[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.130' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.175213] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.186359] audit: type=1800 audit(1608868146.719:2): pid=7969 uid=0 auid=0 ses=5 op="collect_data" cause="failed(directio)" comm="syz-executor097" name="file0" dev="loop0" ino=17 res=0 [ 29.204212] ------------[ cut here ]------------ [ 29.209066] kernel BUG at fs/ext4/inode.c:2814! [ 29.214122] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 29.219471] Modules linked in: [ 29.222642] CPU: 0 PID: 7969 Comm: syz-executor097 Not tainted 4.14.212-syzkaller #0 [ 29.230504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.239843] task: ffff888096f9e240 task.stack: ffff888096f38000 [ 29.245878] RIP: 0010:ext4_writepages+0x27fc/0x32a0 [ 29.250862] RSP: 0018:ffff888096f3f638 EFLAGS: 00010297 [ 29.256199] RAX: ffff888096f9e240 RBX: 00000000a802c010 RCX: 1ffff11012df3e49 [ 29.263440] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffff888096f9f248 [ 29.270720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000001c92 [ 29.277978] R10: 0000000000000001 R11: ffff888096f9e240 R12: 0000000000000001 [ 29.285249] R13: dffffc0000000000 R14: ffff88808e326870 R15: ffff888096f3fa60 [ 29.292491] FS: 0000000000b18880(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 29.300686] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.306567] CR2: 000055dc813008a0 CR3: 00000000a3006000 CR4: 00000000001406f0 [ 29.313824] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.321068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.328309] Call Trace: [ 29.330884] ? trace_hardirqs_on+0x10/0x10 [ 29.335091] ? trace_hardirqs_on+0x10/0x10 [ 29.339312] ? __brelse+0x43/0x60 [ 29.342742] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.348177] ? ext4_mark_inode_dirty+0x7a0/0x7a0 [ 29.352904] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 29.358337] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 29.363326] ? domain_dirty_limits+0x33d/0x5b0 [ 29.367891] ? __lock_acquire+0x5fc/0x3f20 [ 29.372099] ? trace_hardirqs_on+0x10/0x10 [ 29.376359] ? wb_writeout_inc+0x410/0x410 [ 29.380572] ? ext4_expand_extra_isize+0x460/0x460 [ 29.385520] ? ext4_mark_inode_dirty+0x7a0/0x7a0 [ 29.390252] do_writepages+0xc3/0x240 [ 29.394029] ? page_writeback_cpu_online+0x10/0x10 [ 29.398949] ? lock_acquire+0x170/0x3f0 [ 29.402909] ? do_raw_spin_unlock+0x164/0x220 [ 29.407379] ? _raw_spin_unlock+0x29/0x40 [ 29.411503] ? wbc_attach_and_unlock_inode+0x5e8/0x8d0 [ 29.416755] __filemap_fdatawrite_range+0x236/0x310 [ 29.421754] ? replace_page_cache_page+0x700/0x700 [ 29.427093] file_write_and_wait_range+0x86/0xd0 [ 29.431882] __generic_file_fsync+0x70/0x190 [ 29.436363] ext4_sync_file+0x8ed/0x12c0 [ 29.440399] ? ext4_getfsmap+0x8c0/0x8c0 [ 29.444430] vfs_fsync_range+0x103/0x260 [ 29.448471] ext4_file_write_iter+0x5fa/0xd20 [ 29.452960] ? aa_file_perm+0x304/0xab0 [ 29.456912] ? debug_check_no_obj_freed+0x2c0/0x674 [ 29.461904] ? ext4_file_read_iter+0x330/0x330 [ 29.466462] ? trace_hardirqs_on+0x10/0x10 [ 29.470670] ? iov_iter_init+0xa6/0x1c0 [ 29.474634] __vfs_write+0x44c/0x630 [ 29.478321] ? debug_check_no_obj_freed+0x2c0/0x674 [ 29.483311] ? kernel_read+0x110/0x110 [ 29.487174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 29.492165] vfs_write+0x17f/0x4d0 [ 29.495679] SyS_write+0xf2/0x210 [ 29.499113] ? SyS_read+0x210/0x210 [ 29.502712] ? do_syscall_64+0x4c/0x640 [ 29.506659] ? SyS_read+0x210/0x210 [ 29.510267] do_syscall_64+0x1d5/0x640 [ 29.514130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 29.519292] RIP: 0033:0x444639 [ 29.522466] RSP: 002b:00007ffd490d16c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 29.530145] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000444639 [ 29.537389] RDX: 0000000000000082 RSI: 0000000020000180 RDI: 0000000000000004 [ 29.544630] RBP: 00000000006d0018 R08: 00000000004002e0 R09: 00000000004002e0 [ 29.551872] R10: 00000000004002e0 R11: 0000000000000246 R12: 0000000000402220 [ 29.559114] R13: 00000000004022b0 R14: 0000000000000000 R15: 0000000000000000 [ 29.566360] Code: ff ff 4c 89 ff e8 c5 de c2 ff e9 98 db ff ff e8 5b 0e 99 ff 48 8b bc 24 b8 00 00 00 e8 fe 97 b0 ff e9 18 f5 ff ff e8 44 0e 99 ff <0f> 0b e8 3d 0e 99 ff 48 8b bc 24 b8 00 00 00 e8 e0 97 b0 ff 8b [ 29.585417] RIP: ext4_writepages+0x27fc/0x32a0 RSP: ffff888096f3f638 [ 29.592260] ---[ end trace 817ffaeed9909b4b ]--- [ 29.597030] Kernel panic - not syncing: Fatal exception [ 29.603063] Kernel Offset: disabled [ 29.606675] Rebooting in 86400 seconds..