./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2988343433 <...> Warning: Permanently added '10.128.0.241' (ECDSA) to the list of known hosts. execve("./syz-executor2988343433", ["./syz-executor2988343433"], 0x7ffe5cbcb380 /* 10 vars */) = 0 brk(NULL) = 0x555555a78000 brk(0x555555a78c40) = 0x555555a78c40 arch_prctl(ARCH_SET_FS, 0x555555a78300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2988343433", 4096) = 28 brk(0x555555a99c40) = 0x555555a99c40 brk(0x555555a9a000) = 0x555555a9a000 mprotect(0x7f78e1799000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 2097152) = 0 pwrite64(3, "\x20\x00\x00\x00\x00\x02\x00\x00\x19\x00\x00\x00\x90\x01\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x06\x00\x00\x00\x00\x00\x08\x00\x00\x80\x00\x00\x20\x00\x00\x00\xdb\xf4\x65\x5f\xdb\xf4\x65\x5f\x01\x00\xff\xff\x53\xef\x01\x00\x01\x00\x00\x00\xda\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x00\x04\x00\x00\x08\x00\x00\x00\xd2\xc2\x00\x00"..., 102, 1024) = 102 pwrite64(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x82\xe3\x67\x24\xc6\xf3\x4c\xaa\x84\x6e\xd2\xe5\x27\x70\x33\x78\x01\x00\x40", 31, 1248) = 31 pwrite64(3, "\x02\x00\x00\x00\x03\x00\x00\x00\x04\x00\x00\x00\x19\x00\x0f\x00\x03\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00\x2e\x69", 32, 4096) = 32 pwrite64(3, "\x7f\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 4098, 8192) = 4098 pwrite64(3, "\xed\x41\x00\x00\x10\x00\x00\x00\xda\xf4\x65\x5f\xdb\xf4\x65\x5f\xdb\xf4\x65\x5f\x00\x00\x00\x00\x00\x00\x04\x00\x80\x00\x00\x00\x00\x00\x08\x00\x05\x00\x00\x00\x0a\xf3\x01\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x09\x00\x00\x00\x10", 61, 17408) = 61 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 chdir("./file0") = 0 creat("./bus", 000) = 3 syzkaller login: [ 34.666618][ T3602] loop0: detected capacity change from 0 to 4096 [ 34.681387][ T3602] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 openat(AT_FDCWD, "/proc/self/exe", O_RDONLY) = 6 sendfile(4, 6, NULL, 2147483663) = 851968 ftruncate(3, 1) = 0 open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = 7 [ 34.699260][ T26] audit: type=1800 audit(1656644382.350:2): pid=3602 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor298" name="bus" dev="loop0" ino=17 res=0 errno=0 [ 34.742028][ T3602] ------------[ cut here ]------------ [ 34.747851][ T3602] kernel BUG at fs/ext4/inode.c:2720! [ 34.753348][ T3602] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 34.759419][ T3602] CPU: 1 PID: 3602 Comm: syz-executor298 Not tainted 5.19.0-rc4-syzkaller-00044-g1a0e93df1e10 #0 [ 34.769893][ T3602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/18/2022 [ 34.779925][ T3602] RIP: 0010:ext4_writepages+0x2409/0x3b90 [ 34.785631][ T3602] Code: e1 be 00 10 00 00 4c 89 ef 48 d3 ee ba 01 00 00 00 e8 fb 1d fe ff 83 c0 01 89 84 24 bc 00 00 00 e9 56 e2 ff ff e8 77 ea 59 ff <0f> 0b e8 70 ea 59 ff 44 0f b6 a4 24 db 00 00 00 89 5c 24 08 e9 cb [ 34.805216][ T3602] RSP: 0018:ffffc900030ef4b0 EFLAGS: 00010293 [ 34.811258][ T3602] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 34.819207][ T3602] RDX: ffff88807ed7d880 RSI: ffffffff82207c39 RDI: 0000000000000007 [ 34.827155][ T3602] RBP: ffff8880729a0a58 R08: 0000000000000007 R09: 0000000000000000 [ 34.835114][ T3602] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 34.843063][ T3602] R13: ffff8880729a0cb8 R14: ffffc900030efa00 R15: ffff888076d34000 [ 34.851012][ T3602] FS: 0000555555a78300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 34.859922][ T3602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.866486][ T3602] CR2: 00005584fec7c348 CR3: 000000001c8f4000 CR4: 0000000000350ee0 [ 34.874436][ T3602] Call Trace: [ 34.877694][ T3602] [ 34.880613][ T3602] ? map_id_up+0x178/0x2f0 [ 34.885019][ T3602] ? find_held_lock+0x2d/0x110 [ 34.889765][ T3602] ? __lock_acquire+0x163e/0x5660 [ 34.894783][ T3602] ? __ext4_mark_inode_dirty+0x8d0/0x8d0 [ 34.900391][ T3602] ? __brelse+0x84/0xa0 [ 34.904523][ T3602] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 34.910485][ T3602] ? mark_lock.part.0+0xee/0x1910 [ 34.915491][ T3602] ? find_held_lock+0x2d/0x110 [ 34.920245][ T3602] ? do_writepages+0x50b/0x690 [ 34.925000][ T3602] ? lock_downgrade+0x6e0/0x6e0 [ 34.929827][ T3602] ? do_raw_spin_lock+0x120/0x2a0 [ 34.934831][ T3602] ? rwlock_bug.part.0+0x90/0x90 [ 34.939746][ T3602] ? __ext4_mark_inode_dirty+0x8d0/0x8d0 [ 34.945355][ T3602] do_writepages+0x1ab/0x690 [ 34.949935][ T3602] ? writeback_set_ratelimit+0x150/0x150 [ 34.955557][ T3602] ? wbc_attach_and_unlock_inode+0x463/0x8d0 [ 34.961517][ T3602] ? lock_downgrade+0x6e0/0x6e0 [ 34.966349][ T3602] ? lock_release+0x780/0x780 [ 34.971008][ T3602] ? do_raw_spin_unlock+0x171/0x230 [ 34.976185][ T3602] ? _raw_spin_unlock+0x24/0x40 [ 34.981027][ T3602] ? wbc_attach_and_unlock_inode+0x4b9/0x8d0 [ 34.986984][ T3602] filemap_fdatawrite_wbc+0x143/0x1b0 [ 34.992342][ T3602] __filemap_fdatawrite_range+0xb4/0xf0 [ 34.997872][ T3602] ? delete_from_page_cache_batch+0xde0/0xde0 [ 35.003920][ T3602] file_write_and_wait_range+0xb2/0x120 [ 35.009445][ T3602] ext4_sync_file+0x21f/0xfd0 [ 35.014103][ T3602] ? ext4_getfsmap+0x990/0x990 [ 35.018844][ T3602] vfs_fsync_range+0x13a/0x220 [ 35.023587][ T3602] ext4_buffered_write_iter+0x27d/0x330 [ 35.029114][ T3602] ext4_file_write_iter+0x43c/0x1520 [ 35.034476][ T3602] ? __lock_acquire+0x163e/0x5660 [ 35.039484][ T3602] ? ext4_buffered_write_iter+0x330/0x330 [ 35.045184][ T3602] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 35.051142][ T3602] ? aa_path_link+0x2f0/0x2f0 [ 35.055799][ T3602] new_sync_write+0x38a/0x560 [ 35.060454][ T3602] ? new_sync_read+0x5f0/0x5f0 [ 35.065287][ T3602] ? lock_release+0x780/0x780 [ 35.069951][ T3602] vfs_write+0x7c0/0xac0 [ 35.074172][ T3602] ksys_write+0x127/0x250 [ 35.078499][ T3602] ? __ia32_sys_read+0xb0/0xb0 [ 35.083242][ T3602] ? lockdep_hardirqs_on+0x79/0x100 [ 35.088503][ T3602] ? _raw_spin_unlock_irq+0x2a/0x40 [ 35.093679][ T3602] ? ptrace_notify+0xfa/0x140 [ 35.098331][ T3602] do_syscall_64+0x35/0xb0 [ 35.102726][ T3602] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 35.108598][ T3602] RIP: 0033:0x7f78e172c069 [ 35.112990][ T3602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 35.132576][ T3602] RSP: 002b:00007ffea9554b98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 35.140964][ T3602] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f78e172c069 [ 35.148999][ T3602] RDX: 0000000000000016 RSI: 0000000020002580 RDI: 0000000000000007 [ 35.156959][ T3602] RBP: 00007f78e16eb860 R08: 0000000000000000 R09: 0000000000000000 [ 35.164910][ T3602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f78e16eb8f0 [ 35.172874][ T3602] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 35.180847][ T3602] [ 35.183842][ T3602] Modules linked in: [ 35.190528][ T3602] ---[ end trace 0000000000000000 ]--- [ 35.196133][ T3602] RIP: 0010:ext4_writepages+0x2409/0x3b90 [ 35.202121][ T3602] Code: e1 be 00 10 00 00 4c 89 ef 48 d3 ee ba 01 00 00 00 e8 fb 1d fe ff 83 c0 01 89 84 24 bc 00 00 00 e9 56 e2 ff ff e8 77 ea 59 ff <0f> 0b e8 70 ea 59 ff 44 0f b6 a4 24 db 00 00 00 89 5c 24 08 e9 cb [ 35.222166][ T3602] RSP: 0018:ffffc900030ef4b0 EFLAGS: 00010293 [ 35.228318][ T3602] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 35.236352][ T3602] RDX: ffff88807ed7d880 RSI: ffffffff82207c39 RDI: 0000000000000007 [ 35.244389][ T3602] RBP: ffff8880729a0a58 R08: 0000000000000007 R09: 0000000000000000 [ 35.252434][ T3602] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 35.260436][ T3602] R13: ffff8880729a0cb8 R14: ffffc900030efa00 R15: ffff888076d34000 [ 35.268459][ T3602] FS: 0000555555a78300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 35.277453][ T3602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.284064][ T3602] CR2: 00007f71d03c66c8 CR3: 000000001c8f4000 CR4: 0000000000350ee0 [ 35.292071][ T3602] Kernel panic - not syncing: Fatal exception [ 35.298252][ T3602] Kernel Offset: disabled [ 35.302586][ T3602] Rebooting in 86400 seconds..