80 R15: 00007fff52fc0118 [ 52.401793][ T399] [ 52.404651][ T399] Modules linked in: [ 52.408420][ T406] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 16 with error 117 [ 52.421321][ T403] ---[ end trace dbde3d5d135be700 ]--- [ 52.422480][ T399] ---[ end trace dbde3d5d135be701 ]--- [ 52.435202][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 52.467833][ T403] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 52.473674][ T403] Code: 00 74 08 48 89 df e8 d4 cf c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 2c 36 08 00 eb 58 e8 75 a0 87 ff <0f> 0b e8 6e a0 87 ff eb 3b e8 67 a0 87 ff eb 72 e8 60 a0 87 ff 31 [ 52.481359][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 52.510404][ T403] RSP: 0018:ffffc90000fd7240 EFLAGS: 00010293 2024/08/30 06:26:41 executed programs: 10 [ 52.510896][ T399] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 52.516928][ T403] RAX: ffffffff81e8c79b RBX: dffffc0000000000 RCX: ffff8881105f13c0 [ 52.524797][ T406] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.524797][ T406] [ 52.530372][ T403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.545193][ T399] Code: 00 74 08 48 89 df e8 d4 cf c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 2c 36 08 00 eb 58 e8 75 a0 87 ff <0f> 0b e8 6e a0 87 ff eb 3b e8 67 a0 87 ff eb 72 e8 60 a0 87 ff 31 [ 52.549535][ T403] RBP: ffffc90000fd7650 R08: ffffffff81e8a15b R09: ffffed1021cd4bd4 [ 52.575815][ T10] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 52.589336][ T403] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 52.589356][ T403] R13: ffffc90000fd7520 R14: 0000000000000000 R15: 0000000000000000 [ 52.589370][ T403] FS: 00007fbc64f636c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.589388][ T403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.589402][ T403] CR2: 000000c00134e000 CR3: 0000000125ed6000 CR4: 00000000003506a0 [ 52.627725][ T434] loop3: detected capacity change from 0 to 2048 [ 52.628870][ T403] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.642813][ T403] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.643217][ T10] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 52.651125][ T403] Kernel panic - not syncing: Fatal exception [ 52.668568][ T399] RSP: 0018:ffffc90000fd7240 EFLAGS: 00010293 [ 52.670350][ T403] Kernel Offset: disabled [ 52.680504][ T403] Rebooting in 86400 seconds..