./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3610530577 <...> Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. execve("./syz-executor3610530577", ["./syz-executor3610530577"], 0x7fff7007a270 /* 10 vars */) = 0 brk(NULL) = 0x555556244000 brk(0x555556244d40) = 0x555556244d40 arch_prctl(ARCH_SET_FS, 0x5555562443c0) = 0 set_tid_address(0x555556244690) = 355 set_robust_list(0x5555562446a0, 24) = 0 rseq(0x555556244ce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3610530577", 4096) = 28 getrandom("\x0f\x6c\x68\x7e\x12\x27\x26\x76", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556244d40 brk(0x555556265d40) = 0x555556265d40 brk(0x555556266000) = 0x555556266000 mprotect(0x7f8ce554f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 356 ./strace-static-x86_64: Process 356 attached [pid 356] set_robust_list(0x5555562446a0, 24) = 0 [pid 356] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 356] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 356] close(3) = 0 [pid 356] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 357 ./strace-static-x86_64: Process 357 attached [pid 357] set_robust_list(0x5555562446a0, 24) = 0 [pid 357] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 357] setpgid(0, 0) = 0 [pid 357] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 357] write(3, "1000", 4) = 4 [pid 357] close(3) = 0 [pid 357] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 357] rt_sigaction(SIGRT_1, {sa_handler=0x7f8ce54f37a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8ce54e4e50}, NULL, 8) = 0 [pid 357] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8ce546a000 [pid 357] mprotect(0x7f8ce546b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 357] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8ce548a990, parent_tid=0x7f8ce548a990, exit_signal=0, stack=0x7f8ce546a000, stack_size=0x20300, tls=0x7f8ce548a6c0} => {parent_tid=[358]}, 88) = 358 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 358 attached [pid 358] set_robust_list(0x7f8ce548a9a0, 24) = 0 [pid 358] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 358] memfd_create("syzkaller", 0) = 3 [pid 358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cdd06a000 [pid 358] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 358] munmap(0x7f8cdd06a000, 138412032) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 358] ioctl(4, LOOP_SET_FD, 3 [pid 355] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 360 [pid 355] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 361 [pid 355] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 362 [pid 355] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 363 ./strace-static-x86_64: Process 363 attached [pid 363] set_robust_list(0x5555562446a0, 24) = 0 [pid 363] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 361 attached [pid 361] set_robust_list(0x5555562446a0, 24) = 0 [pid 361] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 360 attached [pid 360] set_robust_list(0x5555562446a0, 24) = 0 [pid 360] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 358] <... ioctl resumed>) = 0 [pid 358] close(3) = 0 [pid 358] close(4 [pid 363] <... openat resumed>) = 3 [pid 363] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 363] close(3) = 0 [pid 363] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 361] <... openat resumed>) = 3 [pid 361] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 361] close(3) = 0 [pid 361] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 364 [pid 363] <... clone resumed>, child_tidptr=0x555556244690) = 365 ./strace-static-x86_64: Process 362 attached ./strace-static-x86_64: Process 364 attached ./strace-static-x86_64: Process 365 attached [pid 362] set_robust_list(0x5555562446a0, 24 [pid 364] set_robust_list(0x5555562446a0, 24 [pid 365] set_robust_list(0x5555562446a0, 24 [pid 364] <... set_robust_list resumed>) = 0 [pid 362] <... set_robust_list resumed>) = 0 [pid 365] <... set_robust_list resumed>) = 0 [pid 360] <... openat resumed>) = 3 [pid 360] ioctl(3, LOOP_CLR_FD [pid 364] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 364] setpgid(0, 0) = 0 [pid 364] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 364] write(3, "1000", 4) = 4 [pid 364] close(3) = 0 [pid 364] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] rt_sigaction(SIGRT_1, {sa_handler=0x7f8ce54f37a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8ce54e4e50}, NULL, 8) = 0 [pid 364] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 364] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8ce546a000 [pid 364] mprotect(0x7f8ce546b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 364] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 364] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8ce548a990, parent_tid=0x7f8ce548a990, exit_signal=0, stack=0x7f8ce546a000, stack_size=0x20300, tls=0x7f8ce548a6c0} => {parent_tid=[367]}, 88) = 367 [pid 364] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 364] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 364] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 367 attached [pid 367] set_robust_list(0x7f8ce548a9a0, 24) = 0 [pid 367] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 367] memfd_create("syzkaller", 0) = 3 [pid 367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cdd06a000 [ 21.600726][ T23] audit: type=1400 audit(1714472412.100:66): avc: denied { execmem } for pid=355 comm="syz-executor361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.622081][ T23] audit: type=1400 audit(1714472412.120:67): avc: denied { read write } for pid=356 comm="syz-executor361" name="loop0" dev="devtmpfs" ino=9189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 367] munmap(0x7f8cdd06a000, 138412032) = 0 [pid 367] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 362] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 365] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 365] setpgid(0, 0) = 0 [pid 365] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 365] write(3, "1000", 4) = 4 [pid 365] close(3) = 0 [pid 365] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] rt_sigaction(SIGRT_1, {sa_handler=0x7f8ce54f37a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8ce54e4e50}, NULL, 8) = 0 [pid 365] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 365] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8ce546a000 [pid 365] mprotect(0x7f8ce546b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 365] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 365] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8ce548a990, parent_tid=0x7f8ce548a990, exit_signal=0, stack=0x7f8ce546a000, stack_size=0x20300, tls=0x7f8ce548a6c0} => {parent_tid=[368]}, 88) = 368 [pid 365] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 365] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 368 attached [pid 368] set_robust_list(0x7f8ce548a9a0, 24) = 0 [pid 368] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 368] memfd_create("syzkaller", 0) = 3 [pid 368] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cdd06a000 [pid 368] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 368] munmap(0x7f8cdd06a000, 138412032) = 0 [pid 368] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 358] <... close resumed>) = 0 [pid 360] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 358] mkdir("./bus", 0777 [pid 360] close(3 [pid 358] <... mkdir resumed>) = 0 [ 21.647569][ T23] audit: type=1400 audit(1714472412.120:68): avc: denied { open } for pid=356 comm="syz-executor361" path="/dev/loop0" dev="devtmpfs" ino=9189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 21.672515][ T23] audit: type=1400 audit(1714472412.120:69): avc: denied { ioctl } for pid=356 comm="syz-executor361" path="/dev/loop0" dev="devtmpfs" ino=9189 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 358] mount("/dev/loop0", "./bus", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_I_VERSION, ",errors=continue" [pid 368] <... openat resumed>) = 4 [pid 367] <... openat resumed>) = 4 [pid 362] <... openat resumed>) = 3 [pid 360] <... close resumed>) = 0 [pid 368] ioctl(4, LOOP_SET_FD, 3 [pid 367] ioctl(4, LOOP_SET_FD, 3 [pid 362] ioctl(3, LOOP_CLR_FD [pid 360] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556244690) = 369 ./strace-static-x86_64: Process 369 attached [pid 369] set_robust_list(0x5555562446a0, 24) = 0 [pid 369] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 369] setpgid(0, 0) = 0 [pid 369] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 369] write(3, "1000", 4) = 4 [pid 369] close(3) = 0 [pid 369] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 369] rt_sigaction(SIGRT_1, {sa_handler=0x7f8ce54f37a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8ce54e4e50}, NULL, 8) = 0 [pid 369] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 369] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8ce546a000 [pid 369] mprotect(0x7f8ce546b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 369] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 369] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8ce548a990, parent_tid=0x7f8ce548a990, exit_signal=0, stack=0x7f8ce546a000, stack_size=0x20300, tls=0x7f8ce548a6c0} => {parent_tid=[370]}, 88) = 370 ./strace-static-x86_64: Process 370 attached [pid 370] set_robust_list(0x7f8ce548a9a0, 24) = 0 [pid 370] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 370] futex(0x7f8ce5555608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 369] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 369] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 370] <... futex resumed>) = 0 [pid 370] memfd_create("syzkaller", 0) = 3 [pid 370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cdd06a000 [pid 369] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 370] munmap(0x7f8cdd06a000, 138412032) = 0 [ 21.727636][ T358] ====================================================== [ 21.727636][ T358] WARNING: the mand mount option is being deprecated and [ 21.727636][ T358] will be removed in v5.15! [ 21.727636][ T358] ====================================================== [ 21.727732][ T23] audit: type=1400 audit(1714472412.230:70): avc: denied { mounton } for pid=357 comm="syz-executor361" path="/root/bus" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 370] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 368] <... ioctl resumed>) = 0 [pid 370] <... openat resumed>) = 4 [pid 368] close(3 [pid 367] <... ioctl resumed>) = 0 [pid 362] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 368] <... close resumed>) = 0 [pid 362] close(3 [pid 370] ioctl(4, LOOP_SET_FD, 3 [pid 368] close(4 [pid 367] close(3 [pid 362] <... close resumed>) = 0 [pid 367] <... close resumed>) = 0 [pid 362] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 367] close(4 [pid 362] <... clone resumed>, child_tidptr=0x555556244690) = 377 ./strace-static-x86_64: Process 377 attached [pid 370] <... ioctl resumed>) = 0 [pid 368] <... close resumed>) = 0 [pid 370] close(3 [pid 368] mkdir("./bus", 0777 [pid 370] <... close resumed>) = 0 [pid 368] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 370] close(4 [pid 368] mount("/dev/loop4", "./bus", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_I_VERSION, ",errors=continue" [pid 377] set_robust_list(0x5555562446a0, 24) = 0 [pid 377] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 377] setpgid(0, 0) = 0 [pid 377] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 377] write(3, "1000", 4) = 4 [pid 377] close(3) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] rt_sigaction(SIGRT_1, {sa_handler=0x7f8ce54f37a0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f8ce54e4e50}, NULL, 8) = 0 [pid 377] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 377] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8ce546a000 [pid 377] mprotect(0x7f8ce546b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 377] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 377] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8ce548a990, parent_tid=0x7f8ce548a990, exit_signal=0, stack=0x7f8ce546a000, stack_size=0x20300, tls=0x7f8ce548a6c0} => {parent_tid=[380]}, 88) = 380 [pid 377] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 380 attached [pid 380] set_robust_list(0x7f8ce548a9a0, 24) = 0 [pid 380] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 380] memfd_create("syzkaller", 0) = 3 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cdd06a000 [pid 380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 380] munmap(0x7f8cdd06a000, 138412032) = 0 [pid 380] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 367] <... close resumed>) = 0 [pid 367] mkdir("./bus", 0777) = -1 EEXIST (File exists) [pid 367] mount("/dev/loop2", "./bus", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_I_VERSION, ",errors=continue" [pid 358] <... mount resumed>) = 0 [pid 358] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 358] chdir("./bus") = 0 [ 21.891112][ T358] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 21.903317][ T358] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 21.913659][ T23] audit: type=1400 audit(1714472412.410:71): avc: denied { mount } for pid=357 comm="syz-executor361" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 370] <... close resumed>) = 0 [pid 358] <... openat resumed>) = 4 [pid 358] ioctl(4, LOOP_CLR_FD) = 0 [pid 358] close(4) = 0 [pid 358] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 357] <... futex resumed>) = 0 [pid 358] futex(0x7f8ce5555608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 357] <... futex resumed>) = 0 [pid 358] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... open resumed>) = 4 [pid 358] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = 0 [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... openat resumed>) = 4 [pid 370] mkdir("./bus", 0777 [pid 357] <... futex resumed>) = 0 [pid 358] <... futex resumed>) = 1 [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 358] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 357] <... futex resumed>) = 0 [pid 358] futex(0x7f8ce5555608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] ioctl(4, LOOP_SET_FD, 3 [pid 370] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 357] <... futex resumed>) = 0 [pid 358] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... open resumed>) = 5 [pid 358] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 357] <... futex resumed>) = 0 [pid 370] mount("/dev/loop1", "./bus", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_I_VERSION, ",errors=continue" [pid 358] futex(0x7f8ce5555608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 357] <... futex resumed>) = 0 [pid 358] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0 [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] <... mmap resumed>) = 0x20000000 [pid 358] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = 0 [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 358] <... futex resumed>) = 1 [pid 358] memfd_create("syzkaller", 0) = 6 [pid 358] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cdd06a000 [pid 358] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 358] munmap(0x7f8cdd06a000, 138412032) = 0 [pid 358] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 380] <... ioctl resumed>) = 0 [pid 380] close(3) = 0 [pid 380] close(4 [pid 358] <... openat resumed>) = 7 [pid 358] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 358] ioctl(7, LOOP_CLR_FD) = 0 [ 21.935818][ T23] audit: type=1400 audit(1714472412.430:72): avc: denied { mounton } for pid=364 comm="syz-executor361" path="/root/bus" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 380] <... close resumed>) = 0 [pid 380] mkdir("./bus", 0777) = -1 EEXIST (File exists) [pid 380] mount("/dev/loop3", "./bus", "ext4", MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_I_VERSION, ",errors=continue" [pid 358] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 358] close(7) = 0 [pid 358] close(6) = 0 [pid 358] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = 0 [pid 358] <... futex resumed>) = 1 [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] bpf(BPF_MAP_UPDATE_ELEM, 0x20000400, 32 [pid 357] <... futex resumed>) = 0 [pid 358] <... bpf resumed>) = -1 EBADF (Bad file descriptor) [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 358] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 358] <... futex resumed>) = 0 [pid 357] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000 [pid 358] creat(0x20000140, 000 [pid 357] <... futex resumed>) = 0 [ 21.975362][ T23] audit: type=1400 audit(1714472412.460:73): avc: denied { write } for pid=357 comm="syz-executor361" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.001405][ T23] audit: type=1400 audit(1714472412.460:74): avc: denied { add_name } for pid=357 comm="syz-executor361" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 22.017221][ T358] EXT4-fs error (device loop0): ext4_validate_block_bitmap:400: comm syz-executor361: bg 0: bad block bitmap checksum [pid 357] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... mount resumed>) = 0 [pid 380] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 380] chdir("./bus") = 0 [pid 380] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 380] ioctl(4, LOOP_CLR_FD) = 0 [pid 380] close(4) = 0 [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 357] futex(0x7f8ce555561c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 357] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f8ce5449000 [pid 357] mprotect(0x7f8ce544a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 357] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 357] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7f8ce5469990, parent_tid=0x7f8ce5469990, exit_signal=0, stack=0x7f8ce5449000, stack_size=0x20300, tls=0x7f8ce54696c0} => {parent_tid=[390]}, 88) = 390 [pid 357] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 357] futex(0x7f8ce5555618, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 357] futex(0x7f8ce555561c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=550000000} [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_DIRECT|O_CLOEXEC) = 5 [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 5, 0./strace-static-x86_64: Process 390 attached [pid 390] set_robust_list(0x7f8ce54699a0, 24) = 0 [pid 390] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 390] bpf(BPF_PROG_LOAD, 0x20000440, 144) = -1 E2BIG (Argument list too long) [pid 390] futex(0x7f8ce555561c, FUTEX_WAKE_PRIVATE, 1000000 [pid 357] <... futex resumed>) = 0 [pid 390] <... futex resumed>) = 1 [ 22.023842][ T23] audit: type=1400 audit(1714472412.460:75): avc: denied { create } for pid=357 comm="syz-executor361" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 22.052013][ T380] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 22.065175][ T358] EXT4-fs error (device loop0) in ext4_free_blocks:5011: Filesystem failed CRC [ 22.066560][ T380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 22.074610][ T368] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [pid 390] futex(0x7f8ce5555618, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] <... mmap resumed>) = 0x20000000 [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] memfd_create("syzkaller", 0) = 6 [pid 380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cdd06a000 [pid 380] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 [pid 380] munmap(0x7f8cdd06a000, 138412032) = 0 [pid 380] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 7 [pid 380] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 380] ioctl(7, LOOP_CLR_FD) = 0 [pid 380] ioctl(7, LOOP_SET_FD, 6) = -1 EBUSY (Device or resource busy) [pid 380] close(7) = 0 [pid 380] close(6) = 0 [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] bpf(BPF_MAP_UPDATE_ELEM, 0x20000400, 32) = -1 EBADF (Bad file descriptor) [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 380] <... futex resumed>) = 1 [pid 380] creat(0x20000140, 000 [pid 368] <... mount resumed>) = 0 [pid 368] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 368] chdir("./bus") = 0 [ 22.102198][ T367] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 22.103060][ T368] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 22.120043][ T358] ------------[ cut here ]------------ [ 22.122235][ T367] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 22.125303][ T358] kernel BUG at fs/ext4/inode.c:5505! [ 22.125347][ T358] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 22.139892][ T380] EXT4-fs error (device loop3): ext4_validate_block_bitmap:400: comm syz-executor361: bg 0: bad block bitmap checksum [ 22.145183][ T358] CPU: 1 PID: 358 Comm: syz-executor361 Not tainted 5.4.268-syzkaller-00003-g2d5d8240a7cb #0 [ 22.145187][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 22.145217][ T358] RIP: 0010:ext4_mark_iloc_dirty+0x3556/0x3560 [ 22.145225][ T358] Code: f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 2b f1 ff ff 48 89 df e8 b9 27 cc ff e9 1e f1 ff ff e8 8f 0b 73 ff e8 5a 53 9c ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 50 49 [ 22.145230][ T358] RSP: 0018:ffff8881dcb67060 EFLAGS: 00010293 [ 22.161818][ T380] EXT4-fs error (device loop3) in ext4_free_blocks:5011: Filesystem failed CRC [ 22.167491][ T358] RAX: ffffffff81c7f3c6 RBX: 0000000000000000 RCX: ffff8881dcb56e40 [ 22.167495][ T358] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 22.167502][ T358] RBP: ffff8881dcb671b0 R08: ffffffff81c7da79 R09: ffffed103d0e58f0 [ 22.167507][ T358] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dd579c00 [ 22.167512][ T358] R13: dffffc0000000000 R14: ffff8881dc72b000 R15: 0000000000000000 [ 22.167519][ T358] FS: 00007f8ce548a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 22.167524][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.167529][ T358] CR2: 00005584699c6fd8 CR3: 00000001dcc33000 CR4: 00000000003406a0 [ 22.167542][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.179866][ T370] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 22.183377][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.183382][ T358] Call Trace: [ 22.183407][ T358] ? __die+0xb4/0x100 [ 22.183415][ T358] ? die+0x26/0x50 [ 22.183423][ T358] ? do_trap+0x1e7/0x340 [ 22.183444][ T358] ? ext4_mark_iloc_dirty+0x3556/0x3560 [ 22.213859][ T370] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.217814][ T358] ? ext4_mark_iloc_dirty+0x3556/0x3560 [ 22.217825][ T358] ? do_invalid_op+0xfb/0x110 [ 22.217832][ T358] ? ext4_mark_iloc_dirty+0x3556/0x3560 [ 22.217846][ T358] ? invalid_op+0x1e/0x30 [ 22.287311][ T393] EXT4-fs error (device loop4): ext4_lookup:1814: inode #13: comm syz-executor361: casefold flag without casefold feature [ 22.289046][ T358] ? ext4_mark_iloc_dirty+0x1c09/0x3560 [ 22.289054][ T358] ? ext4_mark_iloc_dirty+0x3556/0x3560 [ 22.289068][ T358] ? ext4_mark_iloc_dirty+0x3556/0x3560 [ 22.386844][ T358] ? ext4_chunk_trans_blocks+0x290/0x290 [ 22.392812][ T358] ? ext4_reserve_inode_write+0x19c/0x220 [ 22.398354][ T358] ext4_mark_inode_dirty+0x4e7/0x7a0 [ 22.403484][ T358] ? ext4_blocks_for_truncate+0x210/0x210 [ 22.409182][ T358] ? __ext4_ext_dirty+0x100/0x1b0 [ 22.414132][ T358] ext4_ext_remove_space+0x205d/0x4ba0 [ 22.419867][ T358] ? ext4_mark_inode_dirty+0x4e7/0x7a0 [ 22.425178][ T358] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 22.430969][ T358] ? ext4_es_lookup_extent+0x9d0/0x9d0 [ 22.436258][ T358] ? ext4_ext_truncate+0x136/0x180 [ 22.441211][ T358] ext4_truncate+0xb23/0x1290 [ 22.445816][ T358] ? ext4_mark_inode_dirty+0x7a0/0x7a0 [ 22.451101][ T358] ext4_setattr+0xeb5/0x1500 [ 22.455570][ T358] ? ext4_write_inode+0x630/0x630 [ 22.460385][ T358] notify_change+0xc00/0xeb0 [ 22.464915][ T358] do_truncate+0x1ed/0x2d0 [ 22.469595][ T358] ? asan.module_dtor+0x20/0x20 [ 22.474647][ T358] ? finish_open+0xd0/0xd0 [ 22.479643][ T358] ? memcpy+0x38/0x50 [ 22.483954][ T358] path_openat+0x2de2/0x3480 [ 22.488388][ T358] ? do_filp_open+0x450/0x450 [ 22.492895][ T358] ? do_sys_open+0x357/0x810 [ 22.497318][ T358] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [pid 368] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 368] ioctl(4, LOOP_CLR_FD) = 0 [pid 368] close(4) = 0 [pid 368] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 365] <... futex resumed>) = 0 [pid 365] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 365] futex(0x7f8ce555560c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 368] <... futex resumed>) = 1 [pid 368] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 380] <... creat resumed>) = 6 [pid 380] futex(0x7f8ce555560c, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... futex resumed>) = 0 [pid 377] futex(0x7f8ce5555608, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 22.503223][ T358] do_filp_open+0x20b/0x450 [ 22.507671][ T358] ? vfs_tmpfile+0x280/0x280 [ 22.512100][ T358] ? _raw_spin_unlock+0x49/0x60 [ 22.516818][ T358] ? __alloc_fd+0x4c1/0x560 [ 22.521239][ T358] do_sys_open+0x39c/0x810 [ 22.525707][ T358] ? file_open_root+0x490/0x490 [ 22.530393][ T358] ? switch_fpu_return+0x1d4/0x410 [ 22.535339][ T358] do_syscall_64+0xca/0x1c0 [ 22.539667][ T358] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 22.545391][ T358] Modules linked in: [ 22.549192][ T358] ---[ end trace 6cefbd4a4426b61e ]--- [ 22.554452][ T358] RIP: 0010:ext4_mark_iloc_dirty+0x3556/0x3560 [ 22.560456][ T358] Code: f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 2b f1 ff ff 48 89 df e8 b9 27 cc ff e9 1e f1 ff ff e8 8f 0b 73 ff e8 5a 53 9c ff <0f> 0b 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 55 41 54 53 50 49 [ 22.579877][ T358] RSP: 0018:ffff8881dcb67060 EFLAGS: 00010293 [ 22.585762][ T358] RAX: ffffffff81c7f3c6 RBX: 0000000000000000 RCX: ffff8881dcb56e40 [ 22.593583][ T358] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 22.601393][ T358] RBP: ffff8881dcb671b0 R08: ffffffff81c7da79 R09: ffffed103d0e58f0 [ 22.609209][ T358] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881dd579c00 [ 22.617026][ T358] R13: dffffc0000000000 R14: ffff8881dc72b000 R15: 0000000000000000 [ 22.625027][ T358] FS: 00007f8ce548a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 22.634143][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 22.640562][ T358] CR2: 00005584699c6fd8 CR3: 00000001dcc33000 CR4: 00000000003406a0 [ 22.648370][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 22.656238][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 22.664092][ T358] Kernel panic - not syncing: Fatal exception [ 22.670031][ T358] Kernel Offset: disabled [ 22.674110][ T358] Rebooting in 86400 seconds..