./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor724949418 <...> [ 97.392383][ T23] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. execve("./syz-executor724949418", ["./syz-executor724949418"], 0x7ffeb6406a40 /* 10 vars */) = 0 brk(NULL) = 0x55555668f000 brk(0x55555668fd40) = 0x55555668fd40 arch_prctl(ARCH_SET_FS, 0x55555668f3c0) = 0 set_tid_address(0x55555668f690) = 5058 set_robust_list(0x55555668f6a0, 24) = 0 rseq(0x55555668fce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor724949418", 4096) = 27 getrandom("\xd4\x84\xaf\xa5\xb3\xb0\x3e\x99", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555668fd40 brk(0x5555566b0d40) = 0x5555566b0d40 brk(0x5555566b1000) = 0x5555566b1000 mprotect(0x7f4c07d13000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5059 attached , child_tidptr=0x55555668f690) = 5059 [pid 5059] set_robust_list(0x55555668f6a0, 24) = 0 [pid 5059] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5059] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5059] setsid() = 1 [pid 5059] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5059] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5059] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5059] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5059] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5059] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5059] unshare(CLONE_NEWNS) = 0 [pid 5059] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5059] unshare(CLONE_NEWIPC) = 0 [pid 5059] unshare(CLONE_NEWCGROUP) = 0 [pid 5059] unshare(CLONE_NEWUTS) = 0 [pid 5059] unshare(CLONE_SYSVSEM) = 0 [pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "16777216", 8) = 8 [pid 5059] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "536870912", 9) = 9 [pid 5059] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1024", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "8192", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1024", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1024", 4) = 4 [pid 5059] close(3) = 0 [pid 5059] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5059] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5059] close(3) = 0 [pid 5059] getpid() = 1 [pid 5059] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5061] rseq(0x7f4c07c4efe0, 0x20, 0, 0x53053053) = 0 [pid 5061] set_robust_list(0x7f4c07c4e9a0, 24) = 0 [pid 5061] rt_sigprocmask(SIG_SETMASK, [], [pid 5059] <... clone3 resumed> => {parent_tid=[2]}, 88) = 2 [pid 5061] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] rt_sigprocmask(SIG_SETMASK, [], [pid 5061] futex(0x7f4c07d19608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5059] futex(0x7f4c07d19608, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] <... futex resumed>) = 0 [pid 5059] futex(0x7f4c07d1960c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5061] memfd_create("syzkaller", 0) = 3 [pid 5061] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4bff82e000 [pid 5061] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304 [pid 5061] munmap(0x7f4bff82e000, 138412032) = 0 [pid 5061] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5061] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5061] close(3) = 0 [pid 5061] mkdir("./file0", 0777) = 0 [ 100.650501][ T5061] loop0: detected capacity change from 0 to 8192 [ 100.696483][ T5061] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.709737][ T5061] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 100.719187][ T5061] REISERFS (device loop0): using ordered data mode [ 100.725766][ T5061] reiserfs: using flush barriers [ 100.734247][ T5061] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.751476][ T5061] REISERFS (device loop0): checking transaction log (loop0) [pid 5061] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0 [pid 5061] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5061] chdir("./file0") = 0 [pid 5061] ioctl(4, LOOP_CLR_FD) = 0 [ 100.834942][ T5061] REISERFS (device loop0): Using r5 hash to sort names [ 100.842275][ T5061] REISERFS (device loop0): using 3.5.x disk format [ 100.850530][ T5061] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [pid 5061] close(4) = 0 [pid 5061] futex(0x7f4c07d1960c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] futex(0x7f4c07d19608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... futex resumed>) = 0 [pid 5059] futex(0x7f4c07d19608, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] futex(0x7f4c07d1960c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5061] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4 [pid 5061] futex(0x7f4c07d1960c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5061] futex(0x7f4c07d19608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] <... futex resumed>) = 0 [pid 5059] futex(0x7f4c07d19608, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = 0 [pid 5061] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5059] <... futex resumed>) = 1 [pid 5059] futex(0x7f4c07d1960c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... mount resumed>) = 0 [pid 5061] futex(0x7f4c07d1960c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5059] <... futex resumed>) = 0 [pid 5061] futex(0x7f4c07d19608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7f4c07d19608, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_LARGEFILE|O_NOATIME|FASYNC|0x3c, 000 [pid 5059] <... futex resumed>) = 0 [pid 5061] <... open resumed>) = 5 [pid 5061] futex(0x7f4c07d1960c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5059] futex(0x7f4c07d1960c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5061] <... futex resumed>) = 0 [pid 5059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5061] futex(0x7f4c07d19608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] futex(0x7f4c07d19608, FUTEX_WAKE_PRIVATE, 1000000 [pid 5061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5059] <... futex resumed>) = 0 [pid 5061] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 100.930538][ T28] audit: type=1800 audit(1697815915.700:2): pid=5061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor724" name="bus" dev="loop0" ino=2 res=0 errno=0 [pid 5059] futex(0x7f4c07d1960c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 5061] <... write resumed>) = 4194304 [pid 5061] futex(0x7f4c07d1960c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5061] futex(0x7f4c07d19608, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5059] exit_group(1 [pid 5061] <... futex resumed>) = ? [pid 5059] <... exit_group resumed>) = ? [pid 5061] +++ exited with 1 +++ [ 101.129233][ T5059] divide error: 0000 [#1] PREEMPT SMP KASAN [ 101.135209][ T5059] CPU: 1 PID: 5059 Comm: syz-executor724 Not tainted 6.6.0-rc6-next-20231019-syzkaller #0 [ 101.145146][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 101.155244][ T5059] RIP: 0010:do_journal_end+0x1731/0x4f20 [ 101.161011][ T5059] Code: c6 41 84 f0 0f 85 87 37 00 00 83 e2 07 38 d1 40 0f 9e c6 84 c9 0f 95 c2 40 84 d6 0f 85 70 37 00 00 8b 4b 14 48 8d 7d 18 31 d2 <48> f7 f1 4a 8d 34 22 48 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 101.180661][ T5059] RSP: 0018:ffffc9000418f9f8 EFLAGS: 00010246 [ 101.186741][ T5059] RAX: 0000000000000003 RBX: ffff888075ba0000 RCX: 0000000000000000 [ 101.194724][ T5059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888019bb5018 [ 101.202708][ T5059] RBP: ffff888019bb5000 R08: 0000000000000001 R09: 424c724573496552 [ 101.210695][ T5059] R10: ffff888018b8c000 R11: 0000000000000003 R12: 0000000000000000 [ 101.218691][ T5059] R13: 0000000000001000 R14: ffffc9000418fbe8 R15: ffff888077a17910 [ 101.226689][ T5059] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 101.235693][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.242316][ T5059] CR2: 0000000020400000 CR3: 00000000766fc000 CR4: 00000000003506f0 [ 101.250333][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.258323][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.266312][ T5059] Call Trace: [ 101.269620][ T5059] [ 101.272575][ T5059] ? show_regs+0x8e/0xa0 [ 101.276863][ T5059] ? die+0x36/0xa0 [ 101.280619][ T5059] ? do_trap+0x22a/0x420 [ 101.284895][ T5059] ? do_journal_end+0x1731/0x4f20 [ 101.289987][ T5059] ? do_journal_end+0x1731/0x4f20 [ 101.295056][ T5059] ? do_error_trap+0xf4/0x230 [ 101.299779][ T5059] ? do_journal_end+0x1731/0x4f20 [ 101.304842][ T5059] ? exc_divide_error+0x38/0x50 [ 101.309736][ T5059] ? do_journal_end+0x1731/0x4f20 [ 101.314791][ T5059] ? asm_exc_divide_error+0x1a/0x20 [ 101.320019][ T5059] ? do_journal_end+0x1731/0x4f20 [ 101.325068][ T5059] ? do_journal_end+0x153a/0x4f20 [ 101.330129][ T5059] ? reiserfs_prepare_for_journal+0x2b0/0x2b0 [ 101.336228][ T5059] ? dquot_scan_active+0x2f0/0x2f0 [ 101.341380][ T5059] reiserfs_sync_fs+0x10e/0x140 [ 101.346264][ T5059] ? handle_quota_files+0x3b0/0x3b0 [ 101.351496][ T5059] ? get_nr_dirty_inodes+0x176/0x1e0 [ 101.356827][ T5059] ? handle_quota_files+0x3b0/0x3b0 [ 101.362058][ T5059] sync_filesystem+0x109/0x280 [ 101.366859][ T5059] generic_shutdown_super+0x7e/0x3c0 [ 101.372170][ T5059] kill_block_super+0x3b/0x90 [ 101.376876][ T5059] deactivate_locked_super+0xbc/0x1a0 [ 101.382281][ T5059] deactivate_super+0xde/0x100 [ 101.387070][ T5059] cleanup_mnt+0x222/0x450 [ 101.391524][ T5059] task_work_run+0x14c/0x240 [ 101.396164][ T5059] ? task_work_cancel+0x30/0x30 [ 101.401061][ T5059] do_exit+0xa85/0x2ac0 [ 101.405254][ T5059] ? do_group_exit+0x1c3/0x2a0 [ 101.410119][ T5059] ? reacquire_held_locks+0x4b0/0x4b0 [ 101.415540][ T5059] ? mm_update_next_owner+0x840/0x840 [ 101.420953][ T5059] do_group_exit+0xd3/0x2a0 [ 101.425515][ T5059] __x64_sys_exit_group+0x3e/0x50 [ 101.430581][ T5059] do_syscall_64+0x3f/0x110 [ 101.435109][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 101.441044][ T5059] RIP: 0033:0x7f4c07c8f109 [ 101.445476][ T5059] Code: Unable to access opcode bytes at 0x7f4c07c8f0df. [ 101.452502][ T5059] RSP: 002b:00007ffe5bb206a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 101.460936][ T5059] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f4c07c8f109 [ 101.468923][ T5059] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 101.476927][ T5059] RBP: 00007f4c07d192d0 R08: ffffffffffffffb0 R09: 0000000000000001 [ 101.484929][ T5059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c07d192d0 [ 101.492924][ T5059] R13: 0000000000000000 R14: 00007f4c07d1a140 R15: 00007f4c07c5a220 [ 101.500926][ T5059] [ 101.503963][ T5059] Modules linked in: [ 101.509700][ T5059] ---[ end trace 0000000000000000 ]--- [ 101.515223][ T5059] RIP: 0010:do_journal_end+0x1731/0x4f20 [ 101.521178][ T5059] Code: c6 41 84 f0 0f 85 87 37 00 00 83 e2 07 38 d1 40 0f 9e c6 84 c9 0f 95 c2 40 84 d6 0f 85 70 37 00 00 8b 4b 14 48 8d 7d 18 31 d2 <48> f7 f1 4a 8d 34 22 48 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 101.540913][ T5059] RSP: 0018:ffffc9000418f9f8 EFLAGS: 00010246 [ 101.547030][ T5059] RAX: 0000000000000003 RBX: ffff888075ba0000 RCX: 0000000000000000 [ 101.555083][ T5059] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888019bb5018 [ 101.563150][ T5059] RBP: ffff888019bb5000 R08: 0000000000000001 R09: 424c724573496552 [ 101.571220][ T5059] R10: ffff888018b8c000 R11: 0000000000000003 R12: 0000000000000000 [ 101.579224][ T5059] R13: 0000000000001000 R14: ffffc9000418fbe8 R15: ffff888077a17910 [ 101.589882][ T5059] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 101.598835][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.606046][ T5059] CR2: 000055e062887088 CR3: 000000000c977000 CR4: 00000000003506f0 [ 101.619908][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.627931][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.636002][ T5059] Kernel panic - not syncing: Fatal exception [ 101.642202][ T5059] Kernel Offset: disabled [ 101.646531][ T5059] Rebooting in 86400 seconds..