./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2047026631

<...>
Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts.
execve("./syz-executor2047026631", ["./syz-executor2047026631"], 0x7ffe734aa2e0 /* 10 vars */) = 0
brk(NULL)                               = 0x555565e71000
brk(0x555565e71d00)                     = 0x555565e71d00
arch_prctl(ARCH_SET_FS, 0x555565e71380) = 0
set_tid_address(0x555565e71650)         = 294
set_robust_list(0x555565e71660, 24)     = 0
rseq(0x555565e71ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2047026631", 4096) = 28
getrandom("\x56\xaf\xb3\x38\xdf\x75\x5d\x64", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555565e71d00
brk(0x555565e92d00)                     = 0x555565e92d00
brk(0x555565e93000)                     = 0x555565e93000
mprotect(0x7f80ec375000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555565e71650) = 295
./strace-static-x86_64: Process 295 attached
[pid   295] set_robust_list(0x555565e71660, 24) = 0
[pid   295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid   295] getppid()                   = 0
[pid   295] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid   295] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid   295] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid   295] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid   295] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid   295] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid   295] unshare(CLONE_NEWNS)        = 0
[pid   295] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid   295] unshare(CLONE_NEWIPC)       = -1 EINVAL (Invalid argument)
[pid   295] unshare(CLONE_NEWCGROUP)    = 0
[pid   295] unshare(CLONE_NEWUTS)       = 0
[pid   295] unshare(CLONE_SYSVSEM)      = 0
[pid   295] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   295] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   295] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   295] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   295] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   295] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   295] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
[pid   295] getpid()                    = 1
[pid   295] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   295] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid   295] unshare(CLONE_NEWNET)       = 0
[pid   295] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid   295] write(3, "0 65535", 7)      = 7
[pid   295] close(3)                    = 0
[pid   295] openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3
[pid   295] write(3, "100000", 6)       = 6
[pid   295] close(3)                    = 0
[pid   295] mkdir("./syz-tmp", 0777)    = 0
[pid   295] mount("", "./syz-tmp", "tmpfs", 0, NULL) = 0
[pid   295] mkdir("./syz-tmp/newroot", 0777) = 0
[   29.442450][   T24] audit: type=1400 audit(1743123316.790:66): avc:  denied  { execmem } for  pid=294 comm="syz-executor204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   29.462819][   T24] audit: type=1400 audit(1743123316.810:67): avc:  denied  { mounton } for  pid=295 comm="syz-executor204" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[pid   295] mkdir("./syz-tmp/newroot/dev", 0700) = 0
[pid   295] mount("/dev", "./syz-tmp/newroot/dev", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   295] mkdir("./syz-tmp/newroot/proc", 0700) = 0
[pid   295] mount("syz-proc", "./syz-tmp/newroot/proc", "proc", 0, NULL) = 0
[pid   295] mkdir("./syz-tmp/newroot/selinux", 0700) = 0
[pid   295] mount("/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   295] mount("/sys/fs/selinux", "./syz-tmp/newroot/selinux", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   295] mkdir("./syz-tmp/newroot/sys", 0700) = 0
[pid   295] mount("/sys", "./syz-tmp/newroot/sys", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   295] mount("/sys/kernel/debug", "./syz-tmp/newroot/sys/kernel/debug", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   295] mount("/sys/fs/smackfs", "./syz-tmp/newroot/sys/fs/smackfs", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   295] mount("/proc/sys/fs/binfmt_misc", "./syz-tmp/newroot/proc/sys/fs/binfmt_misc", NULL, MS_BIND|MS_REC|MS_PRIVATE, NULL) = 0
[pid   295] mkdir("./syz-tmp/newroot/syz-inputs", 0700) = 0
[pid   295] mount("/syz-inputs", "./syz-tmp/newroot/syz-inputs", NULL, MS_RDONLY|MS_BIND|MS_REC|MS_PRIVATE, NULL) = -1 ENOENT (No such file or directory)
[pid   295] mkdir("./syz-tmp/pivot", 0777) = 0
[pid   295] pivot_root("./syz-tmp", "./syz-tmp/pivot") = 0
[pid   295] chdir("/")                  = 0
[pid   295] umount2("./pivot", MNT_DETACH) = 0
[pid   295] chroot("./newroot")         = 0
[pid   295] chdir("/")                  = 0
[pid   295] mkdir("/dev/gadgetfs", 0777) = 0
[   29.487875][   T24] audit: type=1400 audit(1743123316.840:68): avc:  denied  { mounton } for  pid=295 comm="syz-executor204" path="/root/syz-tmp" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   29.513088][   T24] audit: type=1400 audit(1743123316.840:69): avc:  denied  { mount } for  pid=295 comm="syz-executor204" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[pid   295] mount("gadgetfs", "/dev/gadgetfs", "gadgetfs", 0, NULL) = -1 ENODEV (No such device)
[pid   295] mkdir("/dev/binderfs", 0777) = 0
[pid   295] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid   295] symlink("/dev/binderfs", "./binderfs") = 0
[pid   295] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid   295] write(1, "executing program\n", 18executing program
) = 18
[pid   295] memfd_create("syzkaller", 0) = 3
[pid   295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80e3ec2000
[pid   295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
[pid   295] munmap(0x7f80e3ec2000, 138412032) = 0
[pid   295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   295] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid   295] close(3)                    = 0
[   29.516237][  T295] request_module fs-gadgetfs succeeded, but still no fs?
[   29.536343][   T24] audit: type=1400 audit(1743123316.850:70): avc:  denied  { mounton } for  pid=295 comm="syz-executor204" path="/root/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   29.567759][   T24] audit: type=1400 audit(1743123316.850:71): avc:  denied  { mount } for  pid=295 comm="syz-executor204" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[pid   295] close(4)                    = 0
[pid   295] mkdir("./file0", 0777)      = 0
[   29.591850][   T24] audit: type=1400 audit(1743123316.850:72): avc:  denied  { mounton } for  pid=295 comm="syz-executor204" path="/root/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   29.623315][   T24] audit: type=1400 audit(1743123316.850:73): avc:  denied  { mounton } for  pid=295 comm="syz-executor204" path="/root/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   29.652520][   T24] audit: type=1400 audit(1743123316.860:74): avc:  denied  { unmount } for  pid=295 comm="syz-executor204" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   29.672818][   T24] audit: type=1400 audit(1743123316.870:75): avc:  denied  { mounton } for  pid=295 comm="syz-executor204" path="/dev/gadgetfs" dev="devtmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[pid   295] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue") = 0
[pid   295] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid   295] chdir("./file0")            = 0
[pid   295] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid   295] ioctl(4, LOOP_CLR_FD)       = 0
[pid   295] close(4)                    = 0
[pid   295] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid   295] openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 5
[pid   295] ioctl(5, VHOST_SET_OWNER, 0) = 0
[pid   295] ioctl(5, VHOST_SET_VRING_ADDR, 0x200000000140) = 0
[pid   295] ioctl(5, VHOST_SET_VRING_ADDR, 0x200000000280) = 0
[pid   295] ioctl(5, VHOST_SET_MEM_TABLE, 0x200000000680) = 0
[pid   295] ioctl(5, VHOST_VSOCK_SET_RUNNING, 0x200000000000) = 0
[pid   295] write(4, "#! ./file0\n", 11) = 11
[pid   295] mmap(0x200000000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x200000000000
[pid   295] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x200000000100} ---
[pid   295] write(4, 0x200000000100, 7) = 7
[pid   295] exit_group(1)               = ?
[   29.775040][  T295] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   29.789095][  T295] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   29.806630][  T295] ------------[ cut here ]------------
[   29.812172][  T295] WARNING: CPU: 1 PID: 295 at fs/ext4/inode.c:3734 ext4_set_page_dirty+0x18d/0x1a0
[   29.821785][  T295] Modules linked in:
[   29.825935][  T295] CPU: 1 PID: 295 Comm: syz-executor204 Not tainted 5.10.234-syzkaller-00033-g094fc3778d6b #0
[   29.836307][  T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   29.846675][  T295] RIP: 0010:ext4_set_page_dirty+0x18d/0x1a0
[   29.852460][  T295] Code: 5d c3 e8 d6 b6 8b ff 48 ff cb e9 e8 fe ff ff e8 c9 b6 8b ff 0f 0b eb d7 e8 c0 b6 8b ff 48 ff cb e9 3c ff ff ff e8 b3 b6 8b ff <0f> 0b e9 7a ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89
[   29.872808][  T295] RSP: 0018:ffffc9000094f5e0 EFLAGS: 00010293
[   29.879355][  T295] RAX: ffffffff81df089d RBX: 0000000000000000 RCX: ffff88810bcda780
[   29.889555][  T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   29.897847][  T295] RBP: ffffc9000094f608 R08: ffffffff81df0808 R09: fffff940008e7b71
[   29.906606][  T295] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   29.915256][  T295] R13: 1ffffd40008e7b71 R14: ffffea000473db80 R15: ffffea000473db88
[   29.923458][  T295] FS:  0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[   29.932474][  T295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   29.939280][  T295] CR2: 0000200000000100 CR3: 000000012022d000 CR4: 00000000003506a0
[   29.947408][  T295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   29.955843][  T295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   29.964328][  T295] Call Trace:
[   29.967501][  T295]  ? show_regs+0x58/0x60
[   29.971982][  T295]  ? __warn+0x160/0x2f0
[   29.976339][  T295]  ? ext4_set_page_dirty+0x18d/0x1a0
[   29.981473][  T295]  ? report_bug+0x3d9/0x5b0
[   29.986413][  T295]  ? ext4_set_page_dirty+0x18d/0x1a0
[   29.991709][  T295]  ? handle_bug+0x41/0x70
[   29.996173][  T295]  ? exc_invalid_op+0x1b/0x50
[   30.000789][  T295]  ? asm_exc_invalid_op+0x12/0x20
[   30.005729][  T295]  ? ext4_set_page_dirty+0xf8/0x1a0
[   30.010669][  T295]  ? ext4_set_page_dirty+0x18d/0x1a0
[   30.015826][  T295]  ? ext4_set_page_dirty+0x18d/0x1a0
[   30.021162][  T295]  set_page_dirty+0x196/0x300
[   30.025872][  T295]  ? __ext4_journalled_invalidatepage+0x230/0x230
[   30.032495][  T295]  unmap_page_range+0xfd4/0x23b0
[   30.037871][  T295]  ? copy_page_range+0x3020/0x3020
[   30.043062][  T295]  ? uprobe_munmap+0x18d/0x450
[   30.047842][  T295]  ? __kasan_check_write+0x14/0x20
[   30.053333][  T295]  ? invalidate_bh_lrus_cpu+0x151/0x180
[   30.058771][  T295]  unmap_vmas+0x37f/0x4f0
[   30.063241][  T295]  ? unmap_page_range+0x23b0/0x23b0
[   30.068530][  T295]  ? tlb_gather_mmu+0x2cc/0x3c0
[   30.073502][  T295]  exit_mmap+0x2e6/0x560
[   30.077497][  T295]  ? memset+0x35/0x40
[   30.082050][  T295]  ? vm_brk+0x30/0x30
[   30.085974][  T295]  ? __kasan_check_write+0x14/0x20
[   30.090864][  T295]  ? mutex_unlock+0x1c/0x40
[   30.095842][  T295]  ? uprobe_clear_state+0x2f6/0x370
[   30.101749][  T295]  __mmput+0x95/0x2d0
[   30.106219][  T295]  mmput+0x59/0x170
[   30.110562][  T295]  vhost_dev_cleanup+0x78d/0x850
[   30.116748][  T295]  ? vhost_vsock_dev_open+0x2c0/0x2c0
[   30.122511][  T295]  vhost_vsock_dev_release+0x422/0x480
[   30.128264][  T295]  ? vhost_vsock_dev_open+0x2c0/0x2c0
[   30.133772][  T295]  __fput+0x33d/0x7b0
[   30.137567][  T295]  ____fput+0x15/0x20
[   30.141476][  T295]  task_work_run+0x129/0x190
[   30.145916][  T295]  do_exit+0xc83/0x2a50
[   30.150088][  T295]  ? put_task_struct+0x80/0x80
[   30.155218][  T295]  ? _raw_spin_unlock_irq+0x4e/0x70
[   30.160308][  T295]  ? ptrace_notify+0x24c/0x350
[   30.164943][  T295]  ? do_notify_parent+0xa10/0xa10
[   30.169760][  T295]  ? debug_smp_processor_id+0x17/0x20
[   30.175306][  T295]  ? fpregs_assert_state_consistent+0xb6/0xe0
[   30.181164][  T295]  do_group_exit+0x141/0x310
[   30.185804][  T295]  __x64_sys_exit_group+0x3f/0x40
[   30.190930][  T295]  do_syscall_64+0x34/0x70
[   30.195212][  T295]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   30.201183][  T295] RIP: 0033:0x7f80ec2fed49
[   30.205463][  T295] Code: Unable to access opcode bytes at RIP 0x7f80ec2fed1f.
[   30.212627][  T295] RSP: 002b:00007fffd9175ca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   30.220998][  T295] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f80ec2fed49
[   30.229016][  T295] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[   30.236822][  T295] RBP: 00007f80ec37b2d0 R08: ffffffffffffffb8 R09: 0000000000000000
[   30.245097][  T295] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f80ec37b2d0
[   30.253146][  T295] R13: 0000000000000000 R14: 00007f80ec37c040 R15: 00007f80ec2cd2a0
[   30.260910][  T295] ---[ end trace aacab35cf27358f9 ]---
[   30.266769][    T9] ------------[ cut here ]------------
[   30.272035][    T9] kernel BUG at fs/ext4/inode.c:2777!
[   30.277404][    T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   30.283275][    T9] CPU: 0 PID: 9 Comm: kworker/u4:1 Tainted: G        W         5.10.234-syzkaller-00033-g094fc3778d6b #0
[   30.294292][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[   30.304194][    T9] Workqueue: writeback wb_workfn (flush-7:0)
[   30.310010][    T9] RIP: 0010:ext4_writepages+0x3bdf/0x3c00
[   30.315561][    T9] Code: 28 8c ff 31 ff 89 de e8 af 28 8c ff 45 84 f6 75 27 e8 15 26 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 01 26 8c ff <0f> 0b e8 fa 25 8c ff e8 c1 e2 21 ff eb 9b e8 ee 25 8c ff e8 b5 e2
[   30.335008][    T9] RSP: 0018:ffffc900000970a0 EFLAGS: 00010293
[   30.340907][    T9] RAX: ffffffff81de994f RBX: 0000008000000000 RCX: ffff8881002493c0
[   30.348913][    T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[   30.357204][    T9] RBP: ffffc90000097490 R08: ffffffff81de63c3 R09: ffffed1021ff376d
[   30.365481][    T9] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[   30.373492][    T9] R13: ffffc900000977d0 R14: 000000c410000000 R15: ffffc90000097360
[   30.381781][    T9] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   30.391163][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.398068][    T9] CR2: 00007f80ec3492f8 CR3: 000000010d50e000 CR4: 00000000003506b0
[   30.406086][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   30.414458][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   30.422364][    T9] Call Trace:
[   30.425475][    T9]  ? __die_body+0x62/0xb0
[   30.429633][    T9]  ? die+0x88/0xb0
[   30.433198][    T9]  ? do_trap+0x1a4/0x310
[   30.437368][    T9]  ? ext4_writepages+0x3bdf/0x3c00
[   30.442301][    T9]  ? handle_invalid_op+0x95/0xc0
[   30.447571][    T9]  ? ext4_writepages+0x3bdf/0x3c00
[   30.452546][    T9]  ? exc_invalid_op+0x32/0x50
[   30.457768][    T9]  ? asm_exc_invalid_op+0x12/0x20
[   30.462735][    T9]  ? ext4_writepages+0x653/0x3c00
[   30.468309][    T9]  ? ext4_writepages+0x3bdf/0x3c00
[   30.473572][    T9]  ? ext4_writepages+0x3bdf/0x3c00
[   30.478629][    T9]  ? ext4_readpage+0x230/0x230
[   30.483227][    T9]  ? voluntary_active_balance+0x4c0/0x4c0
[   30.488781][    T9]  ? find_next_and_bit+0x176/0x1b0
[   30.493809][    T9]  ? memcpy+0x56/0x70
[   30.497851][    T9]  ? load_balance+0x1afc/0x7390
[   30.502845][    T9]  ? ext4_readpage+0x230/0x230
[   30.507667][    T9]  do_writepages+0x12e/0x270
[   30.512227][    T9]  ? __writepage+0x130/0x130
[   30.516825][    T9]  ? __kasan_check_write+0x14/0x20
[   30.521748][    T9]  ? _raw_spin_lock+0xa4/0x1b0
[   30.526514][    T9]  __writeback_single_inode+0xd7/0xac0
[   30.532051][    T9]  writeback_sb_inodes+0x99c/0x16b0
[   30.537259][    T9]  ? _raw_spin_lock+0xa4/0x1b0
[   30.542122][    T9]  ? queue_io+0x520/0x520
[   30.546660][    T9]  ? writeback_sb_inodes+0x16b0/0x16b0
[   30.552419][    T9]  ? queue_io+0x3d3/0x520
[   30.556572][    T9]  wb_writeback+0x404/0xc60
[   30.560915][    T9]  ? wb_io_lists_depopulated+0x180/0x180
[   30.566445][    T9]  ? set_worker_desc+0x158/0x1c0
[   30.571146][    T9]  ? _raw_spin_trylock_bh+0x190/0x190
[   30.576366][    T9]  ? __kasan_check_write+0x14/0x20
[   30.581958][    T9]  wb_workfn+0x3d9/0x1110
[   30.586974][    T9]  ? inode_wait_for_writeback+0x280/0x280
[   30.592817][    T9]  ? find_next_bit+0x7f/0x100
[   30.597462][    T9]  ? _raw_spin_unlock_irq+0x4e/0x70
[   30.602831][    T9]  ? finish_task_switch+0x130/0x5a0
[   30.608324][    T9]  ? __switch_to_asm+0x34/0x60
[   30.613131][    T9]  ? __kasan_check_read+0x11/0x20
[   30.618088][    T9]  ? read_word_at_a_time+0x12/0x20
[   30.623782][    T9]  ? strscpy+0x9c/0x260
[   30.627990][    T9]  process_one_work+0x6dc/0xbd0
[   30.632909][    T9]  worker_thread+0xaea/0x1510
[   30.637421][    T9]  kthread+0x34b/0x3d0
[   30.641760][    T9]  ? worker_clr_flags+0x180/0x180
[   30.647236][    T9]  ? kthread_blkcg+0xd0/0xd0
[   30.652024][    T9]  ret_from_fork+0x1f/0x30
[   30.656415][    T9] Modules linked in:
[   30.660318][    T9] ---[ end trace aacab35cf27358fa ]---
[   30.665755][    T9] RIP: 0010:ext4_writepages+0x3bdf/0x3c00
[   30.671731][    T9] Code: 28 8c ff 31 ff 89 de e8 af 28 8c ff 45 84 f6 75 27 e8 15 26 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 01 26 8c ff <0f> 0b e8 fa 25 8c ff e8 c1 e2 21 ff eb 9b e8 ee 25 8c ff e8 b5 e2
[   30.692304][    T9] RSP: 0018:ffffc900000970a0 EFLAGS: 00010293
[   30.698240][    T9] RAX: ffffffff81de994f RBX: 0000008000000000 RCX: ffff8881002493c0
[   30.706137][    T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000
[   30.714420][    T9] RBP: ffffc90000097490 R08: ffffffff81de63c3 R09: ffffed1021ff376d
[   30.722456][    T9] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[   30.730587][    T9] R13: ffffc900000977d0 R14: 000000c410000000 R15: ffffc90000097360
[   30.738685][    T9] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[   30.748302][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   30.755207][    T9] CR2: 00007f80ec3492f8 CR3: 000000010d50e000 CR4: 00000000003506b0
[   30.763029][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   30.771269][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   30.779450][    T9] Kernel panic - not syncing: Fatal exception
[   30.785610][    T9] Kernel Offset: disabled
[   30.790366][    T9] Rebooting in 86400 seconds..