./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1398077602 <...> [ 91.900996][ T1207] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. execve("./syz-executor1398077602", ["./syz-executor1398077602"], 0x7ffe3cfa1060 /* 10 vars */) = 0 brk(NULL) = 0x55555cc41000 brk(0x55555cc41d00) = 0x55555cc41d00 arch_prctl(ARCH_SET_FS, 0x55555cc41380) = 0 set_tid_address(0x55555cc41650) = 5825 set_robust_list(0x55555cc41660, 24) = 0 rseq(0x55555cc41ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1398077602", 4096) = 28 getrandom("\xf8\xfc\x62\x8e\xed\xc7\xfe\x4e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555cc41d00 brk(0x55555cc62d00) = 0x55555cc62d00 brk(0x55555cc63000) = 0x55555cc63000 mprotect(0x7fb8e4de0000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5827 attached [pid 5827] set_robust_list(0x55555cc41660, 24) = 0 [pid 5825] <... clone resumed>, child_tidptr=0x55555cc41650) = 5827 [pid 5827] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5827] setpgid(0, 0) = 0 [pid 5827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5827] write(3, "1000", 4) = 4 [pid 5827] close(3) = 0 [pid 5827] write(1, "executing program\n", 18executing program ) = 18 [pid 5827] memfd_create("syzkaller", 0) = 3 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb8dc800000 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 20699119) = 20699119 [pid 5827] munmap(0x7fb8dc800000, 138412032) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5827] close(3) = 0 [pid 5827] close(4) = 0 [pid 5827] mkdir("./file1", 0777) = 0 [ 94.533819][ T5827] loop0: detected capacity change from 0 to 40427 [ 94.575561][ T5827] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3fffff [ 94.590355][ T5827] F2FS-fs (loop0): invalid crc value [pid 5827] mount("/dev/loop0", "./file1", "f2fs", MS_NOSUID|MS_NOEXEC|MS_NODIRATIME|MS_SILENT|MS_POSIXACL|MS_STRICTATIME, "nodiscard,background_gc=sync,acl,fsync_mode=strict,inline_xattr,fsync_mode=posix,discard_unit=segmen"...) = 0 [pid 5827] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5827] chdir("./file1") = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5827] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_CLOEXEC, 000) = 4 [ 94.656791][ T5827] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [pid 5827] ftruncate(4, 33587196) = 0 [ 94.732420][ T5827] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x251/0x1c30 [ 94.746130][ T5827] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [pid 5827] sendfile(4, 4, NULL, 34359738377) = 33583104 [pid 5827] unlink("./bus") = 0 [pid 5827] exit_group(0) = ? [ 95.252613][ T5827] ------------[ cut here ]------------ [ 95.258106][ T5827] kernel BUG at fs/f2fs/inode.c:944! [ 95.264463][ T5827] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 95.270728][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor139 Not tainted 6.15.0-rc6-syzkaller-00080-g1a80a098c606 #0 PREEMPT(full) [ 95.283148][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.293247][ T5827] RIP: 0010:f2fs_evict_inode+0x18b7/0x18e0 [ 95.299067][ T5827] Code: 02 00 00 00 e8 ba b5 ca fd 40 84 ed 75 2c e8 b0 b2 ca fd 4c 8b 2c 24 e9 18 e9 ff ff e8 a2 b2 ca fd 90 0f 0b e8 9a b2 ca fd 90 <0f> 0b e8 92 b2 ca fd 90 0f 0b 90 e9 ff fe ff ff e8 84 b2 ca fd e8 [ 95.318693][ T5827] RSP: 0018:ffffc900043ef938 EFLAGS: 00010293 [ 95.324800][ T5827] RAX: ffffffff83f53e66 RBX: ffff8880761591e0 RCX: ffff88802d78bc00 [ 95.332781][ T5827] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 95.340782][ T5827] RBP: dffffc0000000000 R08: ffff888076159687 R09: 1ffff1100ec2b2d0 [ 95.348774][ T5827] R10: dffffc0000000000 R11: ffffed100ec2b2d1 R12: ffff88807a7f4087 [ 95.356751][ T5827] R13: 1ffff1100ec2b2d0 R14: 0000000000000002 R15: ffff888076159680 [ 95.364803][ T5827] FS: 0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 95.373745][ T5827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.380367][ T5827] CR2: 00007fb8e4dafdf8 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 95.388349][ T5827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.396325][ T5827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.404391][ T5827] Call Trace: [ 95.407778][ T5827] [ 95.410740][ T5827] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 95.416234][ T5827] evict+0x504/0x9c0 [ 95.420163][ T5827] ? __pfx_evict+0x10/0x10 [ 95.424678][ T5827] ? do_raw_spin_unlock+0x122/0x240 [ 95.429897][ T5827] ? _raw_spin_unlock+0x28/0x50 [ 95.434768][ T5827] ? iput+0x6d8/0x9d0 [ 95.438758][ T5827] __dentry_kill+0x209/0x660 [ 95.443358][ T5827] ? dput+0x37/0x2b0 [ 95.447258][ T5827] dput+0x19f/0x2b0 [ 95.451068][ T5827] __fput+0x68e/0xa70 [ 95.455062][ T5827] task_work_run+0x1d1/0x260 [ 95.459680][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 95.464840][ T5827] do_exit+0x8d6/0x2550 [ 95.469020][ T5827] ? __pfx_do_exit+0x10/0x10 [ 95.473656][ T5827] ? _raw_spin_unlock_irq+0x23/0x50 [ 95.478879][ T5827] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.484185][ T5827] do_group_exit+0x21c/0x2d0 [ 95.488799][ T5827] __x64_sys_exit_group+0x3f/0x40 [ 95.493859][ T5827] x64_sys_call+0x21ba/0x21c0 [ 95.498558][ T5827] do_syscall_64+0xf6/0x210 [ 95.503078][ T5827] ? clear_bhb_loop+0x60/0xb0 [ 95.507762][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.513662][ T5827] RIP: 0033:0x7fb8e4d65bc9 [ 95.518190][ T5827] Code: Unable to access opcode bytes at 0x7fb8e4d65b9f. [ 95.525231][ T5827] RSP: 002b:00007ffed9f30458 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 95.533710][ T5827] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb8e4d65bc9 [ 95.541711][ T5827] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 95.549700][ T5827] RBP: 00007fb8e4de62d0 R08: ffffffffffffffb8 R09: 000055555cc424c0 [ 95.557766][ T5827] R10: 000055555cc424c0 R11: 0000000000000246 R12: 00007fb8e4de62d0 [ 95.565746][ T5827] R13: 0000000000000000 R14: 00007fb8e4de7040 R15: 00007fb8e4d33dd0 [ 95.574043][ T5827] [ 95.577071][ T5827] Modules linked in: [ 95.581091][ T5827] ---[ end trace 0000000000000000 ]--- [ 95.586638][ T5827] RIP: 0010:f2fs_evict_inode+0x18b7/0x18e0 [ 95.592590][ T5827] Code: 02 00 00 00 e8 ba b5 ca fd 40 84 ed 75 2c e8 b0 b2 ca fd 4c 8b 2c 24 e9 18 e9 ff ff e8 a2 b2 ca fd 90 0f 0b e8 9a b2 ca fd 90 <0f> 0b e8 92 b2 ca fd 90 0f 0b 90 e9 ff fe ff ff e8 84 b2 ca fd e8 [ 95.612620][ T5827] RSP: 0018:ffffc900043ef938 EFLAGS: 00010293 [ 95.619520][ T5827] RAX: ffffffff83f53e66 RBX: ffff8880761591e0 RCX: ffff88802d78bc00 [ 95.627523][ T5827] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 95.635550][ T5827] RBP: dffffc0000000000 R08: ffff888076159687 R09: 1ffff1100ec2b2d0 [ 95.643595][ T5827] R10: dffffc0000000000 R11: ffffed100ec2b2d1 R12: ffff88807a7f4087 [ 95.652061][ T5827] R13: 1ffff1100ec2b2d0 R14: 0000000000000002 R15: ffff888076159680 [ 95.660104][ T5827] FS: 0000000000000000(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 95.669192][ T5827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.675833][ T5827] CR2: 00007fb8e4dafdf8 CR3: 0000000075f24000 CR4: 00000000003526f0 [ 95.683866][ T5827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.691903][ T5827] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.700184][ T5827] Kernel panic - not syncing: Fatal exception [ 95.706664][ T5827] Kernel Offset: disabled [ 95.710991][ T5827] Rebooting in 86400 seconds..