./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor767486091

<...>
Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts.
execve("./syz-executor767486091", ["./syz-executor767486091"], 0x7fff840e51e0 /* 10 vars */) = 0
brk(NULL)                               = 0x555561d35000
brk(0x555561d35d40)                     = 0x555561d35d40
arch_prctl(ARCH_SET_FS, 0x555561d353c0) = 0
set_tid_address(0x555561d35690)         = 288
set_robust_list(0x555561d356a0, 24)     = 0
rseq(0x555561d35ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor767486091", 4096) = 27
getrandom("\x2d\x49\x7e\x7a\xb4\xf7\x47\x44", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555561d35d40
brk(0x555561d56d40)                     = 0x555561d56d40
brk(0x555561d57000)                     = 0x555561d57000
mprotect(0x7f199e203000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 289 attached
, child_tidptr=0x555561d35690) = 289
[pid   288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   289] set_robust_list(0x555561d356a0, 24) = 0
[pid   289] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 290 attached
 <unfinished ...>
[pid   288] <... clone resumed>, child_tidptr=0x555561d35690) = 290
[pid   288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   290] set_robust_list(0x555561d356a0, 24) = 0
[pid   290] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[   28.805327][   T30] audit: type=1400 audit(1756626320.249:64): avc:  denied  { execmem } for  pid=288 comm="syz-executor767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   28.862075][   T30] audit: type=1400 audit(1756626320.309:65): avc:  denied  { read write } for  pid=290 comm="syz-executor767" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   28.886058][  T297] loop1: detected capacity change from 0 to 1024
executing program
./strace-static-x86_64: Process 291 attached
[pid   288] <... clone resumed>, child_tidptr=0x555561d35690) = 291
[pid   290] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   289] <... openat resumed>)       = 3
[pid   288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555561d35690) = 292
[pid   288] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555561d35690) = 293
[pid   289] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   289] close(3)                    = 0
[pid   289] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555561d35690) = 294
[pid   291] set_robust_list(0x555561d356a0, 24) = 0
[pid   291] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid   290] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   290] close(3)                    = 0
[pid   290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   291] <... openat resumed>)       = 3
[pid   291] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid   291] close(3)                    = 0
[pid   291] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   290] <... clone resumed>, child_tidptr=0x555561d35690) = 295
[pid   291] <... clone resumed>, child_tidptr=0x555561d35690) = 296
./strace-static-x86_64: Process 295 attached
[pid   295] set_robust_list(0x555561d356a0, 24) = 0
[pid   295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   295] setpgid(0, 0)               = 0
[pid   295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   295] write(3, "1000", 4)         = 4
[pid   295] close(3)                    = 0
[pid   295] write(1, "executing program\n", 18) = 18
[pid   295] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] rt_sigaction(SIGRT_1, {sa_handler=0x7f199e1a6ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f199e198390}, NULL, 8) = 0
[pid   295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f199e11d000
[pid   295] mprotect(0x7f199e11e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e13d990, parent_tid=0x7f199e13d990, exit_signal=0, stack=0x7f199e11d000, stack_size=0x20300, tls=0x7f199e13d6c0} => {parent_tid=[297]}, 88) = 297
[pid   295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 297 attached
 <unfinished ...>
[pid   297] set_robust_list(0x7f199e13d9a0, 24) = 0
[pid   297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   297] memfd_create("syzkaller", 0) = 3
[pid   297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1995d1d000
[pid   297] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid   297] munmap(0x7f1995d1d000, 138412032) = 0
[pid   297] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid   297] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 296 attached
./strace-static-x86_64: Process 294 attached
./strace-static-x86_64: Process 293 attached
./strace-static-x86_64: Process 292 attached
)    = 0
[pid   297] close(3)                    = 0
[pid   297] close(4 <unfinished ...>
[pid   296] set_robust_list(0x555561d356a0, 24) = 0
[pid   296] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   296] setpgid(0, 0)               = 0
[pid   296] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   296] write(3, "1000", 4 <unfinished ...>
[pid   294] set_robust_list(0x555561d356a0, 24 <unfinished ...>
[pid   293] set_robust_list(0x555561d356a0, 24 <unfinished ...>
[pid   292] set_robust_list(0x555561d356a0, 24 <unfinished ...>
[pid   294] <... set_robust_list resumed>) = 0
[pid   293] <... set_robust_list resumed>) = 0
[pid   292] <... set_robust_list resumed>) = 0
[pid   296] <... write resumed>)        = 4
[pid   294] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   293] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid   296] close(3 <unfinished ...>
[pid   294] <... prctl resumed>)        = 0
[pid   292] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   294] setpgid(0, 0 <unfinished ...>
[pid   293] <... openat resumed>)       = 3
[pid   294] <... setpgid resumed>)      = 0
[pid   292] <... openat resumed>)       = 3
[pid   293] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   296] <... close resumed>)        = 0
[pid   294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   293] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   292] ioctl(3, LOOP_CLR_FDexecuting program
 <unfinished ...>
[pid   296] write(1, "executing program\n", 18 <unfinished ...>
[pid   294] <... openat resumed>)       = 3
[pid   293] close(3 <unfinished ...>
[pid   294] write(3, "1000", 4 <unfinished ...>
[pid   293] <... close resumed>)        = 0
[pid   292] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid   294] <... write resumed>)        = 4
[pid   293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   294] close(3 <unfinished ...>
[pid   292] close(3 <unfinished ...>
[pid   296] <... write resumed>)        = 18
executing program
[pid   296] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] <... close resumed>)        = 0
[pid   292] <... close resumed>)        = 0
[pid   294] write(1, "executing program\n", 18 <unfinished ...>
[pid   293] <... clone resumed>, child_tidptr=0x555561d35690) = 300
[pid   292] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   294] <... write resumed>)        = 18
[pid   296] <... futex resumed>)        = 0
[pid   296] rt_sigaction(SIGRT_1, {sa_handler=0x7f199e1a6ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f199e198390},  <unfinished ...>
[pid   294] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   292] <... clone resumed>, child_tidptr=0x555561d35690) = 301
[pid   294] <... futex resumed>)        = 0
[pid   296] <... rt_sigaction resumed>NULL, 8) = 0
[pid   294] rt_sigaction(SIGRT_1, {sa_handler=0x7f199e1a6ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f199e198390}, ./strace-static-x86_64: Process 300 attached
 <unfinished ...>
[pid   296] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f199e11d000
[pid   296] mprotect(0x7f199e11e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[   28.902395][   T30] audit: type=1400 audit(1756626320.309:66): avc:  denied  { open } for  pid=290 comm="syz-executor767" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e13d990, parent_tid=0x7f199e13d990, exit_signal=0, stack=0x7f199e11d000, stack_size=0x20300, tls=0x7f199e13d6c0} => {parent_tid=[302]}, 88) = 302
[pid   296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   296] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   296] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 301 attached
 <unfinished ...>
[pid   301] set_robust_list(0x555561d356a0, 24) = 0
[pid   301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   301] setpgid(0, 0)               = 0
[pid   301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   301] write(3, "1000", 4)         = 4
[pid   301] close(3)                    = 0
./strace-static-x86_64: Process 302 attached
[pid   301] write(1, "executing program\n", 18executing program
 <unfinished ...>
[pid   302] set_robust_list(0x7f199e13d9a0, 24 <unfinished ...>
[pid   301] <... write resumed>)        = 18
[pid   302] <... set_robust_list resumed>) = 0
[pid   301] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   302] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   302] memfd_create("syzkaller", 0 <unfinished ...>
[pid   301] <... futex resumed>)        = 0
[pid   301] rt_sigaction(SIGRT_1, {sa_handler=0x7f199e1a6ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f199e198390}, NULL, 8) = 0
[pid   301] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f199e11d000
[pid   302] <... memfd_create resumed>) = 3
[pid   301] mprotect(0x7f199e11e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   301] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid   302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1995d1d000
[pid   301] <... rt_sigprocmask resumed>[], 8) = 0
[pid   301] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e13d990, parent_tid=0x7f199e13d990, exit_signal=0, stack=0x7f199e11d000, stack_size=0x20300, tls=0x7f199e13d6c0} => {parent_tid=[303]}, 88) = 303
[pid   301] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   301] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   301] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
./strace-static-x86_64: Process 303 attached
[pid   303] set_robust_list(0x7f199e13d9a0, 24) = 0
[pid   303] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   303] memfd_create("syzkaller", 0) = 3
[pid   303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1995d1d000
[pid   303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 <unfinished ...>
[pid   302] munmap(0x7f1995d1d000, 138412032) = 0
[pid   300] set_robust_list(0x555561d356a0, 24 <unfinished ...>
[pid   294] <... rt_sigaction resumed>NULL, 8) = 0
[pid   302] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   302] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   300] <... set_robust_list resumed>) = 0
[pid   294] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1],  <unfinished ...>
[pid   300] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   294] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   303] <... write resumed>)        = 524288
[pid   300] <... prctl resumed>)        = 0
[pid   294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   300] setpgid(0, 0 <unfinished ...>
[pid   294] <... mmap resumed>)         = 0x7f199e11d000
[pid   300] <... setpgid resumed>)      = 0
[pid   294] mprotect(0x7f199e11e000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   294] <... mprotect resumed>)     = 0
[pid   300] <... openat resumed>)       = 3
[pid   294] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid   300] write(3, "1000", 4 <unfinished ...>
[pid   294] <... rt_sigprocmask resumed>[], 8) = 0
[pid   300] <... write resumed>)        = 4
[pid   294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e13d990, parent_tid=0x7f199e13d990, exit_signal=0, stack=0x7f199e11d000, stack_size=0x20300, tls=0x7f199e13d6c0}executing program
 <unfinished ...>
[pid   300] close(3)                    = 0
[pid   294] <... clone3 resumed> => {parent_tid=[304]}, 88) = 304
[pid   300] write(1, "executing program\n", 18 <unfinished ...>
[   28.960814][   T30] audit: type=1400 audit(1756626320.309:67): avc:  denied  { ioctl } for  pid=289 comm="syz-executor767" path="/dev/loop0" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid   294] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   300] <... write resumed>)        = 18
[pid   294] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   300] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   300] <... futex resumed>)        = 0
[pid   294] <... futex resumed>)        = 0
[pid   300] rt_sigaction(SIGRT_1, {sa_handler=0x7f199e1a6ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f199e198390},  <unfinished ...>
[pid   294] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 304 attached
 <unfinished ...>
[pid   303] munmap(0x7f1995d1d000, 138412032 <unfinished ...>
[pid   300] <... rt_sigaction resumed>NULL, 8) = 0
[pid   297] <... close resumed>)        = 0
[pid   304] set_robust_list(0x7f199e13d9a0, 24 <unfinished ...>
[pid   302] <... ioctl resumed>)        = 0
[pid   297] mkdir("./file0", 0777 <unfinished ...>
[pid   300] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1],  <unfinished ...>
[pid   303] <... munmap resumed>)       = 0
[pid   300] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f199e11d000
[pid   300] mprotect(0x7f199e11e000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   304] <... set_robust_list resumed>) = 0
[pid   302] close(3 <unfinished ...>
[pid   300] <... mprotect resumed>)     = 0
[pid   297] <... mkdir resumed>)        = 0
[pid   303] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   304] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   303] <... openat resumed>)       = 4
[pid   302] <... close resumed>)        = 0
[pid   300] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[   29.007628][  T302] loop2: detected capacity change from 0 to 1024
[   29.022190][   T30] audit: type=1400 audit(1756626320.469:68): avc:  denied  { mounton } for  pid=295 comm="syz-executor767" path="/root/file0" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[pid   297] mount("/dev/loop1", "./file0", "ext4", MS_REC, ",errors=continue" <unfinished ...>
[pid   303] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   300] <... rt_sigprocmask resumed>[], 8) = 0
[pid   300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e13d990, parent_tid=0x7f199e13d990, exit_signal=0, stack=0x7f199e11d000, stack_size=0x20300, tls=0x7f199e13d6c0} <unfinished ...>
[pid   302] close(4 <unfinished ...>
[pid   304] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   304] memfd_create("syzkaller", 0 <unfinished ...>
[pid   300] <... clone3 resumed> => {parent_tid=[305]}, 88) = 305
./strace-static-x86_64: Process 305 attached
[pid   304] <... memfd_create resumed>) = 3
[pid   300] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   305] set_robust_list(0x7f199e13d9a0, 24 <unfinished ...>
[pid   300] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1995d1d000
[pid   305] <... set_robust_list resumed>) = 0
[pid   304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 <unfinished ...>
[pid   300] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   305] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   300] <... futex resumed>)        = 0
[pid   305] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   303] <... ioctl resumed>)        = 0
[pid   300] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   305] memfd_create("syzkaller", 0 <unfinished ...>
[pid   303] close(3 <unfinished ...>
[pid   305] <... memfd_create resumed>) = 3
[pid   305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   303] <... close resumed>)        = 0
[pid   305] <... mmap resumed>)         = 0x7f1995d1d000
[pid   303] close(4 <unfinished ...>
[pid   304] <... write resumed>)        = 524288
[pid   304] munmap(0x7f1995d1d000, 138412032) = 0
[pid   304] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   304] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   305] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288
[pid   305] munmap(0x7f1995d1d000, 138412032) = 0
[pid   305] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid   305] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid   304] <... ioctl resumed>)        = 0
[pid   304] close(3)                    = 0
[pid   304] close(4 <unfinished ...>
[pid   302] <... close resumed>)        = 0
[   29.022602][  T303] loop3: detected capacity change from 0 to 1024
[   29.084556][  T304] loop0: detected capacity change from 0 to 1024
[   29.097981][  T305] loop4: detected capacity change from 0 to 1024
[pid   305] <... ioctl resumed>)        = 0
[pid   305] close(3)                    = 0
[pid   305] close(4 <unfinished ...>
[pid   302] mkdir("./file0", 0777)      = -1 EEXIST (File exists)
[pid   302] mount("/dev/loop2", "./file0", "ext4", MS_REC, ",errors=continue" <unfinished ...>
[pid   297] <... mount resumed>)        = 0
[pid   302] <... mount resumed>)        = 0
[pid   302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid   302] chdir("./file0")            = 0
[pid   302] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid   302] ioctl(4, LOOP_CLR_FD)       = 0
[pid   302] close(4)                    = 0
[pid   302] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] <... futex resumed>)        = 0
[pid   296] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   296] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   302] <... futex resumed>)        = 1
[pid   302] creat("./bus", 000)         = 4
[pid   302] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] <... futex resumed>)        = 0
[pid   296] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   296] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   304] <... close resumed>)        = 0
[pid   303] <... close resumed>)        = 0
[pid   304] mkdir("./file0", 0777 <unfinished ...>
[pid   303] mkdir("./file0", 0777 <unfinished ...>
[pid   304] <... mkdir resumed>)        = -1 EEXIST (File exists)
[pid   303] <... mkdir resumed>)        = -1 EEXIST (File exists)
[   29.111032][  T297] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   29.128826][  T302] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   304] mount("/dev/loop0", "./file0", "ext4", MS_REC, ",errors=continue" <unfinished ...>
[pid   303] mount("/dev/loop3", "./file0", "ext4", MS_REC, ",errors=continue" <unfinished ...>
[pid   302] <... futex resumed>)        = 1
[pid   302] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0
[pid   302] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] <... futex resumed>)        = 0
[pid   296] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   296] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   302] <... futex resumed>)        = 1
[pid   302] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5
[pid   302] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] <... futex resumed>)        = 0
[pid   296] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   296] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   302] <... futex resumed>)        = 1
[pid   302] mmap(0x200000000000, 8388608, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0) = 0x200000000000
[pid   297] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   305] <... close resumed>)        = 0
[pid   305] mkdir("./file0", 0777)      = -1 EEXIST (File exists)
[   29.133791][   T30] audit: type=1400 audit(1756626320.579:69): avc:  denied  { mount } for  pid=295 comm="syz-executor767" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   29.185002][  T304] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   29.198162][   T30] audit: type=1400 audit(1756626320.599:70): avc:  denied  { write } for  pid=296 comm="syz-executor767" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[pid   305] mount("/dev/loop4", "./file0", "ext4", MS_REC, ",errors=continue" <unfinished ...>
[pid   302] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] <... openat resumed>)       = 3
[pid   296] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   302] <... futex resumed>)        = 0
[pid   297] chdir("./file0" <unfinished ...>
[pid   296] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   302] memfd_create("syzkaller", 0 <unfinished ...>
[pid   297] <... chdir resumed>)        = 0
[pid   296] <... futex resumed>)        = 0
[pid   302] <... memfd_create resumed>) = 6
[pid   297] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid   296] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   297] <... openat resumed>)       = 4
[pid   302] <... mmap resumed>)         = 0x7f1995d1d000
[pid   297] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   302] write(6, "\x60\x7f\x00\x6b\x64\x05\x00\x66\xf1\xf1\xe6\x00\x08\x08\x01\x00\x04\x40\x43\x40\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 131072 <unfinished ...>
[pid   297] <... ioctl resumed>)        = 0
[pid   302] <... write resumed>)        = 131072
[pid   297] close(4)                    = 0
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   297] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   302] munmap(0x7f1995d1d000, 138412032) = 0
[pid   302] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 7
[pid   302] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid   302] ioctl(7, LOOP_CLR_FD)       = 0
[pid   302] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid   302] close(7)                    = 0
[pid   302] close(6)                    = 0
[pid   302] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   296] <... futex resumed>)        = 0
[pid   296] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   29.216958][  T305] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   296] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   302] write(4, 0x200000000100, 18 <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[   29.257116][   T30] audit: type=1400 audit(1756626320.599:71): avc:  denied  { add_name } for  pid=296 comm="syz-executor767" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   29.305252][  T302] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5867: Out of memory
[pid   296] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] futex(0x7f199e2096dc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] <... futex resumed>)        = 1
[pid   296] <... futex resumed>)        = 0
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   296] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f199e0fc000
[pid   296] mprotect(0x7f199e0fd000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   296] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   296] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e11c990, parent_tid=0x7f199e11c990, exit_signal=0, stack=0x7f199e0fc000, stack_size=0x20300, tls=0x7f199e11c6c0} => {parent_tid=[312]}, 88) = 312
[pid   296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   296] futex(0x7f199e2096d8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   296] futex(0x7f199e2096dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 312 attached
 <unfinished ...>
[pid   312] set_robust_list(0x7f199e11c9a0, 24) = 0
[pid   312] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   312] sendmsg(-1, 0x200000000180, 0) = -1 EBADF (Bad file descriptor)
[pid   312] futex(0x7f199e2096dc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   296] <... futex resumed>)        = 0
[pid   312] <... futex resumed>)        = 1
[pid   312] futex(0x7f199e2096d8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   297] <... futex resumed>)        = 0
[pid   297] creat("./bus", 000 <unfinished ...>
[pid   303] <... mount resumed>)        = 0
[pid   297] <... creat resumed>)        = 4
[   29.323400][   T30] audit: type=1400 audit(1756626320.599:72): avc:  denied  { create } for  pid=296 comm="syz-executor767" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   29.353554][  T303] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[pid   303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... mount resumed>)        = 0
[pid   304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid   304] chdir("./file0")            = 0
[pid   304] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   304] ioctl(4, LOOP_CLR_FD)       = 0
[pid   304] close(4)                    = 0
[pid   304] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   304] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   305] <... mount resumed>)        = 0
[pid   305] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid   305] chdir("./file0")            = 0
[pid   305] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid   305] ioctl(4, LOOP_CLR_FD)       = 0
[pid   305] close(4)                    = 0
[pid   305] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   305] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   303] <... openat resumed>)       = 3
[pid   303] chdir("./file0")            = 0
[pid   303] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid   297] <... futex resumed>)        = 1
[pid   303] ioctl(4, LOOP_CLR_FD <unfinished ...>
[pid   295] <... futex resumed>)        = 0
[   29.410245][   T30] audit: type=1400 audit(1756626320.599:73): avc:  denied  { write open } for  pid=296 comm="syz-executor767" path="/root/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[pid   303] <... ioctl resumed>)        = 0
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=37000000} <unfinished ...>
[pid   303] close(4)                    = 0
[pid   300] <... futex resumed>)        = 0
[pid   297] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   294] <... futex resumed>)        = 0
[pid   303] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   301] <... futex resumed>)        = 0
[pid   303] creat("./bus", 000 <unfinished ...>
[pid   301] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   300] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] <... mount resumed>)        = 0
[pid   294] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... futex resumed>)        = 0
[pid   300] <... futex resumed>)        = 1
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] <... futex resumed>)        = 1
[pid   304] creat("./bus", 000 <unfinished ...>
[pid   301] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   300] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   297] <... futex resumed>)        = 1
[pid   295] <... futex resumed>)        = 0
[pid   294] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   297] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... creat resumed>)        = 4
[pid   303] <... creat resumed>)        = 4
[pid   297] <... open resumed>)         = 5
[pid   295] <... futex resumed>)        = 0
[pid   304] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   303] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   304] <... futex resumed>)        = 1
[pid   303] <... futex resumed>)        = 1
[pid   301] <... futex resumed>)        = 0
[pid   297] <... futex resumed>)        = 0
[pid   295] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   294] <... futex resumed>)        = 0
[pid   304] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   303] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   301] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   303] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   301] <... futex resumed>)        = 0
[pid   297] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   295] <... futex resumed>)        = 0
[pid   294] <... futex resumed>)        = 0
[pid   305] <... futex resumed>)        = 0
[pid   304] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   303] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   301] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   297] mmap(0x200000000000, 8388608, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 <unfinished ...>
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   294] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   304] <... mount resumed>)        = 0
[pid   303] <... mount resumed>)        = 0
[pid   304] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   303] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] <... mmap resumed>)         = 0x200000000000
[pid   305] creat("./bus", 000 <unfinished ...>
[pid   304] <... futex resumed>)        = 1
[pid   303] <... futex resumed>)        = 1
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] <... futex resumed>)        = 0
[pid   304] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   303] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   297] <... futex resumed>)        = 1
[pid   294] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   297] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   294] <... futex resumed>)        = 0
[pid   304] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   294] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   304] <... open resumed>)         = 5
[pid   301] <... futex resumed>)        = 0
[pid   295] <... futex resumed>)        = 0
[pid   304] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   301] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] <... futex resumed>)        = 0
[pid   304] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   294] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   294] <... futex resumed>)        = 0
[pid   304] mmap(0x200000000000, 8388608, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 <unfinished ...>
[pid   294] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   301] <... futex resumed>)        = 1
[pid   303] <... futex resumed>)        = 0
[pid   295] <... futex resumed>)        = 1
[pid   303] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   301] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[   29.454979][  T302] EXT4-fs error (device loop2): ext4_dirty_inode:6071: inode #18: comm syz-executor767: mark_inode_dirty error
[   29.502985][  T302] ------------[ cut here ]------------
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   305] <... creat resumed>)        = 4
[pid   304] <... mmap resumed>)         = 0x200000000000
[pid   303] <... open resumed>)         = 5
[pid   297] <... futex resumed>)        = 0
[pid   304] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   303] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   305] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... futex resumed>)        = 1
[pid   303] <... futex resumed>)        = 1
[pid   301] <... futex resumed>)        = 0
[pid   297] memfd_create("syzkaller", 0 <unfinished ...>
[pid   294] <... futex resumed>)        = 0
[pid   305] <... futex resumed>)        = 1
[pid   304] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   303] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   300] <... futex resumed>)        = 0
[pid   305] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   304] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   300] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] <... memfd_create resumed>) = 6
[pid   294] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   305] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   300] <... futex resumed>)        = 0
[pid   294] <... futex resumed>)        = 0
[pid   305] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL <unfinished ...>
[pid   304] memfd_create("syzkaller", 0 <unfinished ...>
[pid   300] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   297] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   294] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   305] <... mount resumed>)        = 0
[pid   297] <... mmap resumed>)         = 0x7f1995d1d000
[pid   304] <... memfd_create resumed>) = 6
[pid   301] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   305] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   303] <... futex resumed>)        = 0
[pid   301] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   297] write(6, "\x60\x7f\x00\x6b\x64\x05\x00\x66\xf1\xf1\xe6\x00\x08\x08\x01\x00\x04\x40\x43\x40\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 131072 <unfinished ...>
[pid   305] <... futex resumed>)        = 1
[pid   304] <... mmap resumed>)         = 0x7f1995d1d000
[pid   303] mmap(0x200000000000, 8388608, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 <unfinished ...>
[pid   300] <... futex resumed>)        = 0
[pid   300] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   300] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   297] <... write resumed>)        = 131072
[   29.514973][  T302] kernel BUG at fs/ext4/inline.c:302!
[   29.526321][  T302] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   29.537801][  T302] CPU: 0 PID: 302 Comm: syz-executor767 Not tainted 5.15.189-syzkaller-android13-5.15.189_r00 #0
[   29.555415][  T302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   29.576584][  T302] RIP: 0010:ext4_create_inline_data+0x416/0x420
[   29.586475][  T302] Code: ff ff e8 3d 20 d0 ff e9 0f ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 26 ff ff ff e8 24 20 d0 ff e9 1c ff ff ff e8 da a4 91 ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 48 89 fb
[   29.614401][  T302] RSP: 0018:ffffc90000b172c0 EFLAGS: 00010293
[   29.623082][  T302] RAX: ffffffff81d70af6 RBX: 0000000000000000 RCX: ffff8881049ce2c0
[   29.635825][  T302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   29.648894][  T302] RBP: ffffc90000b173f0 R08: 0000000000000000 R09: ffffed1021997528
[   29.660034][  T302] R10: ffffed1021997528 R11: 1ffff11021997527 R12: ffff88810ccbaa40
[   29.677173][  T302] R13: 1ffff92000162e5c R14: 0000000000000000 R15: dffffc0000000000
[   29.688908][  T302] FS:  00007f199e13d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   29.702279][  T302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   29.713317][  T302] CR2: 00007fc18b2fa000 CR3: 000000011ed1b000 CR4: 00000000003506b0
[   29.724314][  T302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   29.734955][  T302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   29.747301][  T302] Call Trace:
[   29.752712][  T302]  <TASK>
[   29.757016][  T302]  ? __kasan_check_read+0x11/0x20
[   29.765445][  T302]  ? ext4_update_inline_data+0x4f0/0x4f0
[   29.777160][  T302]  ? clear_nonspinnable+0x60/0x60
[   29.785713][  T302]  ? ext4_get_max_inline_size+0x16f/0x1e0
[   29.794510][  T302]  ext4_prepare_inline_data+0x16c/0x1f0
[   29.802024][  T302]  ext4_try_to_write_inline_data+0x317/0x1110
[   29.812399][  T302]  ? bio_add_page+0x2de/0x460
[   29.819707][  T302]  ? zero_user_segment+0x390/0x390
[   29.826664][  T302]  ext4_write_begin+0x221/0x1220
[   29.833761][  T302]  ? __ext4_error_inode+0x22b/0x4d0
[   29.844145][  T302]  ? ext4_decode_error+0x1b0/0x1b0
[   29.851034][  T302]  ? up_read+0x56/0x1d0
[   29.856109][  T302]  ? ext4_readahead+0x110/0x110
[   29.862567][  T302]  ? wb_get_create+0xb33/0xb60
[   29.871710][  T302]  ? __kasan_check_write+0x14/0x20
[   29.879811][  T302]  ? _raw_spin_lock+0x8e/0xe0
[   29.886799][  T302]  ? __kasan_check_write+0x14/0x20
[   29.894685][  T302]  ? _raw_spin_lock+0x8e/0xe0
[   29.901573][  T302]  ? _raw_spin_trylock_bh+0x130/0x130
[   29.908847][  T302]  ? fault_in_readable+0x130/0x160
[   29.918017][  T302]  ? __kasan_check_read+0x11/0x20
[   29.923663][  T302]  ? fault_in_iov_iter_readable+0x23e/0x280
[   29.934654][  T302]  generic_perform_write+0x2ad/0x670
[   29.943467][  T302]  ? generic_update_time+0x1da/0x1f0
[   29.952350][  T302]  ? file_remove_privs+0x590/0x590
[   29.962234][  T302]  ? grab_cache_page_write_begin+0xb0/0xb0
[   29.974786][  T302]  ? generic_write_checks+0x3d4/0x480
[   29.985047][  T302]  ext4_buffered_write_iter+0x4ed/0x670
[   29.992963][  T302]  ext4_file_write_iter+0x18c/0x14c0
[   30.005210][  T302]  ? compat_start_thread+0x20/0x20
[   30.013111][  T302]  ? avc_policy_seqno+0x1b/0x70
[   30.022182][  T302]  ? ext4_file_read_iter+0x510/0x510
[   30.029411][  T302]  ? memset+0x35/0x40
[   30.035111][  T302]  ? iov_iter_init+0xbc/0x180
[   30.042009][  T302]  vfs_write+0x802/0xf70
[   30.047336][  T302]  ? file_end_write+0x1b0/0x1b0
[   30.054323][  T302]  ? wait_for_completion_killable_timeout+0x10/0x10
[   30.066564][  T302]  ? __fget_files+0x2c4/0x320
[   30.074755][  T302]  ? __fdget_pos+0x2d2/0x380
[   30.080892][  T302]  ? ksys_write+0x71/0x240
[   30.088307][  T302]  ksys_write+0x140/0x240
[   30.094757][  T302]  ? __ia32_sys_read+0x90/0x90
[   30.100983][  T302]  ? __kasan_check_write+0x14/0x20
[   30.112225][  T302]  ? switch_fpu_return+0x15d/0x2c0
[   30.119106][  T302]  __x64_sys_write+0x7b/0x90
[   30.126964][  T302]  x64_sys_call+0x8ef/0x9a0
[   30.134778][  T302]  do_syscall_64+0x4c/0xa0
[   30.142364][  T302]  ? clear_bhb_loop+0x50/0xa0
[   30.147746][  T302]  ? clear_bhb_loop+0x50/0xa0
[   30.155608][  T302]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   30.166359][  T302] RIP: 0033:0x7f199e180df9
[   30.172657][  T302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   30.211412][  T302] RSP: 002b:00007f199e13d218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   30.224528][  T302] RAX: ffffffffffffffda RBX: 00007f199e2096c8 RCX: 00007f199e180df9
[   30.238378][  T302] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004
[   30.251263][  T302] RBP: 00007f199e2096c0 R08: 00007f199e13cfb7 R09: 0000000000000000
[   30.263178][  T302] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f199e1d5a10
[pid   305] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC <unfinished ...>
[pid   304] write(6, "\x60\x7f\x00\x6b\x64\x05\x00\x66\xf1\xf1\xe6\x00\x08\x08\x01\x00\x04\x40\x43\x40\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 131072 <unfinished ...>
[pid   303] <... mmap resumed>)         = 0x200000000000
[pid   300] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   297] munmap(0x7f1995d1d000, 138412032 <unfinished ...>
[pid   305] <... open resumed>)         = 5
[pid   304] <... write resumed>)        = 131072
[pid   303] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   300] futex(0x7f199e2096dc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] <... munmap resumed>)       = 0
[pid   305] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] munmap(0x7f1995d1d000, 138412032 <unfinished ...>
[pid   303] <... futex resumed>)        = 1
[pid   300] <... futex resumed>)        = 0
[pid   297] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid   301] <... futex resumed>)        = 0
[pid   305] <... futex resumed>)        = 0
[pid   304] <... munmap resumed>)       = 0
[pid   303] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   301] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   297] <... openat resumed>)       = 7
[pid   305] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   304] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid   303] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   301] <... futex resumed>)        = 0
[pid   300] <... mmap resumed>)         = 0x7f199e0fc000
[pid   297] ioctl(7, LOOP_SET_FD, 6 <unfinished ...>
[pid   304] <... openat resumed>)       = 7
[pid   303] memfd_create("syzkaller", 0 <unfinished ...>
[pid   301] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   300] mprotect(0x7f199e0fd000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   297] <... ioctl resumed>)        = -1 EBUSY (Device or resource busy)
[pid   304] ioctl(7, LOOP_SET_FD, 6 <unfinished ...>
[pid   303] <... memfd_create resumed>) = 6
[pid   304] <... ioctl resumed>)        = -1 EBUSY (Device or resource busy)
[pid   303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid   300] <... mprotect resumed>)     = 0
[pid   297] ioctl(7, LOOP_CLR_FD <unfinished ...>
[pid   304] ioctl(7, LOOP_CLR_FD <unfinished ...>
[pid   303] <... mmap resumed>)         = 0x7f1995d1d000
[pid   300] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid   297] <... ioctl resumed>)        = 0
[pid   304] <... ioctl resumed>)        = 0
[pid   303] write(6, "\x60\x7f\x00\x6b\x64\x05\x00\x66\xf1\xf1\xe6\x00\x08\x08\x01\x00\x04\x40\x43\x40\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 131072 <unfinished ...>
[pid   300] <... rt_sigprocmask resumed>[], 8) = 0
[pid   303] <... write resumed>)        = 131072
[pid   300] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e11c990, parent_tid=0x7f199e11c990, exit_signal=0, stack=0x7f199e0fc000, stack_size=0x20300, tls=0x7f199e11c6c0} <unfinished ...>
[pid   297] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid   300] <... clone3 resumed> => {parent_tid=[317]}, 88) = 317
[pid   297] close(7 <unfinished ...>
[pid   300] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   297] <... close resumed>)        = 0
[pid   300] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   297] close(6 <unfinished ...>
[pid   300] futex(0x7f199e2096d8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] <... close resumed>)        = 0
[pid   300] <... futex resumed>)        = 0
[pid   300] futex(0x7f199e2096dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   303] munmap(0x7f1995d1d000, 138412032 <unfinished ...>
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   295] <... futex resumed>)        = 0
[pid   297] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   295] <... futex resumed>)        = 0
[pid   297] write(4, 0x200000000100, 18 <unfinished ...>
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   297] <... write resumed>)        = 18
[pid   304] ioctl(7, LOOP_SET_FD, 6 <unfinished ...>
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... ioctl resumed>)        = -1 EBUSY (Device or resource busy)
[pid   297] <... futex resumed>)        = 1
[pid   295] <... futex resumed>)        = 0
[pid   304] close(7 <unfinished ...>
[pid   297] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... close resumed>)        = 0
[pid   297] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   295] <... futex resumed>)        = 0
[pid   304] close(6 <unfinished ...>
[pid   297] sendmsg(-1, 0x200000000180, 0 <unfinished ...>
[pid   295] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   304] <... close resumed>)        = 0
[pid   297] <... sendmsg resumed>)      = -1 EBADF (Bad file descriptor)
[pid   304] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   297] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... futex resumed>)        = 1
[pid   303] <... munmap resumed>)       = 0
[pid   297] <... futex resumed>)        = 1
[pid   295] <... futex resumed>)        = 0
[pid   294] <... futex resumed>)        = 0
[pid   304] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   303] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid   297] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   295] exit_group(0 <unfinished ...>
[pid   294] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   304] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   303] <... openat resumed>)       = 7
[pid   297] <... futex resumed>)        = ?
[pid   295] <... exit_group resumed>)   = ?
[pid   294] <... futex resumed>)        = 0
[   30.274201][  T302] R13: 0000200000000000 R14: 00007f199e1d5083 R15: 0000200000000100
[   30.287719][  T302]  </TASK>
[   30.292465][  T302] Modules linked in:
[   30.304961][  T302] ---[ end trace b709cf3a0f716ea9 ]---
[pid   304] write(4, 0x200000000100, 18 <unfinished ...>
[pid   303] ioctl(7, LOOP_SET_FD, 6 <unfinished ...>
[pid   297] +++ exited with 0 +++
[pid   295] +++ exited with 0 +++
[pid   294] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   303] <... ioctl resumed>)        = -1 EBUSY (Device or resource busy)
[pid   290] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=295, si_uid=0, si_status=0, si_utime=0, si_stime=4} ---
[pid   303] ioctl(7, LOOP_CLR_FD <unfinished ...>
[pid   290] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid   303] <... ioctl resumed>)        = 0
[pid   290] <... restart_syscall resumed>) = 0
[pid   290] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid   290] ioctl(3, LOOP_CLR_FD)       = 0
[pid   290] close(3)                    = 0
[pid   290] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   303] ioctl(7, LOOP_SET_FD, 6 <unfinished ...>
[pid   290] <... clone resumed>, child_tidptr=0x555561d35690) = 318
[pid   303] <... ioctl resumed>)        = -1 EBUSY (Device or resource busy)
[pid   303] close(7)                    = 0
[pid   303] close(6)                    = 0
[pid   303] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[   30.317345][  T304] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5867: Out of memory
[   30.317928][  T302] RIP: 0010:ext4_create_inline_data+0x416/0x420
[pid   303] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   301] <... futex resumed>)        = 0
./strace-static-x86_64: Process 318 attached
./strace-static-x86_64: Process 317 attached
[pid   318] set_robust_list(0x555561d356a0, 24 <unfinished ...>
[pid   317] set_robust_list(0x7f199e11c9a0, 24 <unfinished ...>
[pid   318] <... set_robust_list resumed>) = 0
[pid   317] <... set_robust_list resumed>) = 0
[pid   318] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid   317] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   300] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   300] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   305] <... futex resumed>)        = 0
[pid   300] <... futex resumed>)        = 1
[pid   305] memfd_create("syzkaller", 0 <unfinished ...>
[pid   300] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   305] <... memfd_create resumed>) = 6
[pid   305] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1995cfc000
[pid   305] write(6, "\x60\x7f\x00\x6b\x64\x05\x00\x66\xf1\xf1\xe6\x00\x08\x08\x01\x00\x04\x40\x43\x40\x00\xf8\x01\x00\x10\x00\x02\x00\x03\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 131072) = 131072
[pid   305] munmap(0x7f1995cfc000, 138412032) = 0
[pid   305] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 7
[pid   305] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid   305] ioctl(7, LOOP_CLR_FD)       = 0
[pid   318] <... prctl resumed>)        = 0
[pid   317] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   305] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid   305] close(7)                    = 0
[pid   305] close(6)                    = 0
[pid   305] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 1
[pid   300] <... futex resumed>)        = 0
[pid   305] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   300] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] setpgid(0, 0 <unfinished ...>
[pid   317] mmap(0x200000000000, 8388608, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 <unfinished ...>
[pid   305] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   300] <... futex resumed>)        = 0
[pid   318] <... setpgid resumed>)      = 0
[pid   305] write(4, 0x200000000100, 18 <unfinished ...>
[pid   301] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   300] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   294] <... futex resumed>)        = -1 ETIMEDOUT (Connection timed out)
[pid   318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid   305] <... write resumed>)        = 18
[pid   294] futex(0x7f199e2096dc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] <... openat resumed>)       = 3
[pid   317] <... mmap resumed>)         = 0x200000000000
[pid   305] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] <... futex resumed>)        = 0
[pid   318] write(3, "1000", 4 <unfinished ...>
[pid   317] futex(0x7f199e2096dc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   305] <... futex resumed>)        = 1
[pid   300] <... futex resumed>)        = 0
[pid   294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   318] <... write resumed>)        = 4
[pid   317] <... futex resumed>)        = 0
[pid   305] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   300] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] <... mmap resumed>)         = 0x7f199e0fc000
[pid   318] close(3 <unfinished ...>
[pid   317] futex(0x7f199e2096d8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   305] <... futex resumed>)        = -1 EAGAIN (Resource temporarily unavailable)
[pid   300] <... futex resumed>)        = 0
[pid   294] mprotect(0x7f199e0fd000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   318] <... close resumed>)        = 0
[pid   305] sendmsg(-1, 0x200000000180, 0 <unfinished ...>
[pid   300] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   294] <... mprotect resumed>)     = 0
executing program
[pid   318] write(1, "executing program\n", 18 <unfinished ...>
[pid   305] <... sendmsg resumed>)      = -1 EBADF (Bad file descriptor)
[pid   294] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid   318] <... write resumed>)        = 18
[pid   305] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   294] <... rt_sigprocmask resumed>[], 8) = 0
[pid   318] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   305] <... futex resumed>)        = 1
[pid   300] <... futex resumed>)        = 0
[pid   294] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e11c990, parent_tid=0x7f199e11c990, exit_signal=0, stack=0x7f199e0fc000, stack_size=0x20300, tls=0x7f199e11c6c0} <unfinished ...>
[pid   318] <... futex resumed>)        = 0
[pid   305] futex(0x7f199e2096c8, FUTEX_WAIT_PRIVATE, 0, NULL <unfinished ...>
[pid   300] exit_group(0 <unfinished ...>
[pid   318] rt_sigaction(SIGRT_1, {sa_handler=0x7f199e1a6ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f199e198390},  <unfinished ...>
[pid   317] <... futex resumed>)        = ?
[pid   305] <... futex resumed>)        = ?
[pid   303] <... futex resumed>)        = 0
[pid   301] <... futex resumed>)        = 1
[pid   300] <... exit_group resumed>)   = ?
[   30.342041][  T302] Code: ff ff e8 3d 20 d0 ff e9 0f ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 26 ff ff ff e8 24 20 d0 ff e9 1c ff ff ff e8 da a4 91 ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 48 89 fb
[   30.380135][  T304] EXT4-fs error (device loop0): ext4_dirty_inode:6071: inode #18: comm syz-executor767: mark_inode_dirty error
[   30.399133][  T302] RSP: 0018:ffffc90000b172c0 EFLAGS: 00010293
[   30.409120][  T303] ------------[ cut here ]------------
[pid   294] <... clone3 resumed> => {parent_tid=[319]}, 88) = 319
[pid   318] <... rt_sigaction resumed>NULL, 8) = 0
[pid   317] +++ exited with 0 +++
[pid   305] +++ exited with 0 +++
[pid   303] write(4, 0x200000000100, 18 <unfinished ...>
[pid   301] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   300] +++ exited with 0 +++
[pid   294] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   318] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1],  <unfinished ...>
[pid   294] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   293] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=300, si_uid=0, si_status=0, si_utime=0, si_stime=3} ---
[pid   318] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   294] futex(0x7f199e2096d8, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 <unfinished ...>
[pid   294] <... futex resumed>)        = 0
./strace-static-x86_64: Process 319 attached
[pid   318] <... mmap resumed>)         = 0x7f199e11d000
[pid   294] futex(0x7f199e2096dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} <unfinished ...>
[pid   293] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid   319] set_robust_list(0x7f199e11c9a0, 24 <unfinished ...>
[pid   318] mprotect(0x7f199e11e000, 131072, PROT_READ|PROT_WRITE <unfinished ...>
[pid   293] <... openat resumed>)       = 3
[pid   319] <... set_robust_list resumed>) = 0
[pid   318] <... mprotect resumed>)     = 0
[pid   293] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid   319] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   318] rt_sigprocmask(SIG_BLOCK, ~[],  <unfinished ...>
[pid   293] <... ioctl resumed>)        = 0
[pid   319] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   318] <... rt_sigprocmask resumed>[], 8) = 0
[pid   293] close(3 <unfinished ...>
[pid   319] sendmsg(-1, 0x200000000180, 0 <unfinished ...>
[pid   318] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e13d990, parent_tid=0x7f199e13d990, exit_signal=0, stack=0x7f199e11d000, stack_size=0x20300, tls=0x7f199e13d6c0} <unfinished ...>
[pid   293] <... close resumed>)        = 0
[pid   319] <... sendmsg resumed>)      = -1 EBADF (Bad file descriptor)
[pid   293] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid   319] futex(0x7f199e2096dc, FUTEX_WAKE_PRIVATE, 1000000 <unfinished ...>
[pid   318] <... clone3 resumed> => {parent_tid=[320]}, 88) = 320
[pid   318] rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
[pid   293] <... clone resumed>, child_tidptr=0x555561d35690) = 321
[pid   318] <... rt_sigprocmask resumed>NULL, 8) = 0
[pid   318] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   318] futex(0x7f199e2096cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} <unfinished ...>
[pid   319] <... futex resumed>)        = 1
[pid   294] <... futex resumed>)        = 0
[pid   319] futex(0x7f199e2096d8, FUTEX_WAIT_PRIVATE, 0, NULLexecuting program
./strace-static-x86_64: Process 320 attached
./strace-static-x86_64: Process 321 attached
 <unfinished ...>
[pid   321] set_robust_list(0x555561d356a0, 24) = 0
[pid   321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   321] setpgid(0, 0)               = 0
[pid   321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid   321] write(3, "1000", 4)         = 4
[pid   321] close(3)                    = 0
[pid   321] write(1, "executing program\n", 18) = 18
[pid   321] futex(0x7f199e2096cc, FUTEX_WAKE_PRIVATE, 1000000) = 0
[pid   321] rt_sigaction(SIGRT_1, {sa_handler=0x7f199e1a6ce0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f199e198390}, NULL, 8) = 0
[pid   321] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
[pid   321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f199e11d000
[pid   321] mprotect(0x7f199e11e000, 131072, PROT_READ|PROT_WRITE) = 0
[pid   321] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
[pid   321] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f199e13d990, parent_tid=0x7f199e13d990, exit_signal=0, stack=0x7f199e11d000, stack_size=0x20300, tls=0x7f199e13d6c0} => {parent_tid=[322]}, 88) = 322
[pid   321] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid   321] futex(0x7f199e2096c8, FUTEX_WAKE_PRIVATE, 1000000) = 0
[   30.413846][  T304] EXT4-fs error (device loop0): ext4_get_max_inline_size:116: inode #18: comm syz-executor767: can't get inode location 18
[   30.441050][  T302] RAX: ffffffff81d70af6 RBX: 0000000000000000 RCX: ffff8881049ce2c0
[   30.451979][  T303] kernel BUG at fs/ext4/inline.c:302!
[   30.452003][  T303] invalid opcode: 0000 [#2] PREEMPT SMP KASAN
[   30.452022][  T303] CPU: 1 PID: 303 Comm: syz-executor767 Tainted: G      D           5.15.189-syzkaller-android13-5.15.189_r00 #0
[   30.461469][  T302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   30.471175][  T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   30.471193][  T303] RIP: 0010:ext4_create_inline_data+0x416/0x420
[   30.471222][  T303] Code: ff ff e8 3d 20 d0 ff e9 0f ff ff ff 89 f9 80 e1 07 fe c1 38 c1 0f 8c 26 ff ff ff e8 24 20 d0 ff e9 1c ff ff ff e8 da a4 91 ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 53 48 89 fb
[   30.471239][  T303] RSP: 0018:ffffc90000b272c0 EFLAGS: 00010293
[   30.488643][  T302] RBP: ffffc90000b173f0 R08: 0000000000000000 R09: ffffed1021997528
[   30.502751][  T303] 
[   30.502762][  T303] RAX: ffffffff81d70af6 RBX: 0000000000000000 RCX: ffff8881049ca780
[   30.502780][  T303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   30.502791][  T303] RBP: ffffc90000b273f0 R08: 0000000000000000 R09: ffffed1021998bbb
[   30.502804][  T303] R10: ffffed1021998bbb R11: 1ffff11021998bba R12: ffff88810ccc5ed8
[   30.502819][  T303] R13: 1ffff92000164e5c R14: 0000000000000000 R15: dffffc0000000000
[   30.502832][  T303] FS:  00007f199e13d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   30.502849][  T303] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.502863][  T303] CR2: 00007ffd16b14750 CR3: 000000011eaaa000 CR4: 00000000003506a0
[   30.527500][  T304] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz-executor767: Invalid block bitmap block 0 in block_group 0
[   30.534502][  T303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   30.534523][  T303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   30.534535][  T303] Call Trace:
[   30.534541][  T303]  <TASK>
[   30.534548][  T303]  ? __kasan_check_read+0x11/0x20
[   30.571569][  T302] R10: ffffed1021997528 R11: 1ffff11021997527 R12: ffff88810ccbaa40
[   30.581908][  T303]  ? ext4_update_inline_data+0x4f0/0x4f0
[   30.581951][  T303]  ? clear_nonspinnable+0x60/0x60
[   30.581972][  T303]  ? ext4_get_max_inline_size+0x16f/0x1e0
[   30.597934][  T302] R13: 1ffff92000162e5c R14: 0000000000000000 R15: dffffc0000000000
[   30.601185][  T303]  ext4_prepare_inline_data+0x16c/0x1f0
[   30.601221][  T303]  ext4_try_to_write_inline_data+0x317/0x1110
[   30.601242][  T303]  ? __kasan_check_write+0x14/0x20
[   30.620295][  T302] FS:  00007f199e13d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   30.631868][  T303]  ? xas_set_mark+0x134/0x370
[   30.631902][  T303]  ? zero_user_segment+0x390/0x390
[   30.631921][  T303]  ? __xa_alloc_cyclic+0x2d0/0x2d0
[   30.643962][  T302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.659137][  T303]  ext4_write_begin+0x221/0x1220
[   30.659174][  T303]  ? __kasan_check_write+0x14/0x20
[   30.659194][  T303]  ? ext4_mark_iloc_dirty+0x2fad/0x3ef0
[   30.659213][  T303]  ? __ext4_journal_ensure_credits+0x430/0x430
[   30.678308][  T302] CR2: 00007fc18b2fa000 CR3: 000000011ed1b000 CR4: 00000000003506b0
[   30.687797][  T303]  ? ext4_readahead+0x110/0x110
[   30.687833][  T303]  ? wb_get_create+0xb33/0xb60
[   30.687855][  T303]  ? __kasan_check_write+0x14/0x20
[   30.687875][  T303]  ? _raw_spin_lock+0x8e/0xe0
[   30.698361][  T302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   30.711911][  T303]  ? __kasan_check_write+0x14/0x20
[   30.711944][  T303]  ? _raw_spin_lock+0x8e/0xe0
[   30.711964][  T303]  ? _raw_spin_trylock_bh+0x130/0x130
[   30.737136][  T302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   30.750842][  T303]  ? fault_in_readable+0x130/0x160
[   30.750878][  T303]  ? __kasan_check_read+0x11/0x20
[   30.750899][  T303]  ? fault_in_iov_iter_readable+0x23e/0x280
[   30.750920][  T303]  generic_perform_write+0x2ad/0x670
[   30.761930][  T302] Kernel panic - not syncing: Fatal exception
[   30.769980][  T303]  ? generic_update_time+0x1da/0x1f0
[   31.123062][  T303]  ? file_remove_privs+0x590/0x590
[   31.128882][  T303]  ? grab_cache_page_write_begin+0xb0/0xb0
[   31.136399][  T303]  ? generic_write_checks+0x3d4/0x480
[   31.145926][  T303]  ext4_buffered_write_iter+0x4ed/0x670
[   31.156996][  T303]  ext4_file_write_iter+0x18c/0x14c0
[   31.168807][  T303]  ? compat_start_thread+0x20/0x20
[   31.179820][  T303]  ? avc_policy_seqno+0x1b/0x70
[   31.186808][  T303]  ? ext4_file_read_iter+0x510/0x510
[   31.196163][  T303]  ? memset+0x35/0x40
[   31.201219][  T303]  ? iov_iter_init+0xbc/0x180
[   31.208074][  T303]  vfs_write+0x802/0xf70
[   31.213678][  T303]  ? file_end_write+0x1b0/0x1b0
[   31.221263][  T303]  ? wait_for_completion_killable_timeout+0x10/0x10
[   31.230264][  T303]  ? __fget_files+0x2c4/0x320
[   31.236995][  T303]  ? __fdget_pos+0x2d2/0x380
[   31.245869][  T303]  ? ksys_write+0x71/0x240
[   31.254537][  T303]  ksys_write+0x140/0x240
[   31.260667][  T303]  ? __ia32_sys_read+0x90/0x90
[   31.269590][  T303]  ? __kasan_check_write+0x14/0x20
[   31.281349][  T303]  ? switch_fpu_return+0x15d/0x2c0
[   31.287565][  T303]  __x64_sys_write+0x7b/0x90
[   31.293768][  T303]  x64_sys_call+0x8ef/0x9a0
[   31.303475][  T303]  do_syscall_64+0x4c/0xa0
[   31.313157][  T303]  ? clear_bhb_loop+0x50/0xa0
[   31.322863][  T303]  ? clear_bhb_loop+0x50/0xa0
[   31.331834][  T303]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   31.338696][  T303] RIP: 0033:0x7f199e180df9
[   31.345675][  T303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 81 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   31.374606][  T303] RSP: 002b:00007f199e13d218 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   31.389607][  T303] RAX: ffffffffffffffda RBX: 00007f199e2096c8 RCX: 00007f199e180df9
[   31.401434][  T303] RDX: 0000000000000012 RSI: 0000200000000100 RDI: 0000000000000004
[   31.415295][  T303] RBP: 00007f199e2096c0 R08: 00007f199e13cfb7 R09: 0000000000000000
[   31.426865][  T303] R10: 0000000000000012 R11: 0000000000000246 R12: 00007f199e1d5a10
[   31.436815][  T303] R13: 0000200000000000 R14: 00007f199e1d5083 R15: 0000200000000100
[   31.445588][  T303]  </TASK>
[   31.449383][  T303] Modules linked in:
[   31.454736][  T302] Kernel Offset: disabled
[   31.465272][  T302] Rebooting in 86400 seconds..