./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3260525464 <...> Warning: Permanently added '10.128.1.150' (ECDSA) to the list of known hosts. execve("./syz-executor3260525464", ["./syz-executor3260525464"], 0x7ffc3e720c70 /* 10 vars */) = 0 brk(NULL) = 0x555557088000 brk(0x555557088c40) = 0x555557088c40 arch_prctl(ARCH_SET_FS, 0x555557088300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3260525464", 4096) = 28 brk(0x5555570a9c40) = 0x5555570a9c40 brk(0x5555570aa000) = 0x5555570aa000 mprotect(0x7f185ef62000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1856aa8000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 munmap(0x7f1856aa8000, 4194304) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 64.105125][ T4993] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4993 'syz-executor326' ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 64.159527][ T4993] loop0: detected capacity change from 0 to 8192 [ 64.193428][ T4993] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 64.206650][ T4993] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 64.216047][ T4993] REISERFS (device loop0): using ordered data mode [ 64.222608][ T4993] reiserfs: using flush barriers [ 64.228860][ T4993] ================================================================== [ 64.236947][ T4993] BUG: KASAN: user-memory-access in zram_slot_lock+0x57/0x150 [ 64.244425][ T4993] Write of size 8 at addr 0000000000004128 by task syz-executor326/4993 [ 64.252743][ T4993] [ 64.255060][ T4993] CPU: 1 PID: 4993 Comm: syz-executor326 Not tainted 6.4.0-rc3-syzkaller #0 [ 64.263723][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 64.273771][ T4993] Call Trace: [ 64.277054][ T4993] [ 64.279981][ T4993] dump_stack_lvl+0x1e7/0x2d0 [ 64.284664][ T4993] ? irq_work_queue+0xca/0x150 [ 64.289424][ T4993] ? nf_tcp_handle_invalid+0x650/0x650 [ 64.294888][ T4993] ? panic+0x770/0x770 [ 64.298953][ T4993] ? _printk+0xd5/0x120 [ 64.303106][ T4993] print_report+0xe6/0x540 [ 64.307529][ T4993] ? __virt_addr_valid+0x58/0x2e0 [ 64.312645][ T4993] ? zram_slot_lock+0x57/0x150 [ 64.317406][ T4993] kasan_report+0x176/0x1b0 [ 64.321911][ T4993] ? zram_slot_lock+0x57/0x150 [ 64.326766][ T4993] kasan_check_range+0x283/0x290 [ 64.331720][ T4993] zram_slot_lock+0x57/0x150 [ 64.336328][ T4993] zram_submit_bio+0x18bc/0x26d0 [ 64.341357][ T4993] ? mark_lock+0x9a/0x340 [ 64.345861][ T4993] ? rcu_lock_release+0x5/0x30 [ 64.350627][ T4993] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 64.356629][ T4993] ? zram_add+0x600/0x600 [ 64.360976][ T4993] ? blk_try_enter_queue+0x290/0x3d0 [ 64.366256][ T4993] __submit_bio+0x205/0x2e0 [ 64.370755][ T4993] ? rcu_lock_release+0x5/0x30 [ 64.375537][ T4993] ? blk_free_queue_rcu+0x40/0x40 [ 64.380559][ T4993] ? submit_bio_noacct_nocheck+0x450/0xc60 [ 64.386402][ T4993] submit_bio_noacct_nocheck+0x467/0xc60 [ 64.392049][ T4993] ? rcu_lock_release+0x5/0x30 [ 64.396822][ T4993] ? should_fail_request+0x80/0x80 [ 64.401931][ T4993] ? __bio_add_page+0x310/0x310 [ 64.406784][ T4993] ? should_fail_bio+0xd5/0x110 [ 64.411631][ T4993] ? submit_bio_noacct+0xf21/0x1870 [ 64.416834][ T4993] ? submit_bio+0x89/0x180 [ 64.421250][ T4993] __bread_gfp+0x1ec/0x380 [ 64.425771][ T4993] journal_init+0xf61/0x24b0 [ 64.430456][ T4993] ? reiserfs_init_bitmap_cache+0xf1/0x180 [ 64.436261][ T4993] reiserfs_fill_super+0x1039/0x2620 [ 64.441554][ T4993] ? reiserfs_kill_sb+0x150/0x150 [ 64.446581][ T4993] ? snprintf+0xda/0x120 [ 64.450830][ T4993] ? sb_set_blocksize+0x99/0x100 [ 64.455768][ T4993] mount_bdev+0x274/0x3a0 [ 64.460112][ T4993] ? reiserfs_kill_sb+0x150/0x150 [ 64.465141][ T4993] legacy_get_tree+0xef/0x190 [ 64.469821][ T4993] ? remove_save_link+0x540/0x540 [ 64.474943][ T4993] vfs_get_tree+0x8c/0x270 [ 64.479363][ T4993] do_new_mount+0x28f/0xae0 [ 64.483872][ T4993] ? path_mount+0x5f2/0xf80 [ 64.488374][ T4993] ? do_move_mount_old+0x170/0x170 [ 64.493490][ T4993] ? user_path_at_empty+0x12f/0x180 [ 64.498774][ T4993] __se_sys_mount+0x2d9/0x3c0 [ 64.503455][ T4993] ? __x64_sys_mount+0xc0/0xc0 [ 64.508238][ T4993] ? syscall_enter_from_user_mode+0x32/0x230 [ 64.514232][ T4993] ? __x64_sys_mount+0x20/0xc0 [ 64.518997][ T4993] do_syscall_64+0x41/0xc0 [ 64.523419][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.529311][ T4993] RIP: 0033:0x7f185eef5b0a [ 64.533725][ T4993] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 64.553421][ T4993] RSP: 002b:00007ffe122853a8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 64.561831][ T4993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f185eef5b0a [ 64.569806][ T4993] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 00007ffe122853b0 [ 64.577775][ T4993] RBP: 00007ffe122853b0 R08: 00007ffe122853f0 R09: 0000000000001121 [ 64.585751][ T4993] R10: 000000000120c083 R11: 0000000000000286 R12: 0000000000000004 [ 64.593737][ T4993] R13: 00005555570882c0 R14: 00007ffe122853f0 R15: 0000000000000000 [ 64.601801][ T4993] [ 64.604815][ T4993] ================================================================== [ 64.613257][ T4993] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 64.620473][ T4993] CPU: 1 PID: 4993 Comm: syz-executor326 Not tainted 6.4.0-rc3-syzkaller #0 [ 64.629434][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 64.639515][ T4993] Call Trace: [ 64.642805][ T4993] [ 64.645747][ T4993] dump_stack_lvl+0x1e7/0x2d0 [ 64.650449][ T4993] ? nf_tcp_handle_invalid+0x650/0x650 [ 64.655932][ T4993] ? panic+0x770/0x770 [ 64.660007][ T4993] ? lock_release+0xbf/0x9d0 [ 64.664641][ T4993] ? vscnprintf+0x5d/0x80 [ 64.668983][ T4993] panic+0x30f/0x770 [ 64.673608][ T4993] ? check_panic_on_warn+0x21/0xa0 [ 64.678734][ T4993] ? __memcpy_flushcache+0x2b0/0x2b0 [ 64.684028][ T4993] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 64.689931][ T4993] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 64.695830][ T4993] ? _raw_spin_unlock+0x40/0x40 [ 64.700689][ T4993] ? print_report+0xe6/0x540 [ 64.705294][ T4993] check_panic_on_warn+0x82/0xa0 [ 64.710244][ T4993] ? zram_slot_lock+0x57/0x150 [ 64.715020][ T4993] end_report+0x63/0x110 [ 64.719272][ T4993] kasan_report+0x183/0x1b0 [ 64.723788][ T4993] ? zram_slot_lock+0x57/0x150 [ 64.728567][ T4993] kasan_check_range+0x283/0x290 [ 64.733517][ T4993] zram_slot_lock+0x57/0x150 [ 64.738135][ T4993] zram_submit_bio+0x18bc/0x26d0 [ 64.743115][ T4993] ? mark_lock+0x9a/0x340 [ 64.747481][ T4993] ? rcu_lock_release+0x5/0x30 [ 64.752254][ T4993] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 64.758247][ T4993] ? zram_add+0x600/0x600 [ 64.762586][ T4993] ? blk_try_enter_queue+0x290/0x3d0 [ 64.767879][ T4993] __submit_bio+0x205/0x2e0 [ 64.772407][ T4993] ? rcu_lock_release+0x5/0x30 [ 64.777184][ T4993] ? blk_free_queue_rcu+0x40/0x40 [ 64.782234][ T4993] ? submit_bio_noacct_nocheck+0x450/0xc60 [ 64.788052][ T4993] submit_bio_noacct_nocheck+0x467/0xc60 [ 64.793690][ T4993] ? rcu_lock_release+0x5/0x30 [ 64.798488][ T4993] ? should_fail_request+0x80/0x80 [ 64.803695][ T4993] ? __bio_add_page+0x310/0x310 [ 64.808556][ T4993] ? should_fail_bio+0xd5/0x110 [ 64.813416][ T4993] ? submit_bio_noacct+0xf21/0x1870 [ 64.818625][ T4993] ? submit_bio+0x89/0x180 [ 64.823050][ T4993] __bread_gfp+0x1ec/0x380 [ 64.827473][ T4993] journal_init+0xf61/0x24b0 [ 64.832074][ T4993] ? reiserfs_init_bitmap_cache+0xf1/0x180 [ 64.837891][ T4993] reiserfs_fill_super+0x1039/0x2620 [ 64.843200][ T4993] ? reiserfs_kill_sb+0x150/0x150 [ 64.848236][ T4993] ? snprintf+0xda/0x120 [ 64.852497][ T4993] ? sb_set_blocksize+0x99/0x100 [ 64.857529][ T4993] mount_bdev+0x274/0x3a0 [ 64.861869][ T4993] ? reiserfs_kill_sb+0x150/0x150 [ 64.866905][ T4993] legacy_get_tree+0xef/0x190 [ 64.871593][ T4993] ? remove_save_link+0x540/0x540 [ 64.876632][ T4993] vfs_get_tree+0x8c/0x270 [ 64.881059][ T4993] do_new_mount+0x28f/0xae0 [ 64.885577][ T4993] ? path_mount+0x5f2/0xf80 [ 64.890108][ T4993] ? do_move_mount_old+0x170/0x170 [ 64.895235][ T4993] ? user_path_at_empty+0x12f/0x180 [ 64.900442][ T4993] __se_sys_mount+0x2d9/0x3c0 [ 64.905156][ T4993] ? __x64_sys_mount+0xc0/0xc0 [ 64.909929][ T4993] ? syscall_enter_from_user_mode+0x32/0x230 [ 64.915925][ T4993] ? __x64_sys_mount+0x20/0xc0 [ 64.920699][ T4993] do_syscall_64+0x41/0xc0 [ 64.925130][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.931039][ T4993] RIP: 0033:0x7f185eef5b0a [ 64.935460][ T4993] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 64.955071][ T4993] RSP: 002b:00007ffe122853a8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 64.963492][ T4993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f185eef5b0a [ 64.971467][ T4993] RDX: 0000000020000080 RSI: 0000000020000140 RDI: 00007ffe122853b0 [ 64.979443][ T4993] RBP: 00007ffe122853b0 R08: 00007ffe122853f0 R09: 0000000000001121 [ 64.987442][ T4993] R10: 000000000120c083 R11: 0000000000000286 R12: 0000000000000004 [ 64.995436][ T4993] R13: 00005555570882c0 R14: 00007ffe122853f0 R15: 0000000000000000 [ 65.003421][ T4993] [ 65.006685][ T4993] Kernel Offset: disabled [ 65.011018][ T4993] Rebooting in 86400 seconds..