ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-linux-next-kasan-gce-root/syz-executor2516728334 <...> Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. execve("ci-upstream-linux-next-kasan-gce-root/syz-executor2516728334", ["ci-upstream-linux-next-kasan-gce-root/syz-executor2516728334"], 0x7fff7aa39960 /* 10 vars */) = 0 brk(NULL) = 0x555571e15000 brk(0x555571e15d80) = 0x555571e15d80 arch_prctl(ARCH_SET_FS, 0x555571e15400) = 0 set_tid_address(0x555571e156d0) = 5650 set_robust_list(0x555571e156e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-linux-next-kasan-gce-root/syz-executor2516728334", 4096) = 66 getrandom("\x67\x4e\x0c\xf5\x12\x65\x9c\x64", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555571e15d80 brk(0x555571e36d80) = 0x555571e36d80 brk(0x555571e37000) = 0x555571e37000 mprotect(0x7f5a32be4000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5651 attached , child_tidptr=0x555571e156d0) = 5651 [pid 5651] set_robust_list(0x555571e156e0, 24) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5651] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5651] setpgid(0, 0) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5651] write(3, "1000", 4) = 4 [pid 5651] close(3) = 0 executing program [pid 5651] write(1, "executing program\n", 18) = 18 [pid 5651] memfd_create("syzkaller", 0) = 3 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5a2a600000 [pid 5651] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x10\x00\x00\x00\x00\x00\x00\x01\x00\x0c\x00\xdb\x01\x01\x00\x04\x00\x00\x00\x27\x01\x00\x00\x00\x00\x00\x00\xfa\x06\x00\x00\x00\x00\x00\x00\xf2\x06\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xe8\x04\x00\x00\x00\x00\x00\x00\x31\x06\x00\x00\x00\x00\x00\x00\xaa\x06\x00\x00\x00\x00\x00\x00\xe4\x06\x00\x00\x00\x00\x00\x00\x73\x79\x7a\xd3"..., 4096) = 4096 [pid 5651] munmap(0x7f5a2a600000, 138412032) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5651] close(3) = 0 [pid 5651] close(4) = 0 [pid 5651] mkdir("./file1", 0777) = 0 [pid 5651] mount("/dev/loop0", "./file1", "squashfs", MS_NOSUID|MS_NODIRATIME|MS_RELATIME, "") = 0 [pid 5651] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5651] chdir("./file1") = 0 [ 89.126768][ T5651] loop0: detected capacity change from 0 to 8 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5651] ioctl(4, LOOP_CLR_FD) = 0 [pid 5651] close(4) = 0 [pid 5651] mmap(0x200000000000, 2097152, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_NORESERVE|0x200000, -1, 0xec776000) = 0x200000000000 [ 89.228296][ T5651] SQUASHFS error: Unable to read inode 0x87 [ 89.228548][ T5651] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 89.246376][ T5651] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 89.254837][ T5651] CPU: 0 UID: 0 PID: 5651 Comm: syz-executor251 Not tainted syzkaller #0 PREEMPT(full) [ 89.264600][ T5651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 89.274675][ T5651] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 89.280806][ T5651] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 89.300429][ T5651] RSP: 0018:ffffc90003977758 EFLAGS: 00010203 [ 89.306526][ T5651] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 89.314513][ T5651] RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff888077898340 [ 89.322494][ T5651] RBP: ffffc900039779b0 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 89.330566][ T5651] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 89.338558][ T5651] R13: dffffc0000000000 R14: ffff888077898340 R15: 0000000000000024 [ 89.346642][ T5651] FS: 0000555571e15400(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 89.355607][ T5651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.362200][ T5651] CR2: 00002000000000c0 CR3: 0000000073e2e000 CR4: 00000000003526f0 [ 89.370223][ T5651] Call Trace: [ 89.373604][ T5651] [ 89.376815][ T5651] d_splice_alias_ops+0x72/0x440 [ 89.381766][ T5651] ? d_splice_alias+0x12/0x30 [ 89.386543][ T5651] squashfs_lookup+0xc5e/0x14e0 [ 89.391434][ T5651] ? __d_alloc_parallel+0x3a4/0x1740 [ 89.396761][ T5651] ? __d_alloc_parallel+0x3a4/0x1740 [ 89.402058][ T5651] ? __pfx_squashfs_lookup+0x10/0x10 [ 89.407351][ T5651] ? __pfx___d_alloc_parallel+0x10/0x10 [ 89.412906][ T5651] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 89.419093][ T5651] ? mode_strip_sgid+0xa1/0x1b0 [ 89.423986][ T5651] lookup_open+0x816/0x16e0 [ 89.428511][ T5651] path_openat+0x7a5/0x20e0 [ 89.433028][ T5651] do_file_open+0x23e/0x4a0 [ 89.437561][ T5651] ? __pfx_do_file_open+0x10/0x10 [ 89.442599][ T5651] ? _raw_spin_unlock+0x28/0x50 [ 89.447460][ T5651] ? alloc_fd+0x6af/0x760 [ 89.451799][ T5651] do_sys_openat2+0x115/0x200 [ 89.456496][ T5651] ? _raw_spin_unlock_irq+0x2e/0x50 [ 89.461701][ T5651] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.466914][ T5651] ? do_user_addr_fault+0xd3f/0x1480 [ 89.472210][ T5651] __x64_sys_openat+0x138/0x170 [ 89.477090][ T5651] do_syscall_64+0x171/0x540 [ 89.481721][ T5651] ? trace_irq_disable+0x3b/0x140 [ 89.486748][ T5651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.492831][ T5651] ? clear_bhb_loop+0x70/0xc0 [ 89.497539][ T5651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.503435][ T5651] RIP: 0033:0x00007f5a32b59909 [ 89.508216][ T5651] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 89.527827][ T5651] RSP: 002b:00007fffc4080af8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.536273][ T5651] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5a32b59909 [ 89.544249][ T5651] RDX: 0000000000040042 RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 89.552232][ T5651] RBP: 0000000000000001 R08: 00000000ec776000 R09: 00000000ec776000 [ 89.560249][ T5651] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fffc4080b30 [ 89.568244][ T5651] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007f5a32bb904b [ 89.576251][ T5651] [ 89.579303][ T5651] Modules linked in: [ 89.583518][ T5651] ---[ end trace 0000000000000000 ]--- [ 89.591415][ ** replaying previous printk message ** [ 89.591415][ T5651] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 89.591461][ T5651] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 89.591534][ T5651] RSP: 0018:ffffc90003977758 EFLAGS: 00010203 [ 89.591553][ T5651] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 89.591567][ T5651] RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff888077898340 [ 89.591581][ T5651] RBP: ffffc900039779b0 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 89.591596][ T5651] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 89.591651][ T5651] R13: dffffc0000000000 R14: ffff888077898340 R15: 0000000000000024 [ 89.591695][ T5651] FS: 0000555571e15400(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 89.591746][ T5651] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.591790][ T5651] CR2: 00002000000000c0 CR3: 0000000073e2e000 CR4: 00000000003526f0 [ 89.591848][ T5651] Kernel panic - not syncing: Fatal exception [ 89.698887][ T5651] Kernel Offset: disabled [ 89.703261][ T5651] Rebooting in 86400 seconds..