ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-linux-next-kasan-gce-root/syz-executor326563494 <...> Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. execve("ci-upstream-linux-next-kasan-gce-root/syz-executor326563494", ["ci-upstream-linux-next-kasan-gce-root/syz-executor326563494"], 0x7ffd0924b940 /* 10 vars */) = 0 brk(NULL) = 0x55557e374000 brk(0x55557e374d80) = 0x55557e374d80 arch_prctl(ARCH_SET_FS, 0x55557e374400) = 0 set_tid_address(0x55557e3746d0) = 5656 set_robust_list(0x55557e3746e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-linux-next-kasan-gce-root/syz-executor326563494", 4096) = 65 getrandom("\xdd\xf9\x22\xa6\x73\x8a\x6e\x4b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557e374d80 brk(0x55557e395d80) = 0x55557e395d80 brk(0x55557e396000) = 0x55557e396000 mprotect(0x7f3a7a6bf000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 getrandom("\x35\x21\xb1\x47\x28\x5d\xb3\xc6", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.n4Ukr1", 0700) = 0 chmod("./syzkaller.n4Ukr1", 0777) = 0 chdir("./syzkaller.n4Ukr1") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5657 attached , child_tidptr=0x55557e3746d0) = 5657 [pid 5657] set_robust_list(0x55557e3746e0, 24) = 0 [pid 5656] rt_sigprocmask(SIG_SETMASK, [] [pid 5657] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] chdir("./0") = 0 [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5657] setpgid(0, 0) = 0 [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5657] write(3, "1000", 4) = 4 [pid 5657] close(3) = 0 [pid 5657] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5657] write(1, "executing program\n", 18) = 18 [pid 5657] memfd_create("syzkaller", 0) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3a72200000 [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5657] munmap(0x7f3a72200000, 138412032) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5657] close(3) = 0 [pid 5657] close(4) = 0 [pid 5657] mkdir("./file0", 0777) = 0 [ 90.280886][ T5657] loop0: detected capacity change from 0 to 2048 [ 90.326167][ T5657] NILFS (loop0): invalid segment: Magic number mismatch [pid 5657] mount("/dev/loop0", "./file0", "nilfs2", 0, "") = 0 [pid 5657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5657] chdir("./file0") = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [pid 5657] openat(AT_FDCWD, ".", O_RDONLY|O_EXCL) = 4 [ 90.326195][ T5657] NILFS (loop0): trying rollback from an earlier position [ 90.353125][ T5657] NILFS (loop0): recovery complete [ 90.360857][ T5659] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.403895][ T5657] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 90.404723][ T5657] NILFS (loop0): nilfs_dat_move: invalid vblocknr = 9, [0, 0) [ 90.404757][ T5657] NILFS error (device loop0): nilfs_bmap_assign: broken bmap (inode number=3) [ 90.410813][ T5657] Remounting filesystem read-only [ 90.411265][ T5657] NILFS (loop0): error -5 cleaning segments [ 92.068704][ T27] cfg80211: failed to load regulatory.db [pid 5657] ioctl(4, NILFS_IOCTL_CLEAN_SEGMENTS, 0x200000001680 [pid 5656] kill(-5657, SIGKILL) = 0 [pid 5656] kill(5657, SIGKILL) = 0 [pid 5657] <... ioctl resumed>) = ? [pid 5657] +++ killed by SIGKILL +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=5657, si_uid=0, si_status=SIGKILL, si_utime=0, si_stime=4 /* 0.04 s */} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557e3757b0 /* 4 entries */, 32768) = 112 [ 95.265392][ T5657] NILFS (loop0): error -30 cleaning segments [ 95.295276][ T5656] VFS: Busy inodes after unmount of loop0 (nilfs2) [ 95.295519][ T5656] ------------[ cut here ]------------ [ 95.295528][ T5656] kernel BUG at fs/super.c:733! [ 95.295572][ T5656] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 95.318675][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz-executor326 Not tainted syzkaller #0 PREEMPT(full) [ 95.328448][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 95.338598][ T5656] RIP: 0010:generic_shutdown_super+0x2ca/0x2d0 [ 95.344865][ T5656] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 70 c3 eb ff 49 8b 16 48 81 c3 c0 06 00 00 48 c7 c7 e0 4d 40 8c 48 89 de e8 67 08 d2 fe 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 95.364479][ T5656] RSP: 0018:ffffc90003bd7c50 EFLAGS: 00010246 [ 95.370671][ T5656] RAX: 0000000000000030 RBX: ffff88807e85e6c0 RCX: 07763b9482d99d00 [ 95.378645][ T5656] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 95.386621][ T5656] RBP: 1ffff1100fd0bcfa R08: ffffc90003bd79c7 R09: 1ffff9200077af38 [ 95.394610][ T5656] R10: dffffc0000000000 R11: fffff5200077af39 R12: 0000000000000000 [ 95.402582][ T5656] R13: dffffc0000000000 R14: ffffffff90728ae0 R15: ffff88807e85e7d0 [ 95.410554][ T5656] FS: 000055557e374400(0000) GS:ffff8881233f9000(0000) knlGS:0000000000000000 [ 95.419488][ T5656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.426113][ T5656] CR2: 000055557e37d7b8 CR3: 00000000736ca000 CR4: 00000000003526f0 [ 95.434091][ T5656] Call Trace: [ 95.437373][ T5656] [ 95.440306][ T5656] kill_block_super+0x44/0xa0 [ 95.445012][ T5656] deactivate_locked_super+0xbe/0x110 [ 95.450417][ T5656] cleanup_mnt+0x204/0x2a0 [ 95.454848][ T5656] task_work_run+0x1d9/0x260 [ 95.459467][ T5656] ? __pfx_task_work_run+0x10/0x10 [ 95.464599][ T5656] ? path_umount+0x1be/0xc50 [ 95.469194][ T5656] ptrace_notify+0x258/0x290 [ 95.473799][ T5656] ? __pfx_ptrace_notify+0x10/0x10 [ 95.478914][ T5656] ? __x64_sys_umount+0x12a/0x170 [ 95.483957][ T5656] ? __pfx___x64_sys_umount+0x10/0x10 [ 95.489334][ T5656] ptrace_report_syscall_exit+0x2d/0x50 [ 95.494884][ T5656] do_syscall_64+0x4ba/0x530 [ 95.499479][ T5656] ? trace_irq_disable+0x3b/0x140 [ 95.504514][ T5656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.510598][ T5656] ? clear_bhb_loop+0x70/0xc0 [ 95.515280][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.521178][ T5656] RIP: 0033:0x00007f3a7a6331b7 [ 95.525958][ T5656] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 18 09 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 95.545577][ T5656] RSP: 002b:00007ffebd02de58 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 95.554174][ T5656] RAX: 0000000000000000 RBX: 0000000000000064 RCX: 00007f3a7a6331b7 [ 95.562331][ T5656] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebd02df10 [ 95.570320][ T5656] RBP: 00007ffebd02df10 R08: 00007ffebd02ef10 R09: 00000000ffffffff [ 95.578309][ T5656] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffebd02ef80 [ 95.586286][ T5656] R13: 000055557e375780 R14: 431bde82d7b634db R15: 00007ffebd02efa0 [ 95.594268][ T5656] [ 95.597307][ T5656] Modules linked in: [ 95.601894][ T5656] ---[ end trace 0000000000000000 ]--- [ 95.608241][ T5656] RIP: 0010:generic_shutdown_super+0x2ca/0x2d0 [ 95.608280][ T5656] Code: 03 42 80 3c 28 00 74 08 4c 89 f7 e8 70 c3 eb ff 49 8b 16 48 81 c3 c0 06 00 00 48 c7 c7 e0 4d 40 8c 48 89 de e8 67 08 d2 fe 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 95.608299][ T5656] RSP: 0018:ffffc90003bd7c50 EFLAGS: 00010246 [ 95.608313][ T5656] RAX: 0000000000000030 RBX: ffff88807e85e6c0 RCX: 07763b9482d99d00 [ 95.608324][ T5656] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 95.608334][ T5656] RBP: 1ffff1100fd0bcfa R08: ffffc90003bd79c7 R09: 1ffff9200077af38 [ 95.608344][ T5656] R10: dffffc0000000000 R11: fffff5200077af39 R12: 0000000000000000 [ 95.608354][ T5656] R13: dffffc0000000000 R14: ffffffff90728ae0 R15: ffff88807e85e7d0 [ 95.608371][ T5656] FS: 000055557e374400(0000) GS:ffff8881233f9000(0000) knlGS:0000000000000000 [ 95.608384][ T5656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.608395][ T5656] CR2: 000055557e37d7b8 CR3: 00000000736ca000 CR4: 00000000003526f0 [ 95.608410][ T5656] Kernel panic - not syncing: Fatal exception [ 95.710320][ T5656] Kernel Offset: disabled [ 95.714656][ T5656] Rebooting in 86400 seconds..