./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor860653297 <...> Warning: Permanently added '10.128.10.34' (ED25519) to the list of known hosts. execve("./syz-executor860653297", ["./syz-executor860653297"], 0x7ffd91eb8c70 /* 10 vars */) = 0 brk(NULL) = 0x555557226000 brk(0x555557226d00) = 0x555557226d00 arch_prctl(ARCH_SET_FS, 0x555557226380) = 0 set_tid_address(0x555557226650) = 5041 set_robust_list(0x555557226660, 24) = 0 rseq(0x555557226ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor860653297", 4096) = 27 getrandom("\x68\x8c\x94\x67\xf6\x99\xc1\x39", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557226d00 brk(0x555557247d00) = 0x555557247d00 brk(0x555557248000) = 0x555557248000 mprotect(0x7f2c55267000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5042 attached , child_tidptr=0x555557226650) = 5042 [pid 5042] set_robust_list(0x555557226660, 24) = 0 [pid 5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5042] setpgid(0, 0) = 0 [pid 5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5042] write(3, "1000", 4) = 4 [pid 5042] close(3) = 0 [pid 5042] memfd_create("syzkaller", 0) = 3 [pid 5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2c4cdb0000 [ 91.635307][ T5042] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5042 'syz-executor860' [pid 5042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5042] munmap(0x7f2c4cdb0000, 16777216) = 0 [pid 5042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5042] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5042] close(3) = 0 [pid 5042] mkdir("./file0", 0777) = 0 [pid 5042] mount("/dev/loop0", "./file0", "jfs", 0, "") = 0 [pid 5042] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5042] chdir("./file0") = 0 [pid 5042] ioctl(4, LOOP_CLR_FD) = 0 [pid 5042] close(4) = 0 [ 91.881495][ T5042] loop0: detected capacity change from 0 to 32768 [ 91.901358][ T5042] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 91.913190][ T5042] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 91.921737][ T5042] CPU: 0 PID: 5042 Comm: syz-executor860 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0 [ 91.931773][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 91.941884][ T5042] RIP: 0010:dtInsertEntry.isra.0+0x127c/0x1680 [ 91.948211][ T5042] Code: 40 04 ff e9 4a f9 ff ff e8 51 55 90 fe 48 8b 84 24 b8 00 00 00 48 8d 78 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 14 01 00 00 [ 91.968056][ T5042] RSP: 0018:ffffc90003a5f430 EFLAGS: 00010202 [ 91.974161][ T5042] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 91.982144][ T5042] RDX: 0000000000000001 RSI: ffffffff82f7722f RDI: 0000000000000008 [ 91.990124][ T5042] RBP: ffff8880768e9580 R08: 0000000000000001 R09: 0000000000000000 [ 91.998111][ T5042] R10: 0000000000000000 R11: ffffffff81dd035b R12: ffff88802081c5a6 [ 92.006183][ T5042] R13: ffff8880768e9570 R14: ffff8880768e9582 R15: dffffc0000000000 [ 92.014365][ T5042] FS: 0000555557226380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 92.023357][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.030246][ T5042] CR2: 0000000000e55538 CR3: 0000000073a0f000 CR4: 00000000003506f0 [ 92.040421][ T5042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.048415][ T5042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.056410][ T5042] Call Trace: [ 92.059698][ T5042] [ 92.062648][ T5042] ? show_regs+0x8f/0xa0 [ 92.066947][ T5042] ? die_addr+0x4f/0xd0 [ 92.071133][ T5042] ? exc_general_protection+0x154/0x230 [ 92.076878][ T5042] ? asm_exc_general_protection+0x26/0x30 [ 92.082664][ T5042] ? kasan_save_free_info+0x2b/0x40 [ 92.087890][ T5042] ? dtInsertEntry.isra.0+0x125f/0x1680 [ 92.093488][ T5042] ? dtInsertEntry.isra.0+0x127c/0x1680 [ 92.099073][ T5042] ? add_index+0x11a0/0x11a0 [ 92.103698][ T5042] ? rcu_is_watching+0x12/0xb0 [ 92.108671][ T5042] ? __mark_inode_dirty+0x599/0xd50 [ 92.114959][ T5042] dtInsert+0x575/0xb00 [ 92.119150][ T5042] ? dtSearch+0x2450/0x2450 [ 92.123701][ T5042] jfs_create+0x63c/0xb10 [ 92.128144][ T5042] ? jfs_mknod+0x9a0/0x9a0 [ 92.132692][ T5042] ? bpf_lsm_inode_permission+0x9/0x10 [ 92.138183][ T5042] ? security_inode_permission+0xd8/0x100 [ 92.144029][ T5042] ? inode_permission+0xdd/0x5e0 [ 92.148991][ T5042] ? bpf_lsm_inode_create+0x9/0x10 [ 92.154132][ T5042] ? jfs_mknod+0x9a0/0x9a0 [ 92.158582][ T5042] lookup_open.isra.0+0x1049/0x1360 [ 92.163861][ T5042] ? try_lookup_one_len+0x190/0x190 [ 92.170403][ T5042] ? down_write_killable_nested+0x250/0x250 [ 92.176355][ T5042] ? __mnt_want_write+0x217/0x300 [ 92.181694][ T5042] path_openat+0x931/0x29c0 [ 92.186249][ T5042] ? path_lookupat+0x770/0x770 [ 92.191066][ T5042] do_filp_open+0x1de/0x430 [ 92.195625][ T5042] ? may_open_dev+0xf0/0xf0 [ 92.203543][ T5042] ? expand_files+0x442/0x910 [ 92.209072][ T5042] ? _raw_spin_unlock+0x28/0x40 [ 92.213963][ T5042] ? alloc_fd+0x2da/0x6c0 [ 92.218329][ T5042] do_sys_openat2+0x176/0x1e0 [ 92.223064][ T5042] ? build_open_flags+0x690/0x690 [ 92.228135][ T5042] ? lock_release+0x4bf/0x680 [ 92.232850][ T5042] ? ptrace_notify+0xf4/0x130 [ 92.237558][ T5042] ? reacquire_held_locks+0x4b0/0x4b0 [ 92.243021][ T5042] __x64_sys_openat+0x175/0x210 [ 92.247950][ T5042] ? __ia32_sys_open+0x1e0/0x1e0 [ 92.253018][ T5042] ? rcu_is_watching+0x12/0xb0 [ 92.257848][ T5042] ? _raw_spin_unlock_irq+0x2e/0x50 [ 92.263128][ T5042] ? ptrace_notify+0xf4/0x130 [ 92.267970][ T5042] do_syscall_64+0x38/0xb0 [ 92.272456][ T5042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 92.278416][ T5042] RIP: 0033:0x7f2c551eea59 [ 92.282871][ T5042] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 92.302618][ T5042] RSP: 002b:00007ffc80a57dd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.311165][ T5042] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2c551eea59 [ 92.319165][ T5042] RDX: 000000000000275a RSI: 00000000200001c0 RDI: 00000000ffffff9c [ 92.327161][ T5042] RBP: 00007f2c552675f0 R08: 0000000000005e04 R09: 00005555572274c0 [ 92.335177][ T5042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc80a57e00 [ 92.343801][ T5042] R13: 00007ffc80a58028 R14: 431bde82d7b634db R15: 00007f2c5523703b [ 92.351797][ T5042] [ 92.354840][ T5042] Modules linked in: [ 92.360274][ T5042] ---[ end trace 0000000000000000 ]--- [ 92.365829][ T5042] RIP: 0010:dtInsertEntry.isra.0+0x127c/0x1680 [ 92.372759][ T5042] Code: 40 04 ff e9 4a f9 ff ff e8 51 55 90 fe 48 8b 84 24 b8 00 00 00 48 8d 78 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 14 01 00 00 [ 92.392873][ T5042] RSP: 0018:ffffc90003a5f430 EFLAGS: 00010202 [ 92.402492][ T5042] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 92.410792][ T5042] RDX: 0000000000000001 RSI: ffffffff82f7722f RDI: 0000000000000008 [ 92.419040][ T5042] RBP: ffff8880768e9580 R08: 0000000000000001 R09: 0000000000000000 [ 92.427338][ T5042] R10: 0000000000000000 R11: ffffffff81dd035b R12: ffff88802081c5a6 [ 92.435700][ T5042] R13: ffff8880768e9570 R14: ffff8880768e9582 R15: dffffc0000000000 [ 92.443957][ T5042] FS: 0000555557226380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 92.453192][ T5042] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.460066][ T5042] CR2: 00007f3e23b95ed8 CR3: 0000000073a0f000 CR4: 00000000003506e0 [ 92.469361][ T5042] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.477685][ T5042] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.498456][ T5042] Kernel panic - not syncing: Fatal exception [ 92.504837][ T5042] Kernel Offset: disabled [ 92.509167][ T5042] Rebooting in 86400 seconds..