EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue audit: type=1804 audit(1669485055.034:2): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor297" name="/root/file0/bus" dev="loop0" ino=18 res=1 ------------[ cut here ]------------ kernel BUG at fs/ext4/inode.c:2794! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 8108 Comm: syz-executor297 Not tainted 4.19.211-syzkaller #0 audit: type=1804 audit(1669485055.034:3): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor297" name="/root/file0/bus" dev="loop0" ino=18 res=1 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794 Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00 RSP: 0018:ffff8880949af068 EFLAGS: 00010293 RAX: ffff888093f4a600 RBX: 0000000000000001 RCX: ffffffff81e03070 RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 R13: dffffc0000000000 R14: ffff88808b4a07f0 R15: 0000000000000000 FS: 0000555555fef300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005579dc3bc740 CR3: 000000009c5a7000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: do_writepages+0xe5/0x290 mm/page-writeback.c:2344 __filemap_fdatawrite_range+0x27d/0x350 mm/filemap.c:446 file_write_and_wait_range+0x93/0x100 mm/filemap.c:776 __generic_file_fsync+0x74/0x1f0 fs/libfs.c:985 ext4_sync_file+0xa35/0x1420 fs/ext4/fsync.c:118 vfs_fsync_range+0x13a/0x220 fs/sync.c:197 generic_write_sync include/linux/fs.h:2750 [inline] ext4_file_write_iter+0x726/0xf20 fs/ext4/file.c:283 call_write_iter include/linux/fs.h:1821 [inline] do_iter_readv_writev+0x668/0x790 fs/read_write.c:681 do_iter_write+0x182/0x5d0 fs/read_write.c:960 vfs_iter_write+0x70/0xa0 fs/read_write.c:973 iter_file_splice_write+0x60d/0xbb0 fs/splice.c:750 do_splice_from fs/splice.c:852 [inline] direct_splice_actor+0x115/0x160 fs/splice.c:1025 splice_direct_to_actor+0x33f/0x8d0 fs/splice.c:980 do_splice_direct+0x1a7/0x270 fs/splice.c:1068 do_sendfile+0x550/0xc30 fs/read_write.c:1447 __do_sys_sendfile64 fs/read_write.c:1508 [inline] __se_sys_sendfile64+0x147/0x160 fs/read_write.c:1494 do_syscall_64+0xf9/0x620 arch/x86/entry/common.c:293 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f773e7da8e9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffeb8dfe278 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f773e7da8e9 RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 RBP: 00007f773e79a180 R08: 0000000000000000 R09: 0000000000000000 R10: 0001000000201005 R11: 0000000000000246 R12: 00007f773e79a210 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: ---[ end trace 687bc1fed70bdd14 ]--- RIP: 0010:ext4_writepages+0x2d31/0x37f0 fs/ext4/inode.c:2794 Code: 00 fc ff df 44 89 64 24 18 48 c1 ea 03 80 3c 02 00 0f 84 25 da ff ff 48 8b 3c 24 e8 89 2d b8 ff e9 17 da ff ff e8 8f 50 82 ff <0f> 0b 4c 8b b4 24 20 01 00 00 e8 80 50 82 ff 0f b6 ac 24 50 02 00 RSP: 0018:ffff8880949af068 EFLAGS: 00010293 RAX: ffff888093f4a600 RBX: 0000000000000001 RCX: ffffffff81e03070 RDX: 0000000000000000 RSI: ffffffff81e034e1 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000007 R11: 0000000000000000 R12: 0000000000000001 R13: dffffc0000000000 R14: ffff88808b4a07f0 R15: 0000000000000000 FS: 0000555555fef300(0000) GS:ffff8880ba000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005579dc3bc740 CR3: 000000009c5a7000 CR4: 00000000003406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400