./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor457535352
<...>
Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts.
execve("./syz-executor457535352", ["./syz-executor457535352"], 0x7fffa667cf80 /* 10 vars */) = 0
brk(NULL) = 0x55558465b000
brk(0x55558465bd00) = 0x55558465bd00
arch_prctl(ARCH_SET_FS, 0x55558465b380) = 0
set_tid_address(0x55558465b650) = 5078
set_robust_list(0x55558465b660, 24) = 0
rseq(0x55558465bca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor457535352", 4096) = 27
getrandom("\xee\x6d\x56\xe2\x95\x55\xc2\x07", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558465bd00
brk(0x55558467cd00) = 0x55558467cd00
brk(0x55558467d000) = 0x55558467d000
mprotect(0x7feb9e448000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5080 attached
<unfinished ...>
[pid 5080] set_robust_list(0x55558465b660, 24 <unfinished ...>
[pid 5078] <... clone resumed>, child_tidptr=0x55558465b650) = 5080
[pid 5080] <... set_robust_list resumed>) = 0
[pid 5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5080] setpgid(0, 0) = 0
[pid 5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5080] write(3, "1000", 4) = 4
[pid 5080] close(3) = 0
[pid 5080] write(1, "executing program\n", 18executing program
) = 18
[pid 5080] memfd_create("syzkaller", 0) = 3
[pid 5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7feb95e00000
[pid 5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5080] munmap(0x7feb95e00000, 138412032) = 0
[pid 5080] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5080] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5080] close(3) = 0
[pid 5080] close(4) = 0
[pid 5080] mkdir("./file0", 0777) = 0
[ 57.944180][ T5080] loop0: detected capacity change from 0 to 32768
[ 57.982414][ T5080] Oops: general protection fault, probably for non-canonical address 0xdffffc000000900d: 0000 [#1] PREEMPT SMP KASAN PTI
[ 57.995008][ T5080] KASAN: probably user-memory-access in range [0x0000000000048068-0x000000000004806f]
[ 58.004977][ T5080] CPU: 0 PID: 5080 Comm: syz-executor457 Not tainted 6.10.0-syzkaller-02711-g0434dbe32053 #0
[ 58.015123][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 58.025173][ T5080] RIP: 0010:bch2_checksum+0x1c5/0x770
[ 58.030554][ T5080] Code: f6 e8 3f c5 dc fd 48 8b 44 24 28 4c 8d b0 68 80 04 00 ba 20 00 00 00 48 8d 7c 24 60 31 f6 e8 22 c5 dc fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 3c c2 dc fd 49 8b 3e 48 b8 00 00
[ 58.050147][ T5080] RSP: 0018:ffffc90003536d40 EFLAGS: 00010202
[ 58.056216][ T5080] RAX: 000000000000900d RBX: 0000000000000000 RCX: 0000000000000000
[ 58.064171][ T5080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003536dc0
[ 58.072126][ T5080] RBP: ffffc900035370b0 R08: ffffc90003536dbf R09: 0000000000000000
[ 58.080082][ T5080] R10: ffffc90003536da0 R11: fffff520006a6db8 R12: ffffc90003536de0
[ 58.088038][ T5080] R13: dffffc0000000000 R14: 0000000000048068 R15: 1ffff920006a6db0
[ 58.095994][ T5080] FS: 000055558465b380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[ 58.104909][ T5080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.111475][ T5080] CR2: 00005568164b48e0 CR3: 0000000020ce4000 CR4: 00000000003506f0
[ 58.119779][ T5080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.127735][ T5080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.135689][ T5080] Call Trace:
[ 58.138953][ T5080] <TASK>
[ 58.141870][ T5080] ? __die_body+0x88/0xe0
[ 58.146190][ T5080] ? die_addr+0x108/0x140
[ 58.150507][ T5080] ? exc_general_protection+0x3dd/0x5d0
[ 58.156065][ T5080] ? asm_exc_general_protection+0x26/0x30
[ 58.161773][ T5080] ? bch2_checksum+0x1c5/0x770
[ 58.166528][ T5080] ? __pfx_bch2_checksum+0x10/0x10
[ 58.171623][ T5080] ? _raw_spin_unlock_irq+0x23/0x50
[ 58.176807][ T5080] ? lockdep_hardirqs_on+0x99/0x150
[ 58.181989][ T5080] ? _raw_spin_unlock_irq+0x2e/0x50
[ 58.187170][ T5080] ? wait_for_common_io+0x568/0x640
[ 58.192371][ T5080] read_one_super+0xd87/0xf40
[ 58.197035][ T5080] ? bch2_sb_realloc+0x422/0x660
[ 58.201954][ T5080] ? kfree+0x4e/0x360
[ 58.205924][ T5080] ? __pfx_read_one_super+0x10/0x10
[ 58.211108][ T5080] ? __pfx_bch2_sb_realloc+0x10/0x10
[ 58.216374][ T5080] ? bdev_file_open_by_path+0x385/0x480
[ 58.221904][ T5080] ? __pfx_bdev_file_open_by_path+0x10/0x10
[ 58.227786][ T5080] ? trace_kmalloc+0x1f/0xd0
[ 58.232364][ T5080] ? __asan_memcpy+0x40/0x70
[ 58.236943][ T5080] __bch2_read_super+0x873/0x1370
[ 58.241956][ T5080] ? stack_depot_save_flags+0x6e4/0x830
[ 58.247485][ T5080] ? __pfx___bch2_read_super+0x10/0x10
[ 58.252946][ T5080] ? __bch2_darray_resize+0x12f/0x1d0
[ 58.258302][ T5080] ? rcu_is_watching+0x15/0xb0
[ 58.263053][ T5080] ? __bch2_darray_resize+0x12f/0x1d0
[ 58.268409][ T5080] bch2_fs_open+0x246/0xdf0
[ 58.272896][ T5080] ? __pfx_bch2_test_super+0x10/0x10
[ 58.278174][ T5080] ? kasan_save_track+0x51/0x80
[ 58.283005][ T5080] ? kasan_save_track+0x3f/0x80
[ 58.287835][ T5080] ? kasan_save_free_info+0x40/0x50
[ 58.293017][ T5080] ? poison_slab_object+0xe0/0x150
[ 58.298112][ T5080] ? __kasan_slab_free+0x37/0x60
[ 58.303033][ T5080] ? kfree+0x149/0x360
[ 58.307087][ T5080] ? sget+0x2b8/0x620
[ 58.311048][ T5080] ? bch2_mount+0x5e6/0x13c0
[ 58.315619][ T5080] ? legacy_get_tree+0xee/0x190
[ 58.320452][ T5080] ? vfs_get_tree+0x90/0x2a0
[ 58.325025][ T5080] ? do_new_mount+0x2be/0xb40
[ 58.329685][ T5080] ? __se_sys_mount+0x2d6/0x3c0
[ 58.334515][ T5080] ? do_syscall_64+0xf3/0x230
[ 58.339190][ T5080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.345246][ T5080] ? __pfx_bch2_fs_open+0x10/0x10
[ 58.350259][ T5080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 58.356576][ T5080] ? __pfx_bch2_test_super+0x10/0x10
[ 58.361848][ T5080] ? sget+0x2b8/0x620
[ 58.365812][ T5080] ? __pfx_bch2_noset_super+0x10/0x10
[ 58.371174][ T5080] bch2_mount+0x6b0/0x13c0
[ 58.375586][ T5080] ? __pfx_bch2_mount+0x10/0x10
[ 58.380427][ T5080] ? vfs_parse_fs_string+0x190/0x230
[ 58.385695][ T5080] ? kfree+0x4e/0x360
[ 58.389663][ T5080] ? vfs_parse_fs_string+0x190/0x230
[ 58.394955][ T5080] ? __pfx_vfs_parse_fs_string+0x10/0x10
[ 58.400575][ T5080] ? cap_capable+0x1b4/0x250
[ 58.405151][ T5080] legacy_get_tree+0xee/0x190
[ 58.409814][ T5080] ? __pfx_bch2_mount+0x10/0x10
[ 58.414647][ T5080] vfs_get_tree+0x90/0x2a0
[ 58.419049][ T5080] do_new_mount+0x2be/0xb40
[ 58.423537][ T5080] ? __pfx_do_new_mount+0x10/0x10
[ 58.428546][ T5080] __se_sys_mount+0x2d6/0x3c0
[ 58.433210][ T5080] ? __pfx___se_sys_mount+0x10/0x10
[ 58.438393][ T5080] ? do_syscall_64+0x100/0x230
[ 58.443147][ T5080] ? __x64_sys_mount+0x20/0xc0
[ 58.447896][ T5080] do_syscall_64+0xf3/0x230
[ 58.452385][ T5080] ? clear_bhb_loop+0x35/0x90
[ 58.457049][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 58.462928][ T5080] RIP: 0033:0x7feb9e3d106a
[ 58.467336][ T5080] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 58.486926][ T5080] RSP: 002b:00007ffd63a40f78 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 58.495327][ T5080] RAX: ffffffffffffffda RBX: 00007ffd63a40f90 RCX: 00007feb9e3d106a
[ 58.503283][ T5080] RDX: 0000000020005b00 RSI: 0000000020000040 RDI: 00007ffd63a40f90
[ 58.511239][ T5080] RBP: 0000000000000004 R08: 00007ffd63a40fd0 R09: 0000000000005b4e
[ 58.519192][ T5080] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000
[ 58.527145][ T5080] R13: 00007ffd63a40fd0 R14: 0000000000000003 R15: 0000000001000000
[ 58.535105][ T5080] </TASK>
[ 58.538104][ T5080] Modules linked in:
[ 58.542185][ T5080] ---[ end trace 0000000000000000 ]---
[ 58.550527][ T5080] RIP: 0010:bch2_checksum+0x1c5/0x770
[ 58.555982][ T5080] Code: f6 e8 3f c5 dc fd 48 8b 44 24 28 4c 8d b0 68 80 04 00 ba 20 00 00 00 48 8d 7c 24 60 31 f6 e8 22 c5 dc fd 4c 89 f0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 f7 e8 3c c2 dc fd 49 8b 3e 48 b8 00 00
[ 58.575642][ T5080] RSP: 0018:ffffc90003536d40 EFLAGS: 00010202
[ 58.581705][ T5080] RAX: 000000000000900d RBX: 0000000000000000 RCX: 0000000000000000
[ 58.589689][ T5080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003536dc0
[ 58.597699][ T5080] RBP: ffffc900035370b0 R08: ffffc90003536dbf R09: 0000000000000000
[ 58.605684][ T5080] R10: ffffc90003536da0 R11: fffff520006a6db8 R12: ffffc90003536de0
[ 58.613654][ T5080] R13: dffffc0000000000 R14: 0000000000048068 R15: 1ffff920006a6db0
[ 58.621657][ T5080] FS: 000055558465b380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[ 58.630603][ T5080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 58.637212][ T5080] CR2: 00005568163d0fb0 CR3: 0000000020ce4000 CR4: 00000000003506f0
[ 58.645195][ T5080] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 58.653143][ T5080] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.661150][ T5080] Kernel panic - not syncing: Fatal exception
[ 58.667415][ T5080] Kernel Offset: disabled
[ 58.671725][ T5080] Rebooting in 86400 seconds..