Warning: Permanently added '10.128.1.137' (ED25519) to the list of known hosts. 2024/11/11 01:39:03 ignoring optional flag "sandboxArg"="0" 2024/11/11 01:39:03 ignoring optional flag "type"="gce" 2024/11/11 01:39:03 parsed 1 programs 2024/11/11 01:39:03 executed programs: 0 [ 45.673113][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.680051][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.687236][ T357] device bridge_slave_0 entered promiscuous mode [ 45.695584][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.702512][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.709739][ T357] device bridge_slave_1 entered promiscuous mode [ 45.802159][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.809026][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.816196][ T360] device bridge_slave_0 entered promiscuous mode [ 45.837573][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.844537][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.851816][ T360] device bridge_slave_1 entered promiscuous mode [ 45.894921][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.901792][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.909097][ T363] device bridge_slave_0 entered promiscuous mode [ 45.915772][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.922765][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.930228][ T363] device bridge_slave_1 entered promiscuous mode [ 46.013521][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.020774][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.028040][ T364] device bridge_slave_0 entered promiscuous mode [ 46.047300][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.054184][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.061564][ T364] device bridge_slave_1 entered promiscuous mode [ 46.093517][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.100416][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.107773][ T361] device bridge_slave_0 entered promiscuous mode [ 46.114758][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.121616][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.128982][ T361] device bridge_slave_1 entered promiscuous mode [ 46.148612][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.155534][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.162867][ T362] device bridge_slave_0 entered promiscuous mode [ 46.187948][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.194997][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.202244][ T362] device bridge_slave_1 entered promiscuous mode [ 46.277080][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.283960][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.291085][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.297827][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.307522][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.314393][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.321510][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.328260][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.435308][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.442183][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.449379][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.456135][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.466197][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.473494][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.481232][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.488397][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.496560][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.503817][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.512021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.519274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.527068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.535670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.544083][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.550932][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.580603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.588223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.595871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.603534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.612118][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.619084][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.626305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.634454][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.641316][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.648593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.656676][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.663543][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.694737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.714614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.723011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.731403][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.738244][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.745737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.753909][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.760778][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.768098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.776439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.784421][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.791282][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.798545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.806530][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.814342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.830475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.838559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.846456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.854695][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.862978][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.869862][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.877160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.885875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.893869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.902200][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.909535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.929739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.937817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.946123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.954596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.962651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.970697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.978525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.009759][ T357] device veth0_vlan entered promiscuous mode [ 47.016590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.024008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.031674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.039845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.047770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.056183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.064291][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.071151][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.078580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.086832][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.094881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.103425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.111665][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.118494][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.126010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.133988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.155843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.164111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.171629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.179827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.187934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.196265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.204698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.212875][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.219731][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.226904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.235048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.243196][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.250071][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.257265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.265273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.273318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.280861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.288121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.301956][ T361] device veth0_vlan entered promiscuous mode [ 47.313624][ T364] device veth0_vlan entered promiscuous mode [ 47.322957][ T360] device veth0_vlan entered promiscuous mode [ 47.330783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.339584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.347403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.355097][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.362739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.370972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.378252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.401377][ T364] device veth1_macvtap entered promiscuous mode [ 47.413429][ T361] device veth1_macvtap entered promiscuous mode [ 47.421210][ T357] device veth1_macvtap entered promiscuous mode [ 47.433476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.442065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.450426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.458197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.466796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.475247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.483646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.491777][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.499774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.507190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.515178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.523282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.531461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.543015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.550391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.569046][ T363] device veth0_vlan entered promiscuous mode [ 47.575294][ T360] device veth1_macvtap entered promiscuous mode [ 47.583788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.592418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.601052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.609432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.617390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.642960][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 47.642979][ T30] audit: type=1400 audit(1731289145.632:91): avc: denied { mounton } for pid=361 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.672886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.682059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.690355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.698589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.711788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.720578][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.724200][ T387] loop0: detected capacity change from 0 to 2048 [ 47.728933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.736093][ T30] audit: type=1400 audit(1731289145.722:92): avc: denied { mounton } for pid=386 comm="syz-executor.0" path="/root/syzkaller-testdir3991164811/syzkaller.OsxNO8/0/bus" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 47.773787][ T363] device veth1_macvtap entered promiscuous mode [ 47.786774][ T362] device veth0_vlan entered promiscuous mode [ 47.799435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.806027][ T390] loop1: detected capacity change from 0 to 2048 [ 47.807793][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.817796][ T387] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.821458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.832091][ T30] audit: type=1400 audit(1731289145.822:93): avc: denied { mount } for pid=386 comm="syz-executor.0" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.841367][ T390] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 47.861086][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.871367][ T387] ext4 filesystem being mounted at /root/syzkaller-testdir3991164811/syzkaller.OsxNO8/0/bus supports timestamps until 2038 (0x7fffffff) [ 47.879039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.900921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.908620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.913347][ T390] ext4 filesystem being mounted at /root/syzkaller-testdir458372414/syzkaller.wgwaHq/0/bus supports timestamps until 2038 (0x7fffffff) [ 47.916736][ T30] audit: type=1400 audit(1731289145.902:94): avc: denied { write } for pid=386 comm="syz-executor.0" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.948788][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.960115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.970496][ T30] audit: type=1400 audit(1731289145.942:95): avc: denied { add_name } for pid=389 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.999381][ T30] audit: type=1400 audit(1731289145.952:96): avc: denied { create } for pid=389 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.006240][ T362] device veth1_macvtap entered promiscuous mode [ 48.020692][ T30] audit: type=1400 audit(1731289145.952:97): avc: denied { mounton } for pid=389 comm="syz-executor.1" path="/root/syzkaller-testdir458372414/syzkaller.wgwaHq/0/bus/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.053420][ T30] audit: type=1400 audit(1731289145.952:98): avc: denied { read append open } for pid=389 comm="syz-executor.1" path="/root/syzkaller-testdir458372414/syzkaller.wgwaHq/0/bus/file0/blkio.bfq.io_service_bytes_recursive" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.089774][ T396] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm kworker/u4:4: Invalid inode table block 34360905424 in block_group 0 [ 48.111151][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.122125][ T30] audit: type=1400 audit(1731289146.042:99): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.134209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.147932][ T402] loop2: detected capacity change from 0 to 2048 [ 48.153255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.165949][ T30] audit: type=1400 audit(1731289146.072:100): avc: denied { unmount } for pid=357 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.166495][ T8] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 48.186675][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.207374][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.215167][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.223500][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.224559][ T402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.260445][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.275433][ T403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.284576][ T402] ext4 filesystem being mounted at /root/syzkaller-testdir1417217736/syzkaller.09LIIc/0/bus supports timestamps until 2038 (0x7fffffff) [ 48.297979][ T409] loop1: detected capacity change from 0 to 2048 [ 48.310315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.318401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.327274][ T410] loop0: detected capacity change from 0 to 2048 [ 48.381939][ T410] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.392973][ T410] ext4 filesystem being mounted at /root/syzkaller-testdir3991164811/syzkaller.OsxNO8/1/bus supports timestamps until 2038 (0x7fffffff) [ 48.403827][ T415] loop3: detected capacity change from 0 to 2048 [ 48.414387][ T409] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.425653][ T413] loop5: detected capacity change from 0 to 2048 [ 48.435076][ T409] ext4 filesystem being mounted at /root/syzkaller-testdir458372414/syzkaller.wgwaHq/1/bus supports timestamps until 2038 (0x7fffffff) [ 48.455143][ T421] loop4: detected capacity change from 0 to 2048 [ 48.464328][ T8] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #19: block 192: comm kworker/u4:0: lblock 0 mapped to illegal pblock 192 (length 1) [ 48.469957][ T402] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #19: block 193: comm syz-executor.2: lblock 1 mapped to illegal pblock 193 (length 1) [ 48.494787][ T8] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4853: inode #19: block 0: len 1: ext4_ext_map_blocks returned -117 [ 48.498359][ T410] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #19: block 193: comm syz-executor.0: lblock 1 mapped to illegal pblock 193 (length 1) [ 48.509434][ T403] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #19: block 192: comm kworker/u4:5: lblock 0 mapped to illegal pblock 192 (length 1) [ 48.524205][ T402] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 1 with max blocks 1 with error 117 [ 48.539960][ T421] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.550550][ T402] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.550550][ T402] [ 48.564292][ T410] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 1 with max blocks 1 with error 117 [ 48.570159][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 48.591533][ T421] ext4 filesystem being mounted at /root/syzkaller-testdir677326448/syzkaller.oqomfU/0/bus supports timestamps until 2038 (0x7fffffff) [ 48.595666][ T410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.595666][ T410] [ 48.610298][ T8] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 48.618313][ T403] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4853: inode #19: block 0: len 1: ext4_ext_map_blocks returned -117 [ 48.644459][ T403] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm kworker/u4:5: Invalid inode table block 34360905424 in block_group 0 [ 48.658691][ T403] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 48.659418][ T415] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.668236][ T403] EXT4-fs error (device loop0): ext4_convert_unwritten_extents:4854: inode #19: comm kworker/u4:5: mark_inode_dirty error [ 48.678496][ T415] ext4 filesystem being mounted at /root/syzkaller-testdir745030502/syzkaller.7coKSo/0/bus supports timestamps until 2038 (0x7fffffff) [ 48.709175][ T403] EXT4-fs (loop0): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 48.720447][ T409] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #19: block 199: comm syz-executor.1: lblock 7 mapped to illegal pblock 199 (length 1) [ 48.729307][ T8] EXT4-fs error (device loop2): ext4_convert_unwritten_extents:4854: inode #19: comm kworker/u4:0: mark_inode_dirty error [ 48.737347][ T312] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #19: block 194: comm kworker/u4:3: lblock 2 mapped to illegal pblock 194 (length 1) [ 48.758894][ T8] EXT4-fs (loop2): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 48.775112][ T421] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #19: block 194: comm syz-executor.4: lblock 2 mapped to illegal pblock 194 (length 1) [ 48.777831][ T413] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 48.801204][ T409] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 7 with max blocks 1 with error 117 [ 48.818888][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 48.820654][ T413] ext4 filesystem being mounted at /root/syzkaller-testdir615934182/syzkaller.2X8yOR/0/bus supports timestamps until 2038 (0x7fffffff) [ 48.834570][ T45] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #19: block 193: comm kworker/u4:2: lblock 1 mapped to illegal pblock 193 (length 1) [ 48.846665][ T421] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 2 with max blocks 1 with error 117 [ 48.865851][ T312] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4853: inode #19: block 2: len 1: ext4_ext_map_blocks returned -117 [ 48.873706][ T421] EXT4-fs (loop4): This should not happen!! Data will be lost [ 48.873706][ T421] [ 48.890354][ T396] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm kworker/u4:4: Invalid inode table block 34360905424 in block_group 0 [ 48.896187][ T409] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.896187][ T409] [ 48.918559][ T415] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #19: block 198: comm syz-executor.3: lblock 6 mapped to illegal pblock 198 (length 1) [ 48.923498][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc:4351: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 48.943461][ T415] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz-executor.3: Invalid inode table block 34360905424 in block_group 0 [ 48.946829][ T312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm kworker/u4:3: Invalid inode table block 34360905424 in block_group 0 [ 48.961308][ T415] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 48.981532][ T396] EXT4-fs error (device loop0): __ext4_get_inode_loc:4351: comm kworker/u4:4: Invalid inode table block 34360905424 in block_group 0 [ 48.993182][ T415] EXT4-fs error (device loop3): ext4_ext_truncate:4433: inode #19: comm syz-executor.3: mark_inode_dirty error [ 48.996443][ T45] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4853: inode #19: block 1: len 1: ext4_ext_map_blocks returned -117 [ 49.012451][ T312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 49.022335][ T45] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 34360905424 in block_group 0 [ 49.041493][ T413] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #19: block 233: comm syz-executor.5: lblock 25 mapped to illegal pblock 233 (length 1) [ 49.054572][ T45] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 49.062358][ T312] EXT4-fs error (device loop1): ext4_convert_unwritten_extents:4854: inode #19: comm kworker/u4:3: mark_inode_dirty error [ 49.081129][ T415] EXT4-fs error (device loop3): __ext4_get_inode_loc:4351: comm syz-executor.3: Invalid inode table block 34360905424 in block_group 0 [ 49.081607][ T312] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 49.095740][ T413] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 25 with max blocks 1 with error 117 [ 49.108605][ T45] EXT4-fs error (device loop4): ext4_convert_unwritten_extents:4854: inode #19: comm kworker/u4:2: mark_inode_dirty error [ 49.126790][ T415] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 49.142532][ T10] ================================================================== [ 49.150420][ T10] BUG: KASAN: use-after-free in ext4_find_extent+0xbab/0xdb0 [ 49.157164][ T413] EXT4-fs (loop5): This should not happen!! Data will be lost [ 49.157164][ T413] [ 49.157614][ T10] Read of size 4 at addr ffff88811b675a58 by task kworker/u4:1/10 [ 49.167909][ T415] EXT4-fs error (device loop3): ext4_truncate:4303: inode #19: comm syz-executor.3: mark_inode_dirty error [ 49.174713][ T10] [ 49.174720][ T10] CPU: 1 PID: 10 Comm: kworker/u4:1 Not tainted 5.15.167-syzkaller-1075712-g5e4635681cf1 #0 [ 49.174743][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.174756][ T10] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 49.187009][ T415] ------------[ cut here ]------------ [ 49.188117][ T10] [ 49.188131][ T10] Call Trace: [ 49.188143][ T10] [ 49.188151][ T10] dump_stack_lvl+0x151/0x1c0 [ 49.198591][ T415] kernel BUG at fs/ext4/inode.c:2432! [ 49.207870][ T10] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.207903][ T10] ? __wake_up_klogd+0xd5/0x110 [ 49.207925][ T10] ? panic+0x760/0x760 [ 49.207947][ T10] print_address_description+0x87/0x3b0 [ 49.207969][ T10] kasan_report+0x179/0x1c0 [ 49.207986][ T10] ? __read_extent_tree_block+0x1e0/0x7b0 [ 49.217925][ T415] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 49.219759][ T10] ? ext4_find_extent+0xbab/0xdb0 [ 49.221941][ T415] CPU: 0 PID: 415 Comm: syz-executor.3 Not tainted 5.15.167-syzkaller-1075712-g5e4635681cf1 #0 [ 49.225055][ T10] ? ext4_find_extent+0xbab/0xdb0 [ 49.227834][ T415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.232343][ T10] __asan_report_load4_noabort+0x14/0x20 [ 49.237552][ T415] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 49.243020][ T10] ext4_find_extent+0xbab/0xdb0 [ 49.247703][ T415] Code: 00 74 08 48 89 df e8 f4 be c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 5c 40 08 00 eb 58 e8 f5 6c 87 ff <0f> 0b e8 ee 6c 87 ff eb 3b e8 e7 6c 87 ff eb 72 e8 e0 6c 87 ff 31 [ 49.251611][ T10] ? rwsem_mark_wake+0x770/0x770 [ 49.256991][ T415] RSP: 0018:ffffc90001067240 EFLAGS: 00010293 [ 49.261330][ T10] ext4_ext_map_blocks+0x269/0x7450 [ 49.266883][ T415] [ 49.266889][ T415] RAX: ffffffff81e8ea8b RBX: dffffc0000000000 RCX: ffff888113e593c0 [ 49.272876][ T10] ? fsnotify_perm+0x6a/0x5b0 [ 49.277734][ T415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.287898][ T10] ? ext4_ext_release+0x10/0x10 [ 49.292748][ T415] RBP: ffffc90001067650 R08: ffffffff81e8c44b R09: ffffed1024263bd4 [ 49.302729][ T10] ? __kasan_check_read+0x11/0x20 [ 49.308199][ T415] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 49.313756][ T10] ? do_iter_write+0x573/0x760 [ 49.318441][ T415] R13: ffffc90001067520 R14: 0000000000000000 R15: 0000000000000000 [ 49.337892][ T10] ? try_invoke_on_locked_down_task+0x2a0/0x2a0 [ 49.342655][ T415] FS: 00007f4385b166c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 49.348562][ T10] ? _raw_read_unlock+0x25/0x40 [ 49.353592][ T415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.355764][ T10] ? ext4_es_lookup_extent+0x33b/0x940 [ 49.363582][ T415] CR2: 00007ffe29eb5838 CR3: 000000012592f000 CR4: 00000000003506b0 [ 49.368086][ T10] ext4_map_blocks+0xa60/0x1c70 [ 49.375900][ T415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.380595][ T10] ? ext4_issue_zeroout+0x250/0x250 [ 49.388567][ T415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.393429][ T10] ? ext4_journal_check_start+0x16c/0x230 [ 49.401246][ T415] Call Trace: [ 49.401254][ T415] [ 49.405848][ T10] ? ext4_convert_unwritten_extents+0x2a8/0x6c0 [ 49.413746][ T415] ? __die_body+0x62/0xb0 [ 49.419815][ T10] ext4_convert_unwritten_extents+0x2e0/0x6c0 [ 49.428581][ T415] ? die+0x88/0xb0 [ 49.433269][ T10] ? trace_ext4_fallocate_exit+0x160/0x160 [ 49.439703][ T415] ? do_trap+0x103/0x330 [ 49.444994][ T10] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 49.452803][ T415] ? ext4_writepages+0x3f4b/0x4000 [ 49.457484][ T10] ? _raw_spin_lock+0x1b0/0x1b0 [ 49.465293][ T415] ? handle_invalid_op+0x95/0xc0 [ 49.470327][ T10] ? kvm_sched_clock_read+0x18/0x40 [ 49.478137][ T415] ? ext4_writepages+0x3f4b/0x4000 [ 49.483693][ T10] ext4_convert_unwritten_io_end_vec+0x104/0x180 [ 49.486817][ T415] ? exc_invalid_op+0x32/0x50 [ 49.489598][ T10] ext4_end_io_rsv_work+0x358/0x690 [ 49.495772][ T415] ? asm_exc_invalid_op+0x1b/0x20 [ 49.499944][ T10] ? _raw_spin_unlock+0x4d/0x70 [ 49.505842][ T415] ? ext4_writepages+0x190b/0x4000 [ 49.509401][ T10] ? ext4_last_io_end_vec+0x70/0x70 [ 49.515039][ T415] ? ext4_writepages+0x3f4b/0x4000 [ 49.519119][ T10] ? read_word_at_a_time+0x12/0x20 [ 49.524425][ T415] ? ext4_writepages+0x3f4b/0x4000 [ 49.529367][ T10] ? strscpy+0x9c/0x260 [ 49.534052][ T415] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 49.538824][ T10] process_one_work+0x6bb/0xc10 [ 49.543868][ T415] ? ext4_readpage+0x230/0x230 [ 49.548810][ T10] worker_thread+0xad5/0x12a0 [ 49.554969][ T415] ? ext4_readahead+0x110/0x110 [ 49.559485][ T10] kthread+0x421/0x510 [ 49.564513][ T415] ? down_read_trylock+0x3d6/0x7d0 [ 49.569372][ T10] ? worker_clr_flags+0x180/0x180 [ 49.574148][ T415] ? up_read+0x5d/0x220 [ 49.579096][ T10] ? kthread_blkcg+0xd0/0xd0 [ 49.584131][ T415] ? ext4_readpage+0x230/0x230 [ 49.589103][ T10] ret_from_fork+0x1f/0x30 [ 49.594026][ T415] do_writepages+0x40e/0x670 [ 49.598979][ T10] [ 49.602966][ T415] ? __writepage+0x130/0x130 [ 49.608439][ T10] [ 49.608445][ T10] The buggy address belongs to the page: [ 49.613206][ T415] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 49.617903][ T10] page:ffffea00046d9d40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x11b675 [ 49.622402][ T415] ? __kasan_check_write+0x14/0x20 [ 49.627092][ T10] flags: 0x4000000000000000(zone=1) [ 49.631080][ T415] ? _raw_spin_lock+0xa4/0x1b0 [ 49.636053][ T10] raw: 4000000000000000 ffffea0004386088 ffffea0004385f88 0000000000000000 [ 49.640903][ T415] ? _raw_spin_unlock+0x4d/0x70 [ 49.644901][ T10] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 49.649321][ T415] ? __get_user_nocheck_1+0x6/0x10 [ 49.653920][ T10] page dumped because: kasan: bad access detected [ 49.658174][ T415] filemap_fdatawrite_wbc+0x248/0x2a0 [ 49.662612][ T10] page_owner tracks the page as freed [ 49.665468][ T415] file_write_and_wait_range+0x1cb/0x2b0 [ 49.669891][ T10] page last allocated via order 0, migratetype Movable, gfp_mask 0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 292, ts 26671455462, free_ts 27743577332 [ 49.672060][ T415] ? __filemap_set_wb_err+0x120/0x120 [ 49.677615][ T10] post_alloc_hook+0x1a3/0x1b0 [ 49.682741][ T415] ext4_sync_file+0x1a2/0xa50 [ 49.692804][ T10] prep_new_page+0x1b/0x110 [ 49.697751][ T415] ? kasan_set_track+0x5d/0x70 [ 49.702808][ T10] get_page_from_freelist+0x3550/0x35d0 [ 49.707389][ T415] vfs_fsync_range+0x17b/0x190 [ 49.715907][ T10] __alloc_pages+0x27e/0x8f0 [ 49.720611][ T415] ext4_buffered_write_iter+0x568/0x610 [ 49.729189][ T10] handle_pte_fault+0xe7e/0x25c0 [ 49.734149][ T415] ext4_file_write_iter+0x443/0x1c80 [ 49.740380][ T10] do_handle_mm_fault+0x20bc/0x2400 [ 49.745594][ T415] ? avc_policy_seqno+0x1b/0x70 [ 49.750796][ T10] exc_page_fault+0x26f/0x7f0 [ 49.756267][ T415] ? ext4_file_read_iter+0x4b0/0x4b0 [ 49.771454][ T10] asm_exc_page_fault+0x27/0x30 [ 49.776676][ T415] ? fsnotify_perm+0x6a/0x5b0 [ 49.781264][ T10] page last free stack trace: [ 49.781271][ T10] free_unref_page_prepare+0x7c8/0x7d0 [ 49.785863][ T415] ? iov_iter_init+0x53/0x190 [ 49.790209][ T10] free_unref_page_list+0x14b/0xa60 [ 49.794803][ T415] vfs_write+0xd5d/0x1110 [ 49.800182][ T10] release_pages+0x1310/0x1370 [ 49.804784][ T415] ? putname+0xfa/0x150 [ 49.809216][ T10] free_pages_and_swap_cache+0x8a/0xa0 [ 49.814599][ T415] ? file_end_write+0x1c0/0x1c0 [ 49.819366][ T10] tlb_flush_mmu+0xd0/0x180 [ 49.824485][ T415] ? mutex_lock+0xb6/0x1e0 [ 49.829520][ T10] unmap_page_range+0x1c70/0x1ed0 [ 49.834209][ T415] ? wait_for_completion_killable_timeout+0x10/0x10 [ 49.838719][ T10] unmap_vmas+0x389/0x560 [ 49.843851][ T415] ? __fdget_pos+0x2e7/0x3a0 [ 49.848527][ T10] exit_mmap+0x3e4/0x940 [ 49.853148][ T415] ? ksys_write+0x77/0x2c0 [ 49.857662][ T10] __mmput+0x95/0x310 [ 49.862965][ T415] ksys_write+0x199/0x2c0 [ 49.867464][ T10] mmput+0x5b/0x170 [ 49.872505][ T415] ? __ia32_sys_read+0x90/0x90 [ 49.876672][ T10] do_exit+0xb9c/0x2ca0 [ 49.881271][ T415] ? __kasan_check_write+0x14/0x20 [ 49.885267][ T10] do_group_exit+0x141/0x310 [ 49.890553][ T415] ? switch_fpu_return+0x15f/0x2e0 [ 49.895409][ T10] get_signal+0x7a3/0x1630 [ 49.899741][ T415] __x64_sys_write+0x7b/0x90 [ 49.903987][ T10] arch_do_signal_or_restart+0xbd/0x1680 [ 49.908851][ T415] x64_sys_call+0x2f/0x9a0 [ 49.915477][ T10] exit_to_user_mode_loop+0xa0/0xe0 [ 49.919645][ T415] do_syscall_64+0x3b/0xb0 [ 49.924070][ T10] exit_to_user_mode_prepare+0x5a/0xa0 [ 49.928148][ T415] ? clear_bhb_loop+0x35/0x90 [ 49.932401][ T10] [ 49.932406][ T10] Memory state around the buggy address: [ 49.936222][ T415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.940399][ T10] ffff88811b675900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.944032][ T415] RIP: 0033:0x7f4385f93859 [ 49.948636][ T10] ffff88811b675980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.952645][ T415] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.957661][ T10] >ffff88811b675a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.962085][ T415] RSP: 002b:00007f4385b160c8 EFLAGS: 00000246 [ 49.967034][ T10] ^ [ 49.971291][ T415] ORIG_RAX: 0000000000000001 [ 49.975715][ T10] ffff88811b675a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.981181][ T415] RAX: ffffffffffffffda RBX: 00007f43860b2f80 RCX: 00007f4385f93859 [ 49.985437][ T10] ffff88811b675b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.990471][ T415] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000006 [ 49.994720][ T10] ================================================================== [ 50.012411][ T10] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #19: block 3: comm kworker/u4:1: lblock 3 mapped to illegal pblock 3 (length 1) [ 50.017979][ T415] RBP: 00007f4385fefad0 R08: 0000000000000000 R09: 0000000000000000 [ 50.026150][ T10] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4853: inode #19: block 3: len 1: ext4_ext_map_blocks returned -117 [ 50.030129][ T415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.030144][ T415] R13: 000000000000000b R14: 00007f43860b2f80 R15: 00007ffe483e1068 [ 50.038031][ T10] EXT4-fs error (device loop1): __ext4_get_inode_loc:4351: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 50.057654][ T415] [ 50.057661][ T415] Modules linked in: [ 50.142167][ T45] EXT4-fs (loop4): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 50.148930][ T415] ---[ end trace dcfde058c4a24d3e ]--- [ 50.160716][ T438] loop2: detected capacity change from 0 to 2048 [ 50.192543][ T442] loop0: detected capacity change from 0 to 2048 [ 50.226533][ T45] EXT4-fs error (device loop5): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 34360905424 in block_group 0 [ 50.226650][ T415] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 50.247417][ T45] EXT4-fs error (device loop5): __ext4_get_inode_loc:4351: comm kworker/u4:2: Invalid inode table block 34360905424 in block_group 0 [ 50.261578][ T396] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:4: Invalid inode table block 34360905424 in block_group 0 [ 50.281690][ T442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.296542][ T415] Code: 00 74 08 48 89 df e8 f4 be c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 5c 40 08 00 eb 58 e8 f5 6c 87 ff <0f> 0b e8 ee 6c 87 ff eb 3b e8 e7 6c 87 ff eb 72 e8 e0 6c 87 ff 31 [ 50.299696][ T442] ext4 filesystem being mounted at /root/syzkaller-testdir3991164811/syzkaller.OsxNO8/2/bus supports timestamps until 2038 (0x7fffffff) [ 50.317179][ T396] EXT4-fs error (device loop4): __ext4_get_inode_loc:4351: comm kworker/u4:4: Invalid inode table block 34360905424 in block_group 0 [ 50.331071][ T415] RSP: 0018:ffffc90001067240 EFLAGS: 00010293 [ 50.350055][ T415] RAX: ffffffff81e8ea8b RBX: dffffc0000000000 RCX: ffff888113e593c0 [ 50.357995][ T10] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 50.367361][ T415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.375233][ T415] RBP: ffffc90001067650 R08: ffffffff81e8c44b R09: ffffed1024263bd4 [ 50.383013][ T415] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 50.385291][ T10] EXT4-fs error (device loop1): ext4_convert_unwritten_extents:4854: inode #19: comm kworker/u4:1: mark_inode_dirty error [ 50.401363][ T447] loop5: detected capacity change from 0 to 2048 [ 50.408157][ T438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.409463][ T415] R13: ffffc90001067520 R14: 0000000000000000 R15: 0000000000000000 [ 50.420109][ T438] ext4 filesystem being mounted at /root/syzkaller-testdir1417217736/syzkaller.09LIIc/1/bus supports timestamps until 2038 (0x7fffffff) [ 50.436754][ T415] FS: 00007f4385b166c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.451235][ T415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.457743][ T10] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 50.470362][ T415] CR2: 0000000020031000 CR3: 000000012592f000 CR4: 00000000003506b0 [ 50.478159][ T415] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.479696][ T10] EXT4-fs error (device loop1): ext4_ext_split:1072: inode #19: comm kworker/u4:1: p_ext > EXT_MAX_EXTENT! [ 50.486205][ T415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.505351][ T415] Kernel panic - not syncing: Fatal exception [ 50.511480][ T415] Kernel Offset: disabled [ 50.515616][ T415] Rebooting in 86400 seconds..