./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3584214693 <...> forked to background, child pid [ 20.125469][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 3185 no interfaces have a carrier [ 20.139131][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.15.193' (ECDSA) to the list of known hosts. execve("./syz-executor3584214693", ["./syz-executor3584214693"], 0x7ffc1d8c0c40 /* 10 vars */) = 0 brk(NULL) = 0x5555569b1000 brk(0x5555569b1c40) = 0x5555569b1c40 arch_prctl(ARCH_SET_FS, 0x5555569b1300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3584214693", 4096) = 28 brk(0x5555569d2c40) = 0x5555569d2c40 brk(0x5555569d3000) = 0x5555569d3000 mprotect(0x7fb1d07eb000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 3606 mkdir("./syzkaller.dYgZ0P", 0700) = 0 chmod("./syzkaller.dYgZ0P", 0777) = 0 chdir("./syzkaller.dYgZ0P") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569b15d0) = 3607 ./strace-static-x86_64: Process 3607 attached [pid 3607] chdir("./0") = 0 [pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3607] setpgid(0, 0) = 0 [pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3607] write(3, "1000", 4) = 4 [pid 3607] close(3) = 0 [pid 3607] symlink("/dev/binderfs", "./binderfs") = 0 [pid 3607] memfd_create("syzkaller", 0) = 3 [pid 3607] ftruncate(3, 1048576) = 0 [pid 3607] pwrite64(3, "\x20\x00\x00", 3, 5) = 3 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32, 8) = 32 [pid 3607] pwrite64(3, "\x20\x00\x00\x00\x00\x02\x00\x00\x19\x00\x00\x00\x90\x01\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x05\x00\x00\x00\x00\x00\x04\x00\x00\x40\x00\x00\x20\x00\x00\x00\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x01\x00\xff\xff\x53\xef\x01\x00\x01\x00\x00\x00\x72\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x01\x00\x00\x18\x00\x00\x00\xc2\x85\x00\x00"..., 192, 1024) = 192 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xd7\xfb\xde\x2c\xd7\x41\x31\xb8\xed\x5e\xef\x96\x83\x44\xd0\x01\x00\x40\x00\x16\x00\x00\x72\x1f\x1f\x63\x00\x00\x00\x00\x11\xfc\x53\xfe\x99\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\x52\x69\xcf\x8f\x2a\x67\x10\x42\xff\x01\x3d\x11\x6f\x6e\xfc\x93\xca\x9a\x8b\x54\xb3", 87, 1248) = 87 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x20\x00\x20\x00\x01\x00\x00\x00\x00\x00\x05\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x43\x00\x00\x00\x00\x00\x00\x00", 64, 1344) = 64 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xba\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbd\x43\x53\x1d\xb7\xb8\x79\xf8\xd8\x46\xc2\x47\xe9\x73\x7c\xd8\x4e\xc8\x7d\x3d\xc6\xb8\x5d\xdf\x18\x61\x30\xdb\xd3\xb3\xa9\x13\xff\xde\x7d\x82\xa1\x11\x5c\xe7\xe3\xb3\x79\x22\x03\xea\x5a\xa5\x07\x7b\x62\xc9\x9a\x1f\x46\xa3\xde\xe2\xe4\xf3\x25\x2f\x03\xcb\x6a\x28\x07\x31"..., 191, 1600) = 191 [pid 3607] pwrite64(3, "\x05\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x3d\x1f\xd6\xc4\x9f\xc0\x70\x94\xe4\xca\x12\x70\xa4\x19\x00\x0f\x00\x03\x00\x04", 32, 2048) = 32 [pid 3607] pwrite64(3, "\x7f\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 4122, 4096) = 4122 [pid 3607] pwrite64(3, "\xed\x41\x00\x00\x00\x08\x00\x00\x72\x1f\x1f\x63\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x04\x00\x40\x00\x00\x00\x00\x00\x08\x00\x05\x00\x00\x00\x0a\xf3\x01\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x10\x00\x00\x00", 64, 8448) = 64 [pid 3607] pwrite64(3, "\x20\x00\x00\x00\x04\xed\x65\xde\x04\xed\x65\xde\x00\x00\x00\x00\x72\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32, 8576) = 32 [pid 3607] pwrite64(3, "\x80\x81\x00\x00\x00\x60\x10\x20\x72\x1f\x1f\x63\x72\x1f\x1f\x63\x72\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x01\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x30\x00\x00\x00\x00\x00\x00\x00"..., 160, 9728) = 160 [pid 3607] pwrite64(3, "\xc0\x41\x00\x00\x00\x38\x00\x00\x72\x1f\x1f\x63\x72\x1f\x1f\x63\x72\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x02\x00\x40\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x0a\xf3\x01\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x20\x00\x00\x00", 64, 10752) = 64 [pid 3607] pwrite64(3, "\xed\x41\x00\x00\x3c\x00\x00\x00\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x10\x03\x00\x00\x00\x02\x00\x00\x00\x0d\x00\x00\x00\x10\x00\x05\x01\x66\x69\x6c\x65\x30\x00\x00\x00\x0e\x00\x00\x00\x28\x00\x05\x07\x66\x69\x6c\x65\x31\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 192, 11008) = 192 [pid 3607] pwrite64(3, "\xed\x81\x00\x00\x1a\x04\x00\x00\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x01\x00\x40\x00\x00\x00\x00\x00\x08\x00\x01\x00\x00\x00\x0a\xf3\x01\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x50\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 160, 11264) = 160 [pid 3607] pwrite64(3, "\xff\xa1\x00\x00\x26\x00\x00\x00\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x2f\x74\x6d\x70\x2f\x73\x79\x7a\x2d\x69\x6d\x61\x67\x65\x67\x65\x6e\x39\x33\x32\x39\x36\x35\x37\x35\x33\x2f\x66\x69\x6c\x65\x30\x2f\x66\x69\x6c\x65\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 160, 11520) = 160 [pid 3607] pwrite64(3, "\xed\x81\x00\x00\x64\x00\x00\x00\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x73\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x10\x01\x00\x00\x00\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c\x6c\x65\x72\x73\x79\x7a\x6b\x61\x6c"..., 256, 12288) = 256 [pid 3607] pwrite64(3, "\x02\x00\x00\x00\x0c\x00\x01\x02\x2e\x00\x00\x00\x02\x00\x00\x00\x0c\x00\x02\x02\x2e\x2e\x00\x00\x0b\x00\x00\x00\x14\x00\x0a\x02\x6c\x6f\x73\x74\x2b\x66\x6f\x75\x6e\x64\x00\x00\x0c\x00\x00\x00\x10\x00\x05\x02\x66\x69\x6c\x65\x30\x00\x00\x00\x0f\x00\x00\x00\x10\x00\x05\x01\x66\x69\x6c\x65\x31\x00\x00\x00\x10\x00\x00\x00\x10\x00\x05\x01\x66\x69\x6c\x65\x32\x00\x00\x00\x10\x00\x00\x00\x10\x00\x05\x01"..., 128, 32768) = 128 [pid 3607] pwrite64(3, "\x0b\x00\x00\x00\x0c\x00\x01\x02\x11\x64\xfe\x8b\x52\x56\xda\x95\x0c\x00\x02\x02\x2e\x2e\x00\x00\x00\x00\x00\x00\xe8\x07\x00\x00", 32, 65536) = 32 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32, 67584) = 32 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32, 71680) = 32 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32, 73728) = 32 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32, 75776) = 32 [pid 3607] pwrite64(3, "\x00\x00\x00\x00\x00\x08\x00\xf5\xc7\x6e\xdf\x26\x08\xf3\x8c\xa9\x72\x55\xa3\x49\x5a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 46, 77824) = 46 [pid 3607] pwrite64(3, "\x50\x4d\x4d\x00\x50\x4d\x4d\xff\x73\x1f\x1f\x63\x00\x00\x00\x00\x68\x72\x75\x74\x76\x69\x6b\x2e\x63\x2e\x67\x6f\x6f\x67\x6c\x65\x72\x73\x2e\x63\x6f\x6d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x6f\x6f\x70\x32\x31\x00\x75\x78\x2f\x74\x65\x73\x74\x2f\x73\x79\x7a\x5f\x6d\x6f\x75\x6e\x74\x5f\x69\x6d\x61\x67\x65\x5f\x65\x05\x00\x00\x00"..., 112, 131072) = 112 [pid 3607] pwrite64(3, "syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers"..., 1185, 163840) = 1185 [pid 3607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3607] mkdir("./file0", 0777) = 0 [pid 3607] mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 [pid 3607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 3607] chdir("./file0") = 0 [pid 3607] ioctl(4, LOOP_CLR_FD) = 0 [pid 3607] close(4) = 0 [pid 3607] close(3) = 0 [pid 3607] creat("./bus", 000) = 3 [pid 3607] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 3607] ioctl(3, _IOC(_IOC_NONE, 0x66, 0x9, 0), 0) = 0 [pid 3607] creat("./bus", 000) = 4 [pid 3607] ftruncate(4, 2048) = 0 syzkaller login: [ 36.615388][ T3607] loop0: detected capacity change from 0 to 2048 [ 36.620204][ T3608] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.641950][ T3607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [pid 3607] open("./bus", O_RDONLY) = 6 [pid 3607] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 7 [pid 3607] write(7, "9", 1) = 1 [pid 3607] sendfile(4, 6, NULL, 65536) = 2048 [pid 3607] exit_group(0) = ? [pid 3607] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3607, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x5555569b2620 /* 4 entries */, 32768) = 112 umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 unlink("./0/binderfs") = 0 [ 36.655462][ T28] audit: type=1804 audit(1665570454.195:2): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor358" name="/root/syzkaller.dYgZ0P/0/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 36.684948][ T92] EXT4-fs error (device loop0): ext4_validate_block_bitmap:399: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 36.697648][ T92] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.710210][ T92] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.710210][ T92] [ 36.719986][ T92] EXT4-fs (loop0): Total free blocks count 0 [ 36.725947][ T92] EXT4-fs (loop0): Free/Dirty block details [ 36.731989][ T92] EXT4-fs (loop0): free_blocks=0 [ 36.736912][ T92] EXT4-fs (loop0): dirty_blocks=0 [ 36.742394][ T92] EXT4-fs (loop0): Block reservation details [ 36.748358][ T92] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 36.754545][ T92] EXT4-fs warning (device loop0): ext4_da_release_space:1527: ext4_da_release_space: ino 18, to_free 1 with only 0 reserved data blocks [ 36.768624][ T92] ------------[ cut here ]------------ [ 36.774108][ T92] WARNING: CPU: 0 PID: 92 at fs/ext4/inode.c:1528 ext4_da_release_space+0x25e/0x370 [ 36.783512][ T92] Modules linked in: [ 36.787401][ T92] CPU: 0 PID: 92 Comm: kworker/u4:4 Not tainted 6.0.0-syzkaller-09423-g493ffd6605b2 #0 [ 36.797046][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 36.807128][ T92] Workqueue: writeback wb_workfn (flush-7:0) [ 36.813144][ T92] RIP: 0010:ext4_da_release_space+0x25e/0x370 [ 36.819218][ T92] Code: a9 ff 4d 8b 07 4c 89 e7 48 c7 c6 87 2d 49 8c ba f7 05 00 00 48 c7 c1 00 90 a3 8a 45 89 f1 31 c0 53 e8 a6 6d 0e 00 48 83 c4 08 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 8a 44 05 00 84 c0 0f 85 da 00 [ 36.838884][ T92] RSP: 0018:ffffc900015f6c90 EFLAGS: 00010296 [ 36.844976][ T92] RAX: 42215896cd52ea00 RBX: 0000000000000000 RCX: 42215896cd52ea00 [ 36.853001][ T92] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 36.861003][ T92] RBP: 1ffff1100e907d96 R08: ffffffff816aa79d R09: fffff520002bece5 [ 36.868977][ T92] R10: fffff520002bece5 R11: 1ffff920002bece4 R12: ffff888021fd2000 [ 36.876981][ T92] R13: ffff88807483ecb0 R14: 0000000000000001 R15: ffff88807483e740 [ 36.884973][ T92] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 36.893932][ T92] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.900532][ T92] CR2: 00005555569ba628 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 36.908488][ T92] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.916477][ T92] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.924478][ T92] Call Trace: [ 36.927748][ T92] [ 36.930700][ T92] ext4_es_remove_extent+0x1ab/0x260 [ 36.935989][ T92] ? trace_ext4_es_lookup_extent_exit+0x280/0x280 [ 36.942426][ T92] ? __ext4_msg+0x117/0x2b0 [ 36.946933][ T92] ? panic+0x710/0x710 [ 36.951027][ T92] mpage_release_unused_pages+0x24d/0xef0 [ 36.956748][ T92] ? __ext4_msg+0x29f/0x2b0 [ 36.961290][ T92] ? mpage_prepare_extent_to_map+0x1720/0x1720 [ 36.967442][ T92] ? __wake_up_klogd+0xcd/0x100 [ 36.972377][ T92] ? __ext4_std_error+0x520/0x520 [ 36.977413][ T92] ? ext4_print_free_blocks+0x246/0x360 [ 36.982974][ T92] ? __ext4_journal_stop+0x2f/0x190 [ 36.988174][ T92] ? ext4_writepages+0x117f/0x3be0 [ 36.993322][ T92] ext4_writepages+0x12eb/0x3be0 [ 36.998261][ T92] ? update_curr+0x435/0xcb0 [ 37.002882][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.008868][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.014540][ T92] ? trace_pelt_cfs_tp+0x79/0x190 [ 37.019591][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.025214][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.030856][ T92] ? ext4_read_folio+0x140/0x140 [ 37.035793][ T92] ? do_writepages+0x327/0x680 [ 37.040565][ T92] ? trace_lock_release+0x7b/0x1a0 [ 37.045677][ T92] ? do_writepages+0x327/0x680 [ 37.050458][ T92] ? lock_release+0x81/0x820 [ 37.055047][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.061039][ T92] ? do_raw_spin_lock+0x148/0x360 [ 37.066067][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.071324][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.076969][ T92] ? ext4_read_folio+0x140/0x140 [ 37.081924][ T92] do_writepages+0x3c3/0x680 [ 37.086514][ T92] ? __writepage+0x120/0x120 [ 37.091121][ T92] ? lock_release+0x81/0x820 [ 37.095709][ T92] ? writeback_sb_inodes+0x7cf/0x18f0 [ 37.101090][ T92] ? trace_lock_release+0x7b/0x1a0 [ 37.106199][ T92] ? writeback_sb_inodes+0x7cf/0x18f0 [ 37.111594][ T92] ? lock_release+0x81/0x820 [ 37.116210][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.121242][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.126874][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.132886][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.137914][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.143151][ T92] __writeback_single_inode+0xd1/0x670 [ 37.148617][ T92] ? wbc_attach_and_unlock_inode+0x350/0x540 [ 37.154630][ T92] writeback_sb_inodes+0xb3b/0x18f0 [ 37.159853][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.164873][ T92] ? move_expired_inodes+0x889/0x8e0 [ 37.170196][ T92] ? queue_io+0x400/0x400 [ 37.174527][ T92] ? trace_writeback_wait+0x220/0x220 [ 37.179927][ T92] ? queue_io+0x382/0x400 [ 37.184257][ T92] wb_writeback+0x41f/0x7b0 [ 37.188755][ T92] ? trace_writeback_exec+0x220/0x220 [ 37.194142][ T92] ? set_worker_desc+0x149/0x1b0 [ 37.199077][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.204117][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.209781][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.214970][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.220609][ T92] ? kthread_data+0x4d/0xc0 [ 37.225108][ T92] wb_workfn+0x3cb/0xef0 [ 37.229343][ T92] ? inode_wait_for_writeback+0x2c0/0x2c0 [ 37.235081][ T92] ? lock_acquire+0xa4/0x3c0 [ 37.239683][ T92] ? process_one_work+0x831/0xdb0 [ 37.244690][ T92] ? read_lock_is_recursive+0x10/0x10 [ 37.250076][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.255272][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.260338][ T92] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 37.265799][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.271470][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.277450][ T92] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 37.283366][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.288564][ T92] ? read_word_at_a_time+0xe/0x20 [ 37.293621][ T92] process_one_work+0x877/0xdb0 [ 37.298475][ T92] ? worker_detach_from_pool+0x260/0x260 [ 37.304120][ T92] ? _raw_spin_lock_irq+0xba/0xf0 [ 37.309143][ T92] ? _raw_spin_lock_irqsave+0x100/0x100 [ 37.314726][ T92] worker_thread+0xb14/0x1330 [ 37.319434][ T92] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 37.325319][ T92] kthread+0x266/0x300 [ 37.329406][ T92] ? rcu_lock_release+0x20/0x20 [ 37.334275][ T92] ? kthread_blkcg+0xd0/0xd0 [ 37.338845][ T92] ret_from_fork+0x1f/0x30 [ 37.343277][ T92] [ 37.346300][ T92] Kernel panic - not syncing: panic_on_warn set ... [ 37.352863][ T92] CPU: 0 PID: 92 Comm: kworker/u4:4 Not tainted 6.0.0-syzkaller-09423-g493ffd6605b2 #0 [ 37.362467][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 37.372503][ T92] Workqueue: writeback wb_workfn (flush-7:0) [ 37.378470][ T92] Call Trace: [ 37.381732][ T92] [ 37.384651][ T92] dump_stack_lvl+0x1b1/0x28e [ 37.389328][ T92] ? fortify_panic+0x13/0x13 [ 37.393906][ T92] ? panic+0x710/0x710 [ 37.397968][ T92] ? vscnprintf+0x59/0x80 [ 37.402292][ T92] ? ext4_da_release_space+0x1e0/0x370 [ 37.407756][ T92] panic+0x2d6/0x710 [ 37.411643][ T92] ? __warn+0x131/0x220 [ 37.415789][ T92] ? fb_is_primary_device+0xcc/0xcc [ 37.420983][ T92] ? ret_from_fork+0x1f/0x30 [ 37.425564][ T92] ? ext4_da_release_space+0x25e/0x370 [ 37.431110][ T92] __warn+0x1fa/0x220 [ 37.435082][ T92] ? ext4_da_release_space+0x25e/0x370 [ 37.440532][ T92] report_bug+0x1b3/0x2d0 [ 37.444858][ T92] handle_bug+0x3d/0x70 [ 37.449008][ T92] exc_invalid_op+0x16/0x40 [ 37.453499][ T92] asm_exc_invalid_op+0x16/0x20 [ 37.458345][ T92] RIP: 0010:ext4_da_release_space+0x25e/0x370 [ 37.464406][ T92] Code: a9 ff 4d 8b 07 4c 89 e7 48 c7 c6 87 2d 49 8c ba f7 05 00 00 48 c7 c1 00 90 a3 8a 45 89 f1 31 c0 53 e8 a6 6d 0e 00 48 83 c4 08 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 8a 44 05 00 84 c0 0f 85 da 00 [ 37.483999][ T92] RSP: 0018:ffffc900015f6c90 EFLAGS: 00010296 [ 37.490053][ T92] RAX: 42215896cd52ea00 RBX: 0000000000000000 RCX: 42215896cd52ea00 [ 37.498010][ T92] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 37.505969][ T92] RBP: 1ffff1100e907d96 R08: ffffffff816aa79d R09: fffff520002bece5 [ 37.513929][ T92] R10: fffff520002bece5 R11: 1ffff920002bece4 R12: ffff888021fd2000 [ 37.521886][ T92] R13: ffff88807483ecb0 R14: 0000000000000001 R15: ffff88807483e740 [ 37.529846][ T92] ? __wake_up_klogd+0xcd/0x100 [ 37.534694][ T92] ext4_es_remove_extent+0x1ab/0x260 [ 37.539970][ T92] ? trace_ext4_es_lookup_extent_exit+0x280/0x280 [ 37.546372][ T92] ? __ext4_msg+0x117/0x2b0 [ 37.550868][ T92] ? panic+0x710/0x710 [ 37.554930][ T92] mpage_release_unused_pages+0x24d/0xef0 [ 37.560639][ T92] ? __ext4_msg+0x29f/0x2b0 [ 37.565132][ T92] ? mpage_prepare_extent_to_map+0x1720/0x1720 [ 37.571289][ T92] ? __wake_up_klogd+0xcd/0x100 [ 37.576149][ T92] ? __ext4_std_error+0x520/0x520 [ 37.581189][ T92] ? ext4_print_free_blocks+0x246/0x360 [ 37.586729][ T92] ? __ext4_journal_stop+0x2f/0x190 [ 37.591943][ T92] ? ext4_writepages+0x117f/0x3be0 [ 37.597058][ T92] ext4_writepages+0x12eb/0x3be0 [ 37.601996][ T92] ? update_curr+0x435/0xcb0 [ 37.606584][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.612555][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.618183][ T92] ? trace_pelt_cfs_tp+0x79/0x190 [ 37.623201][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.628828][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.634466][ T92] ? ext4_read_folio+0x140/0x140 [ 37.639405][ T92] ? do_writepages+0x327/0x680 [ 37.644163][ T92] ? trace_lock_release+0x7b/0x1a0 [ 37.649266][ T92] ? do_writepages+0x327/0x680 [ 37.654018][ T92] ? lock_release+0x81/0x820 [ 37.658613][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.664619][ T92] ? do_raw_spin_lock+0x148/0x360 [ 37.669660][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.674850][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.680476][ T92] ? ext4_read_folio+0x140/0x140 [ 37.685406][ T92] do_writepages+0x3c3/0x680 [ 37.689989][ T92] ? __writepage+0x120/0x120 [ 37.694565][ T92] ? lock_release+0x81/0x820 [ 37.699147][ T92] ? writeback_sb_inodes+0x7cf/0x18f0 [ 37.704511][ T92] ? trace_lock_release+0x7b/0x1a0 [ 37.709611][ T92] ? writeback_sb_inodes+0x7cf/0x18f0 [ 37.714974][ T92] ? lock_release+0x81/0x820 [ 37.719630][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.724652][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.730286][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.736261][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.741277][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.746477][ T92] __writeback_single_inode+0xd1/0x670 [ 37.751936][ T92] ? wbc_attach_and_unlock_inode+0x350/0x540 [ 37.757911][ T92] writeback_sb_inodes+0xb3b/0x18f0 [ 37.763106][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.768131][ T92] ? move_expired_inodes+0x889/0x8e0 [ 37.773440][ T92] ? queue_io+0x400/0x400 [ 37.777772][ T92] ? trace_writeback_wait+0x220/0x220 [ 37.783141][ T92] ? queue_io+0x382/0x400 [ 37.787481][ T92] wb_writeback+0x41f/0x7b0 [ 37.791995][ T92] ? trace_writeback_exec+0x220/0x220 [ 37.797369][ T92] ? set_worker_desc+0x149/0x1b0 [ 37.802303][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.807325][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.812957][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.818178][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.823809][ T92] ? kthread_data+0x4d/0xc0 [ 37.828336][ T92] wb_workfn+0x3cb/0xef0 [ 37.832585][ T92] ? inode_wait_for_writeback+0x2c0/0x2c0 [ 37.838299][ T92] ? lock_acquire+0xa4/0x3c0 [ 37.842878][ T92] ? process_one_work+0x831/0xdb0 [ 37.847912][ T92] ? read_lock_is_recursive+0x10/0x10 [ 37.853278][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.858472][ T92] ? __lock_acquire+0x1f60/0x1f60 [ 37.863489][ T92] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 37.868941][ T92] ? rcu_read_lock_sched_held+0x5d/0x110 [ 37.874566][ T92] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 37.880537][ T92] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 37.886424][ T92] ? do_raw_spin_unlock+0x134/0x8a0 [ 37.891622][ T92] ? read_word_at_a_time+0xe/0x20 [ 37.896644][ T92] process_one_work+0x877/0xdb0 [ 37.901492][ T92] ? worker_detach_from_pool+0x260/0x260 [ 37.907123][ T92] ? _raw_spin_lock_irq+0xba/0xf0 [ 37.912151][ T92] ? _raw_spin_lock_irqsave+0x100/0x100 [ 37.917688][ T92] worker_thread+0xb14/0x1330 [ 37.922361][ T92] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 37.928250][ T92] kthread+0x266/0x300 [ 37.932309][ T92] ? rcu_lock_release+0x20/0x20 [ 37.937221][ T92] ? kthread_blkcg+0xd0/0xd0 [ 37.941832][ T92] ret_from_fork+0x1f/0x30 [ 37.946260][ T92] [ 37.949428][ T92] Kernel Offset: disabled [ 37.953743][ T92] Rebooting in 86400 seconds..