EXT4-fs (loop0): Test dummy encryption mode enabled EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (394!=20869) EXT4-fs error (device loop0): ext4_get_journal_inode:5740: comm syz-executor.0: inode #33: comm syz-executor.0: iget: illegal inode # EXT4-fs (loop0): no journal found BUG: unable to handle page fault for address: ffffffffffffffdb #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 2eaf067 P4D 2eaf067 PUD 2eb1067 PMD 0 Oops: 0000 [#1] PREEMPT SMP CPU: 1 PID: 2551 Comm: syz-executor.0 Not tainted 6.5.0-rc3-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 RIP: 0010:ext4_calculate_overhead+0x447/0x490 fs/ext4/super.c:4204 Code: 40 5c 04 0f 84 e2 fe ff ff 45 85 e4 0f 84 d9 fe ff ff 4c 89 f7 44 89 e6 e8 c6 ca ff ff 48 85 c0 48 89 c7 74 33 41 0f b6 4e 14 <48> 8b 40 50 41 8b 55 50 48 d3 f8 41 8b 4d 54 8d 44 02 ff d3 e8 48 RSP: 0018:ffffc900021abce8 EFLAGS: 00010286 RAX: ffffffffffffff8b RBX: 0000000000000001 RCX: 000000000000000a RDX: 0000000000000000 RSI: ffffffff82ae8522 RDI: ffffffffffffff8b RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffff82efaf20 R10: ffffc900021abb00 R11: ffffffff82fdaf68 R12: 0000000000000021 R13: ffff88810eebb000 R14: ffff88810eeba000 R15: ffff88810bef1000 FS: 00007f74287d36c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffdb CR3: 000000010fa87000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: __ext4_fill_super fs/ext4/super.c:5413 [inline] ext4_fill_super+0x2079/0x3090 fs/ext4/super.c:5664 get_tree_bdev+0x172/0x280 fs/super.c:1318 vfs_get_tree+0x1c/0x90 fs/super.c:1519 do_new_mount fs/namespace.c:3335 [inline] path_mount+0x48a/0xb80 fs/namespace.c:3662 do_mount fs/namespace.c:3675 [inline] __do_sys_mount fs/namespace.c:3884 [inline] __se_sys_mount fs/namespace.c:3861 [inline] __x64_sys_mount+0x111/0x150 fs/namespace.c:3861 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x38/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f7427a7e1ea Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f74287d2ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f74287d2f80 RCX: 00007f7427a7e1ea RDX: 00000000200000c0 RSI: 0000000020000040 RDI: 00007f74287d2f40 RBP: 00000000200000c0 R08: 00007f74287d2f80 R09: 0000000001000403 R10: 0000000001000403 R11: 0000000000000246 R12: 0000000020000040 R13: 00007f74287d2f40 R14: 00000000000005c4 R15: 0000000020000180 Modules linked in: CR2: ffffffffffffffdb ---[ end trace 0000000000000000 ]--- RIP: 0010:ext4_calculate_overhead+0x447/0x490 fs/ext4/super.c:4204 Code: 40 5c 04 0f 84 e2 fe ff ff 45 85 e4 0f 84 d9 fe ff ff 4c 89 f7 44 89 e6 e8 c6 ca ff ff 48 85 c0 48 89 c7 74 33 41 0f b6 4e 14 <48> 8b 40 50 41 8b 55 50 48 d3 f8 41 8b 4d 54 8d 44 02 ff d3 e8 48 RSP: 0018:ffffc900021abce8 EFLAGS: 00010286 RAX: ffffffffffffff8b RBX: 0000000000000001 RCX: 000000000000000a RDX: 0000000000000000 RSI: ffffffff82ae8522 RDI: ffffffffffffff8b RBP: 0000000000000002 R08: 0000000000000000 R09: ffffffff82efaf20 R10: ffffc900021abb00 R11: ffffffff82fdaf68 R12: 0000000000000021 R13: ffff88810eebb000 R14: ffff88810eeba000 R15: ffff88810bef1000 FS: 00007f74287d36c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffffffffffdb CR3: 000000010fa87000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 ---------------- Code disassembly (best guess), 3 bytes skipped: 0: 0f 84 e2 fe ff ff je 0xfffffee8 6: 45 85 e4 test %r12d,%r12d 9: 0f 84 d9 fe ff ff je 0xfffffee8 f: 4c 89 f7 mov %r14,%rdi 12: 44 89 e6 mov %r12d,%esi 15: e8 c6 ca ff ff call 0xffffcae0 1a: 48 85 c0 test %rax,%rax 1d: 48 89 c7 mov %rax,%rdi 20: 74 33 je 0x55 22: 41 0f b6 4e 14 movzbl 0x14(%r14),%ecx * 27: 48 8b 40 50 mov 0x50(%rax),%rax <-- trapping instruction 2b: 41 8b 55 50 mov 0x50(%r13),%edx 2f: 48 d3 f8 sar %cl,%rax 32: 41 8b 4d 54 mov 0x54(%r13),%ecx 36: 8d 44 02 ff lea -0x1(%rdx,%rax,1),%eax 3a: d3 e8 shr %cl,%eax 3c: 48 rex.W