Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. 2023/12/28 16:46:56 ignoring optional flag "sandboxArg"="0" 2023/12/28 16:46:56 parsed 1 programs [ 42.616410][ T28] audit: type=1400 audit(1703782016.377:156): avc: denied { mounton } for pid=343 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.641692][ T28] audit: type=1400 audit(1703782016.377:157): avc: denied { mount } for pid=343 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/12/28 16:46:56 executed programs: 0 [ 42.685966][ T28] audit: type=1400 audit(1703782016.447:158): avc: denied { unlink } for pid=343 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 42.711771][ T343] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.773058][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.780230][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.787620][ T349] device bridge_slave_0 entered promiscuous mode [ 42.794359][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.801271][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.808474][ T349] device bridge_slave_1 entered promiscuous mode [ 42.856485][ T28] audit: type=1400 audit(1703782016.617:159): avc: denied { write } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.862799][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.876949][ T28] audit: type=1400 audit(1703782016.617:160): avc: denied { read } for pid=349 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.883844][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.911452][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.918324][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.941257][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.948693][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.956734][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.964075][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.973804][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.982104][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.988981][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.006308][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.014527][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.021410][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.028855][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.037099][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.048721][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.060229][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.068962][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.076689][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.085060][ T349] device veth0_vlan entered promiscuous mode [ 43.096665][ T349] device veth1_macvtap entered promiscuous mode [ 43.106836][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.116285][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.130677][ T28] audit: type=1400 audit(1703782016.887:161): avc: denied { mounton } for pid=349 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.154356][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.173902][ T356] loop0: detected capacity change from 0 to 512 [ 43.180826][ T28] audit: type=1400 audit(1703782016.937:162): avc: denied { mounton } for pid=354 comm="syz-executor.0" path="/root/syzkaller-testdir1575457082/syzkaller.NIWsNp/0/file1" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 43.217920][ T356] EXT4-fs (loop0): 1 orphan inode deleted [ 43.223494][ T356] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.233175][ T28] audit: type=1400 audit(1703782016.987:163): avc: denied { mount } for pid=354 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.233190][ T356] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/0/file1 supports timestamps until 2038 (0x7fffffff) [ 43.271389][ T28] audit: type=1400 audit(1703782017.027:164): avc: denied { write } for pid=354 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.293737][ T28] audit: type=1400 audit(1703782017.027:165): avc: denied { add_name } for pid=354 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.316449][ T360] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 43.330443][ T360] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 43.340257][ T360] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm kworker/u4:3: mark_inode_dirty error [ 43.352107][ T360] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 117 [ 43.364279][ T360] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.364279][ T360] [ 43.374308][ T360] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 43.390004][ T349] EXT4-fs (loop0): unmounting filesystem. [ 43.425285][ T362] loop0: detected capacity change from 0 to 512 [ 43.440173][ T362] EXT4-fs (loop0): 1 orphan inode deleted [ 43.445886][ T362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.454681][ T362] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/1/file1 supports timestamps until 2038 (0x7fffffff) [ 43.497605][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:1: Invalid inode table block 790638693 in block_group 0 [ 43.511381][ T10] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 43.521215][ T10] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:1: mark_inode_dirty error [ 43.533017][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 43.546227][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.546227][ T10] [ 43.556451][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:1: Invalid inode table block 790638693 in block_group 0 [ 43.572623][ T349] EXT4-fs (loop0): unmounting filesystem. [ 43.598428][ T366] loop0: detected capacity change from 0 to 512 [ 43.617817][ T366] EXT4-fs (loop0): 1 orphan inode deleted [ 43.623600][ T366] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.632699][ T366] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/2/file1 supports timestamps until 2038 (0x7fffffff) [ 43.662499][ T360] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 43.676340][ T360] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 43.686284][ T360] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:3: mark_inode_dirty error [ 43.698070][ T360] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 43.710554][ T360] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.710554][ T360] [ 43.720551][ T360] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 43.736426][ T349] EXT4-fs (loop0): unmounting filesystem. [ 43.757372][ T370] loop0: detected capacity change from 0 to 512 [ 43.768802][ T370] EXT4-fs (loop0): 1 orphan inode deleted [ 43.774500][ T370] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.783508][ T370] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/3/file1 supports timestamps until 2038 (0x7fffffff) [ 43.818476][ T8] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:0: Invalid inode table block 790638693 in block_group 0 [ 43.832454][ T8] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 43.842023][ T8] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:0: mark_inode_dirty error [ 43.853760][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 43.866132][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.866132][ T8] [ 43.876051][ T8] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:0: Invalid inode table block 790638693 in block_group 0 [ 43.892044][ T349] EXT4-fs (loop0): unmounting filesystem. [ 43.927214][ T374] loop0: detected capacity change from 0 to 512 [ 43.957894][ T374] EXT4-fs (loop0): 1 orphan inode deleted [ 43.963665][ T374] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.972744][ T374] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/4/file1 supports timestamps until 2038 (0x7fffffff) [ 44.009227][ T375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 44.023415][ T375] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 44.032994][ T375] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:4: mark_inode_dirty error [ 44.044772][ T375] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.057073][ T375] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.057073][ T375] [ 44.067238][ T375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 44.082995][ T349] EXT4-fs (loop0): unmounting filesystem. [ 44.130835][ T380] loop0: detected capacity change from 0 to 512 [ 44.148114][ T380] EXT4-fs (loop0): 1 orphan inode deleted [ 44.154049][ T380] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.162855][ T380] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/5/file1 supports timestamps until 2038 (0x7fffffff) [ 44.197245][ T375] EXT4-fs error (device loop0): ext4_ext_map_blocks:4121: inode #16: comm kworker/u4:4: bad extent address lblock: 0, depth: 1 pblock 0 [ 44.211391][ T375] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 6 with error 117 [ 44.223951][ T375] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.223951][ T375] [ 44.234292][ T375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 44.250634][ T349] EXT4-fs (loop0): unmounting filesystem. [ 44.290824][ T384] loop0: detected capacity change from 0 to 512 [ 44.307418][ T384] EXT4-fs (loop0): 1 orphan inode deleted [ 44.312987][ T384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.321907][ T384] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/6/file1 supports timestamps until 2038 (0x7fffffff) [ 44.349858][ T375] EXT4-fs error (device loop0): ext4_ext_map_blocks:4121: inode #16: comm kworker/u4:4: bad extent address lblock: 0, depth: 1 pblock 0 [ 44.364559][ T375] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 8 with error 117 [ 44.376848][ T375] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.376848][ T375] [ 44.386889][ T375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 44.403025][ T349] EXT4-fs (loop0): unmounting filesystem. [ 44.446713][ T388] loop0: detected capacity change from 0 to 512 [ 44.457666][ T388] EXT4-fs (loop0): 1 orphan inode deleted [ 44.463436][ T388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.472603][ T388] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/7/file1 supports timestamps until 2038 (0x7fffffff) [ 44.509053][ T375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 44.524103][ T375] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 44.533512][ T375] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:4: mark_inode_dirty error [ 44.544972][ T375] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.557342][ T375] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.557342][ T375] [ 44.567131][ T375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 44.583185][ T349] EXT4-fs (loop0): unmounting filesystem. [ 44.611045][ T392] loop0: detected capacity change from 0 to 512 [ 44.637666][ T392] EXT4-fs (loop0): 1 orphan inode deleted [ 44.643318][ T392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.652824][ T392] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/8/file1 supports timestamps until 2038 (0x7fffffff) [ 44.688021][ T375] EXT4-fs error (device loop0): ext4_ext_map_blocks:4121: inode #16: comm kworker/u4:4: bad extent address lblock: 0, depth: 1 pblock 0 [ 44.702009][ T375] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 4 with error 117 [ 44.714440][ T375] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.714440][ T375] [ 44.724182][ T375] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 44.739747][ T349] EXT4-fs (loop0): unmounting filesystem. [ 44.755911][ T396] loop0: detected capacity change from 0 to 512 [ 44.769502][ T396] EXT4-fs (loop0): 1 orphan inode deleted [ 44.775153][ T396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.784180][ T396] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/9/file1 supports timestamps until 2038 (0x7fffffff) [ 44.818507][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:1: Invalid inode table block 790638693 in block_group 0 [ 44.832515][ T10] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 44.842002][ T10] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:1: mark_inode_dirty error [ 44.853595][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.867765][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.867765][ T10] [ 44.877379][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:1: Invalid inode table block 790638693 in block_group 0 [ 44.893438][ T349] EXT4-fs (loop0): unmounting filesystem. [ 44.920690][ T400] loop0: detected capacity change from 0 to 512 [ 44.937266][ T400] EXT4-fs (loop0): 1 orphan inode deleted [ 44.943530][ T400] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.952723][ T400] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/10/file1 supports timestamps until 2038 (0x7fffffff) [ 44.983774][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:1: Invalid inode table block 790638693 in block_group 0 [ 44.997909][ T10] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Corrupt filesystem [ 45.007672][ T10] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:1: mark_inode_dirty error [ 45.019641][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 45.032348][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.032348][ T10] [ 45.042450][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:1: Invalid inode table block 790638693 in block_group 0 [ 45.058316][ T349] EXT4-fs (loop0): unmounting filesystem. [ 45.096448][ T405] loop0: detected capacity change from 0 to 512 [ 45.118028][ T405] EXT4-fs (loop0): 1 orphan inode deleted [ 45.123643][ T405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.133812][ T405] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/11/file1 supports timestamps until 2038 (0x7fffffff) [ 45.161464][ T10] EXT4-fs error (device loop0): ext4_ext_map_blocks:4121: inode #16: comm kworker/u4:1: bad extent address lblock: 0, depth: 1 pblock 0 [ 45.175632][ T10] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 14 with error 117 [ 45.188259][ T10] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.188259][ T10] [ 45.198238][ T10] EXT4-fs error (device loop0): __ext4_get_inode_loc:4485: comm kworker/u4:1: Invalid inode table block 790638693 in block_group 0 [ 45.213515][ T349] EXT4-fs (loop0): unmounting filesystem. [ 45.235033][ T409] loop0: detected capacity change from 0 to 512 [ 45.257939][ T409] EXT4-fs (loop0): 1 orphan inode deleted [ 45.263563][ T409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.272952][ T409] ext4 filesystem being mounted at /root/syzkaller-testdir1575457082/syzkaller.NIWsNp/12/file1 supports timestamps until 2038 (0x7fffffff) [ 45.308368][ T8] ================================================================== [ 45.316817][ T8] BUG: KASAN: use-after-free in ext4_find_extent+0xbab/0xdb0 [ 45.324118][ T8] Read of size 4 at addr ffff8881269f54cc by task kworker/u4:0/8 [ 45.331967][ T8] [ 45.334415][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Not tainted 6.1.57-syzkaller-1150540-g401a2769d990 #0 [ 45.344570][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 45.354922][ T8] Workqueue: writeback wb_workfn (flush-7:0) [ 45.360707][ T8] Call Trace: [ 45.364263][ T8] [ 45.367134][ T8] dump_stack_lvl+0x151/0x1b7 [ 45.372031][ T8] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 45.377285][ T8] ? _printk+0xd1/0x111 [ 45.381282][ T8] ? __virt_addr_valid+0x242/0x2f0 [ 45.386222][ T8] print_report+0x158/0x4e0 [ 45.390560][ T8] ? __virt_addr_valid+0x242/0x2f0 [ 45.395510][ T8] ? kasan_addr_to_slab+0xd/0x80 [ 45.400277][ T8] ? ext4_find_extent+0xbab/0xdb0 [ 45.405230][ T8] kasan_report+0x13c/0x170 [ 45.409749][ T8] ? ext4_find_extent+0xbab/0xdb0 [ 45.414601][ T8] __asan_report_load4_noabort+0x14/0x20 [ 45.420071][ T8] ext4_find_extent+0xbab/0xdb0 [ 45.424758][ T8] ext4_ext_map_blocks+0x255/0x71e0 [ 45.429824][ T8] ? stack_trace_save+0x113/0x1c0 [ 45.434754][ T8] ? kasan_set_track+0x60/0x70 [ 45.439409][ T8] ? kasan_set_track+0x4b/0x70 [ 45.444024][ T8] ? kasan_save_alloc_info+0x1f/0x30 [ 45.449382][ T8] ? __kasan_slab_alloc+0x6c/0x80 [ 45.454236][ T8] ? slab_post_alloc_hook+0x53/0x2c0 [ 45.459534][ T8] ? kmem_cache_alloc+0x175/0x2c0 [ 45.464391][ T8] ? ext4_ext_release+0x10/0x10 [ 45.469122][ T8] ? writeback_sb_inodes+0xb33/0x18f0 [ 45.474563][ T8] ? wb_writeback+0x3b9/0x9f0 [ 45.479194][ T8] ? wb_workfn+0x399/0x1030 [ 45.483774][ T8] ? process_one_work+0x73d/0xcb0 [ 45.488835][ T8] ? worker_thread+0xa60/0x1260 [ 45.493528][ T8] ? kthread+0x26d/0x300 [ 45.497598][ T8] ? ret_from_fork+0x1f/0x30 [ 45.502385][ T8] ? _raw_read_unlock+0x25/0x40 [ 45.507058][ T8] ? ext4_es_lookup_extent+0x33b/0x950 [ 45.512462][ T8] ext4_map_blocks+0xa36/0x1ca0 [ 45.517324][ T8] ? ext4_issue_zeroout+0x250/0x250 [ 45.522554][ T8] ? ext4_inode_journal_mode+0x1a5/0x470 [ 45.527999][ T8] ext4_writepages+0x17b5/0x3fd0 [ 45.532920][ T8] ? ext4_read_folio+0x240/0x240 [ 45.537628][ T8] ? xas_load+0x39d/0x3b0 [ 45.541792][ T8] ? cpudl_cleanup+0x40/0x40 [ 45.546505][ T8] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 45.551985][ T8] ? update_load_avg+0x513/0x1530 [ 45.556806][ T8] ? ext4_read_folio+0x240/0x240 [ 45.561587][ T8] do_writepages+0x385/0x620 [ 45.566121][ T8] ? __writepage+0x130/0x130 [ 45.570716][ T8] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 45.576187][ T8] ? cpudl_cleanup+0x40/0x40 [ 45.580703][ T8] ? update_load_avg+0x513/0x1530 [ 45.585822][ T8] ? __kasan_check_write+0x14/0x20 [ 45.590786][ T8] __writeback_single_inode+0xdc/0xb80 [ 45.596183][ T8] writeback_sb_inodes+0xb33/0x18f0 [ 45.601318][ T8] ? queue_io+0x520/0x520 [ 45.605596][ T8] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 45.610914][ T8] ? queue_io+0x3d0/0x520 [ 45.615166][ T8] ? memset+0x35/0x40 [ 45.619084][ T8] wb_writeback+0x3b9/0x9f0 [ 45.623428][ T8] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 45.629235][ T8] ? set_worker_desc+0x158/0x1c0 [ 45.634012][ T8] ? cpudl_cleanup+0x40/0x40 [ 45.638529][ T8] ? __kasan_check_write+0x14/0x20 [ 45.643646][ T8] wb_workfn+0x399/0x1030 [ 45.647906][ T8] ? inode_wait_for_writeback+0x280/0x280 [ 45.653640][ T8] ? kthread_data+0x53/0xc0 [ 45.657962][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 45.662650][ T8] ? finish_task_switch+0x167/0x7b0 [ 45.667789][ T8] ? __kasan_check_read+0x11/0x20 [ 45.672721][ T8] ? read_word_at_a_time+0x12/0x20 [ 45.677664][ T8] ? strscpy+0x9c/0x260 [ 45.681665][ T8] process_one_work+0x73d/0xcb0 [ 45.686359][ T8] worker_thread+0xa60/0x1260 [ 45.690887][ T8] kthread+0x26d/0x300 [ 45.694847][ T8] ? worker_clr_flags+0x1a0/0x1a0 [ 45.699711][ T8] ? kthread_blkcg+0xd0/0xd0 [ 45.704234][ T8] ret_from_fork+0x1f/0x30 [ 45.708478][ T8] [ 45.711352][ T8] [ 45.713517][ T8] The buggy address belongs to the physical page: [ 45.719763][ T8] page:ffffea00049a7d40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1269f5 [ 45.729833][ T8] flags: 0x4000000000000000(zone=1) [ 45.734868][ T8] raw: 4000000000000000 ffffea00049a7488 ffffea00049a7448 0000000000000000 [ 45.743302][ T8] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 45.751956][ T8] page dumped because: kasan: bad access detected [ 45.758215][ T8] page_owner tracks the page as freed [ 45.763595][ T8] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 392, tgid 391 (syz-executor.0), ts 44670938267, free_ts 44747165001 [ 45.783844][ T8] post_alloc_hook+0x213/0x220 [ 45.788416][ T8] prep_new_page+0x1b/0x110 [ 45.792748][ T8] get_page_from_freelist+0x27ea/0x2870 [ 45.798216][ T8] __alloc_pages+0x3a1/0x780 [ 45.802653][ T8] __folio_alloc+0x15/0x40 [ 45.806904][ T8] __filemap_get_folio+0x827/0xae0 [ 45.812029][ T8] pagecache_get_page+0x2f/0x110 [ 45.816793][ T8] __getblk_gfp+0x205/0x7d0 [ 45.821149][ T8] __ext4_sb_bread_gfp+0x74/0x220 [ 45.825992][ T8] ext4_sb_bread+0x2a/0x40 [ 45.830384][ T8] ext4_xattr_get+0x24a/0x700 [ 45.834840][ T8] ext4_xattr_security_get+0x32/0x40 [ 45.839963][ T8] __vfs_getxattr+0x3c3/0x3f0 [ 45.844572][ T8] inode_doinit_use_xattr+0xa8/0x3d0 [ 45.849772][ T8] inode_doinit_with_dentry+0x883/0x1070 [ 45.855253][ T8] selinux_d_instantiate+0x27/0x40 [ 45.860185][ T8] page last free stack trace: [ 45.864696][ T8] free_unref_page_prepare+0x83d/0x850 [ 45.869998][ T8] free_unref_page_list+0xf1/0x7b0 [ 45.874941][ T8] release_pages+0xf7f/0xfe0 [ 45.879378][ T8] __pagevec_release+0x84/0x100 [ 45.884056][ T8] invalidate_mapping_pagevec+0x44a/0x520 [ 45.889612][ T8] invalidate_mapping_pages+0x27/0x30 [ 45.894825][ T8] invalidate_bdev+0xa6/0x140 [ 45.899428][ T8] ext4_put_super+0x737/0xd60 [ 45.904202][ T8] generic_shutdown_super+0x14f/0x370 [ 45.909612][ T8] kill_block_super+0x7e/0xe0 [ 45.914101][ T8] deactivate_locked_super+0xad/0x110 [ 45.919394][ T8] deactivate_super+0xbe/0xf0 [ 45.923907][ T8] cleanup_mnt+0x485/0x510 [ 45.928169][ T8] __cleanup_mnt+0x19/0x20 [ 45.932867][ T8] task_work_run+0x24d/0x2e0 [ 45.937304][ T8] exit_to_user_mode_loop+0x94/0xa0 [ 45.942331][ T8] [ 45.944499][ T8] Memory state around the buggy address: [ 45.949983][ T8] ffff8881269f5380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.957888][ T8] ffff8881269f5400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.966033][ T8] >ffff8881269f5480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.974019][ T8] ^ [ 45.980262][ T8] ffff8881269f5500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.988334][ T8] ffff8881269f5580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.996223][ T8] ================================================================== [ 46.004590][ T8] Disabling lock debugging due to kernel taint [ 46.011023][ T8] ------------[ cut here ]------------ [ 46.016315][ T8] kernel BUG at fs/ext4/inode.c:2423! [ 46.021624][ T8] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 46.027487][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G B 6.1.57-syzkaller-1150540-g401a2769d990 #0 [ 46.038590][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 46.048493][ T8] Workqueue: writeback wb_workfn (flush-7:0) [ 46.054319][ T8] RIP: 0010:ext4_writepages+0x3d6f/0x3fd0 [ 46.060032][ T8] Code: e8 26 a6 81 ff be 00 10 00 00 48 c7 c7 10 05 8c 86 4c 89 f2 e8 f2 91 ab 00 e9 0f fb ff ff e8 08 a6 81 ff 0f 0b e8 01 a6 81 ff <0f> 0b e8 1a 6a 03 03 65 8b 05 33 88 0e 7e 41 89 c7 4c 89 f8 48 c1 [ 46.079822][ T8] RSP: 0018:ffffc90000087000 EFLAGS: 00010293 [ 46.085720][ T8] RAX: ffffffff81f3891f RBX: dffffc0000000000 RCX: ffff888100386540 [ 46.093883][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.101832][ T8] RBP: ffffc90000087410 R08: ffffffff81f3662f R09: ffffed102178ab96 [ 46.109614][ T8] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 46.117433][ T8] R13: 0000000000000000 R14: ffff88810bc55ce8 R15: ffffc900000872e0 [ 46.125332][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 46.134088][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.140606][ T8] CR2: 0000000020042000 CR3: 0000000124762000 CR4: 00000000003506a0 [ 46.148542][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.156418][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.164232][ T8] Call Trace: [ 46.167358][ T8] [ 46.170141][ T8] ? __die_body+0x62/0xb0 [ 46.174298][ T8] ? die+0x88/0xb0 [ 46.177860][ T8] ? do_trap+0x103/0x330 [ 46.182025][ T8] ? ext4_writepages+0x3d6f/0x3fd0 [ 46.186984][ T8] ? handle_invalid_op+0x95/0xc0 [ 46.191832][ T8] ? ext4_writepages+0x3d6f/0x3fd0 [ 46.196780][ T8] ? exc_invalid_op+0x32/0x50 [ 46.201295][ T8] ? asm_exc_invalid_op+0x1b/0x20 [ 46.206153][ T8] ? ext4_writepages+0x1a7f/0x3fd0 [ 46.211096][ T8] ? ext4_writepages+0x3d6f/0x3fd0 [ 46.216072][ T8] ? ext4_writepages+0x3d6f/0x3fd0 [ 46.221235][ T8] ? ext4_read_folio+0x240/0x240 [ 46.226011][ T8] ? xas_load+0x39d/0x3b0 [ 46.230488][ T8] ? cpudl_cleanup+0x40/0x40 [ 46.234935][ T8] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 46.240382][ T8] ? update_load_avg+0x513/0x1530 [ 46.245240][ T8] ? ext4_read_folio+0x240/0x240 [ 46.250104][ T8] do_writepages+0x385/0x620 [ 46.254934][ T8] ? __writepage+0x130/0x130 [ 46.259480][ T8] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 46.264952][ T8] ? cpudl_cleanup+0x40/0x40 [ 46.269455][ T8] ? update_load_avg+0x513/0x1530 [ 46.274318][ T8] ? __kasan_check_write+0x14/0x20 [ 46.279262][ T8] __writeback_single_inode+0xdc/0xb80 [ 46.284569][ T8] writeback_sb_inodes+0xb33/0x18f0 [ 46.289596][ T8] ? queue_io+0x520/0x520 [ 46.293854][ T8] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 46.299491][ T8] ? queue_io+0x3d0/0x520 [ 46.303751][ T8] ? memset+0x35/0x40 [ 46.307732][ T8] wb_writeback+0x3b9/0x9f0 [ 46.312173][ T8] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 46.317970][ T8] ? set_worker_desc+0x158/0x1c0 [ 46.322863][ T8] ? cpudl_cleanup+0x40/0x40 [ 46.327352][ T8] ? __kasan_check_write+0x14/0x20 [ 46.333207][ T8] wb_workfn+0x399/0x1030 [ 46.337486][ T8] ? inode_wait_for_writeback+0x280/0x280 [ 46.343233][ T8] ? kthread_data+0x53/0xc0 [ 46.347669][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 46.352810][ T8] ? finish_task_switch+0x167/0x7b0 [ 46.357849][ T8] ? __kasan_check_read+0x11/0x20 [ 46.362707][ T8] ? read_word_at_a_time+0x12/0x20 [ 46.367741][ T8] ? strscpy+0x9c/0x260 [ 46.371730][ T8] process_one_work+0x73d/0xcb0 [ 46.376507][ T8] worker_thread+0xa60/0x1260 [ 46.381374][ T8] kthread+0x26d/0x300 [ 46.385299][ T8] ? worker_clr_flags+0x1a0/0x1a0 [ 46.390214][ T8] ? kthread_blkcg+0xd0/0xd0 [ 46.394729][ T8] ret_from_fork+0x1f/0x30 [ 46.398993][ T8] [ 46.401954][ T8] Modules linked in: [ 46.406067][ T8] ---[ end trace 0000000000000000 ]--- [ 46.411347][ T8] RIP: 0010:ext4_writepages+0x3d6f/0x3fd0 [ 46.417111][ T8] Code: e8 26 a6 81 ff be 00 10 00 00 48 c7 c7 10 05 8c 86 4c 89 f2 e8 f2 91 ab 00 e9 0f fb ff ff e8 08 a6 81 ff 0f 0b e8 01 a6 81 ff <0f> 0b e8 1a 6a 03 03 65 8b 05 33 88 0e 7e 41 89 c7 4c 89 f8 48 c1 [ 46.436560][ T8] RSP: 0018:ffffc90000087000 EFLAGS: 00010293 [ 46.442616][ T8] RAX: ffffffff81f3891f RBX: dffffc0000000000 RCX: ffff888100386540 [ 46.450457][ T8] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.458548][ T8] RBP: ffffc90000087410 R08: ffffffff81f3662f R09: ffffed102178ab96 [ 46.466696][ T8] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 46.474592][ T8] R13: 0000000000000000 R14: ffff88810bc55ce8 R15: ffffc900000872e0 [ 46.482470][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 46.491194][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.497617][ T8] CR2: 0000000020042000 CR3: 0000000124762000 CR4: 00000000003506a0 [ 46.505509][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.513295][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.521236][ T8] Kernel panic - not syncing: Fatal exception [ 46.527345][ T8] Kernel Offset: disabled [ 46.531484][ T8] Rebooting in 86400 seconds..