./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2428473044 <...> Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. execve("./syz-executor2428473044", ["./syz-executor2428473044"], 0x7ffc9c404ab0 /* 10 vars */) = 0 brk(NULL) = 0x555557293000 brk(0x555557293d00) = 0x555557293d00 arch_prctl(ARCH_SET_FS, 0x555557293380) = 0 set_tid_address(0x555557293650) = 5036 set_robust_list(0x555557293660, 24) = 0 rseq(0x555557293ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2428473044", 4096) = 28 getrandom("\xb5\x22\xee\x5a\x78\xba\x46\x56", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557293d00 brk(0x5555572b4d00) = 0x5555572b4d00 brk(0x5555572b5000) = 0x5555572b5000 mprotect(0x7f239a94e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f239249c000 [ 62.774007][ T5036] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5036 'syz-executor242' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 7629503) = 7629503 munmap(0x7f239249c000, 7629503) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", MS_RDONLY|MS_NOSUID|MS_NODEV, "grpquota,iocharset=cp1251,gid=0x0000000000000000,discard=0x0000000000000000,discard,discard=0x000000"...) = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 62.844509][ T5036] loop0: detected capacity change from 0 to 14901 [ 62.859044][ T5036] syz-executor242: attempt to access beyond end of device [ 62.859044][ T5036] loop0: rw=0, sector=30728, nr_sectors = 8 limit=14901 [ 62.873118][ T5036] lbmIODone: I/O error in JFS log [ 62.878700][ T5036] *** Log Format Error ! *** [ 62.883562][ T5036] lmLogInit: exit(-22) [ 62.887949][ T5036] lmLogOpen: exit(-22) mount(NULL, "./file0", NULL, MS_REMOUNT, NULL) = -1 EINVAL (Invalid argument) mount(NULL, "./file0", NULL, MS_REMOUNT|MS_MANDLOCK|MS_NODIRATIME|MS_UNBINDABLE, NULL) = 0 [ 62.892474][ T5036] ======================================================= [ 62.892474][ T5036] WARNING: The mand mount option has been deprecated and [ 62.892474][ T5036] and is ignored by this kernel. Remove the mand [ 62.892474][ T5036] option from the mount to silence this warning. [ 62.892474][ T5036] ======================================================= [ 62.928422][ T5036] ERROR: (device loop0): txBegin: read-only filesystem [ 62.928422][ T5036] [ 62.937833][ T5036] ERROR: (device loop0): remounting filesystem as read-only [ 62.945198][ T5036] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 62.956938][ T5036] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 62.966999][ T5036] CPU: 0 PID: 5036 Comm: syz-executor242 Not tainted 6.5.0-rc4-next-20230801-syzkaller #0 [ 62.976908][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 62.987150][ T5036] RIP: 0010:__wake_up_common+0xd7/0x5a0 [ 62.992742][ T5036] Code: b7 04 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 39 ef 0f 84 ab 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a5 04 00 00 49 bd 00 00 00 00 00 fc ff df 49 8b [ 63.012364][ T5036] RSP: 0018:ffffc900039ff770 EFLAGS: 00010046 [ 63.018723][ T5036] RAX: dffffc0000000000 RBX: ffffc900025c1030 RCX: 1ffffffff1d59d8e [ 63.026742][ T5036] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 63.034722][ T5036] RBP: ffffc900025c1070 R08: ffffffffffffffe8 R09: ffffc900039ff810 [ 63.042698][ T5036] R10: 0000000000000003 R11: 0000000000000001 R12: ffffc900039ff810 [ 63.050677][ T5036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 63.058655][ T5036] FS: 0000555557293380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 63.067683][ T5036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.074303][ T5036] CR2: 000000000066c7e0 CR3: 000000007daa3000 CR4: 00000000003506f0 [ 63.082306][ T5036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.090317][ T5036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.098297][ T5036] Call Trace: [ 63.101580][ T5036] [ 63.104526][ T5036] ? die_addr+0x3b/0xa0 [ 63.108729][ T5036] ? exc_general_protection+0x154/0x230 [ 63.114311][ T5036] ? asm_exc_general_protection+0x26/0x30 [ 63.120056][ T5036] ? __wake_up_common+0xd7/0x5a0 [ 63.125018][ T5036] __wake_up_common_lock+0xd6/0x140 [ 63.130236][ T5036] ? __wake_up_common+0x5a0/0x5a0 [ 63.135280][ T5036] ? spin_bug+0x1d0/0x1d0 [ 63.139643][ T5036] txEnd+0x98/0x5a0 [ 63.143488][ T5036] __jfs_xattr_set+0xe3/0x150 [ 63.148207][ T5036] ? __jfs_setxattr+0x1050/0x1050 [ 63.153273][ T5036] ? xattr_full_name+0x44/0x90 [ 63.158066][ T5036] ? __jfs_xattr_set+0x150/0x150 [ 63.163458][ T5036] __vfs_setxattr+0x173/0x1d0 [ 63.168249][ T5036] ? __vfs_removexattr+0x1c0/0x1c0 [ 63.173384][ T5036] ? apparmor_capable+0x1da/0x4e0 [ 63.178454][ T5036] __vfs_setxattr_noperm+0x127/0x5e0 [ 63.183770][ T5036] __vfs_setxattr_locked+0x17e/0x250 [ 63.189097][ T5036] vfs_setxattr+0x146/0x350 [ 63.193623][ T5036] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.199709][ T5036] ? __vfs_setxattr_locked+0x250/0x250 [ 63.205200][ T5036] do_setxattr+0x142/0x170 [ 63.209871][ T5036] setxattr+0x159/0x170 [ 63.214060][ T5036] ? do_setxattr+0x170/0x170 [ 63.218690][ T5036] ? __mnt_want_write+0x217/0x300 [ 63.223733][ T5036] path_setxattr+0x1a3/0x1d0 [ 63.228346][ T5036] ? setxattr+0x170/0x170 [ 63.232710][ T5036] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 63.238702][ T5036] __x64_sys_setxattr+0xc4/0x160 [ 63.243662][ T5036] do_syscall_64+0x38/0xb0 [ 63.248092][ T5036] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.254009][ T5036] RIP: 0033:0x7f239a8d99c9 [ 63.258459][ T5036] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.278077][ T5036] RSP: 002b:00007ffd09617378 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 63.286498][ T5036] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f239a8d99c9 [ 63.294745][ T5036] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180 [ 63.303331][ T5036] RBP: 00007f239a92204b R08: 0000000000000002 R09: 0000000000000000 [ 63.311312][ T5036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.319297][ T5036] R13: 00007ffd09617558 R14: 0000000000000001 R15: 0000000000000001 [ 63.327472][ T5036] [ 63.330499][ T5036] Modules linked in: [ 63.334396][ T5036] ---[ end trace 0000000000000000 ]--- [ 63.339853][ T5036] RIP: 0010:__wake_up_common+0xd7/0x5a0 [ 63.345444][ T5036] Code: b7 04 00 00 4c 8b 43 40 49 83 e8 18 49 8d 78 18 48 39 ef 0f 84 ab 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a5 04 00 00 49 bd 00 00 00 00 00 fc ff df 49 8b [ 63.365150][ T5036] RSP: 0018:ffffc900039ff770 EFLAGS: 00010046 [ 63.371221][ T5036] RAX: dffffc0000000000 RBX: ffffc900025c1030 RCX: 1ffffffff1d59d8e [ 63.379198][ T5036] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 63.387189][ T5036] RBP: ffffc900025c1070 R08: ffffffffffffffe8 R09: ffffc900039ff810 [ 63.395167][ T5036] R10: 0000000000000003 R11: 0000000000000001 R12: ffffc900039ff810 [ 63.403142][ T5036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 63.411134][ T5036] FS: 0000555557293380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 63.420074][ T5036] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.426664][ T5036] CR2: 000000000066c7e0 CR3: 000000007daa3000 CR4: 00000000003506f0 [ 63.434640][ T5036] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.442612][ T5036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.450588][ T5036] Kernel panic - not syncing: Fatal exception [ 63.456956][ T5036] Kernel Offset: disabled [ 63.461284][ T5036] Rebooting in 86400 seconds..