./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3798816556 <...> forked to background, child pid 3186 [ 24.847042][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.857297][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices [ 25.072891][ T3271] ssh-keygen (3271) used greatest stack depth: 18480 bytes left Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. execve("./syz-executor3798816556", ["./syz-executor3798816556"], 0x7ffe7d4aa9d0 /* 10 vars */) = 0 brk(NULL) = 0x555556709000 brk(0x555556709c40) = 0x555556709c40 arch_prctl(ARCH_SET_FS, 0x555556709300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3798816556", 4096) = 28 brk(0x55555672ac40) = 0x55555672ac40 brk(0x55555672b000) = 0x55555672b000 mprotect(0x7f367ce40000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 262144) = 0 pwrite64(3, "\x20\x00\x00\x00\x00\x01\x00\x00\x0c\xe2\xff\x8b\x06\x00\x00\x00\x0f\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x20\x00\x00\x00\x20\x00\x00\x20\x00\x00\x00\x74\x1f\x17\x63\x74\x1f\x1f\x63\x01\x00\xff\xff\x53\xef\x01\x00\x01\x00\xee\xff\x73\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x0b\x00\x00\x00\x80\x00\x00\x00\x00", 89, 1024) = 89 pwrite64(3, "\x03\x00\x00\x00\x13\x00\x00\x00\x23\x00\x00\x00\xce\x00\x0f", 15, 2048) = 15 pwrite64(3, "\xff\xff\xff\xff\xfc\xff\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff"..., 1024, 3072) = 1024 pwrite64(3, "\xff\xff", 2, 19456) = 2 pwrite64(3, "\xed\x41\x00\x00\x00\x04\x00\x00\x73\x1f\x1f\x63\x74\x1f\x1f\x63\x74\x1f\x1f\x63\x00\x00\x00\x00\x00\x00\x04\x00\x02", 29, 35968) = 29 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "ext4", 0, ",errors=continue") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 close(3) = 0 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 syzkaller login: [ 44.302200][ T3607] loop0: detected capacity change from 0 to 512 [ 44.316579][ T3607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.340447][ T3607] ------------[ cut here ]------------ [ 44.346016][ T3607] kernel BUG at fs/ext4/ext4.h:3328! [ 44.357639][ T3607] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 44.363827][ T3607] CPU: 1 PID: 3607 Comm: syz-executor379 Not tainted 6.0.0-syzkaller #0 [ 44.372141][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 44.382186][ T3607] RIP: 0010:ext4_get_group_info+0x34d/0x350 [ 44.388090][ T3607] Code: 53 ff 8b 74 24 04 48 c7 c7 40 11 cb 8c 4c 89 f2 e8 c8 9b 2d 02 43 80 3c 2c 00 0f 85 6d fd ff ff e9 70 fd ff ff e8 03 56 53 ff <0f> 0b 90 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 00 00 fc [ 44.407768][ T3607] RSP: 0018:ffffc9000372f268 EFLAGS: 00010293 [ 44.413820][ T3607] RAX: ffffffff8234337d RBX: 0000000000000001 RCX: ffff88801c61bb00 [ 44.421776][ T3607] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 44.429731][ T3607] RBP: 0000000000000001 R08: ffffffff82343098 R09: ffffc9000372f7a0 [ 44.437686][ T3607] R10: fffffbfff1c1657e R11: 1ffffffff1c1657d R12: 1ffff110043e08cf [ 44.445645][ T3607] R13: dffffc0000000000 R14: ffff888021f06000 R15: ffff888021f04678 [ 44.453600][ T3607] FS: 0000555556709300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 44.462514][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.469081][ T3607] CR2: 00005643d4a3ba60 CR3: 000000007e654000 CR4: 00000000003506e0 [ 44.477037][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.484992][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.492957][ T3607] Call Trace: [ 44.496229][ T3607] [ 44.499148][ T3607] ext4_mb_load_buddy_gfp+0xc5/0x1900 [ 44.504512][ T3607] ? do_raw_spin_unlock+0x134/0x8a0 [ 44.509700][ T3607] ext4_mballoc_query_range+0xb0/0x820 [ 44.515157][ T3607] ? trace_ext4_fsmap_high_key+0x2b0/0x2b0 [ 44.520951][ T3607] ? ext4_trim_fs+0x1450/0x1450 [ 44.525788][ T3607] ? trace_ext4_fsmap_high_key+0xf3/0x2b0 [ 44.531491][ T3607] ext4_getfsmap_datadev+0x1bb0/0x2580 [ 44.536944][ T3607] ? ext4_getfsmap+0x1070/0x1070 [ 44.541868][ T3607] ? ext4_getfsmap+0xb51/0x1070 [ 44.546701][ T3607] ? ext4_getfsmap+0x1070/0x1070 [ 44.551620][ T3607] ext4_getfsmap+0xd22/0x1070 [ 44.556284][ T3607] ? ext4_fsmap_to_internal+0x2d0/0x2d0 [ 44.561816][ T3607] ? ext4_getfsmap+0x1070/0x1070 [ 44.566739][ T3607] ? trace_ext4_getfsmap_high_key+0x270/0x270 [ 44.572794][ T3607] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 44.578759][ T3607] ? __stack_depot_save+0x33/0x490 [ 44.583866][ T3607] ? __might_fault+0xb2/0x110 [ 44.588615][ T3607] ext4_ioctl+0x3ac3/0x5410 [ 44.593101][ T3607] ? do_syscall_64+0x3d/0xb0 [ 44.597714][ T3607] ? ext4_fileattr_set+0x17d0/0x17d0 [ 44.603012][ T3607] ? rcu_read_lock_sched_held+0x87/0x110 [ 44.608644][ T3607] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 44.614618][ T3607] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 44.620501][ T3607] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 44.626467][ T3607] ? do_vfs_ioctl+0x1a40/0x29a0 [ 44.631317][ T3607] ? __x64_compat_sys_ioctl+0x80/0x80 [ 44.636674][ T3607] ? __lock_acquire+0x1f60/0x1f60 [ 44.641684][ T3607] ? slab_free_freelist_hook+0x12e/0x1a0 [ 44.648368][ T3607] ? kfree+0xda/0x210 [ 44.652365][ T3607] ? do_notify_parent+0xe00/0xe00 [ 44.657397][ T3607] ? bpf_lsm_file_ioctl+0x5/0x10 [ 44.662330][ T3607] ? security_file_ioctl+0x9d/0xb0 [ 44.667436][ T3607] ? ext4_fileattr_set+0x17d0/0x17d0 [ 44.672715][ T3607] __se_sys_ioctl+0xfb/0x170 [ 44.677296][ T3607] do_syscall_64+0x3d/0xb0 [ 44.681698][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.687665][ T3607] RIP: 0033:0x7f367cdd3f99 [ 44.692068][ T3607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.712013][ T3607] RSP: 002b:00007ffc38c138a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.720590][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f367cdd3f99 [ 44.728545][ T3607] RDX: 0000000020000200 RSI: 00000000c0c0583b RDI: 0000000000000003 [ 44.736500][ T3607] RBP: 00007f367cd93760 R08: 0000000000000000 R09: 0000000000000000 [ 44.744458][ T3607] R10: 00005555567092c0 R11: 0000000000000246 R12: 00007f367cd937f0 [ 44.752414][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.760377][ T3607] [ 44.763383][ T3607] Modules linked in: [ 44.767517][ T3607] ---[ end trace 0000000000000000 ]--- [ 44.773003][ T3607] RIP: 0010:ext4_get_group_info+0x34d/0x350 [ 44.779115][ T3607] Code: 53 ff 8b 74 24 04 48 c7 c7 40 11 cb 8c 4c 89 f2 e8 c8 9b 2d 02 43 80 3c 2c 00 0f 85 6d fd ff ff e9 70 fd ff ff e8 03 56 53 ff <0f> 0b 90 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 00 00 00 fc [ 44.798760][ T3607] RSP: 0018:ffffc9000372f268 EFLAGS: 00010293 [ 44.804845][ T3607] RAX: ffffffff8234337d RBX: 0000000000000001 RCX: ffff88801c61bb00 [ 44.812795][ T3607] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 44.820796][ T3607] RBP: 0000000000000001 R08: ffffffff82343098 R09: ffffc9000372f7a0 [ 44.828784][ T3607] R10: fffffbfff1c1657e R11: 1ffffffff1c1657d R12: 1ffff110043e08cf [ 44.836865][ T3607] R13: dffffc0000000000 R14: ffff888021f06000 R15: ffff888021f04678 [ 44.844862][ T3607] FS: 0000555556709300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 44.853786][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.860419][ T3607] CR2: 00000000200117e0 CR3: 000000007e654000 CR4: 00000000003506f0 [ 44.868412][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.876422][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.884395][ T3607] Kernel panic - not syncing: Fatal exception [ 44.890618][ T3607] Kernel Offset: disabled [ 44.894930][ T3607] Rebooting in 86400 seconds..