u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.730976][ T30] audit: type=1400 audit(1711417483.249:151): avc: denied { siginh } for pid=316 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts. 2024/03/26 01:44:50 ignoring optional flag "sandboxArg"="0" 2024/03/26 01:44:50 parsed 1 programs 2024/03/26 01:44:50 executed programs: 0 [ 39.291826][ T30] audit: type=1400 audit(1711417490.839:152): avc: denied { mounton } for pid=337 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.360244][ T30] audit: type=1400 audit(1711417490.839:153): avc: denied { mount } for pid=337 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.482685][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.489553][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.497113][ T347] device bridge_slave_0 entered promiscuous mode [ 39.503984][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.510952][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.518400][ T344] device bridge_slave_0 entered promiscuous mode [ 39.529248][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.536202][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.543443][ T344] device bridge_slave_1 entered promiscuous mode [ 39.559199][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.566141][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.573619][ T347] device bridge_slave_1 entered promiscuous mode [ 39.628625][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.635545][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.642849][ T355] device bridge_slave_0 entered promiscuous mode [ 39.670011][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.677383][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.684779][ T355] device bridge_slave_1 entered promiscuous mode [ 39.717517][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.724712][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.732058][ T357] device bridge_slave_0 entered promiscuous mode [ 39.757343][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.764363][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.771492][ T357] device bridge_slave_1 entered promiscuous mode [ 39.787825][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.794906][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.802399][ T358] device bridge_slave_0 entered promiscuous mode [ 39.811985][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.821374][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.829456][ T354] device bridge_slave_0 entered promiscuous mode [ 39.851045][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.858472][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.865821][ T358] device bridge_slave_1 entered promiscuous mode [ 39.876860][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.883922][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.891290][ T354] device bridge_slave_1 entered promiscuous mode [ 39.948839][ T30] audit: type=1400 audit(1711417491.499:154): avc: denied { write } for pid=344 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.969563][ T30] audit: type=1400 audit(1711417491.499:155): avc: denied { read } for pid=344 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.030610][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.037612][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.044841][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.051809][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.064876][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.071729][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.078887][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.085764][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.168540][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.175896][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.183471][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.190583][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.215859][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.222823][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.229895][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.236823][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.245911][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.253208][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.260247][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.267802][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.274944][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.281941][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.289866][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.296991][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.304814][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.312018][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.329083][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.337117][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.343995][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.351274][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.359593][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.366652][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.408360][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.433683][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.441625][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.448500][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.455750][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.463126][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.471116][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.477877][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.485026][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.493143][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.499977][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.507245][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.515452][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.523517][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.530467][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.547182][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.555222][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.563199][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.571103][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.579739][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.587887][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.602401][ T344] device veth0_vlan entered promiscuous mode [ 40.617484][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.625803][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.634013][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.642384][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.650639][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.658665][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.666215][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.674523][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.682986][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.690002][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.698033][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.706298][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.714618][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.721566][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.728775][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.736791][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.755686][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.763372][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.770927][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.779278][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.786670][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.794527][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.802790][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.810795][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.817644][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.825160][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.833820][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.842195][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.849032][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.856370][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.864538][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.872948][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.881392][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.889928][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.908920][ T344] device veth1_macvtap entered promiscuous mode [ 40.921754][ T347] device veth0_vlan entered promiscuous mode [ 40.928985][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.936881][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.944335][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.952809][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.960865][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.969295][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.977266][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.985720][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.994055][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.000968][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.008214][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.016537][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.025236][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.033457][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.041150][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.050078][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.057506][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.075860][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.084369][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.092084][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.126154][ T355] device veth0_vlan entered promiscuous mode [ 41.134386][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.143189][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.151639][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.160102][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.167695][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.176200][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.184537][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.192462][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.200702][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.209366][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.217819][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.226200][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.239899][ T358] device veth0_vlan entered promiscuous mode [ 41.255151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.263159][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.270538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.278280][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.286680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.298129][ T30] audit: type=1400 audit(1711417492.859:156): avc: denied { mounton } for pid=344 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.310731][ T357] device veth0_vlan entered promiscuous mode [ 41.330822][ T347] device veth1_macvtap entered promiscuous mode [ 41.340822][ T355] device veth1_macvtap entered promiscuous mode [ 41.348166][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.356939][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.365436][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.374636][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.382891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.391331][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.392493][ T379] loop2: detected capacity change from 0 to 2048 [ 41.402157][ T354] device veth0_vlan entered promiscuous mode [ 41.411093][ T30] audit: type=1400 audit(1711417492.959:157): avc: denied { mounton } for pid=378 comm="syz-executor.2" path="/root/syzkaller-testdir1857778881/syzkaller.T2KfFF/0/bus" dev="sda1" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.446225][ T358] device veth1_macvtap entered promiscuous mode [ 41.456134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.464346][ T379] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.464620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.475751][ T30] audit: type=1400 audit(1711417493.039:158): avc: denied { mount } for pid=378 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.483883][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.505399][ T379] ext4 filesystem being mounted at /root/syzkaller-testdir1857778881/syzkaller.T2KfFF/0/bus supports timestamps until 2038 (0x7fffffff) [ 41.511958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.534358][ T30] audit: type=1400 audit(1711417493.089:159): avc: denied { write } for pid=378 comm="syz-executor.2" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.541829][ T354] device veth1_macvtap entered promiscuous mode [ 41.557426][ T30] audit: type=1400 audit(1711417493.089:160): avc: denied { add_name } for pid=378 comm="syz-executor.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.566929][ T357] device veth1_macvtap entered promiscuous mode [ 41.584308][ T30] audit: type=1400 audit(1711417493.089:161): avc: denied { create } for pid=378 comm="syz-executor.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.622644][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.631049][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.640061][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.647977][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.656201][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.664477][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.671875][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.680172][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.688820][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.697670][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.705982][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.714224][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.722562][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.730562][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.755892][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.764361][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.788314][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.790697][ T386] loop2: detected capacity change from 0 to 2048 [ 41.797165][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.811517][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.820023][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.824113][ T386] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.828618][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.838699][ T386] ext4 filesystem being mounted at /root/syzkaller-testdir1857778881/syzkaller.T2KfFF/1/bus supports timestamps until 2038 (0x7fffffff) [ 41.846920][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.875427][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.883915][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.892384][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.901474][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.901471][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 34360905424 in block_group 0 [ 41.979484][ T396] loop3: detected capacity change from 0 to 2048 [ 41.988528][ T400] loop1: detected capacity change from 0 to 2048 [ 42.027267][ T398] loop2: detected capacity change from 0 to 2048 [ 42.031661][ T394] loop4: detected capacity change from 0 to 2048 [ 42.041526][ T400] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.046604][ T402] loop0: detected capacity change from 0 to 2048 [ 42.054694][ T400] ext4 filesystem being mounted at /root/syzkaller-testdir3285595738/syzkaller.icxykR/0/bus supports timestamps until 2038 (0x7fffffff) [ 42.060377][ T407] loop5: detected capacity change from 0 to 2048 [ 42.088163][ T394] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.099017][ T394] ext4 filesystem being mounted at /root/syzkaller-testdir2516965573/syzkaller.RlJqdT/0/bus supports timestamps until 2038 (0x7fffffff) [ 42.104805][ T398] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.114610][ T396] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.124289][ T398] ext4 filesystem being mounted at /root/syzkaller-testdir1857778881/syzkaller.T2KfFF/2/bus supports timestamps until 2038 (0x7fffffff) [ 42.142621][ T391] EXT4-fs error (device loop1): ext4_map_blocks:716: inode #19: block 203: comm kworker/u4:5: lblock 11 mapped to illegal pblock 203 (length 1) [ 42.150394][ T402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.180197][ T402] ext4 filesystem being mounted at /root/syzkaller-testdir2398506927/syzkaller.2CEM9A/0/bus supports timestamps until 2038 (0x7fffffff) [ 42.180344][ T400] EXT4-fs error (device loop1): ext4_map_blocks:716: inode #19: block 224: comm syz-executor.1: lblock 16 mapped to illegal pblock 224 (length 1) [ 42.195186][ T407] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.220259][ T407] ext4 filesystem being mounted at /root/syzkaller-testdir4153800760/syzkaller.DmiXeN/0/bus supports timestamps until 2038 (0x7fffffff) [ 42.234494][ T396] ext4 filesystem being mounted at /root/syzkaller-testdir860620646/syzkaller.JhUjbD/0/bus supports timestamps until 2038 (0x7fffffff) [ 42.246757][ T8] EXT4-fs error (device loop2): ext4_map_blocks:716: inode #19: block 200: comm kworker/u4:0: lblock 8 mapped to illegal pblock 200 (length 1) [ 42.254154][ T398] EXT4-fs error (device loop2): ext4_map_blocks:716: inode #19: block 201: comm syz-executor.2: lblock 9 mapped to illegal pblock 201 (length 1) [ 42.280583][ T391] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4822: inode #19: block 11: len 1: ext4_ext_map_blocks returned -117 [ 42.290633][ T8] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4822: inode #19: block 8: len 1: ext4_ext_map_blocks returned -117 [ 42.294941][ T391] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm kworker/u4:5: Invalid inode table block 34360905424 in block_group 0 [ 42.318163][ T402] EXT4-fs error (device loop0): ext4_map_blocks:716: inode #19: block 230: comm syz-executor.0: lblock 22 mapped to illegal pblock 230 (length 1) [ 42.321840][ T391] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.338209][ T398] EXT4-fs (loop2): Delayed block allocation failed for inode 19 at logical offset 9 with max blocks 1 with error 117 [ 42.349119][ T391] EXT4-fs error (device loop1): ext4_convert_unwritten_extents:4823: inode #19: comm kworker/u4:5: mark_inode_dirty error [ 42.359817][ T398] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.359817][ T398] [ 42.373223][ T8] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:0: Invalid inode table block 34360905424 in block_group 0 [ 42.386212][ T400] EXT4-fs (loop1): Delayed block allocation failed for inode 19 at logical offset 16 with max blocks 1 with error 117 [ 42.396877][ T391] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 42.413141][ T394] EXT4-fs error (device loop4): ext4_map_blocks:716: inode #19: block 230: comm syz-executor.4: lblock 22 mapped to illegal pblock 230 (length 1) [ 42.425826][ T8] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.437117][ T407] EXT4-fs error (device loop5): ext4_map_blocks:716: inode #19: block 241: comm syz-executor.5: lblock 33 mapped to illegal pblock 241 (length 1) [ 42.446114][ T391] EXT4-fs error (device loop1): ext4_map_blocks:716: inode #19: block 204: comm kworker/u4:5: lblock 12 mapped to illegal pblock 204 (length 1) [ 42.462297][ T400] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.462297][ T400] [ 42.485662][ T402] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 34360905424 in block_group 0 [ 42.491472][ T8] EXT4-fs error (device loop2): ext4_convert_unwritten_extents:4823: inode #19: comm kworker/u4:0: mark_inode_dirty error [ 42.513530][ T8] EXT4-fs (loop2): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 42.514271][ T407] EXT4-fs error (device loop5): __ext4_get_inode_loc:4340: comm syz-executor.5: Invalid inode table block 34360905424 in block_group 0 [ 42.540287][ T394] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm syz-executor.4: Invalid inode table block 34360905424 in block_group 0 [ 42.540520][ T402] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.564585][ T407] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.565605][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 34360905424 in block_group 0 [ 42.574563][ T391] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4822: inode #19: block 12: len 1: ext4_ext_map_blocks returned -117 [ 42.589481][ T394] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.601222][ T407] EXT4-fs error (device loop5): ext4_ext_truncate:4402: inode #19: comm syz-executor.5: mark_inode_dirty error [ 42.602627][ T402] EXT4-fs error (device loop0): ext4_ext_truncate:4402: inode #19: comm syz-executor.0: mark_inode_dirty error [ 42.612479][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:3: Invalid inode table block 34360905424 in block_group 0 [ 42.622521][ T407] EXT4-fs error (device loop5): __ext4_get_inode_loc:4340: comm syz-executor.5: Invalid inode table block 34360905424 in block_group 0 [ 42.645139][ T394] EXT4-fs error (device loop4): ext4_ext_truncate:4402: inode #19: comm syz-executor.4: mark_inode_dirty error [ 42.661117][ T391] EXT4-fs error (device loop1): __ext4_get_inode_loc:4340: comm kworker/u4:5: Invalid inode table block 34360905424 in block_group 0 [ 42.675151][ T402] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 34360905424 in block_group 0 [ 42.696310][ T391] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.700761][ T407] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.709678][ T391] EXT4-fs error (device loop1): ext4_convert_unwritten_extents:4823: inode #19: comm kworker/u4:5: mark_inode_dirty error [ 42.718839][ T394] EXT4-fs error (device loop4): __ext4_get_inode_loc:4340: comm syz-executor.4: Invalid inode table block 34360905424 in block_group 0 [ 42.732334][ T402] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.746788][ T407] EXT4-fs error (device loop5): ext4_truncate:4292: inode #19: comm syz-executor.5: mark_inode_dirty error [ 42.765848][ T391] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 42.779103][ T394] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 42.788956][ T394] EXT4-fs error (device loop4): ext4_truncate:4292: inode #19: comm syz-executor.4: mark_inode_dirty error [ 42.811781][ T407] ================================================================== [ 42.813961][ T429] loop2: detected capacity change from 0 to 2048 [ 42.819844][ T407] BUG: KASAN: use-after-free in ext4_find_extent+0xbab/0xdb0 [ 42.819875][ T407] Read of size 4 at addr ffff88811e7da784 by task syz-executor.5/407 [ 42.841296][ T407] [ 42.843455][ T407] CPU: 1 PID: 407 Comm: syz-executor.5 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.853776][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.863943][ T407] Call Trace: [ 42.867061][ T407] [ 42.869852][ T407] dump_stack_lvl+0x151/0x1b7 [ 42.874375][ T407] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.880005][ T407] ? __wake_up_klogd+0xd5/0x110 [ 42.884789][ T407] ? panic+0x751/0x751 [ 42.888892][ T407] print_address_description+0x87/0x3b0 [ 42.894243][ T407] kasan_report+0x179/0x1c0 [ 42.899018][ T407] ? __read_extent_tree_block+0x1e0/0x7b0 [ 42.904769][ T407] ? ext4_find_extent+0xbab/0xdb0 [ 42.909727][ T407] ? ext4_find_extent+0xbab/0xdb0 [ 42.914654][ T407] __asan_report_load4_noabort+0x14/0x20 [ 42.920657][ T407] ext4_find_extent+0xbab/0xdb0 [ 42.925441][ T407] ext4_ext_map_blocks+0x254/0x7250 [ 42.930727][ T407] ? uncharge_batch+0x4b0/0x4b0 [ 42.936040][ T407] ? stack_trace_snprint+0xf0/0xf0 [ 42.941136][ T407] ? __stack_depot_save+0x34/0x470 [ 42.946342][ T407] ? find_get_entry+0x3d3/0x3e0 [ 42.951030][ T407] ? ext4_ext_release+0x10/0x10 [ 42.955715][ T407] ? __kasan_slab_alloc+0xc3/0xe0 [ 42.960586][ T407] ? __kasan_slab_alloc+0xb1/0xe0 [ 42.965623][ T407] ? slab_post_alloc_hook+0x53/0x2c0 [ 42.970819][ T407] ? kmem_cache_alloc+0xf5/0x200 [ 42.975678][ T407] ? ext4_alloc_io_end_vec+0x2a/0x170 [ 42.980891][ T407] ? ext4_writepages+0x13b4/0x4000 [ 42.985922][ T407] ? do_writepages+0x40e/0x670 [ 42.991013][ T407] ? filemap_fdatawrite_wbc+0x248/0x2a0 [ 42.996509][ T407] ? file_write_and_wait_range+0x1cb/0x2b0 [ 43.002321][ T407] ? ext4_sync_file+0x1a2/0xa50 [ 43.007057][ T407] ? vfs_fsync_range+0x17b/0x190 [ 43.011835][ T407] ? ext4_buffered_write_iter+0x568/0x610 [ 43.017388][ T407] ? ext4_file_write_iter+0x443/0x1c80 [ 43.022779][ T407] ? vfs_write+0xd5d/0x1110 [ 43.027118][ T407] ? ksys_write+0x199/0x2c0 [ 43.031455][ T407] ? __x64_sys_write+0x7b/0x90 [ 43.036263][ T407] ? do_syscall_64+0x3d/0xb0 [ 43.040689][ T407] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.046596][ T407] ? _raw_read_unlock+0x25/0x40 [ 43.051286][ T407] ? ext4_es_lookup_extent+0x33b/0x940 [ 43.056671][ T407] ext4_map_blocks+0xaa7/0x1e00 [ 43.061352][ T407] ? ext4_issue_zeroout+0x250/0x250 [ 43.066532][ T407] ? ext4_inode_journal_mode+0x1a5/0x470 [ 43.072244][ T407] ext4_writepages+0x1628/0x4000 [ 43.077127][ T407] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 43.082579][ T407] ? ext4_readpage+0x230/0x230 [ 43.087186][ T407] ? ext4_readahead+0x110/0x110 [ 43.091864][ T407] ? __ext4_handle_dirty_metadata+0x2f1/0x830 [ 43.097761][ T407] ? ext4_fc_track_inode+0x200/0x200 [ 43.102887][ T407] ? up_read+0x55/0x170 [ 43.106967][ T407] ? ext4_readpage+0x230/0x230 [ 43.111569][ T407] do_writepages+0x40e/0x670 [ 43.115990][ T407] ? __writepage+0x130/0x130 [ 43.120509][ T407] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 43.125814][ T407] ? __kasan_check_write+0x14/0x20 [ 43.130767][ T407] ? _raw_spin_lock+0xa4/0x1b0 [ 43.135551][ T407] ? _raw_spin_unlock+0x4d/0x70 [ 43.140340][ T407] ? __get_user_nocheck_1+0x6/0x10 [ 43.145404][ T407] filemap_fdatawrite_wbc+0x248/0x2a0 [ 43.150855][ T407] file_write_and_wait_range+0x1cb/0x2b0 [ 43.156318][ T407] ? __filemap_set_wb_err+0x120/0x120 [ 43.161712][ T407] ext4_sync_file+0x1a2/0xa50 [ 43.166318][ T407] ? __kasan_slab_free+0x11/0x20 [ 43.171630][ T407] vfs_fsync_range+0x17b/0x190 [ 43.176230][ T407] ext4_buffered_write_iter+0x568/0x610 [ 43.181598][ T407] ext4_file_write_iter+0x443/0x1c80 [ 43.186719][ T407] ? avc_policy_seqno+0x1b/0x70 [ 43.191412][ T407] ? ext4_file_read_iter+0x4b0/0x4b0 [ 43.196527][ T407] ? fsnotify_perm+0x6a/0x5d0 [ 43.201126][ T407] ? iov_iter_init+0x53/0x190 [ 43.205843][ T407] vfs_write+0xd5d/0x1110 [ 43.209985][ T407] ? kmem_cache_free+0x116/0x2e0 [ 43.214761][ T407] ? file_end_write+0x1c0/0x1c0 [ 43.219445][ T407] ? mutex_lock+0xb6/0x1e0 [ 43.223709][ T407] ? wait_for_completion_killable_timeout+0x10/0x10 [ 43.230300][ T407] ? __fdget_pos+0x2e7/0x3a0 [ 43.234852][ T407] ? ksys_write+0x77/0x2c0 [ 43.239092][ T407] ksys_write+0x199/0x2c0 [ 43.243244][ T407] ? __ia32_sys_read+0x90/0x90 [ 43.247925][ T407] ? __kasan_check_read+0x11/0x20 [ 43.252780][ T407] __x64_sys_write+0x7b/0x90 [ 43.257246][ T407] do_syscall_64+0x3d/0xb0 [ 43.261490][ T407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.267194][ T407] RIP: 0033:0x7f3515663859 [ 43.271536][ T407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.291063][ T407] RSP: 002b:00007f35151e60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 43.299387][ T407] RAX: ffffffffffffffda RBX: 00007f3515782f80 RCX: 00007f3515663859 [ 43.307194][ T407] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000005 [ 43.315183][ T407] RBP: 00007f35156bfad0 R08: 0000000000000000 R09: 0000000000000000 [ 43.323087][ T407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.330904][ T407] R13: 000000000000000b R14: 00007f3515782f80 R15: 00007ffeab0d06d8 [ 43.338800][ T407] [ 43.341921][ T407] [ 43.344179][ T407] The buggy address belongs to the page: [ 43.349666][ T407] page:ffffea000479f680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x11e7da [ 43.359801][ T407] flags: 0x4000000000000000(zone=1) [ 43.364894][ T407] raw: 4000000000000000 ffffea000479f6c8 ffffea000479f588 0000000000000000 [ 43.373262][ T407] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 43.381676][ T407] page dumped because: kasan: bad access detected [ 43.388012][ T407] page_owner tracks the page as freed [ 43.393658][ T407] page last allocated via order 0, migratetype Movable, gfp_mask 0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), pid 396, ts 42412801479, free_ts 42652475456 [ 43.409037][ T407] post_alloc_hook+0x1a3/0x1b0 [ 43.413617][ T407] prep_new_page+0x1b/0x110 [ 43.417960][ T407] get_page_from_freelist+0x3550/0x35d0 [ 43.423792][ T407] __alloc_pages+0x27e/0x8f0 [ 43.428195][ T407] pagecache_get_page+0xb18/0xeb0 [ 43.433320][ T407] grab_cache_page_write_begin+0x5d/0xa0 [ 43.438878][ T407] ext4_write_begin+0x29d/0x13d0 [ 43.443654][ T407] ext4_da_write_begin+0x4a2/0xc30 [ 43.448719][ T407] generic_perform_write+0x2bc/0x5a0 [ 43.454116][ T407] ext4_buffered_write_iter+0x48a/0x610 [ 43.459682][ T407] ext4_file_write_iter+0x443/0x1c80 [ 43.464801][ T407] vfs_write+0xd5d/0x1110 [ 43.469057][ T407] ksys_write+0x199/0x2c0 [ 43.473218][ T407] __x64_sys_write+0x7b/0x90 [ 43.477823][ T407] do_syscall_64+0x3d/0xb0 [ 43.482218][ T407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.487891][ T407] page last free stack trace: [ 43.492403][ T407] free_unref_page_prepare+0x7c8/0x7d0 [ 43.497694][ T407] free_unref_page_list+0x14b/0xa60 [ 43.502827][ T407] release_pages+0x1310/0x1370 [ 43.507680][ T407] __pagevec_release+0x84/0x100 [ 43.512364][ T407] truncate_inode_pages_range+0x482/0x1160 [ 43.518008][ T407] truncate_inode_pages_final+0x83/0x90 [ 43.523386][ T407] ext4_evict_inode+0x3c8/0x14e0 [ 43.528336][ T407] evict+0x2a3/0x630 [ 43.532238][ T407] evict_inodes+0x5db/0x660 [ 43.536578][ T407] generic_shutdown_super+0x9c/0x2e0 [ 43.541854][ T407] kill_block_super+0x7e/0xe0 [ 43.546317][ T407] deactivate_locked_super+0xad/0x110 [ 43.551547][ T407] deactivate_super+0xbe/0xf0 [ 43.556020][ T407] cleanup_mnt+0x45c/0x510 [ 43.560381][ T407] __cleanup_mnt+0x19/0x20 [ 43.564614][ T407] task_work_run+0x129/0x190 [ 43.569043][ T407] [ 43.571297][ T407] Memory state around the buggy address: [ 43.576857][ T407] ffff88811e7da680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.585286][ T407] ffff88811e7da700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.593193][ T407] >ffff88811e7da780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.601195][ T407] ^ [ 43.605197][ T407] ffff88811e7da800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.613089][ T407] ffff88811e7da880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.620986][ T407] ================================================================== [ 43.628980][ T407] Disabling lock debugging due to kernel taint [ 43.644707][ T402] EXT4-fs error (device loop0): ext4_truncate:4292: inode #19: comm syz-executor.0: mark_inode_dirty error [ 43.652696][ T391] EXT4-fs error (device loop1): ext4_ext_split:1072: inode #19: comm kworker/u4:5: p_ext > EXT_MAX_EXTENT! [ 43.672744][ T391] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4822: inode #19: block 13: len 1: ext4_ext_map_blocks returned -117 [ 43.681369][ T429] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.690293][ T431] loop3: detected capacity change from 0 to 2048 [ 43.698887][ T391] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 43.717556][ T407] EXT4-fs error (device loop5): ext4_map_blocks:716: inode #19: block 64236069870368: comm syz-executor.5: lblock 0 mapped to illegal pblock 64236069870368 (length 16) [ 43.723329][ T394] ------------[ cut here ]------------ [ 43.734937][ T402] ------------[ cut here ]------------ [ 43.739851][ T394] kernel BUG at fs/ext4/inode.c:2421! [ 43.746752][ T431] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.750748][ T394] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 43.761634][ T391] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4822: inode #19: block 14: len 1: ext4_ext_map_blocks returned -117 [ 43.767167][ T394] CPU: 1 PID: 394 Comm: syz-executor.4 Tainted: G B 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.767190][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 43.767202][ T394] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 43.781271][ T402] kernel BUG at fs/ext4/inode.c:2421! [ 43.793163][ T394] Code: 00 74 08 48 89 df e8 f4 d7 c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 cc 2d 08 00 eb 58 e8 05 db 87 ff <0f> 0b e8 fe da 87 ff eb 3b e8 f7 da 87 ff eb 72 e8 f0 da 87 ff 31 [ 43.793188][ T394] RSP: 0018:ffffc90000f47260 EFLAGS: 00010293 [ 43.793208][ T394] RAX: ffffffff81e8444b RBX: dffffc0000000000 RCX: ffff888110c23b40 [ 43.793223][ T394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.793235][ T394] RBP: ffffc90000f47670 R08: ffffffff81e81e0b R09: ffffed1021847ec0 [ 43.803961][ T431] ext4 filesystem being mounted at /root/syzkaller-testdir860620646/syzkaller.JhUjbD/1/bus supports timestamps until 2038 (0x7fffffff) [ 43.809514][ T394] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 43.809529][ T394] R13: ffffc90000f47540 R14: 0000000000000000 R15: 0000000000000000 [ 43.809542][ T394] FS: 00007f219a3286c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 43.816350][ T391] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 43.834649][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.834670][ T394] CR2: 00007f3f2cb1d000 CR3: 000000012694a000 CR4: 00000000003506a0 [ 43.834686][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.834698][ T394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.947650][ T394] Call Trace: [ 43.950757][ T394] [ 43.953712][ T394] ? __die_body+0x62/0xb0 [ 43.958069][ T394] ? die+0x88/0xb0 [ 43.961609][ T394] ? do_trap+0x103/0x330 [ 43.966098][ T394] ? ext4_writepages+0x3f4b/0x4000 [ 43.971598][ T394] ? handle_invalid_op+0x95/0xc0 [ 43.976363][ T394] ? ext4_writepages+0x3f4b/0x4000 [ 43.981311][ T394] ? exc_invalid_op+0x32/0x50 [ 43.985824][ T394] ? asm_exc_invalid_op+0x1b/0x20 [ 43.990682][ T394] ? ext4_writepages+0x190b/0x4000 [ 43.995638][ T394] ? ext4_writepages+0x3f4b/0x4000 [ 44.000753][ T394] ? ext4_writepages+0x3f4b/0x4000 [ 44.005699][ T394] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 44.011183][ T394] ? ext4_readpage+0x230/0x230 [ 44.015866][ T394] ? ext4_readahead+0x110/0x110 [ 44.020539][ T394] ? __ext4_handle_dirty_metadata+0x2f1/0x830 [ 44.026672][ T394] ? ext4_fc_track_inode+0x200/0x200 [ 44.032136][ T394] ? __kasan_check_write+0x14/0x20 [ 44.037093][ T394] ? ext4_readpage+0x230/0x230 [ 44.041689][ T394] do_writepages+0x40e/0x670 [ 44.046977][ T394] ? __writepage+0x130/0x130 [ 44.051400][ T394] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 44.056606][ T394] ? __kasan_check_write+0x14/0x20 [ 44.061639][ T394] ? _raw_spin_lock+0xa4/0x1b0 [ 44.066239][ T394] ? _raw_spin_unlock+0x4d/0x70 [ 44.070934][ T394] ? __get_user_nocheck_1+0x6/0x10 [ 44.075880][ T394] filemap_fdatawrite_wbc+0x248/0x2a0 [ 44.081265][ T394] file_write_and_wait_range+0x1cb/0x2b0 [ 44.087002][ T394] ? __filemap_set_wb_err+0x120/0x120 [ 44.092228][ T394] ext4_sync_file+0x1a2/0xa50 [ 44.096955][ T394] ? __kasan_slab_free+0x11/0x20 [ 44.101898][ T394] vfs_fsync_range+0x17b/0x190 [ 44.106500][ T394] ext4_buffered_write_iter+0x568/0x610 [ 44.111964][ T394] ext4_file_write_iter+0x443/0x1c80 [ 44.117192][ T394] ? avc_policy_seqno+0x1b/0x70 [ 44.121957][ T394] ? ext4_file_read_iter+0x4b0/0x4b0 [ 44.127082][ T394] ? fsnotify_perm+0x6a/0x5d0 [ 44.131585][ T394] ? iov_iter_init+0x53/0x190 [ 44.136283][ T394] vfs_write+0xd5d/0x1110 [ 44.140449][ T394] ? kmem_cache_free+0x116/0x2e0 [ 44.145419][ T394] ? file_end_write+0x1c0/0x1c0 [ 44.150104][ T394] ? mutex_lock+0xb6/0x1e0 [ 44.154349][ T394] ? wait_for_completion_killable_timeout+0x10/0x10 [ 44.161450][ T394] ? __fdget_pos+0x2e7/0x3a0 [ 44.165843][ T394] ? ksys_write+0x77/0x2c0 [ 44.170097][ T394] ksys_write+0x199/0x2c0 [ 44.174263][ T394] ? __ia32_sys_read+0x90/0x90 [ 44.179042][ T394] ? __kasan_check_read+0x11/0x20 [ 44.185022][ T394] __x64_sys_write+0x7b/0x90 [ 44.189591][ T394] do_syscall_64+0x3d/0xb0 [ 44.193927][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.199647][ T394] RIP: 0033:0x7f219a7a5859 [ 44.204079][ T394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.224070][ T394] RSP: 002b:00007f219a3280c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.232283][ T394] RAX: ffffffffffffffda RBX: 00007f219a8c4f80 RCX: 00007f219a7a5859 [ 44.240282][ T394] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000005 [ 44.248081][ T394] RBP: 00007f219a801ad0 R08: 0000000000000000 R09: 0000000000000000 [ 44.256009][ T394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.263894][ T394] R13: 000000000000000b R14: 00007f219a8c4f80 R15: 00007ffdd366b778 [ 44.271690][ T394] [ 44.274548][ T394] Modules linked in: [ 44.278468][ T402] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 44.284506][ T402] CPU: 0 PID: 402 Comm: syz-executor.0 Tainted: G B D 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.296247][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 44.306125][ T402] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 44.311777][ T402] Code: 00 74 08 48 89 df e8 f4 d7 c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 cc 2d 08 00 eb 58 e8 05 db 87 ff <0f> 0b e8 fe da 87 ff eb 3b e8 f7 da 87 ff eb 72 e8 f0 da 87 ff 31 [ 44.331384][ T402] RSP: 0018:ffffc90001017260 EFLAGS: 00010293 [ 44.337467][ T402] RAX: ffffffff81e8444b RBX: dffffc0000000000 RCX: ffff8881114c93c0 [ 44.345275][ T402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.353082][ T402] RBP: ffffc90001017670 R08: ffffffff81e81e0b R09: ffffed1021847024 [ 44.361417][ T402] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 44.369316][ T402] R13: ffffc90001017540 R14: 0000000000000000 R15: 0000000000000000 [ 44.377218][ T402] FS: 00007f0a66d316c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 44.386183][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.392606][ T402] CR2: 0000000020031000 CR3: 00000001269e2000 CR4: 00000000003506b0 [ 44.400422][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.408228][ T402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.416500][ T402] Call Trace: [ 44.419603][ T402] [ 44.422382][ T402] ? __die_body+0x62/0xb0 [ 44.426548][ T402] ? die+0x88/0xb0 [ 44.430104][ T402] ? do_trap+0x103/0x330 [ 44.434269][ T402] ? ext4_writepages+0x3f4b/0x4000 [ 44.439279][ T402] ? handle_invalid_op+0x95/0xc0 [ 44.443992][ T402] ? ext4_writepages+0x3f4b/0x4000 [ 44.449218][ T402] ? exc_invalid_op+0x32/0x50 [ 44.453908][ T402] ? asm_exc_invalid_op+0x1b/0x20 [ 44.458778][ T402] ? ext4_writepages+0x190b/0x4000 [ 44.463728][ T402] ? ext4_writepages+0x3f4b/0x4000 [ 44.468922][ T402] ? ext4_writepages+0x3f4b/0x4000 [ 44.473878][ T402] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 44.479454][ T402] ? ext4_readpage+0x230/0x230 [ 44.484294][ T402] ? ext4_readahead+0x110/0x110 [ 44.489244][ T402] ? __ext4_handle_dirty_metadata+0x2f1/0x830 [ 44.495151][ T402] ? ext4_fc_track_inode+0x200/0x200 [ 44.500920][ T402] ? __kasan_check_write+0x14/0x20 [ 44.505967][ T402] ? ext4_readpage+0x230/0x230 [ 44.510624][ T402] do_writepages+0x40e/0x670 [ 44.515066][ T402] ? __writepage+0x130/0x130 [ 44.519490][ T402] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 44.524712][ T402] ? __kasan_check_write+0x14/0x20 [ 44.529753][ T402] ? _raw_spin_lock+0xa4/0x1b0 [ 44.534435][ T402] ? _raw_spin_unlock+0x4d/0x70 [ 44.539118][ T402] ? __get_user_nocheck_1+0x6/0x10 [ 44.544065][ T402] filemap_fdatawrite_wbc+0x248/0x2a0 [ 44.549271][ T402] file_write_and_wait_range+0x1cb/0x2b0 [ 44.555026][ T402] ? __filemap_set_wb_err+0x120/0x120 [ 44.560397][ T402] ext4_sync_file+0x1a2/0xa50 [ 44.564984][ T402] ? __kasan_slab_free+0x11/0x20 [ 44.570454][ T402] vfs_fsync_range+0x17b/0x190 [ 44.575140][ T402] ext4_buffered_write_iter+0x568/0x610 [ 44.581564][ T402] ext4_file_write_iter+0x443/0x1c80 [ 44.586772][ T402] ? avc_policy_seqno+0x1b/0x70 [ 44.591453][ T402] ? ext4_file_read_iter+0x4b0/0x4b0 [ 44.596573][ T402] ? fsnotify_perm+0x6a/0x5d0 [ 44.601085][ T402] ? iov_iter_init+0x53/0x190 [ 44.605687][ T402] vfs_write+0xd5d/0x1110 [ 44.609855][ T402] ? kmem_cache_free+0x116/0x2e0 [ 44.614656][ T402] ? file_end_write+0x1c0/0x1c0 [ 44.619495][ T402] ? mutex_lock+0xb6/0x1e0 [ 44.623743][ T402] ? wait_for_completion_killable_timeout+0x10/0x10 [ 44.630168][ T402] ? __fdget_pos+0x2e7/0x3a0 [ 44.634591][ T402] ? ksys_write+0x77/0x2c0 [ 44.639550][ T402] ksys_write+0x199/0x2c0 [ 44.643703][ T402] ? __ia32_sys_read+0x90/0x90 [ 44.648318][ T402] ? __kasan_check_read+0x11/0x20 [ 44.653616][ T402] __x64_sys_write+0x7b/0x90 [ 44.658226][ T402] do_syscall_64+0x3d/0xb0 [ 44.662633][ T402] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.668552][ T402] RIP: 0033:0x7f0a671ae859 [ 44.672808][ T402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.692855][ T402] RSP: 002b:00007f0a66d310c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.701306][ T402] RAX: ffffffffffffffda RBX: 00007f0a672cdf80 RCX: 00007f0a671ae859 [ 44.709242][ T402] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000005 [ 44.717129][ T402] RBP: 00007f0a6720aad0 R08: 0000000000000000 R09: 0000000000000000 [ 44.725031][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.732876][ T402] R13: 000000000000000b R14: 00007f0a672cdf80 R15: 00007ffd23079038 [ 44.741098][ T402] [ 44.744045][ T402] Modules linked in: [ 44.751488][ T394] ---[ end trace dbcb9ab306543b21 ]--- [ 44.767046][ T394] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 44.773169][ T394] Code: 00 74 08 48 89 df e8 f4 d7 c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 cc 2d 08 00 eb 58 e8 05 db 87 ff <0f> 0b e8 fe da 87 ff eb 3b e8 f7 da 87 ff eb 72 e8 f0 da 87 ff 31 [ 44.782269][ T402] ---[ end trace dbcb9ab306543b22 ]--- [ 44.805268][ T407] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 16 with error 117 [ 44.808341][ T431] EXT4-fs error (device loop3): ext4_map_blocks:716: inode #19: block 195: comm syz-executor.3: lblock 3 mapped to illegal pblock 195 (length 1) [ 44.818975][ T391] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4822: inode #19: block 15: len 1: ext4_ext_map_blocks returned -117 [ 44.834379][ T402] RIP: 0010:ext4_writepages+0x3f4b/0x4000 [ 44.848364][ T45] EXT4-fs error (device loop3): ext4_map_blocks:716: inode #19: block 193: comm kworker/u4:2: lblock 1 mapped to illegal pblock 193 (length 1) [ 44.855220][ T402] Code: 00 74 08 48 89 df e8 f4 d7 c9 ff 48 8b 3b 48 8b 74 24 48 48 8b 54 24 28 44 89 e9 45 89 f8 e8 cc 2d 08 00 eb 58 e8 05 db 87 ff <0f> 0b e8 fe da 87 ff eb 3b e8 f7 da 87 ff eb 72 e8 f0 da 87 ff 31 [ 44.871120][ T45] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4822: inode #19: block 1: len 1: ext4_ext_map_blocks returned -117 [ 44.892565][ T431] EXT4-fs (loop3): Delayed block allocation failed for inode 19 at logical offset 3 with max blocks 1 with error 117 [ 44.902628][ T394] RSP: 0018:ffffc90000f47260 EFLAGS: 00010293 [ 44.920495][ T391] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 44.922591][ T431] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.922591][ T431] [ 44.934034][ T394] RAX: ffffffff81e8444b RBX: dffffc0000000000 RCX: ffff888110c23b40 2024/03/26 01:44:56 executed programs: 10 [ 44.943900][ T402] RSP: 0018:ffffc90000f47260 EFLAGS: 00010293 [ 44.952400][ T45] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:2: Invalid inode table block 34360905424 in block_group 0 [ 44.962727][ T402] RAX: ffffffff81e8444b RBX: dffffc0000000000 RCX: ffff888110c23b40 [ 44.972206][ T394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.982330][ T402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.987507][ T394] RBP: ffffc90000f47670 R08: ffffffff81e81e0b R09: ffffed1021847ec0 [ 44.995429][ T402] RBP: ffffc90000f47670 R08: ffffffff81e81e0b R09: ffffed1021847ec0 [ 45.003093][ T45] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 45.011155][ T402] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 45.027886][ T394] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 45.028481][ T402] R13: ffffc90000f47540 R14: 0000000000000000 R15: 0000000000000000 [ 45.035987][ T394] R13: ffffc90000f47540 R14: 0000000000000000 R15: 0000000000000000 [ 45.044089][ T402] FS: 00007f0a66d316c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.051404][ T45] EXT4-fs error (device loop3): ext4_convert_unwritten_extents:4823: inode #19: comm kworker/u4:2: mark_inode_dirty error [ 45.060838][ T402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.073719][ T394] FS: 00007f219a3286c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.079910][ T402] CR2: 00007ff0d37fbed8 CR3: 00000001269e2000 CR4: 00000000003506a0 [ 45.088530][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.097281][ T402] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.103760][ T45] EXT4-fs (loop3): failed to convert unwritten extents to written extents -- potential data loss! (inode 19, error -117) [ 45.111548][ T402] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.123990][ T394] CR2: 0000555557291818 CR3: 000000012694a000 CR4: 00000000003506b0 [ 45.140180][ T45] EXT4-fs error (device loop3): ext4_map_blocks:716: inode #19: block 2: comm kworker/u4:2: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.149046][ T402] Kernel panic - not syncing: Fatal exception [ 45.154492][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.160477][ T402] Kernel Offset: disabled [ 45.172600][ T402] Rebooting in 86400 seconds..