./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3981158877 <...> Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. execve("./syz-executor3981158877", ["./syz-executor3981158877"], 0x7ffd9b836f10 /* 10 vars */) = 0 brk(NULL) = 0x555568ede000 brk(0x555568eded00) = 0x555568eded00 arch_prctl(ARCH_SET_FS, 0x555568ede380) = 0 set_tid_address(0x555568ede650) = 5220 set_robust_list(0x555568ede660, 24) = 0 rseq(0x555568edeca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3981158877", 4096) = 28 getrandom("\xec\x1c\x12\x5b\xe9\xc8\x17\xac", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555568eded00 brk(0x555568effd00) = 0x555568effd00 brk(0x555568f00000) = 0x555568f00000 mprotect(0x7f841d29a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8414c00000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 munmap(0x7f8414c00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 [ 80.153682][ T5220] loop0: detected capacity change from 0 to 1024 [ 80.187446][ T5220] EXT4-fs: Ignoring removed orlov option [ 80.193540][ T5220] EXT4-fs: Ignoring removed nomblk_io_submit option mount("/dev/loop0", "./file1", "ext4", MS_RELATIME, "noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,debug,n"...) = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) open("./bus", O_WRONLY|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_NOATIME|0x3c, 000) = 4 creat("./file1", 000) = 5 write(5, "\x78\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 120) = 120 unlink("./file1") = 0 mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 open("./bus", O_RDONLY) = 6 io_uring_setup(5414, {flags=0, sq_thread_cpu=0x3, sq_thread_idle=0, sq_entries=8192, cq_entries=16384, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE|0x6000, sq_off={head=0, tail=4, ring_mask=16, ring_entries=24, flags=36, dropped=32, array=262208}, cq_off={head=8, tail=12, ring_mask=20, ring_entries=28, overflow=44, cqes=64, flags=40}}) = 7 mmap(NULL, 294976, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 7, 0) = 0x7f841d198000 mmap(NULL, 524288, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 7, 0x10000000) = 0x7f841d118000 [ 80.217150][ T5220] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002] [ 80.228585][ T5220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. ioctl(6, LOOP_SET_STATUS, {lo_number=0, lo_offset=0x2c, lo_encrypt_type=0x40 /* LO_CRYPT_??? */, lo_encrypt_key_size=40, lo_flags=0, lo_name="", lo_encrypt_key="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", ...}) = 0 exit_group(0) = ? [ 80.313495][ T5220] loop0: detected capacity change from 1024 to 1023 [ 80.350079][ T5220] ------------[ cut here ]------------ [ 80.355971][ T5220] kernel BUG at fs/ext4/inline.c:1953! [ 80.361454][ T5220] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 80.368413][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz-executor398 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 80.380043][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 80.390096][ T5220] RIP: 0010:ext4_inline_data_truncate+0xced/0xcf0 [ 80.396540][ T5220] Code: e9 17 fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 44 fd ff ff e8 c3 fb a1 ff e9 3a fd ff ff e8 09 ad 58 09 e8 04 df 3d ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 80.416154][ T5220] RSP: 0018:ffffc900035cf660 EFLAGS: 00010293 [ 80.422238][ T5220] RAX: ffffffff8255ac9c RBX: ffffc900035cf700 RCX: ffff8880241b9e00 [ 80.430209][ T5220] RDX: 0000000000000000 RSI: 00000000ffffffc3 RDI: 0000000000000000 [ 80.438199][ T5220] RBP: ffffc900035cf7f0 R08: ffffffff8255a948 R09: 1ffff1100e59f149 [ 80.446169][ T5220] R10: dffffc0000000000 R11: ffffed100e59f14a R12: ffffc900035cf760 [ 80.454136][ T5220] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 80.462112][ T5220] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 80.471045][ T5220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.477632][ T5220] CR2: 00005649eaf8b000 CR3: 000000000e534000 CR4: 00000000003506f0 [ 80.485606][ T5220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.493611][ T5220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.501600][ T5220] Call Trace: [ 80.504887][ T5220] [ 80.507832][ T5220] ? __die_body+0x88/0xe0 [ 80.512198][ T5220] ? die+0xcf/0x110 [ 80.516025][ T5220] ? do_trap+0x15a/0x3a0 [ 80.520276][ T5220] ? ext4_inline_data_truncate+0xced/0xcf0 [ 80.526095][ T5220] ? do_error_trap+0x1dc/0x2c0 [ 80.530868][ T5220] ? ext4_inline_data_truncate+0xced/0xcf0 [ 80.536703][ T5220] ? __pfx_lock_acquire+0x10/0x10 [ 80.541736][ T5220] ? __pfx_do_error_trap+0x10/0x10 [ 80.546862][ T5220] ? handle_invalid_op+0x34/0x40 [ 80.551806][ T5220] ? ext4_inline_data_truncate+0xced/0xcf0 [ 80.557620][ T5220] ? exc_invalid_op+0x38/0x50 [ 80.562310][ T5220] ? asm_exc_invalid_op+0x1a/0x20 [ 80.567341][ T5220] ? ext4_inline_data_truncate+0x998/0xcf0 [ 80.573183][ T5220] ? ext4_inline_data_truncate+0xcec/0xcf0 [ 80.579020][ T5220] ? ext4_inline_data_truncate+0xced/0xcf0 [ 80.584845][ T5220] ? __pfx_ext4_inline_data_truncate+0x10/0x10 [ 80.591016][ T5220] ? __ext4_mark_inode_dirty+0x5b2/0x880 [ 80.596663][ T5220] ext4_truncate+0x3c7/0x11a0 [ 80.601353][ T5220] ? __pfx_ext4_truncate+0x10/0x10 [ 80.606474][ T5220] ? ext4_journal_check_start+0x175/0x250 [ 80.612201][ T5220] ? ext4_inode_is_fast_symlink+0x266/0x3a0 [ 80.618105][ T5220] ext4_evict_inode+0x90f/0xf50 [ 80.622964][ T5220] ? _raw_spin_unlock+0x28/0x50 [ 80.627827][ T5220] ? __pfx_ext4_evict_inode+0x10/0x10 [ 80.633210][ T5220] ? do_raw_spin_unlock+0x13c/0x8b0 [ 80.638412][ T5220] ? _raw_spin_unlock+0x28/0x50 [ 80.643270][ T5220] ? __pfx_ext4_evict_inode+0x10/0x10 [ 80.648654][ T5220] evict+0x532/0x950 [ 80.652564][ T5220] ? __pfx_evict+0x10/0x10 [ 80.656992][ T5220] ? _raw_spin_unlock+0x28/0x50 [ 80.661848][ T5220] ? iput+0x6ed/0x930 [ 80.665842][ T5220] __dentry_kill+0x20d/0x630 [ 80.670441][ T5220] ? dput+0x37/0x2b0 [ 80.674341][ T5220] dput+0x19f/0x2b0 [ 80.678159][ T5220] __fput+0x5f8/0x8a0 [ 80.682160][ T5220] task_work_run+0x24f/0x310 [ 80.686760][ T5220] ? __pfx_task_work_run+0x10/0x10 [ 80.691875][ T5220] ? switch_task_namespaces+0xe4/0x110 [ 80.697343][ T5220] do_exit+0xa2f/0x27f0 [ 80.701504][ T5220] ? __pfx_do_exit+0x10/0x10 [ 80.706096][ T5220] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 80.712085][ T5220] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.718448][ T5220] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.723745][ T5220] ? lockdep_hardirqs_on+0x99/0x150 [ 80.728981][ T5220] do_group_exit+0x207/0x2c0 [ 80.733578][ T5220] __x64_sys_exit_group+0x3f/0x40 [ 80.738602][ T5220] x64_sys_call+0x2634/0x2640 [ 80.743289][ T5220] do_syscall_64+0xf3/0x230 [ 80.747793][ T5220] ? clear_bhb_loop+0x35/0x90 [ 80.752474][ T5220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.758400][ T5220] RIP: 0033:0x7f841d2244b9 [ 80.762846][ T5220] Code: Unable to access opcode bytes at 0x7f841d22448f. [ 80.769875][ T5220] RSP: 002b:00007fffda637bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 80.778292][ T5220] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f841d2244b9 [ 80.786264][ T5220] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 80.794239][ T5220] RBP: 00007f841d2a0370 R08: ffffffffffffffb8 R09: 00007fffda637df8 [ 80.802300][ T5220] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f841d2a0370 [ 80.810268][ T5220] R13: 0000000000000000 R14: 00007f841d2a10e0 R15: 00007f841d1f2d80 [ 80.818251][ T5220] [ 80.821267][ T5220] Modules linked in: [ 80.825495][ T5220] ---[ end trace 0000000000000000 ]--- [ 80.831147][ T5220] RIP: 0010:ext4_inline_data_truncate+0xced/0xcf0 [ 80.837658][ T5220] Code: e9 17 fd ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 44 fd ff ff e8 c3 fb a1 ff e9 3a fd ff ff e8 09 ad 58 09 e8 04 df 3d ff 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 80.857377][ T5220] RSP: 0018:ffffc900035cf660 EFLAGS: 00010293 [ 80.863819][ T5220] RAX: ffffffff8255ac9c RBX: ffffc900035cf700 RCX: ffff8880241b9e00 [ 80.871812][ T5220] RDX: 0000000000000000 RSI: 00000000ffffffc3 RDI: 0000000000000000 [ 80.879844][ T5220] RBP: ffffc900035cf7f0 R08: ffffffff8255a948 R09: 1ffff1100e59f149 [ 80.887886][ T5220] R10: dffffc0000000000 R11: ffffed100e59f14a R12: ffffc900035cf760 [ 80.895896][ T5220] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 80.903913][ T5220] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 80.912860][ T5220] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.919588][ T5220] CR2: 00005649eaf8b000 CR3: 000000000e534000 CR4: 00000000003506f0 [ 80.927599][ T5220] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.935632][ T5220] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.943654][ T5220] Kernel panic - not syncing: Fatal exception [ 80.949981][ T5220] Kernel Offset: disabled [ 80.954304][ T5220] Rebooting in 86400 seconds..