./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2446683237 <...> Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. execve("./syz-executor2446683237", ["./syz-executor2446683237"], 0x7ffe81babcd0 /* 10 vars */) = 0 brk(NULL) = 0x555574d43000 brk(0x555574d43d00) = 0x555574d43d00 arch_prctl(ARCH_SET_FS, 0x555574d43380) = 0 set_tid_address(0x555574d43650) = 5870 set_robust_list(0x555574d43660, 24) = 0 rseq(0x555574d43ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2446683237", 4096) = 28 getrandom("\x7e\xaa\x67\x89\xd8\x90\xc9\xf7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555574d43d00 brk(0x555574d64d00) = 0x555574d64d00 brk(0x555574d65000) = 0x555574d65000 mprotect(0x7f59c345e000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 write(1, "executing program\n", 18executing program ) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f59bae00000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f59bae00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 [ 89.321415][ T5870] loop0: detected capacity change from 0 to 32768 [ 89.377631][ T5870] Oops: general protection fault, probably for non-canonical address 0xdffffc00000096c2: 0000 [#1] SMP KASAN PTI [ 89.389667][ T5870] KASAN: probably user-memory-access in range [0x000000000004b610-0x000000000004b617] [ 89.399259][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz-executor244 Not tainted 6.16.0-next-20250805-syzkaller #0 PREEMPT(full) [ 89.410902][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.421081][ T5870] RIP: 0010:__bch2_err_trace+0x2c/0x230 [ 89.426688][ T5870] Code: 57 41 56 41 55 41 54 53 89 f3 49 89 fe 49 bd 00 00 00 00 00 fc ff df e8 62 96 65 fd 4d 8d be 10 b6 04 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a5 00 c9 fd 49 8b 07 65 48 ff 80 [ 89.446313][ T5870] RSP: 0018:ffffc9000410f648 EFLAGS: 00010202 [ 89.452395][ T5870] RAX: 00000000000096c2 RBX: 00000000fffff716 RCX: ffff8880322fbc00 [ 89.460553][ T5870] RDX: 0000000000000000 RSI: 00000000fffff716 RDI: 0000000000000000 [ 89.468529][ T5870] RBP: ffffc9000410f970 R08: ffff8880789ec000 R09: ffff8880789ec000 [ 89.476854][ T5870] R10: ffff888022e6c500 R11: ffff888029331340 R12: dffffc0000000000 [ 89.484860][ T5870] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000004b610 [ 89.492838][ T5870] FS: 0000555574d43380(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 89.501880][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.508475][ T5870] CR2: 00007fa4f361f000 CR3: 0000000077648000 CR4: 00000000003526f0 [ 89.516545][ T5870] Call Trace: [ 89.519835][ T5870] [ 89.522791][ T5870] bch2_fs_open+0x130f/0x27f0 [ 89.527495][ T5870] ? sget+0x267/0x620 [ 89.531497][ T5870] ? bch2_fs_get_tree+0x42a/0x1540 [ 89.536656][ T5870] ? vfs_get_tree+0x92/0x2b0 [ 89.541262][ T5870] ? do_new_mount+0x2a2/0x9e0 [ 89.545951][ T5870] ? __se_sys_mount+0x317/0x410 [ 89.550815][ T5870] ? do_syscall_64+0xfa/0x3b0 [ 89.555519][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.561778][ T5870] ? __pfx_bch2_fs_open+0x10/0x10 [ 89.566928][ T5870] ? kasan_quarantine_put+0xdd/0x220 [ 89.572245][ T5870] ? sget+0x267/0x620 [ 89.576514][ T5870] ? __pfx_bch2_noset_super+0x10/0x10 [ 89.581917][ T5870] bch2_fs_get_tree+0x44f/0x1540 [ 89.586885][ T5870] ? bch2_printbuf_exit+0x6f/0xb0 [ 89.591956][ T5870] ? bch2_parse_one_mount_opt+0x756/0x8b0 [ 89.597703][ T5870] ? __pfx_bch2_parse_one_mount_opt+0x10/0x10 [ 89.603784][ T5870] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 89.609181][ T5870] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 89.614842][ T5870] vfs_get_tree+0x92/0x2b0 [ 89.619278][ T5870] do_new_mount+0x2a2/0x9e0 [ 89.623797][ T5870] ? ns_capable+0x8a/0xf0 [ 89.628145][ T5870] ? __pfx_do_new_mount+0x10/0x10 [ 89.633280][ T5870] ? path_mount+0x61c/0xfe0 [ 89.637873][ T5870] ? user_path_at+0x44/0x60 [ 89.642400][ T5870] __se_sys_mount+0x317/0x410 [ 89.647095][ T5870] ? __pfx___se_sys_mount+0x10/0x10 [ 89.652310][ T5870] ? rcu_is_watching+0x15/0xb0 [ 89.657084][ T5870] ? __x64_sys_mount+0x20/0xc0 [ 89.661862][ T5870] do_syscall_64+0xfa/0x3b0 [ 89.666394][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.671653][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.677813][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 89.682583][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.688751][ T5870] RIP: 0033:0x7f59c33e6bba [ 89.693187][ T5870] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.712861][ T5870] RSP: 002b:00007ffd75641138 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 89.721380][ T5870] RAX: ffffffffffffffda RBX: 00007ffd75641150 RCX: 00007f59c33e6bba [ 89.729479][ T5870] RDX: 00002000000058c0 RSI: 0000200000000000 RDI: 00007ffd75641150 [ 89.737555][ T5870] RBP: 0000200000000000 R08: 00007ffd75641190 R09: 000000000000591b [ 89.745533][ T5870] R10: 0000000000000000 R11: 0000000000000282 R12: 00002000000058c0 [ 89.753513][ T5870] R13: 00007ffd75641190 R14: 0000000000000003 R15: 0000000000000000 [ 89.761610][ T5870] [ 89.764652][ T5870] Modules linked in: [ 89.769038][ T5870] ---[ end trace 0000000000000000 ]--- [ 89.774977][ T5870] RIP: 0010:__bch2_err_trace+0x2c/0x230 [ 89.781226][ T5870] Code: 57 41 56 41 55 41 54 53 89 f3 49 89 fe 49 bd 00 00 00 00 00 fc ff df e8 62 96 65 fd 4d 8d be 10 b6 04 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a5 00 c9 fd 49 8b 07 65 48 ff 80 [ 89.801212][ T5870] RSP: 0018:ffffc9000410f648 EFLAGS: 00010202 [ 89.807315][ T5870] RAX: 00000000000096c2 RBX: 00000000fffff716 RCX: ffff8880322fbc00 [ 89.815330][ T5870] RDX: 0000000000000000 RSI: 00000000fffff716 RDI: 0000000000000000 [ 89.823366][ T5870] RBP: ffffc9000410f970 R08: ffff8880789ec000 R09: ffff8880789ec000 [ 89.831494][ T5870] R10: ffff888022e6c500 R11: ffff888029331340 R12: dffffc0000000000 [ 89.839502][ T5870] R13: dffffc0000000000 R14: 0000000000000000 R15: 000000000004b610 [ 89.847618][ T5870] FS: 0000555574d43380(0000) GS:ffff888125c24000(0000) knlGS:0000000000000000 [ 89.856937][ T5870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.863601][ T5870] CR2: 00007fa4f361f000 CR3: 0000000077648000 CR4: 00000000003526f0 [ 89.871637][ T5870] Kernel panic - not syncing: Fatal exception [ 89.878188][ T5870] Kernel Offset: disabled [ 89.882520][ T5870] Rebooting in 86400 seconds..