[ 25.484416][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.491942][ T41] device bridge_slave_0 left promiscuous mode [ 25.498027][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.505731][ T41] device veth1_macvtap left promiscuous mode [ 25.511871][ T41] device veth0_vlan left promiscuous mode [ 35.537459][ T27] kauditd_printk_skb: 76 callbacks suppressed [ 35.537470][ T27] audit: type=1400 audit(1699858382.637:152): avc: denied { transition } for pid=321 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.565438][ T27] audit: type=1400 audit(1699858382.637:153): avc: denied { noatsecure } for pid=321 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.584271][ T27] audit: type=1400 audit(1699858382.637:154): avc: denied { rlimitinh } for pid=321 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 35.603000][ T27] audit: type=1400 audit(1699858382.637:155): avc: denied { siginh } for pid=321 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. 2023/11/13 06:53:09 ignoring optional flag "sandboxArg"="0" 2023/11/13 06:53:10 parsed 1 programs [ 42.924539][ T27] audit: type=1400 audit(1699858390.027:156): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.949434][ T27] audit: type=1400 audit(1699858390.027:157): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/11/13 06:53:10 executed programs: 0 [ 42.988258][ T27] audit: type=1400 audit(1699858390.097:158): avc: denied { unlink } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.022064][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.066193][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.073226][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.080569][ T348] device bridge_slave_0 entered promiscuous mode [ 43.087094][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.094180][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.101233][ T348] device bridge_slave_1 entered promiscuous mode [ 43.139325][ T27] audit: type=1400 audit(1699858390.247:159): avc: denied { write } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.144241][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.159943][ T27] audit: type=1400 audit(1699858390.247:160): avc: denied { read } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.166734][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.194222][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.201042][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.218141][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.225266][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.232792][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.240622][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.259050][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.267492][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.275990][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.282959][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.290171][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.298883][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.305703][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.312910][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.320731][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.329889][ T348] device veth0_vlan entered promiscuous mode [ 43.337918][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.345922][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.353260][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.363095][ T348] device veth1_macvtap entered promiscuous mode [ 43.369883][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.380196][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.391726][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.402605][ T27] audit: type=1400 audit(1699858390.507:161): avc: denied { mounton } for pid=348 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 43.433949][ T354] loop0: detected capacity change from 0 to 512 [ 43.440740][ T27] audit: type=1400 audit(1699858390.547:162): avc: denied { mounton } for pid=353 comm="syz-executor.0" path="/root/syzkaller-testdir445882502/syzkaller.ia7Zwj/0/file1" dev="sda1" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 43.450332][ T354] EXT4-fs (loop0): 1 orphan inode deleted [ 43.472990][ T354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.482135][ T27] audit: type=1400 audit(1699858390.587:163): avc: denied { mount } for pid=353 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.487937][ T354] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/0/file1 supports timestamps until 2038 (0x7fffffff) [ 43.523172][ T27] audit: type=1400 audit(1699858390.627:164): avc: denied { write } for pid=353 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.545345][ T27] audit: type=1400 audit(1699858390.627:165): avc: denied { add_name } for pid=353 comm="syz-executor.0" name="memory.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.545623][ T8] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:0: lblock 0 mapped to illegal pblock 41 (length 16) [ 43.581378][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 43.593684][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.593684][ T8] [ 43.604414][ T348] EXT4-fs (loop0): unmounting filesystem. [ 43.627999][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 43.637026][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 43.655419][ T360] loop0: detected capacity change from 0 to 512 [ 43.669316][ T360] EXT4-fs (loop0): 1 orphan inode deleted [ 43.674910][ T360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.684082][ T360] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/1/file1 supports timestamps until 2038 (0x7fffffff) [ 43.715000][ T41] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:2: lblock 0 mapped to illegal pblock 41 (length 16) [ 43.729397][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 43.742352][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.742352][ T41] [ 43.752772][ T348] EXT4-fs (loop0): unmounting filesystem. [ 43.778108][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 43.787579][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 43.808391][ T365] loop0: detected capacity change from 0 to 512 [ 43.819402][ T365] EXT4-fs (loop0): 1 orphan inode deleted [ 43.825028][ T365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.833893][ T365] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/2/file1 supports timestamps until 2038 (0x7fffffff) [ 43.856248][ T282] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:3: lblock 0 mapped to illegal pblock 41 (length 16) [ 43.870893][ T282] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 43.883351][ T282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.883351][ T282] [ 43.894147][ T348] EXT4-fs (loop0): unmounting filesystem. [ 43.917947][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 43.926928][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 43.947704][ T369] loop0: detected capacity change from 0 to 512 [ 43.959153][ T369] EXT4-fs (loop0): 1 orphan inode deleted [ 43.964744][ T369] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.973561][ T369] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/3/file1 supports timestamps until 2038 (0x7fffffff) [ 43.997208][ T282] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:3: lblock 0 mapped to illegal pblock 41 (length 16) [ 44.011807][ T282] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.024174][ T282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.024174][ T282] [ 44.034698][ T348] EXT4-fs (loop0): unmounting filesystem. [ 44.057975][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 44.066863][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 44.088253][ T373] loop0: detected capacity change from 0 to 512 [ 44.099255][ T373] EXT4-fs (loop0): 1 orphan inode deleted [ 44.104828][ T373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.113634][ T373] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/4/file1 supports timestamps until 2038 (0x7fffffff) [ 44.146361][ T282] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:3: lblock 0 mapped to illegal pblock 41 (length 2) [ 44.161407][ T282] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 2 with error 117 [ 44.173638][ T282] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.173638][ T282] [ 44.184010][ T348] EXT4-fs (loop0): unmounting filesystem. [ 44.190077][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 44.199477][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 44.217845][ T377] loop0: detected capacity change from 0 to 512 [ 44.229283][ T377] EXT4-fs (loop0): 1 orphan inode deleted [ 44.234878][ T377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.243925][ T377] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/5/file1 supports timestamps until 2038 (0x7fffffff) [ 44.267572][ T41] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:2: lblock 0 mapped to illegal pblock 41 (length 16) [ 44.282431][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.294748][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.294748][ T41] [ 44.305092][ T348] EXT4-fs (loop0): unmounting filesystem. [ 44.327957][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 44.336831][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 44.361157][ T382] loop0: detected capacity change from 0 to 512 [ 44.389332][ T382] EXT4-fs (loop0): 1 orphan inode deleted [ 44.395043][ T382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.404349][ T382] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/6/file1 supports timestamps until 2038 (0x7fffffff) [ 44.434839][ T41] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:2: lblock 0 mapped to illegal pblock 41 (length 16) [ 44.449236][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.461631][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.461631][ T41] [ 44.472159][ T348] EXT4-fs (loop0): unmounting filesystem. [ 44.497929][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 44.506902][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 44.540779][ T386] loop0: detected capacity change from 0 to 512 [ 44.549432][ T386] EXT4-fs (loop0): 1 orphan inode deleted [ 44.554989][ T386] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.564282][ T386] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/7/file1 supports timestamps until 2038 (0x7fffffff) [ 44.587506][ T8] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:0: lblock 0 mapped to illegal pblock 41 (length 16) [ 44.602250][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.614464][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.614464][ T8] [ 44.625004][ T348] EXT4-fs (loop0): unmounting filesystem. [ 44.647960][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 44.656944][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 44.675437][ T390] loop0: detected capacity change from 0 to 512 [ 44.689474][ T390] EXT4-fs (loop0): 1 orphan inode deleted [ 44.695015][ T390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.703901][ T390] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/8/file1 supports timestamps until 2038 (0x7fffffff) [ 44.727354][ T41] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:2: lblock 0 mapped to illegal pblock 41 (length 16) [ 44.741946][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.754328][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.754328][ T41] [ 44.764993][ T348] EXT4-fs (loop0): unmounting filesystem. [ 44.788032][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 44.797005][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 44.825250][ T394] loop0: detected capacity change from 0 to 512 [ 44.839404][ T394] EXT4-fs (loop0): 1 orphan inode deleted [ 44.845028][ T394] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.854053][ T394] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/9/file1 supports timestamps until 2038 (0x7fffffff) [ 44.877339][ T41] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:2: lblock 0 mapped to illegal pblock 41 (length 16) [ 44.892115][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 44.904361][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.904361][ T41] [ 44.914941][ T348] EXT4-fs (loop0): unmounting filesystem. [ 44.937974][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 44.946882][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 44.971675][ T398] loop0: detected capacity change from 0 to 512 [ 44.989426][ T398] EXT4-fs (loop0): 1 orphan inode deleted [ 44.995110][ T398] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.004130][ T398] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/10/file1 supports timestamps until 2038 (0x7fffffff) [ 45.028135][ T41] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:2: lblock 0 mapped to illegal pblock 41 (length 16) [ 45.042758][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 45.055330][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.055330][ T41] [ 45.065822][ T348] EXT4-fs (loop0): unmounting filesystem. [ 45.088061][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 45.097094][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 45.117381][ T402] loop0: detected capacity change from 0 to 512 [ 45.129540][ T402] EXT4-fs (loop0): 1 orphan inode deleted [ 45.135089][ T402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.144128][ T402] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/11/file1 supports timestamps until 2038 (0x7fffffff) [ 45.167580][ T8] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:0: lblock 0 mapped to illegal pblock 41 (length 16) [ 45.182503][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 45.194948][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.194948][ T8] [ 45.205703][ T348] EXT4-fs (loop0): unmounting filesystem. [ 45.228059][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 45.237200][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 45.255469][ T406] loop0: detected capacity change from 0 to 512 [ 45.269203][ T406] EXT4-fs (loop0): 1 orphan inode deleted [ 45.274773][ T406] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.283751][ T406] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/12/file1 supports timestamps until 2038 (0x7fffffff) [ 45.305416][ T41] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:2: lblock 0 mapped to illegal pblock 41 (length 16) [ 45.320718][ T41] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 45.333238][ T41] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.333238][ T41] [ 45.343964][ T348] EXT4-fs (loop0): unmounting filesystem. [ 45.367952][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 45.377226][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 45.397788][ T411] loop0: detected capacity change from 0 to 512 [ 45.409387][ T411] EXT4-fs (loop0): 1 orphan inode deleted [ 45.414926][ T411] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.423858][ T411] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/13/file1 supports timestamps until 2038 (0x7fffffff) [ 45.446877][ T8] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm kworker/u4:0: lblock 0 mapped to illegal pblock 41 (length 16) [ 45.461606][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 45.473791][ T8] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.473791][ T8] [ 45.484289][ T348] EXT4-fs (loop0): unmounting filesystem. [ 45.507979][ T348] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5858: Out of memory [ 45.516853][ T348] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 45.537400][ T415] loop0: detected capacity change from 0 to 512 [ 45.549383][ T415] EXT4-fs (loop0): 1 orphan inode deleted [ 45.554934][ T415] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 45.564029][ T415] ext4 filesystem being mounted at /root/syzkaller-testdir445882502/syzkaller.ia7Zwj/14/file1 supports timestamps until 2038 (0x7fffffff) [ 45.587457][ T8] ================================================================== [ 45.595349][ T8] BUG: KASAN: use-after-free in ext4_find_extent+0xb60/0xd10 [ 45.602540][ T8] Read of size 4 at addr ffff888123dd2fb4 by task kworker/u4:0/8 [ 45.610094][ T8] [ 45.612265][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 6.1.43-syzkaller #0 [ 45.619987][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 45.629972][ T8] Workqueue: writeback wb_workfn (flush-7:0) [ 45.635965][ T8] Call Trace: [ 45.639080][ T8] [ 45.641856][ T8] dump_stack_lvl+0x105/0x148 [ 45.646456][ T8] ? panic+0x3b4/0x3b4 [ 45.650456][ T8] ? nf_tcp_handle_invalid+0x30b/0x30b [ 45.655830][ T8] ? _printk+0xca/0x10a [ 45.659833][ T8] print_report+0x158/0x4e0 [ 45.664163][ T8] ? kasan_addr_to_slab+0xd/0x80 [ 45.668943][ T8] ? ext4_find_extent+0xb60/0xd10 [ 45.673797][ T8] kasan_report+0x13c/0x170 [ 45.678231][ T8] ? ext4_find_extent+0xb60/0xd10 [ 45.683174][ T8] __asan_report_load4_noabort+0x14/0x20 [ 45.688757][ T8] ext4_find_extent+0xb60/0xd10 [ 45.693447][ T8] ext4_ext_map_blocks+0x25d/0x64d0 [ 45.698470][ T8] ? stack_trace_save+0x113/0x1c0 [ 45.703324][ T8] ? uncharge_batch+0x4e0/0x4e0 [ 45.708021][ T8] ? stack_trace_snprint+0xe0/0xe0 [ 45.713074][ T8] ? __stack_depot_save+0x21/0x480 [ 45.717997][ T8] ? kasan_set_track+0x60/0x70 [ 45.722591][ T8] ? kasan_set_track+0x4b/0x70 [ 45.727194][ T8] ? kasan_save_alloc_info+0x1f/0x30 [ 45.732315][ T8] ? __kasan_slab_alloc+0x6c/0x80 [ 45.737278][ T8] ? ext4_ext_release+0x10/0x10 [ 45.741960][ T8] ? do_writepages+0x338/0x5b0 [ 45.746645][ T8] ? __writeback_single_inode+0x73/0x7a0 [ 45.752128][ T8] ? writeback_sb_inodes+0x881/0x1500 [ 45.757312][ T8] ? wb_writeback+0x357/0x810 [ 45.762018][ T8] ? wb_workfn+0x37d/0xdf0 [ 45.766331][ T8] ? process_one_work+0x6de/0xd00 [ 45.771307][ T8] ? worker_thread+0x892/0xf20 [ 45.775887][ T8] ? kthread+0x215/0x270 [ 45.779965][ T8] ? ret_from_fork+0x1f/0x30 [ 45.784400][ T8] ? ext4_es_lookup_extent+0x278/0x730 [ 45.789694][ T8] ext4_map_blocks+0x821/0x1890 [ 45.794378][ T8] ? ext4_issue_zeroout+0x170/0x170 [ 45.799409][ T8] ext4_writepages+0x13f4/0x3120 [ 45.804281][ T8] ? __find_get_block+0x465/0xde0 [ 45.809219][ T8] ? ext4_read_folio+0x180/0x180 [ 45.813990][ T8] ? update_group_capacity+0xe7/0x9d0 [ 45.819338][ T8] ? newidle_balance+0x1010/0x1010 [ 45.824369][ T8] ? load_balance+0x2355/0x7d60 [ 45.829064][ T8] ? memcpy+0x56/0x70 [ 45.832964][ T8] do_writepages+0x338/0x5b0 [ 45.837386][ T8] ? __writepage+0xf0/0xf0 [ 45.841641][ T8] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 45.847283][ T8] ? update_load_avg+0x513/0x1510 [ 45.852228][ T8] ? propagate_entity_cfs_rq+0xc10/0xc10 [ 45.857713][ T8] ? __kasan_check_write+0x14/0x20 [ 45.862665][ T8] ? _raw_spin_lock+0xa4/0x1b0 [ 45.867266][ T8] __writeback_single_inode+0x73/0x7a0 [ 45.872713][ T8] ? inode_io_list_move_locked+0x204/0x3c0 [ 45.878361][ T8] writeback_sb_inodes+0x881/0x1500 [ 45.883385][ T8] ? _raw_spin_lock+0xa4/0x1b0 [ 45.888177][ T8] ? queue_io+0x410/0x410 [ 45.892333][ T8] ? __writeback_inodes_wb+0x330/0x330 [ 45.897731][ T8] ? queue_io+0x28a/0x410 [ 45.901883][ T8] ? memset+0x35/0x40 [ 45.906047][ T8] ? blk_start_plug+0x8c/0x120 [ 45.910650][ T8] wb_writeback+0x357/0x810 [ 45.915075][ T8] ? inode_cgwb_move_to_attached+0x480/0x480 [ 45.920895][ T8] ? set_worker_desc+0x11c/0x180 [ 45.925758][ T8] ? __kasan_check_write+0x14/0x20 [ 45.930893][ T8] wb_workfn+0x37d/0xdf0 [ 45.935147][ T8] ? inode_wait_for_writeback+0x260/0x260 [ 45.940909][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 45.945541][ T8] ? finish_task_switch+0x14b/0x680 [ 45.950578][ T8] ? __kasan_check_read+0x11/0x20 [ 45.955437][ T8] ? read_word_at_a_time+0x12/0x20 [ 45.960380][ T8] ? strscpy+0x99/0x260 [ 45.964460][ T8] process_one_work+0x6de/0xd00 [ 45.969150][ T8] worker_thread+0x892/0xf20 [ 45.973574][ T8] ? process_one_work+0xd00/0xd00 [ 45.978441][ T8] kthread+0x215/0x270 [ 45.982337][ T8] ? process_one_work+0xd00/0xd00 [ 45.987197][ T8] ? kthread_blkcg+0xa0/0xa0 [ 45.991649][ T8] ret_from_fork+0x1f/0x30 [ 45.995910][ T8] [ 45.998922][ T8] [ 46.001107][ T8] The buggy address belongs to the physical page: [ 46.007342][ T8] page:ffffea00048f7480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x123dd2 [ 46.017491][ T8] flags: 0x4000000000000000(zone=1) [ 46.022529][ T8] raw: 4000000000000000 ffffea00048f5888 ffffea00048f5808 0000000000000000 [ 46.030952][ T8] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 46.039365][ T8] page dumped because: kasan: bad access detected [ 46.045616][ T8] page_owner tracks the page as freed [ 46.050819][ T8] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 414, tgid 414 (syz-executor.0), ts 45535098160, free_ts 45585727322 [ 46.068359][ T8] prep_new_page+0x512/0x5e0 [ 46.072868][ T8] get_page_from_freelist+0x2900/0x2990 [ 46.078249][ T8] __alloc_pages+0x39f/0x780 [ 46.082677][ T8] __folio_alloc+0x15/0x40 [ 46.087038][ T8] wp_page_copy+0x1e3/0x1170 [ 46.091469][ T8] do_wp_page+0xa1b/0xc90 [ 46.095662][ T8] handle_mm_fault+0xffc/0x2490 [ 46.100411][ T8] exc_page_fault+0x3a6/0x6e0 [ 46.105014][ T8] asm_exc_page_fault+0x27/0x30 [ 46.109703][ T8] page last free stack trace: [ 46.114213][ T8] free_unref_page_prepare+0x794/0x7a0 [ 46.119701][ T8] free_unref_page_list+0xf6/0x690 [ 46.124646][ T8] release_pages+0xcfc/0xd50 [ 46.129074][ T8] free_pages_and_swap_cache+0x68/0x80 [ 46.134366][ T8] tlb_finish_mmu+0x1ba/0x3b0 [ 46.138879][ T8] exit_mmap+0x36d/0x730 [ 46.143059][ T8] __mmput+0x6b/0x2a0 [ 46.146971][ T8] mmput+0x2a/0xe0 [ 46.150510][ T8] do_exit+0x943/0x2470 [ 46.154502][ T8] do_group_exit+0x1ba/0x290 [ 46.159362][ T8] get_signal+0xf0b/0x1000 [ 46.163630][ T8] arch_do_signal_or_restart+0xb0/0x16f0 [ 46.169175][ T8] exit_to_user_mode_loop+0x6b/0xa0 [ 46.174387][ T8] exit_to_user_mode_prepare+0x5a/0xa0 [ 46.179675][ T8] syscall_exit_to_user_mode+0x26/0x130 [ 46.185138][ T8] do_syscall_64+0x49/0xb0 [ 46.189398][ T8] [ 46.191563][ T8] Memory state around the buggy address: [ 46.197340][ T8] ffff888123dd2e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.205505][ T8] ffff888123dd2f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.214176][ T8] >ffff888123dd2f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.222156][ T8] ^ [ 46.228240][ T8] ffff888123dd3000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.236357][ T8] ffff888123dd3080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.244333][ T8] ================================================================== [ 46.258063][ T8] Disabling lock debugging due to kernel taint [ 46.264303][ T8] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 46.270172][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G B 6.1.43-syzkaller #0 [ 46.279370][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 46.289264][ T8] Workqueue: writeback wb_workfn (flush-7:0) [ 46.295114][ T8] RIP: 0010:ext4_writepages+0x310e/0x3120 [ 46.300719][ T8] Code: e9 45 89 f0 e8 33 cc 06 00 65 ff 0d b4 88 31 7e 49 bf 00 00 00 00 00 fc ff df 0f 85 7e fb ff ff e8 3f 80 2f ff e9 74 fb ff ff <0f> 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 [ 46.320415][ T8] RSP: 0018:ffffc90000087060 EFLAGS: 00010246 [ 46.326305][ T8] RAX: 0000000000000000 RBX: 000000000000042b RCX: 1ffff92000010e6a [ 46.334550][ T8] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 46.342471][ T8] RBP: ffffc90000087450 R08: dffffc0000000000 R09: ffffed10200af695 [ 46.350278][ T8] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811e33f220 [ 46.358180][ T8] R13: ffffc90000087320 R14: ffff88810057b4e0 R15: 0000000000000000 [ 46.365988][ T8] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 46.375004][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.381402][ T8] CR2: 00007ffe20f37ff8 CR3: 000000010de07000 CR4: 00000000003506b0 [ 46.389392][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.397321][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.405283][ T8] Call Trace: [ 46.408399][ T8] [ 46.411176][ T8] ? __die_body+0x62/0xb0 [ 46.415341][ T8] ? die+0x88/0xb0 [ 46.419083][ T8] ? do_trap+0x103/0x330 [ 46.423156][ T8] ? ext4_writepages+0x310e/0x3120 [ 46.428104][ T8] ? handle_invalid_op+0x95/0xc0 [ 46.432911][ T8] ? ext4_writepages+0x310e/0x3120 [ 46.438085][ T8] ? exc_invalid_op+0x2e/0x40 [ 46.442603][ T8] ? asm_exc_invalid_op+0x1b/0x20 [ 46.447575][ T8] ? ext4_writepages+0x310e/0x3120 [ 46.452626][ T8] ? __find_get_block+0x465/0xde0 [ 46.457555][ T8] ? ext4_read_folio+0x180/0x180 [ 46.462765][ T8] ? update_group_capacity+0xe7/0x9d0 [ 46.467976][ T8] ? newidle_balance+0x1010/0x1010 [ 46.473180][ T8] ? load_balance+0x2355/0x7d60 [ 46.477867][ T8] ? memcpy+0x56/0x70 [ 46.481694][ T8] do_writepages+0x338/0x5b0 [ 46.486206][ T8] ? __writepage+0xf0/0xf0 [ 46.490445][ T8] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 46.495914][ T8] ? update_load_avg+0x513/0x1510 [ 46.500771][ T8] ? propagate_entity_cfs_rq+0xc10/0xc10 [ 46.506384][ T8] ? __kasan_check_write+0x14/0x20 [ 46.512635][ T8] ? _raw_spin_lock+0xa4/0x1b0 [ 46.517490][ T8] __writeback_single_inode+0x73/0x7a0 [ 46.522794][ T8] ? inode_io_list_move_locked+0x204/0x3c0 [ 46.528421][ T8] writeback_sb_inodes+0x881/0x1500 [ 46.533458][ T8] ? _raw_spin_lock+0xa4/0x1b0 [ 46.538057][ T8] ? queue_io+0x410/0x410 [ 46.542220][ T8] ? __writeback_inodes_wb+0x330/0x330 [ 46.547603][ T8] ? queue_io+0x28a/0x410 [ 46.551855][ T8] ? memset+0x35/0x40 [ 46.555761][ T8] ? blk_start_plug+0x8c/0x120 [ 46.560448][ T8] wb_writeback+0x357/0x810 [ 46.564790][ T8] ? inode_cgwb_move_to_attached+0x480/0x480 [ 46.570614][ T8] ? set_worker_desc+0x11c/0x180 [ 46.575375][ T8] ? __kasan_check_write+0x14/0x20 [ 46.580326][ T8] wb_workfn+0x37d/0xdf0 [ 46.584412][ T8] ? inode_wait_for_writeback+0x260/0x260 [ 46.589962][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 46.594654][ T8] ? finish_task_switch+0x14b/0x680 [ 46.599691][ T8] ? __kasan_check_read+0x11/0x20 [ 46.604716][ T8] ? read_word_at_a_time+0x12/0x20 [ 46.609755][ T8] ? strscpy+0x99/0x260 [ 46.613827][ T8] process_one_work+0x6de/0xd00 [ 46.618525][ T8] worker_thread+0x892/0xf20 [ 46.623035][ T8] ? process_one_work+0xd00/0xd00 [ 46.627974][ T8] kthread+0x215/0x270 [ 46.631876][ T8] ? process_one_work+0xd00/0xd00 [ 46.636765][ T8] ? kthread_blkcg+0xa0/0xa0 [ 46.641166][ T8] ret_from_fork+0x1f/0x30 [ 46.645767][ T8] [ 46.648641][ T8] Modules linked in: [ 46.652567][ T8] ---[ end trace 0000000000000000 ]--- [ 46.657872][ T8] RIP: 0010:ext4_writepages+0x310e/0x3120 [ 46.663386][ T8] Code: e9 45 89 f0 e8 33 cc 06 00 65 ff 0d b4 88 31 7e 49 bf 00 00 00 00 00 fc ff df 0f 85 7e fb ff ff e8 3f 80 2f ff e9 74 fb ff ff <0f> 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 55 48 89 e5 [ 46.683002][ T8] RSP: 0018:ffffc90000087060 EFLAGS: 00010246 [ 46.689146][ T8] RAX: 0000000000000000 RBX: 000000000000042b RCX: 1ffff92000010e6a [ 46.697004][ T8] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 46.705021][ T8] RBP: ffffc90000087450 R08: dffffc0000000000 R09: ffffed10200af695 [ 46.712852][ T8] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88811e33f220 [ 46.720691][ T8] R13: ffffc90000087320 R14: ffff88810057b4e0 R15: 0000000000000000 [ 46.728519][ T8] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 46.737301][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.743874][ T8] CR2: 0000000020029000 CR3: 000000010ed1c000 CR4: 00000000003506a0 [ 46.751627][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.760420][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.768465][ T8] Kernel panic - not syncing: Fatal exception [ 46.774633][ T8] Kernel Offset: disabled [ 46.778752][ T8] Rebooting in 86400 seconds..