./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2550524864 <...> Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. execve("./syz-executor2550524864", ["./syz-executor2550524864"], 0x7ffc2c17db90 /* 10 vars */) = 0 brk(NULL) = 0x55558f7c9000 brk(0x55558f7c9d00) = 0x55558f7c9d00 arch_prctl(ARCH_SET_FS, 0x55558f7c9380) = 0 set_tid_address(0x55558f7c9650) = 5216 set_robust_list(0x55558f7c9660, 24) = 0 rseq(0x55558f7c9ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2550524864", 4096) = 28 getrandom("\x9c\x26\xb7\x38\x6e\xae\x95\x0d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558f7c9d00 brk(0x55558f7ead00) = 0x55558f7ead00 brk(0x55558f7eb000) = 0x55558f7eb000 mprotect(0x7f6532819000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5217 attached [pid 5217] set_robust_list(0x55558f7c9660, 24 [pid 5216] <... clone resumed>, child_tidptr=0x55558f7c9650) = 5217 [pid 5217] <... set_robust_list resumed>) = 0 [pid 5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5217] setpgid(0, 0) = 0 [pid 5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5217] write(3, "1000", 4) = 4 [pid 5217] close(3) = 0 executing program [pid 5217] write(1, "executing program\n", 18) = 18 [pid 5217] memfd_create("syzkaller", 0) = 3 [pid 5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f652a200000 [pid 5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5217] munmap(0x7f652a200000, 138412032) = 0 [pid 5217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5217] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5217] close(3) = 0 [pid 5217] close(4) = 0 [pid 5217] mkdir("./file0", 0777) = 0 [ 75.197463][ T5217] loop0: detected capacity change from 0 to 32768 [ 75.252553][ T5217] bcachefs (/dev/loop0): error reading default superblock: checksum error, type crc32c_nonzero: got 151109cf should be 29d2fb78 [ 75.266611][ T5217] bcachefs (/dev/loop0): error reading superblock: checksum error, type crc32c_nonzero: got 151109cf should be 29d2fb78 [ 75.280628][ T5217] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN PTI [ 75.293270][ T5217] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 75.301922][ T5217] CPU: 1 UID: 0 PID: 5217 Comm: syz-executor255 Not tainted 6.11.0-syzkaller-08836-gf8eb5bd9a818 #0 [ 75.313075][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 75.323435][ T5217] RIP: 0010:__copy_super+0x59/0xe70 [ 75.329431][ T5217] Code: 44 24 10 80 3c 18 00 74 12 4c 89 f7 e8 30 81 b4 fd 48 ba 00 00 00 00 00 fc ff df 4d 8b 3e 49 8d 5c 24 10 48 89 d8 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 2e 0c 00 00 0f b7 2b 49 8d 5f 10 48 89 d8 [ 75.349268][ T5217] RSP: 0018:ffffc9000361f2f0 EFLAGS: 00010202 [ 75.355346][ T5217] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff88801e7b1e00 [ 75.363458][ T5217] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff88807b6807d8 [ 75.371558][ T5217] RBP: 0000000000000000 R08: ffffffff8446c205 R09: 00000000ffffffff [ 75.379552][ T5217] R10: dffffc0000000000 R11: fffffbfff2844b12 R12: 0000000000000000 [ 75.387630][ T5217] R13: ffff88807b680000 R14: ffff88807b6807d8 R15: ffff88802e68b000 [ 75.395737][ T5217] FS: 000055558f7c9380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 75.404690][ T5217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.411301][ T5217] CR2: 00007fff0adf7000 CR3: 000000007a08e000 CR4: 00000000003506f0 [ 75.419462][ T5217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.427443][ T5217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.435462][ T5217] Call Trace: [ 75.438779][ T5217] [ 75.441828][ T5217] ? __die_body+0x5f/0xb0 [ 75.446481][ T5217] ? die_addr+0xb0/0xe0 [ 75.450663][ T5217] ? exc_general_protection+0x3dd/0x5d0 [ 75.456333][ T5217] ? asm_exc_general_protection+0x26/0x30 [ 75.462148][ T5217] ? bch2_sb_to_fs+0x95/0x150 [ 75.466844][ T5217] ? __copy_super+0x59/0xe70 [ 75.471465][ T5217] bch2_sb_to_fs+0xab/0x150 [ 75.476005][ T5217] bch2_fs_alloc+0xd5c/0x20b0 [ 75.480705][ T5217] ? __pfx_bch2_dev_in_fs+0x10/0x10 [ 75.485957][ T5217] ? __pfx_bch2_fs_alloc+0x10/0x10 [ 75.491094][ T5217] ? rcu_is_watching+0x15/0xb0 [ 75.495903][ T5217] ? __bch2_darray_resize+0x174/0x200 [ 75.501310][ T5217] ? kfree+0x4e/0x440 [ 75.505408][ T5217] ? bch2_fs_open+0x330/0xdf0 [ 75.510102][ T5217] bch2_fs_open+0x8cc/0xdf0 [ 75.514641][ T5217] ? __pfx_bch2_fs_open+0x10/0x10 [ 75.519699][ T5217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.526061][ T5217] ? kasan_quarantine_put+0xdc/0x230 [ 75.531480][ T5217] ? lockdep_hardirqs_on+0x99/0x150 [ 75.536759][ T5217] ? sget+0x2b8/0x620 [ 75.540816][ T5217] ? __pfx_bch2_test_super+0x10/0x10 [ 75.546271][ T5217] ? sget+0x2b8/0x620 [ 75.550472][ T5217] ? __pfx_bch2_noset_super+0x10/0x10 [ 75.555968][ T5217] bch2_fs_get_tree+0x731/0x1700 [ 75.561174][ T5217] ? __pfx_bch2_parse_one_mount_opt+0x10/0x10 [ 75.567501][ T5217] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 75.573116][ T5217] ? generic_parse_monolithic+0x387/0x400 [ 75.579294][ T5217] ? cap_capable+0x1b4/0x250 [ 75.584210][ T5217] ? safesetid_security_capable+0xb2/0x1d0 [ 75.590128][ T5217] vfs_get_tree+0x90/0x2b0 [ 75.594739][ T5217] do_new_mount+0x2be/0xb40 [ 75.599379][ T5217] ? __pfx_do_new_mount+0x10/0x10 [ 75.604626][ T5217] __se_sys_mount+0x2d6/0x3c0 [ 75.609341][ T5217] ? __pfx___se_sys_mount+0x10/0x10 [ 75.614642][ T5217] ? do_syscall_64+0x100/0x230 [ 75.619682][ T5217] ? __x64_sys_mount+0x20/0xc0 [ 75.624495][ T5217] do_syscall_64+0xf3/0x230 [ 75.629048][ T5217] ? clear_bhb_loop+0x35/0x90 [ 75.633839][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.639755][ T5217] RIP: 0033:0x7f65327a206a [ 75.644192][ T5217] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 75.663813][ T5217] RSP: 002b:00007fff0adf6798 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 75.672241][ T5217] RAX: ffffffffffffffda RBX: 00007fff0adf67b0 RCX: 00007f65327a206a [ 75.680432][ T5217] RDX: 0000000020000240 RSI: 0000000020005dc0 RDI: 00007fff0adf67b0 [ 75.688416][ T5217] RBP: 0000000000000004 R08: 00007fff0adf67f0 R09: 0000000000005da0 [ 75.696542][ T5217] R10: 0000000001000000 R11: 0000000000000282 R12: 0000000001000000 [ 75.704917][ T5217] R13: 00007fff0adf67f0 R14: 0000000000000003 R15: 0000000001000000 [ 75.712917][ T5217] [ 75.716052][ T5217] Modules linked in: [ 75.720522][ T5217] ---[ end trace 0000000000000000 ]--- [ 75.726202][ T5217] RIP: 0010:__copy_super+0x59/0xe70 [ 75.731587][ T5217] Code: 44 24 10 80 3c 18 00 74 12 4c 89 f7 e8 30 81 b4 fd 48 ba 00 00 00 00 00 fc ff df 4d 8b 3e 49 8d 5c 24 10 48 89 d8 48 c1 e8 03 <0f> b6 04 10 84 c0 0f 85 2e 0c 00 00 0f b7 2b 49 8d 5f 10 48 89 d8 [ 75.751477][ T5217] RSP: 0018:ffffc9000361f2f0 EFLAGS: 00010202 [ 75.757808][ T5217] RAX: 0000000000000002 RBX: 0000000000000010 RCX: ffff88801e7b1e00 [ 75.766004][ T5217] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff88807b6807d8 [ 75.774076][ T5217] RBP: 0000000000000000 R08: ffffffff8446c205 R09: 00000000ffffffff [ 75.782085][ T5217] R10: dffffc0000000000 R11: fffffbfff2844b12 R12: 0000000000000000 [ 75.790319][ T5217] R13: ffff88807b680000 R14: ffff88807b6807d8 R15: ffff88802e68b000 [ 75.798397][ T5217] FS: 000055558f7c9380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 75.807536][ T5217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.814219][ T5217] CR2: 000055bc1fed2068 CR3: 000000007a08e000 CR4: 00000000003506f0 [ 75.822215][ T5217] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.830256][ T5217] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.838285][ T5217] Kernel panic - not syncing: Fatal exception [ 75.844616][ T5217] Kernel Offset: disabled [ 75.848941][ T5217] Rebooting in 86400 seconds..