./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3787352340 <...> DUID 00:04:b8:e6:73:7f:79:fd:ed:d3:a2:45:9d:0b:c9:97:07:5c forked to background, child pid 4666 [ 20.252375][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 20.261031][ T4667] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.177' (ECDSA) to the list of known hosts. execve("./syz-executor3787352340", ["./syz-executor3787352340"], 0x7fff60b53bc0 /* 10 vars */) = 0 brk(NULL) = 0x5555559eb000 brk(0x5555559ebc40) = 0x5555559ebc40 arch_prctl(ARCH_SET_FS, 0x5555559eb300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3787352340", 4096) = 28 brk(0x555555a0cc40) = 0x555555a0cc40 brk(0x555555a0d000) = 0x555555a0d000 mprotect(0x7fc1303af000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc127ef0000 syzkaller login: [ 39.263193][ T4997] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4997 'syz-executor378' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fc127ef0000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 39.359304][ T4997] loop0: detected capacity change from 0 to 32768 [ 39.377965][ T4997] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 39.389719][ T4997] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 39.398130][ T4997] CPU: 1 PID: 4997 Comm: syz-executor378 Not tainted 6.4.0-rc5-syzkaller-00016-ga4d7d7011219 #0 [ 39.408546][ T4997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 39.418669][ T4997] RIP: 0010:dtInsertEntry.isra.0+0x1245/0x15c0 [ 39.424840][ T4997] Code: 40 04 ff e9 3d f9 ff ff e8 c8 64 97 fe 48 8b 84 24 b8 00 00 00 48 8d 78 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 ea 01 00 00 [ 39.444444][ T4997] RSP: 0018:ffffc90003b0f438 EFLAGS: 00010212 [ 39.450502][ T4997] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 39.458462][ T4997] RDX: 0000000000000001 RSI: ffffffff82ece178 RDI: 0000000000000008 [ 39.466417][ T4997] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 39.474367][ T4997] R10: 0000000000000000 R11: 000000000000064d R12: ffff888075813140 [ 39.482412][ T4997] R13: ffff888075813142 R14: dffffc0000000000 R15: 0000000000000074 [ 39.490374][ T4997] FS: 00005555559eb300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 39.499293][ T4997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.505883][ T4997] CR2: 00000000005fdeb8 CR3: 00000000763f3000 CR4: 0000000000350ee0 [ 39.513860][ T4997] Call Trace: [ 39.517130][ T4997] [ 39.520051][ T4997] ? die_addr+0x3c/0xa0 [ 39.524202][ T4997] ? exc_general_protection+0x129/0x230 [ 39.529951][ T4997] ? asm_exc_general_protection+0x26/0x30 [ 39.535674][ T4997] ? dtInsertEntry.isra.0+0x1228/0x15c0 [ 39.541305][ T4997] ? dtInsertEntry.isra.0+0x1245/0x15c0 [ 39.546858][ T4997] ? dtInsertEntry.isra.0+0x1228/0x15c0 [ 39.552404][ T4997] ? add_index+0x1190/0x1190 [ 39.556988][ T4997] ? rcu_is_watching+0x12/0xb0 [ 39.561750][ T4997] ? __mark_inode_dirty+0x5a7/0xd60 [ 39.566944][ T4997] dtInsert+0x4f4/0xa40 [ 39.571084][ T4997] ? dtSearch+0x2090/0x2090 [ 39.575575][ T4997] jfs_create+0x602/0xb20 [ 39.579979][ T4997] ? jfs_mknod+0x9b0/0x9b0 [ 39.584385][ T4997] ? __d_lookup+0x267/0x4c0 [ 39.588903][ T4997] ? map_id_up+0x178/0x2f0 [ 39.593307][ T4997] ? make_vfsuid+0x113/0x170 [ 39.597886][ T4997] ? kernel_read_file_from_fd+0x110/0x110 [ 39.603678][ T4997] ? apparmor_path_mknod+0x16f/0x730 [ 39.608950][ T4997] ? apparmor_path_mkdir+0x730/0x730 [ 39.614253][ T4997] ? tomoyo_path_mknod+0x138/0x190 [ 39.619350][ T4997] ? make_vfsgid+0x113/0x170 [ 39.624383][ T4997] ? generic_permission+0x237/0x6a0 [ 39.629568][ T4997] ? map_id_up+0x17d/0x2f0 [ 39.633974][ T4997] ? bpf_lsm_inode_permission+0x9/0x10 [ 39.639424][ T4997] ? security_inode_permission+0xc9/0xf0 [ 39.645056][ T4997] ? bpf_lsm_inode_create+0x9/0x10 [ 39.650159][ T4997] ? jfs_mknod+0x9b0/0x9b0 [ 39.654564][ T4997] lookup_open.isra.0+0x105a/0x1400 [ 39.659876][ T4997] ? link_path_walk.part.0+0xd60/0xd60 [ 39.665326][ T4997] ? rwsem_down_write_slowpath+0x1220/0x1220 [ 39.671318][ T4997] ? __mnt_want_write+0x1fe/0x2e0 [ 39.676329][ T4997] path_openat+0x975/0x2750 [ 39.680840][ T4997] ? path_lookupat+0x840/0x840 [ 39.685593][ T4997] do_filp_open+0x1ba/0x410 [ 39.690090][ T4997] ? may_open_dev+0xf0/0xf0 [ 39.694591][ T4997] ? find_held_lock+0x2d/0x110 [ 39.699352][ T4997] ? do_raw_spin_lock+0x124/0x2b0 [ 39.704542][ T4997] ? spin_bug+0x1c0/0x1c0 [ 39.708862][ T4997] ? _raw_spin_unlock+0x28/0x40 [ 39.713748][ T4997] ? alloc_fd+0x2e4/0x750 [ 39.718069][ T4997] do_sys_openat2+0x16d/0x4c0 [ 39.722734][ T4997] ? ptrace_stop.part.0+0x60f/0x8e0 [ 39.727943][ T4997] ? build_open_flags+0x720/0x720 [ 39.732956][ T4997] ? ptrace_notify+0xfe/0x140 [ 39.737623][ T4997] ? lock_downgrade+0x690/0x690 [ 39.742497][ T4997] __x64_sys_openat+0x143/0x1f0 [ 39.747336][ T4997] ? __ia32_sys_open+0x1c0/0x1c0 [ 39.752258][ T4997] ? _raw_spin_unlock_irq+0x23/0x50 [ 39.757450][ T4997] ? lockdep_hardirqs_on+0x7d/0x100 [ 39.762638][ T4997] ? _raw_spin_unlock_irq+0x2e/0x50 [ 39.767821][ T4997] ? ptrace_notify+0xfe/0x140 [ 39.772487][ T4997] do_syscall_64+0x39/0xb0 [ 39.776894][ T4997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 39.782796][ T4997] RIP: 0033:0x7fc13033c789 [ 39.787192][ T4997] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 39.806784][ T4997] RSP: 002b:00007fff155e42d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 39.815180][ T4997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc13033c789 [ 39.823137][ T4997] RDX: 000000000000275a RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 39.831114][ T4997] RBP: 00007fc1302fc020 R08: 0000000000005e04 R09: 0000000000000000 [ 39.839070][ T4997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1302fc0b0 [ 39.847025][ T4997] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 39.854981][ T4997] [ 39.857982][ T4997] Modules linked in: [ 39.862044][ T4997] ---[ end trace 0000000000000000 ]--- [ 39.867555][ T4997] RIP: 0010:dtInsertEntry.isra.0+0x1245/0x15c0 [ 39.873717][ T4997] Code: 40 04 ff e9 3d f9 ff ff e8 c8 64 97 fe 48 8b 84 24 b8 00 00 00 48 8d 78 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 ea 01 00 00 [ 39.893588][ T4997] RSP: 0018:ffffc90003b0f438 EFLAGS: 00010212 [ 39.899692][ T4997] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 39.907723][ T4997] RDX: 0000000000000001 RSI: ffffffff82ece178 RDI: 0000000000000008 [ 39.915679][ T4997] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 39.923675][ T4997] R10: 0000000000000000 R11: 000000000000064d R12: ffff888075813140 [ 39.931679][ T4997] R13: ffff888075813142 R14: dffffc0000000000 R15: 0000000000000074 [ 39.939675][ T4997] FS: 00005555559eb300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 39.948655][ T4997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.955312][ T4997] CR2: 00005644d1d19ff0 CR3: 00000000763f3000 CR4: 0000000000350ef0 [ 39.963332][ T4997] Kernel panic - not syncing: Fatal exception [ 39.970323][ T4997] Kernel Offset: disabled [ 39.974638][ T4997] Rebooting in 86400 seconds..