Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. 2023/10/11 08:12:49 ignoring optional flag "sandboxArg"="0" 2023/10/11 08:12:50 parsed 1 programs [ 38.556956][ T28] audit: type=1400 audit(1697011970.039:155): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 38.581685][ T28] audit: type=1400 audit(1697011970.039:156): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2023/10/11 08:12:50 executed programs: 0 [ 38.614214][ T28] audit: type=1400 audit(1697011970.099:157): avc: denied { unlink } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.644827][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.689237][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.696101][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.703182][ T345] device bridge_slave_0 entered promiscuous mode [ 38.710177][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.717080][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.724173][ T345] device bridge_slave_1 entered promiscuous mode [ 38.758237][ T28] audit: type=1400 audit(1697011970.239:158): avc: denied { write } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.781582][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.783856][ T28] audit: type=1400 audit(1697011970.269:159): avc: denied { read } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.788436][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.815746][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.822622][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.839887][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.846908][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.854185][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.861364][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.874721][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.882646][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.889738][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.896985][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.905415][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.912247][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.919457][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.934335][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.942408][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.950247][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.957647][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.964994][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.973547][ T345] device veth0_vlan entered promiscuous mode [ 38.982432][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.991149][ T345] device veth1_macvtap entered promiscuous mode [ 38.999927][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.010969][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.022239][ T28] audit: type=1400 audit(1697011970.499:160): avc: denied { mounton } for pid=345 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.056553][ T353] loop0: detected capacity change from 0 to 512 [ 39.063038][ T28] audit: type=1400 audit(1697011970.539:161): avc: denied { mounton } for pid=352 comm="syz-executor.0" path="/root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/0/file1" dev="sda1" ino=1938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.096192][ T353] EXT4-fs (loop0): 1 orphan inode deleted [ 39.101731][ T353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.110915][ T28] audit: type=1400 audit(1697011970.589:162): avc: denied { mount } for pid=352 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.110922][ T353] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/0/file1 supports timestamps until 2038 (0x7fffffff) [ 39.146765][ T28] audit: type=1400 audit(1697011970.589:163): avc: denied { write } for pid=352 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.153934][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.169019][ T28] audit: type=1400 audit(1697011970.589:164): avc: denied { add_name } for pid=352 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.181875][ T357] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 39.211914][ T357] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:3: mark_inode_dirty error [ 39.223906][ T357] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 39.236331][ T357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.236331][ T357] [ 39.246466][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.261538][ T345] EXT4-fs (loop0): unmounting filesystem. [ 39.297516][ T360] loop0: detected capacity change from 0 to 512 [ 39.315331][ T360] EXT4-fs (loop0): 1 orphan inode deleted [ 39.320874][ T360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.329916][ T360] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/1/file1 supports timestamps until 2038 (0x7fffffff) [ 39.356130][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.369686][ T357] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 39.379118][ T357] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:3: mark_inode_dirty error [ 39.390598][ T357] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 39.402837][ T357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.402837][ T357] [ 39.412351][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.427324][ T345] EXT4-fs (loop0): unmounting filesystem. [ 39.441780][ T364] loop0: detected capacity change from 0 to 512 [ 39.455357][ T364] EXT4-fs (loop0): 1 orphan inode deleted [ 39.460900][ T364] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.469879][ T364] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/2/file1 supports timestamps until 2038 (0x7fffffff) [ 39.496210][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.509930][ T357] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 39.519491][ T357] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:3: mark_inode_dirty error [ 39.531130][ T357] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 39.543481][ T357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.543481][ T357] [ 39.553309][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.568535][ T345] EXT4-fs (loop0): unmounting filesystem. [ 39.601333][ T368] loop0: detected capacity change from 0 to 512 [ 39.615389][ T368] EXT4-fs (loop0): 1 orphan inode deleted [ 39.620937][ T368] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.629987][ T368] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/3/file1 supports timestamps until 2038 (0x7fffffff) [ 39.654506][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.668005][ T357] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 39.677466][ T357] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:3: mark_inode_dirty error [ 39.689085][ T357] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 39.701669][ T357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.701669][ T357] [ 39.711460][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.726378][ T345] EXT4-fs (loop0): unmounting filesystem. [ 39.741465][ T372] loop0: detected capacity change from 0 to 512 [ 39.755454][ T372] EXT4-fs (loop0): 1 orphan inode deleted [ 39.761367][ T372] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.770209][ T372] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/4/file1 supports timestamps until 2038 (0x7fffffff) [ 39.795833][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.809425][ T357] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 39.819031][ T357] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:3: mark_inode_dirty error [ 39.830556][ T357] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 39.842936][ T357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.842936][ T357] [ 39.853049][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 39.868099][ T345] EXT4-fs (loop0): unmounting filesystem. [ 39.885753][ T377] loop0: detected capacity change from 0 to 512 [ 39.895030][ T377] EXT4-fs (loop0): 1 orphan inode deleted [ 39.900574][ T377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.909502][ T377] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/5/file1 supports timestamps until 2038 (0x7fffffff) [ 39.934605][ T358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 39.948135][ T358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 39.957607][ T358] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:4: mark_inode_dirty error [ 39.969109][ T358] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 39.981529][ T358] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.981529][ T358] [ 39.991098][ T358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 40.005922][ T345] EXT4-fs (loop0): unmounting filesystem. [ 40.027559][ T381] loop0: detected capacity change from 0 to 512 [ 40.055282][ T381] EXT4-fs (loop0): 1 orphan inode deleted [ 40.061272][ T381] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.070333][ T381] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/6/file1 supports timestamps until 2038 (0x7fffffff) [ 40.096610][ T358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 40.110278][ T358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 40.119812][ T358] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:4: mark_inode_dirty error [ 40.131664][ T358] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 40.144004][ T358] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.144004][ T358] [ 40.153656][ T358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 40.168879][ T345] EXT4-fs (loop0): unmounting filesystem. [ 40.187619][ T385] loop0: detected capacity change from 0 to 512 [ 40.205458][ T385] EXT4-fs (loop0): 1 orphan inode deleted [ 40.211003][ T385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.220186][ T385] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/7/file1 supports timestamps until 2038 (0x7fffffff) [ 40.244210][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 40.257842][ T357] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 40.267223][ T357] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:3: mark_inode_dirty error [ 40.278657][ T357] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 40.291026][ T357] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.291026][ T357] [ 40.300714][ T357] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:3: Invalid inode table block 790638693 in block_group 0 [ 40.315479][ T345] EXT4-fs (loop0): unmounting filesystem. [ 40.331893][ T389] loop0: detected capacity change from 0 to 512 [ 40.350836][ T389] EXT4-fs (loop0): 1 orphan inode deleted [ 40.356508][ T389] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.365460][ T389] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/8/file1 supports timestamps until 2038 (0x7fffffff) [ 40.391203][ T358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 40.404732][ T358] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 40.414207][ T358] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm kworker/u4:4: mark_inode_dirty error [ 40.425707][ T358] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 16 with error 117 [ 40.438117][ T358] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.438117][ T358] [ 40.447807][ T358] EXT4-fs error (device loop0): __ext4_get_inode_loc:4492: comm kworker/u4:4: Invalid inode table block 790638693 in block_group 0 [ 40.462651][ T345] EXT4-fs (loop0): unmounting filesystem. [ 40.484917][ T393] loop0: detected capacity change from 0 to 512 [ 40.495250][ T393] EXT4-fs (loop0): 1 orphan inode deleted [ 40.501032][ T393] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 40.509881][ T393] ext4 filesystem being mounted at /root/syzkaller-testdir1462882227/syzkaller.ZeZSpH/9/file1 supports timestamps until 2038 (0x7fffffff) [ 40.535782][ T358] ================================================================== [ 40.543659][ T358] BUG: KASAN: use-after-free in ext4_find_extent+0xbab/0xdb0 [ 40.550870][ T358] Read of size 4 at addr ffff8881269f64cc by task kworker/u4:4/358 [ 40.558585][ T358] [ 40.560841][ T358] CPU: 0 PID: 358 Comm: kworker/u4:4 Not tainted 6.1.25-syzkaller-06995-g368b752997c7 #0 [ 40.570609][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 40.580941][ T358] Workqueue: writeback wb_workfn (flush-7:0) [ 40.586778][ T358] Call Trace: [ 40.589920][ T358] [ 40.592647][ T358] dump_stack_lvl+0x151/0x1b7 [ 40.597162][ T358] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 40.602617][ T358] ? _printk+0xd1/0x111 [ 40.606625][ T358] ? __virt_addr_valid+0x242/0x2f0 [ 40.611661][ T358] print_report+0x158/0x4e0 [ 40.616001][ T358] ? __virt_addr_valid+0x242/0x2f0 [ 40.620956][ T358] ? kasan_addr_to_slab+0xd/0x80 [ 40.625717][ T358] ? ext4_find_extent+0xbab/0xdb0 [ 40.630574][ T358] kasan_report+0x13c/0x170 [ 40.634912][ T358] ? ext4_find_extent+0xbab/0xdb0 [ 40.639860][ T358] __asan_report_load4_noabort+0x14/0x20 [ 40.645329][ T358] ext4_find_extent+0xbab/0xdb0 [ 40.650102][ T358] ext4_ext_map_blocks+0x255/0x71e0 [ 40.655136][ T358] ? stack_trace_save+0x113/0x1c0 [ 40.659998][ T358] ? kasan_set_track+0x60/0x70 [ 40.664595][ T358] ? kasan_set_track+0x4b/0x70 [ 40.669199][ T358] ? kasan_save_alloc_info+0x1f/0x30 [ 40.674404][ T358] ? __kasan_slab_alloc+0x6c/0x80 [ 40.679262][ T358] ? slab_post_alloc_hook+0x53/0x2c0 [ 40.684391][ T358] ? kmem_cache_alloc+0x175/0x2c0 [ 40.689330][ T358] ? ext4_ext_release+0x10/0x10 [ 40.694021][ T358] ? writeback_sb_inodes+0xb33/0x18f0 [ 40.699238][ T358] ? wb_writeback+0x3b9/0x9f0 [ 40.703741][ T358] ? wb_workfn+0x399/0x1030 [ 40.708079][ T358] ? process_one_work+0x73d/0xcb0 [ 40.713023][ T358] ? worker_thread+0xa60/0x1260 [ 40.717715][ T358] ? kthread+0x26d/0x300 [ 40.721892][ T358] ? ret_from_fork+0x1f/0x30 [ 40.726405][ T358] ? _raw_read_unlock+0x25/0x40 [ 40.731467][ T358] ? ext4_es_lookup_extent+0x33b/0x950 [ 40.736738][ T358] ext4_map_blocks+0xa42/0x1ce0 [ 40.741512][ T358] ? kasan_save_alloc_info+0x1f/0x30 [ 40.746634][ T358] ? ext4_issue_zeroout+0x250/0x250 [ 40.751666][ T358] ? ext4_inode_journal_mode+0x1a5/0x470 [ 40.757136][ T358] ext4_writepages+0x17b5/0x3fd0 [ 40.761914][ T358] ? update_load_avg+0xd6d/0x1530 [ 40.767034][ T358] ? sched_clock_cpu+0x71/0x2b0 [ 40.771721][ T358] ? ext4_read_folio+0x240/0x240 [ 40.776490][ T358] ? xas_start+0x32c/0x3f0 [ 40.780743][ T358] ? xas_load+0x34f/0x370 [ 40.784916][ T358] ? __kasan_check_write+0x14/0x20 [ 40.789852][ T358] ? __filemap_get_folio+0x7f4/0x970 [ 40.795344][ T358] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 40.800795][ T358] ? update_load_avg+0x513/0x1530 [ 40.805661][ T358] ? ext4_read_folio+0x240/0x240 [ 40.810433][ T358] do_writepages+0x385/0x620 [ 40.814866][ T358] ? __writepage+0x130/0x130 [ 40.819377][ T358] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 40.824836][ T358] ? __kasan_check_write+0x14/0x20 [ 40.829782][ T358] __writeback_single_inode+0xdc/0xb80 [ 40.835082][ T358] writeback_sb_inodes+0xb33/0x18f0 [ 40.840116][ T358] ? queue_io+0x520/0x520 [ 40.844278][ T358] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 40.849575][ T358] ? queue_io+0x3d0/0x520 [ 40.853737][ T358] ? memset+0x35/0x40 [ 40.857555][ T358] wb_writeback+0x3b9/0x9f0 [ 40.861907][ T358] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 40.867904][ T358] ? set_worker_desc+0x158/0x1c0 [ 40.872679][ T358] ? __kasan_check_write+0x14/0x20 [ 40.877714][ T358] wb_workfn+0x399/0x1030 [ 40.881973][ T358] ? inode_wait_for_writeback+0x280/0x280 [ 40.887715][ T358] ? native_set_ldt+0x130/0x130 [ 40.892401][ T358] ? kthread_data+0x53/0xc0 [ 40.896737][ T358] ? _raw_spin_unlock+0x4c/0x70 [ 40.901596][ T358] ? finish_task_switch+0x167/0x7b0 [ 40.906639][ T358] ? __kasan_check_read+0x11/0x20 [ 40.911585][ T358] ? read_word_at_a_time+0x12/0x20 [ 40.916529][ T358] ? strscpy+0x9c/0x260 [ 40.920522][ T358] process_one_work+0x73d/0xcb0 [ 40.925211][ T358] worker_thread+0xa60/0x1260 [ 40.929821][ T358] ? __kasan_check_read+0x11/0x20 [ 40.934783][ T358] kthread+0x26d/0x300 [ 40.938690][ T358] ? worker_clr_flags+0x1a0/0x1a0 [ 40.943662][ T358] ? kthread_blkcg+0xd0/0xd0 [ 40.948409][ T358] ret_from_fork+0x1f/0x30 [ 40.952671][ T358] [ 40.955527][ T358] [ 40.957692][ T358] The buggy address belongs to the physical page: [ 40.963976][ T358] page:ffffea00049a7d80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1269f6 [ 40.974536][ T358] flags: 0x4000000000000000(zone=1) [ 40.979570][ T358] raw: 4000000000000000 ffffea00049a7dc8 ffffea00049a7d48 0000000000000000 [ 40.988075][ T358] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 40.996723][ T358] page dumped because: kasan: bad access detected [ 41.003099][ T358] page_owner info is not present (never set?) [ 41.009072][ T358] [ 41.011249][ T358] Memory state around the buggy address: [ 41.016713][ T358] ffff8881269f6380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.024609][ T358] ffff8881269f6400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.032509][ T358] >ffff8881269f6480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.040402][ T358] ^ [ 41.046741][ T358] ffff8881269f6500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.054657][ T358] ffff8881269f6580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.062619][ T358] ================================================================== [ 41.074178][ T358] Disabling lock debugging due to kernel taint [ 41.080693][ T358] ------------[ cut here ]------------ [ 41.086069][ T358] kernel BUG at fs/ext4/inode.c:2433! [ 41.091252][ T358] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.097166][ T358] CPU: 0 PID: 358 Comm: kworker/u4:4 Tainted: G B 6.1.25-syzkaller-06995-g368b752997c7 #0 [ 41.108358][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 41.118250][ T358] Workqueue: writeback wb_workfn (flush-7:0) [ 41.124077][ T358] RIP: 0010:ext4_writepages+0x3d6f/0x3fd0 [ 41.129635][ T358] Code: e8 f6 06 82 ff be 00 10 00 00 48 c7 c7 90 e4 6b 86 4c 89 f2 e8 d2 8c ab 00 e9 0f fb ff ff e8 d8 06 82 ff 0f 0b e8 d1 06 82 ff <0f> 0b e8 8a c6 01 03 65 8b 05 8b 39 0f 7e 41 89 c7 4c 89 f8 48 c1 [ 41.149328][ T358] RSP: 0018:ffffc90002e2f000 EFLAGS: 00010293 [ 41.155221][ T358] RAX: ffffffff81f2d7bf RBX: dffffc0000000000 RCX: ffff88810efc2880 [ 41.163033][ T358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.170865][ T358] RBP: ffffc90002e2f410 R08: ffffffff81f2b4cf R09: ffffed10200aec4d [ 41.178743][ T358] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 41.186556][ T358] R13: 0000000000000000 R14: ffff8881005762a0 R15: ffffc90002e2f2e0 [ 41.194367][ T358] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.203179][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.209559][ T358] CR2: 0000000020042000 CR3: 000000000640f000 CR4: 00000000003506b0 [ 41.217793][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.225594][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.233596][ T358] Call Trace: [ 41.236720][ T358] [ 41.239493][ T358] ? update_load_avg+0xd6d/0x1530 [ 41.244542][ T358] ? sched_clock_cpu+0x71/0x2b0 [ 41.249222][ T358] ? ext4_read_folio+0x240/0x240 [ 41.254018][ T358] ? xas_start+0x32c/0x3f0 [ 41.258247][ T358] ? xas_load+0x34f/0x370 [ 41.262413][ T358] ? __kasan_check_write+0x14/0x20 [ 41.267363][ T358] ? __filemap_get_folio+0x7f4/0x970 [ 41.272573][ T358] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 41.278391][ T358] ? update_load_avg+0x513/0x1530 [ 41.283246][ T358] ? ext4_read_folio+0x240/0x240 [ 41.288127][ T358] do_writepages+0x385/0x620 [ 41.292533][ T358] ? __writepage+0x130/0x130 [ 41.297046][ T358] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 41.302529][ T358] ? __kasan_check_write+0x14/0x20 [ 41.307460][ T358] __writeback_single_inode+0xdc/0xb80 [ 41.312753][ T358] writeback_sb_inodes+0xb33/0x18f0 [ 41.317793][ T358] ? queue_io+0x520/0x520 [ 41.321955][ T358] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 41.327262][ T358] ? queue_io+0x3d0/0x520 [ 41.331503][ T358] ? memset+0x35/0x40 [ 41.335514][ T358] wb_writeback+0x3b9/0x9f0 [ 41.339845][ T358] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 41.345703][ T358] ? set_worker_desc+0x158/0x1c0 [ 41.350877][ T358] ? __kasan_check_write+0x14/0x20 [ 41.356009][ T358] wb_workfn+0x399/0x1030 [ 41.360171][ T358] ? inode_wait_for_writeback+0x280/0x280 [ 41.365727][ T358] ? native_set_ldt+0x130/0x130 [ 41.370528][ T358] ? kthread_data+0x53/0xc0 [ 41.374929][ T358] ? _raw_spin_unlock+0x4c/0x70 [ 41.379612][ T358] ? finish_task_switch+0x167/0x7b0 [ 41.384648][ T358] ? __kasan_check_read+0x11/0x20 [ 41.389592][ T358] ? read_word_at_a_time+0x12/0x20 [ 41.394574][ T358] ? strscpy+0x9c/0x260 [ 41.398560][ T358] process_one_work+0x73d/0xcb0 [ 41.403219][ T358] worker_thread+0xa60/0x1260 [ 41.407733][ T358] ? __kasan_check_read+0x11/0x20 [ 41.412591][ T358] kthread+0x26d/0x300 [ 41.416541][ T358] ? worker_clr_flags+0x1a0/0x1a0 [ 41.421531][ T358] ? kthread_blkcg+0xd0/0xd0 [ 41.426218][ T358] ret_from_fork+0x1f/0x30 [ 41.430473][ T358] [ 41.433335][ T358] Modules linked in: [ 41.438070][ T358] ---[ end trace 0000000000000000 ]--- [ 41.443971][ T358] RIP: 0010:ext4_writepages+0x3d6f/0x3fd0 [ 41.449519][ T358] Code: e8 f6 06 82 ff be 00 10 00 00 48 c7 c7 90 e4 6b 86 4c 89 f2 e8 d2 8c ab 00 e9 0f fb ff ff e8 d8 06 82 ff 0f 0b e8 d1 06 82 ff <0f> 0b e8 8a c6 01 03 65 8b 05 8b 39 0f 7e 41 89 c7 4c 89 f8 48 c1 [ 41.468984][ T358] RSP: 0018:ffffc90002e2f000 EFLAGS: 00010293 [ 41.474888][ T358] RAX: ffffffff81f2d7bf RBX: dffffc0000000000 RCX: ffff88810efc2880 [ 41.482775][ T358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.491217][ T358] RBP: ffffc90002e2f410 R08: ffffffff81f2b4cf R09: ffffed10200aec4d [ 41.499024][ T358] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 41.506843][ T358] R13: 0000000000000000 R14: ffff8881005762a0 R15: ffffc90002e2f2e0 [ 41.514640][ T358] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.523391][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.529842][ T358] CR2: 0000000020042000 CR3: 000000010fbaa000 CR4: 00000000003506b0 [ 41.537648][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.545459][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.553255][ T358] Kernel panic - not syncing: Fatal exception [ 41.559362][ T358] Kernel Offset: disabled [ 41.563490][ T358] Rebooting in 86400 seconds..