./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3063063816 <...> Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. execve("./syz-executor3063063816", ["./syz-executor3063063816"], 0x7ffcb4695960 /* 10 vars */) = 0 brk(NULL) = 0x5555787b4000 brk(0x5555787b4d00) = 0x5555787b4d00 arch_prctl(ARCH_SET_FS, 0x5555787b4380) = 0 set_tid_address(0x5555787b4650) = 5077 set_robust_list(0x5555787b4660, 24) = 0 rseq(0x5555787b4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3063063816", 4096) = 28 getrandom("\x5d\x3f\xe9\x7c\x44\xcb\xcf\xc9", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555787b4d00 brk(0x5555787d5d00) = 0x5555787d5d00 brk(0x5555787d6000) = 0x5555787d6000 mprotect(0x7fe5c7e41000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5079 attached [pid 5079] set_robust_list(0x5555787b4660, 24 [pid 5077] <... clone resumed>, child_tidptr=0x5555787b4650) = 5079 [pid 5079] <... set_robust_list resumed>) = 0 [pid 5079] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5079] setpgid(0, 0) = 0 [pid 5079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5079] write(3, "1000", 4) = 4 [pid 5079] close(3) = 0 [pid 5079] write(1, "executing program\n", 18executing program ) = 18 [pid 5079] memfd_create("syzkaller", 0) = 3 [pid 5079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe5bf800000 [pid 5079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 5079] munmap(0x7fe5bf800000, 138412032) = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5079] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5079] close(3) = 0 [pid 5079] close(4) = 0 [pid 5079] mkdir("./file1", 0777) = 0 syzkaller login: [ 57.342558][ T5079] loop0: detected capacity change from 0 to 512 [ 57.373062][ T5079] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor306: corrupted in-inode xattr: invalid ea_ino [pid 5079] mount("/dev/loop0", "./file1", "ext4", MS_SYNCHRONOUS|MS_NOATIME|MS_REC|MS_RELATIME, ",errors=continue") = 0 [pid 5079] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5079] chdir("./file1") = 0 [pid 5079] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5079] mkdir("./bus", 000) = 0 [pid 5079] creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4 [pid 5079] mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0 [pid 5079] rename("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0 [ 57.393486][ T5079] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor306: couldn't read orphan inode 15 (err -117) [ 57.406836][ T5079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.442726][ T5079] BUG: unable to handle page fault for address: ffffed11022e24fe [ 57.450482][ T5079] #PF: supervisor read access in kernel mode [ 57.456439][ T5079] #PF: error_code(0x0000) - not-present page [ 57.462399][ T5079] PGD 23ffee067 P4D 23ffee067 PUD 0 [ 57.467668][ T5079] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 57.473713][ T5079] CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 57.484179][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.494213][ T5079] RIP: 0010:do_split+0x150b/0x2490 [ 57.499320][ T5079] Code: 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 48 89 74 24 18 0f 85 f5 0c 00 00 46 8b 3c f6 41 8d 46 ff 48 8d 1c c6 48 89 d8 48 c1 e8 03 <0f> b6 04 10 84 c0 4c 8b a4 24 98 00 00 00 0f 85 f7 0c 00 00 8b 1b [ 57.518908][ T5079] RSP: 0018:ffffc9000327f060 EFLAGS: 00010a02 [ 57.524952][ T5079] RAX: 1ffff111022e24fe RBX: ffff8888117127f0 RCX: ffff8880237e1e00 [ 57.532904][ T5079] RDX: dffffc0000000000 RSI: ffff8880117127f8 RDI: ffff8880117127f8 [ 57.540849][ T5079] RBP: ffffc9000327f250 R08: ffffffff825fc2ad R09: ffffffff82541cf8 [ 57.548794][ T5079] R10: 0000000000000007 R11: ffffffff825435f0 R12: 0000000000000000 [ 57.556739][ T5079] R13: 0000000000000400 R14: 0000000000000000 R15: 000000002b74e18c [ 57.564689][ T5079] FS: 00005555787b4380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 57.573589][ T5079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.580147][ T5079] CR2: ffffed11022e24fe CR3: 0000000043598000 CR4: 00000000003506f0 [ 57.588097][ T5079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.596042][ T5079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.603987][ T5079] Call Trace: [ 57.607244][ T5079] [ 57.610157][ T5079] ? __die_body+0x88/0xe0 [ 57.614472][ T5079] ? page_fault_oops+0x8e4/0xcc0 [ 57.619386][ T5079] ? __pfx_page_fault_oops+0x10/0x10 [ 57.624649][ T5079] ? is_prefetch+0x4ed/0x780 [ 57.629335][ T5079] ? __pfx_is_prefetch+0x10/0x10 [ 57.634260][ T5079] ? __ext4fs_dirhash+0x11cf/0x1530 [ 57.639444][ T5079] ? __bad_area_nosemaphore+0x118/0x770 [ 57.644977][ T5079] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 57.650935][ T5079] ? spurious_kernel_fault+0x11e/0x5d0 [ 57.656377][ T5079] ? exc_page_fault+0x5c8/0x8c0 [ 57.661215][ T5079] ? asm_exc_page_fault+0x26/0x30 [ 57.666225][ T5079] ? __pfx_str2hashbuf_unsigned+0x10/0x10 [ 57.671929][ T5079] ? __ext4fs_dirhash+0x298/0x1530 [ 57.677015][ T5079] ? do_split+0x144d/0x2490 [ 57.681494][ T5079] ? do_split+0x150b/0x2490 [ 57.685976][ T5079] ? __pfx_do_split+0x10/0x10 [ 57.690629][ T5079] ? __pfx_ext4_handle_dirty_dirblock+0x10/0x10 [ 57.696857][ T5079] ? __ext4_handle_dirty_metadata+0x34b/0x820 [ 57.702902][ T5079] make_indexed_dir+0xdaf/0x13c0 [ 57.707822][ T5079] ? __pfx_make_indexed_dir+0x10/0x10 [ 57.713168][ T5079] ? add_dirent_to_buf+0x399/0x730 [ 57.718256][ T5079] ? __pfx_add_dirent_to_buf+0x10/0x10 [ 57.723695][ T5079] ? __ext4_read_dirblock+0x527/0x880 [ 57.729044][ T5079] ext4_add_entry+0x222a/0x25d0 [ 57.733870][ T5079] ? __pfx___ext4_find_entry+0x10/0x10 [ 57.739319][ T5079] ? ext4_fname_setup_filename+0x2a6/0x370 [ 57.745109][ T5079] ? __pfx_ext4_add_entry+0x10/0x10 [ 57.750288][ T5079] ? __pfx___might_resched+0x10/0x10 [ 57.755549][ T5079] ? ext4_find_entry+0xf7/0x160 [ 57.760375][ T5079] ? __pfx_ext4_find_entry+0x10/0x10 [ 57.765652][ T5079] ? ext4_journal_check_start+0x175/0x250 [ 57.771370][ T5079] ? __ext4_journal_start_sb+0x290/0x600 [ 57.776994][ T5079] ext4_rename2+0x26e5/0x4370 [ 57.781654][ T5079] ? __pfx_ext4_rename2+0x10/0x10 [ 57.786663][ T5079] ? __pfx_lock_acquire+0x10/0x10 [ 57.791660][ T5079] ? vfs_rename+0x5ee/0xf00 [ 57.796136][ T5079] ? __down_write_common+0x162/0x200 [ 57.801424][ T5079] ? __pfx___down_write_common+0x10/0x10 [ 57.807067][ T5079] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.812267][ T5079] ? __pfx_ext4_rename2+0x10/0x10 [ 57.817276][ T5079] vfs_rename+0xbdb/0xf00 [ 57.821589][ T5079] ? __pfx_vfs_rename+0x10/0x10 [ 57.826445][ T5079] ? security_path_rename+0x18b/0x220 [ 57.831823][ T5079] do_renameat2+0xd94/0x13f0 [ 57.836404][ T5079] ? __pfx_do_renameat2+0x10/0x10 [ 57.841414][ T5079] ? __virt_addr_valid+0x183/0x520 [ 57.846506][ T5079] ? __check_object_size+0x49c/0x900 [ 57.851770][ T5079] ? getname_flags+0x1fe/0x4f0 [ 57.856513][ T5079] __x64_sys_rename+0x86/0xa0 [ 57.861162][ T5079] do_syscall_64+0xf3/0x230 [ 57.865656][ T5079] ? clear_bhb_loop+0x35/0x90 [ 57.870311][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.876202][ T5079] RIP: 0033:0x7fe5c7dcdb59 [ 57.880612][ T5079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.900193][ T5079] RSP: 002b:00007ffcd201c228 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 57.908589][ T5079] RAX: ffffffffffffffda RBX: 00007fe5c7e16568 RCX: 00007fe5c7dcdb59 [ 57.916713][ T5079] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 00000000200003c0 [ 57.924656][ T5079] RBP: 00007fe5c7e16668 R08: 00005555787b54c0 R09: 00005555787b54c0 [ 57.932600][ T5079] R10: 00005555787b54c0 R11: 0000000000000246 R12: 00007ffcd201c250 [ 57.940563][ T5079] R13: 00007ffcd201c478 R14: 431bde82d7b634db R15: 00007fe5c7e1603b [ 57.948712][ T5079] [ 57.951715][ T5079] Modules linked in: [ 57.955598][ T5079] CR2: ffffed11022e24fe [ 57.959745][ T5079] ---[ end trace 0000000000000000 ]--- [ 57.965177][ T5079] RIP: 0010:do_split+0x150b/0x2490 [ 57.970268][ T5079] Code: 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 48 89 74 24 18 0f 85 f5 0c 00 00 46 8b 3c f6 41 8d 46 ff 48 8d 1c c6 48 89 d8 48 c1 e8 03 <0f> b6 04 10 84 c0 4c 8b a4 24 98 00 00 00 0f 85 f7 0c 00 00 8b 1b [ 57.989850][ T5079] RSP: 0018:ffffc9000327f060 EFLAGS: 00010a02 [ 57.995891][ T5079] RAX: 1ffff111022e24fe RBX: ffff8888117127f0 RCX: ffff8880237e1e00 [ 58.003838][ T5079] RDX: dffffc0000000000 RSI: ffff8880117127f8 RDI: ffff8880117127f8 [ 58.011783][ T5079] RBP: ffffc9000327f250 R08: ffffffff825fc2ad R09: ffffffff82541cf8 [ 58.019729][ T5079] R10: 0000000000000007 R11: ffffffff825435f0 R12: 0000000000000000 [ 58.027675][ T5079] R13: 0000000000000400 R14: 0000000000000000 R15: 000000002b74e18c [ 58.035621][ T5079] FS: 00005555787b4380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 58.044523][ T5079] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.051085][ T5079] CR2: ffffed11022e24fe CR3: 0000000043598000 CR4: 00000000003506f0 [ 58.059032][ T5079] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.066975][ T5079] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.074925][ T5079] Kernel panic - not syncing: Fatal exception [ 58.081230][ T5079] Kernel Offset: disabled [ 58.085535][ T5079] Rebooting in 86400 seconds..