./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4183908764 <...> Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. execve("./syz-executor4183908764", ["./syz-executor4183908764"], 0x7ffc0db37830 /* 10 vars */) = 0 brk(NULL) = 0x555556b00000 brk(0x555556b00d00) = 0x555556b00d00 arch_prctl(ARCH_SET_FS, 0x555556b00380) = 0 set_tid_address(0x555556b00650) = 5036 set_robust_list(0x555556b00660, 24) = 0 rseq(0x555556b00ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4183908764", 4096) = 28 getrandom("\x4f\x59\x79\xe8\x25\xff\x59\xb3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556b00d00 brk(0x555556b21d00) = 0x555556b21d00 brk(0x555556b22000) = 0x555556b22000 mprotect(0x7f8b97487000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8b8efd5000 [ 63.600789][ T5036] syz-executor418[5036]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 7629503) = 7629503 munmap(0x7f8b8efd5000, 7629503) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", MS_RDONLY|MS_NOSUID|MS_NODEV, "grpquota,iocharset=cp1251,gid=0x0000000000000000,discard=0x0000000000000000,discard,discard=0x000000"...) = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 63.690516][ T5036] loop0: detected capacity change from 0 to 14901 [ 63.713533][ T5036] syz-executor418: attempt to access beyond end of device [ 63.713533][ T5036] loop0: rw=0, sector=30728, nr_sectors = 8 limit=14901 [ 63.727909][ T5036] lbmIODone: I/O error in JFS log [ 63.733349][ T5036] *** Log Format Error ! *** mount(NULL, "./file0", NULL, MS_REMOUNT, NULL) = -1 EINVAL (Invalid argument) mount(NULL, "./file0", NULL, MS_REMOUNT|MS_MANDLOCK|MS_NODIRATIME|MS_UNBINDABLE, NULL) = 0 [ 63.738663][ T5036] lmLogInit: exit(-22) [ 63.744686][ T5036] lmLogOpen: exit(-22) [ 63.749611][ T5036] ======================================================= [ 63.749611][ T5036] WARNING: The mand mount option has been deprecated and [ 63.749611][ T5036] and is ignored by this kernel. Remove the mand [ 63.749611][ T5036] option from the mount to silence this warning. [ 63.749611][ T5036] ======================================================= [ 63.786868][ T5036] ERROR: (device loop0): txBegin: read-only filesystem [ 63.786868][ T5036] [ 63.798338][ T5036] ERROR: (device loop0): remounting filesystem as read-only [ 63.806096][ T5036] INFO: trying to register non-static key. [ 63.811921][ T5036] The code is fine but needs lockdep annotation, or maybe [ 63.819015][ T5036] you didn't initialize this object before use? [ 63.825245][ T5036] turning off the locking correctness validator. [ 63.831555][ T5036] CPU: 1 PID: 5036 Comm: syz-executor418 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0 [ 63.841959][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 63.852009][ T5036] Call Trace: [ 63.855287][ T5036] [ 63.858225][ T5036] dump_stack_lvl+0x1e7/0x2d0 [ 63.862908][ T5036] ? nf_tcp_handle_invalid+0x650/0x650 [ 63.868369][ T5036] ? panic+0x770/0x770 [ 63.872446][ T5036] ? deref_stack_reg+0x1c7/0x250 [ 63.877390][ T5036] ? __is_module_percpu_address+0x3a8/0x420 [ 63.883298][ T5036] ? __module_address+0x32/0x500 [ 63.888268][ T5036] assign_lock_key+0x234/0x270 [ 63.893035][ T5036] ? SOFTIRQ_verbose+0x10/0x10 [ 63.897796][ T5036] ? is_bpf_text_address+0x26/0x2a0 [ 63.902991][ T5036] ? is_bpf_text_address+0x28d/0x2a0 [ 63.908275][ T5036] register_lock_class+0x28e/0x990 [ 63.913479][ T5036] ? kernel_text_address+0xa3/0xe0 [ 63.918594][ T5036] ? __kernel_text_address+0xd/0x40 [ 63.923790][ T5036] ? unwind_get_return_address+0x91/0xc0 [ 63.929420][ T5036] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.935485][ T5036] ? is_dynamic_key+0x260/0x260 [ 63.940344][ T5036] ? arch_stack_walk+0x162/0x1a0 [ 63.945280][ T5036] __lock_acquire+0x190/0x7f70 [ 63.950048][ T5036] ? stack_trace_save+0x117/0x1c0 [ 63.955066][ T5036] ? stack_trace_snprint+0xf0/0xf0 [ 63.960172][ T5036] ? check_noncircular+0x205/0x4a0 [ 63.965281][ T5036] ? print_deadlock_bug+0x600/0x600 [ 63.970513][ T5036] ? lockdep_unlock+0x169/0x300 [ 63.975374][ T5036] ? verify_lock_unused+0x140/0x140 [ 63.980580][ T5036] ? add_lock_to_list+0x1de/0x2e0 [ 63.985608][ T5036] ? __lock_acquire+0x3683/0x7f70 [ 63.990644][ T5036] lock_acquire+0x1e3/0x520 [ 63.995190][ T5036] ? __wake_up+0x101/0x1d0 [ 63.999610][ T5036] ? __lock_acquire+0x7f70/0x7f70 [ 64.004636][ T5036] ? read_lock_is_recursive+0x20/0x20 [ 64.010096][ T5036] ? read_lock_is_recursive+0x20/0x20 [ 64.015471][ T5036] ? up_write+0x1a9/0x580 [ 64.019807][ T5036] _raw_spin_lock_irqsave+0xd5/0x120 [ 64.025090][ T5036] ? __wake_up+0x101/0x1d0 [ 64.029507][ T5036] ? _raw_spin_lock+0x40/0x40 [ 64.034209][ T5036] __wake_up+0x101/0x1d0 [ 64.038453][ T5036] ? __wake_up_bit+0x2b0/0x2b0 [ 64.043215][ T5036] ? __rwlock_init+0x150/0x150 [ 64.047988][ T5036] ? jfs_extendfs+0x1e30/0x1e30 [ 64.052840][ T5036] ? smk_access+0x4ab/0x4e0 [ 64.057346][ T5036] txEnd+0x8c/0x560 [ 64.061156][ T5036] __jfs_xattr_set+0x132/0x180 [ 64.065919][ T5036] ? jfs_xattr_set_os2+0x100/0x100 [ 64.071030][ T5036] ? jfs_xattr_set+0x33/0x60 [ 64.075620][ T5036] ? jfs_xattr_get+0x50/0x50 [ 64.080209][ T5036] __vfs_setxattr+0x460/0x4a0 [ 64.084903][ T5036] __vfs_setxattr_noperm+0x12e/0x5e0 [ 64.090208][ T5036] vfs_setxattr+0x221/0x420 [ 64.094718][ T5036] ? path_setxattr+0xb2/0x2a0 [ 64.099390][ T5036] ? xattr_permission+0x430/0x430 [ 64.104412][ T5036] ? __check_object_size+0x8e/0xa00 [ 64.109606][ T5036] ? __might_fault+0xc1/0x120 [ 64.114284][ T5036] ? strncpy_from_user+0x1a5/0x2e0 [ 64.119411][ T5036] setxattr+0x25d/0x2f0 [ 64.123566][ T5036] ? path_setxattr+0x2a0/0x2a0 [ 64.128336][ T5036] ? __mnt_want_write+0x226/0x2a0 [ 64.133441][ T5036] path_setxattr+0x1c0/0x2a0 [ 64.138031][ T5036] ? simple_xattrs_free+0x170/0x170 [ 64.143233][ T5036] ? syscall_enter_from_user_mode+0x32/0x230 [ 64.149207][ T5036] __x64_sys_setxattr+0xbb/0xd0 [ 64.154065][ T5036] do_syscall_64+0x41/0xc0 [ 64.158486][ T5036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.164379][ T5036] RIP: 0033:0x7f8b974129c9 [ 64.168789][ T5036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 64.188387][ T5036] RSP: 002b:00007ffe91f079a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 64.196795][ T5036] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f8b974129c9 [ 64.204771][ T5036] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180 [ 64.212737][ T5036] RBP: 00007f8b9745b04b R08: 0000000000000002 R09: 0000000000000000 [ 64.220705][ T5036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.228665][ T5036] R13: 00007ffe91f07b88 R14: 0000000000000001 R15: 0000000000000001 [ 64.236630][ T5036] [ 64.239660][ T5036] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 64.251361][ T5036] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 64.259766][ T5036] CPU: 1 PID: 5036 Comm: syz-executor418 Not tainted 6.6.0-rc3-syzkaller-00165-g3b517966c561 #0 [ 64.270176][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 64.280234][ T5036] RIP: 0010:__wake_up_common+0x23d/0x4e0 [ 64.285863][ T5036] Code: 00 49 83 c4 40 4d 39 e7 0f 84 f1 01 00 00 45 31 f6 eb 09 4d 39 e7 0f 84 e3 01 00 00 4c 89 fb 49 8d 6f e8 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 85 46 7e 00 48 ba 00 00 00 00 00 fc [ 64.305459][ T5036] RSP: 0018:ffffc90003a3f778 EFLAGS: 00010046 [ 64.311523][ T5036] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.319488][ T5036] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc90002631030 [ 64.327454][ T5036] RBP: ffffffffffffffe8 R08: 0000000000000000 R09: ffffc90003a3f820 [ 64.335426][ T5036] R10: dffffc0000000000 R11: fffff52000747ed8 R12: ffffc90002631070 [ 64.343396][ T5036] R13: 1ffff92000747f04 R14: 0000000000000000 R15: 0000000000000000 [ 64.351360][ T5036] FS: 0000555556b00380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 64.360301][ T5036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.366878][ T5036] CR2: 000055f9c7d4fff0 CR3: 000000007e73b000 CR4: 00000000003506e0 [ 64.374845][ T5036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.382807][ T5036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.390773][ T5036] Call Trace: [ 64.394047][ T5036] [ 64.396975][ T5036] ? __die_body+0x8b/0xe0 [ 64.401305][ T5036] ? die_addr+0xc9/0x100 [ 64.405542][ T5036] ? exc_general_protection+0x3c2/0x5b0 [ 64.411092][ T5036] ? asm_exc_general_protection+0x26/0x30 [ 64.416811][ T5036] ? __wake_up_common+0x23d/0x4e0 [ 64.421862][ T5036] __wake_up+0x11e/0x1d0 [ 64.426118][ T5036] ? __wake_up_bit+0x2b0/0x2b0 [ 64.430980][ T5036] ? __rwlock_init+0x150/0x150 [ 64.435779][ T5036] ? jfs_extendfs+0x1e30/0x1e30 [ 64.440637][ T5036] ? smk_access+0x4ab/0x4e0 [ 64.445144][ T5036] txEnd+0x8c/0x560 [ 64.448950][ T5036] __jfs_xattr_set+0x132/0x180 [ 64.453715][ T5036] ? jfs_xattr_set_os2+0x100/0x100 [ 64.458828][ T5036] ? jfs_xattr_set+0x33/0x60 [ 64.463420][ T5036] ? jfs_xattr_get+0x50/0x50 [ 64.468016][ T5036] __vfs_setxattr+0x460/0x4a0 [ 64.472707][ T5036] __vfs_setxattr_noperm+0x12e/0x5e0 [ 64.478007][ T5036] vfs_setxattr+0x221/0x420 [ 64.482526][ T5036] ? path_setxattr+0xb2/0x2a0 [ 64.487227][ T5036] ? xattr_permission+0x430/0x430 [ 64.492259][ T5036] ? __check_object_size+0x8e/0xa00 [ 64.497462][ T5036] ? __might_fault+0xc1/0x120 [ 64.502151][ T5036] ? strncpy_from_user+0x1a5/0x2e0 [ 64.507285][ T5036] setxattr+0x25d/0x2f0 [ 64.511439][ T5036] ? path_setxattr+0x2a0/0x2a0 [ 64.516316][ T5036] ? __mnt_want_write+0x226/0x2a0 [ 64.521349][ T5036] path_setxattr+0x1c0/0x2a0 [ 64.525937][ T5036] ? simple_xattrs_free+0x170/0x170 [ 64.531131][ T5036] ? syscall_enter_from_user_mode+0x32/0x230 [ 64.537118][ T5036] __x64_sys_setxattr+0xbb/0xd0 [ 64.542069][ T5036] do_syscall_64+0x41/0xc0 [ 64.546498][ T5036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 64.552387][ T5036] RIP: 0033:0x7f8b974129c9 [ 64.556799][ T5036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 64.576408][ T5036] RSP: 002b:00007ffe91f079a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 64.584814][ T5036] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f8b974129c9 [ 64.592780][ T5036] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180 [ 64.600742][ T5036] RBP: 00007f8b9745b04b R08: 0000000000000002 R09: 0000000000000000 [ 64.608707][ T5036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.616672][ T5036] R13: 00007ffe91f07b88 R14: 0000000000000001 R15: 0000000000000001 [ 64.624661][ T5036] [ 64.627770][ T5036] Modules linked in: [ 64.631692][ T5036] ---[ end trace 0000000000000000 ]--- [ 64.637163][ T5036] RIP: 0010:__wake_up_common+0x23d/0x4e0 [ 64.642813][ T5036] Code: 00 49 83 c4 40 4d 39 e7 0f 84 f1 01 00 00 45 31 f6 eb 09 4d 39 e7 0f 84 e3 01 00 00 4c 89 fb 49 8d 6f e8 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 85 46 7e 00 48 ba 00 00 00 00 00 fc [ 64.662511][ T5036] RSP: 0018:ffffc90003a3f778 EFLAGS: 00010046 [ 64.668665][ T5036] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 64.676654][ T5036] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc90002631030 [ 64.684626][ T5036] RBP: ffffffffffffffe8 R08: 0000000000000000 R09: ffffc90003a3f820 [ 64.692590][ T5036] R10: dffffc0000000000 R11: fffff52000747ed8 R12: ffffc90002631070 [ 64.700561][ T5036] R13: 1ffff92000747f04 R14: 0000000000000000 R15: 0000000000000000 [ 64.708526][ T5036] FS: 0000555556b00380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 64.717456][ T5036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.724038][ T5036] CR2: 000055f9c7d4fff0 CR3: 000000007e73b000 CR4: 00000000003506e0 [ 64.732010][ T5036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.739980][ T5036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.747950][ T5036] Kernel panic - not syncing: Fatal exception [ 64.754349][ T5036] Kernel Offset: disabled [ 64.758664][ T5036] Rebooting in 86400 seconds..