EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
audit: type=1804 audit(1666129213.360:2): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor419" name="/root/file0/file0" dev="loop0" ino=17 res=1
------------[ cut here ]------------
kernel BUG at fs/ext4/inode.c:2794!
audit: type=1804 audit(1666129213.390:3): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor419" name="/root/file0/file0" dev="loop0" ino=17 res=1
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 8103 Comm: syz-executor419 Not tainted 4.19.211-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794
Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00
RSP: 0018:ffff8880b2bef588 EFLAGS: 00010293
RAX: ffff8880b13d8640 RBX: 0000000000000001 RCX: ffffffff81e03070
RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001
R13: dffffc0000000000 R14: ffff88808dec5830 R15: 0000000000000000
FS:  0000555555896300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055820b00aee8 CR3: 00000000aaf27000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 do_writepages+0xe5/0x290 mm/page-writeback.c:2344
 __filemap_fdatawrite_range+0x27d/0x350 mm/filemap.c:446
 file_write_and_wait_range+0x93/0x100 mm/filemap.c:776
 __generic_file_fsync+0x74/0x1f0 fs/libfs.c:985
 ext4_sync_file+0xa35/0x1420 fs/ext4/fsync.c:118
 vfs_fsync_range+0x13a/0x220 fs/sync.c:197
 generic_write_sync include/linux/fs.h:2750 [inline]
 ext4_file_write_iter+0x726/0xf20 fs/ext4/file.c:283
 call_write_iter include/linux/fs.h:1821 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x51b/0x770 fs/read_write.c:487
 vfs_write+0x1f3/0x540 fs/read_write.c:549
 ksys_write+0x12b/0x2a0 fs/read_write.c:599
 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x7f5cd7030f09
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffce39e20d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f5cd7030f09
RDX: 0000000000000088 RSI: 0000000020000440 RDI: 0000000000000006
RBP: 00007f5cd6ff07a0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5cd6ff0830
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
Modules linked in:
---[ end trace 5045866cfcb6e0d3 ]---
RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794
Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00
RSP: 0018:ffff8880b2bef588 EFLAGS: 00010293
RAX: ffff8880b13d8640 RBX: 0000000000000001 RCX: ffffffff81e03070
RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001
R13: dffffc0000000000 R14: ffff88808dec5830 R15: 0000000000000000
FS:  0000555555896300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000055820b00aee8 CR3: 00000000aaf27000 CR4: 00000000003406f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400