ci-upstream-rust-kasan-gce/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-rust-kasan-gce/syz-executor291927181 <...> Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. execve("ci-upstream-rust-kasan-gce/syz-executor291927181", ["ci-upstream-rust-kasan-gce/syz-executor291927181"], 0x7ffc241503a0 /* 10 vars */) = 0 brk(NULL) = 0x55556427c000 brk(0x55556427cd80) = 0x55556427cd80 arch_prctl(ARCH_SET_FS, 0x55556427c400) = 0 set_tid_address(0x55556427c6d0) = 5620 set_robust_list(0x55556427c6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-rust-kasan-gce/syz-executor291927181", 4096) = 54 getrandom("\x3e\x01\xfd\x3c\xce\x09\xd3\x96", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556427cd80 brk(0x55556429dd80) = 0x55556429dd80 brk(0x55556429e000) = 0x55556429e000 mprotect(0x7fe40f93c000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 getrandom("\xd5\xbf\x51\x9c\xc0\x61\x05\x0b", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.zkAXLT", 0700) = 0 chmod("./syzkaller.zkAXLT", 0777) = 0 chdir("./syzkaller.zkAXLT") = 0 mkdir("./0", 0777) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-rust-kasan-gce/strace-static-x86_64: Process 5621 attached [pid 5621] set_robust_list(0x55556427c6e0, 24 [pid 5620] <... clone resumed>, child_tidptr=0x55556427c6d0) = 5621 [pid 5621] <... set_robust_list resumed>) = 0 [pid 5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5621] chdir("./0") = 0 [pid 5621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5621] setpgid(0, 0) = 0 [pid 5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5621] write(3, "1000", 4) = 4 [pid 5621] close(3) = 0 [pid 5621] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5621] write(1, "executing program\n", 18) = 18 [pid 5621] mkdirat(AT_FDCWD, "./dir0", 0777) = 0 [pid 5621] mount("mtd0", "./dir0", "jffs2", 0, NULL) = 0 [pid 5621] setxattr("./dir0", "trusted.overlay.opaque", NULL, 0, XATTR_CREATE) = 0 [pid 5621] exit_group(0) = ? [pid 5621] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55556427d7a0 /* 4 entries */, 32768) = 104 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 [ 70.410372][ T5621] jffs2: notice: (5621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 70.446051][ T5620] ------------[ cut here ]------------ [ 70.446061][ T5620] kernel BUG at fs/jffs2/nodelist.c:462! [ 70.446091][ T5620] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 70.463385][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: syz-executor291 Not tainted syzkaller #0 PREEMPT(full) [ 70.473080][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.483123][ T5620] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0 [ 70.489035][ T5620] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 b2 bd f4 fe e9 42 fe ff ff e8 c8 04 7f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 70.508640][ T5620] RSP: 0018:ffffc9000395f978 EFLAGS: 00010293 [ 70.514704][ T5620] RAX: ffffffff8349bc48 RBX: ffff88807cd0eec0 RCX: ffff88807f255dc0 [ 70.522661][ T5620] RDX: 0000000000000000 RSI: ffff88807cd0eec0 RDI: ffff8880378d4000 [ 70.530625][ T5620] RBP: 0000000000000006 R08: ffff8880378d4363 R09: 1ffff11006f1a86c [ 70.538584][ T5620] R10: dffffc0000000000 R11: ffffed1006f1a86d R12: ffff88807cd0eec0 [ 70.546543][ T5620] R13: dffffc0000000000 R14: ffff88807cd0eee0 R15: ffff8880378d4000 [ 70.554503][ T5620] FS: 000055556427c400(0000) GS:ffff888123408000(0000) knlGS:0000000000000000 [ 70.563418][ T5620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.569985][ T5620] CR2: 00007ffec0153e30 CR3: 0000000021f54000 CR4: 00000000003526f0 [ 70.577944][ T5620] Call Trace: [ 70.581219][ T5620] [ 70.584137][ T5620] ? jffs2_do_clear_inode+0x314/0x390 [ 70.589501][ T5620] jffs2_do_clear_inode+0x31f/0x390 [ 70.594773][ T5620] ? __pfx_jffs2_evict_inode+0x10/0x10 [ 70.600219][ T5620] evict+0x624/0xb50 [ 70.604106][ T5620] ? __pfx_evict+0x10/0x10 [ 70.608509][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 70.613613][ T5620] evict_inodes+0x844/0x8c0 [ 70.618109][ T5620] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 70.624077][ T5620] ? __pfx_evict_inodes+0x10/0x10 [ 70.629091][ T5620] ? jffs2_sync_fs+0x97/0xb0 [ 70.633674][ T5620] ? sync_filesystem+0x1f9/0x240 [ 70.638597][ T5620] generic_shutdown_super+0xaa/0x2d0 [ 70.643872][ T5620] kill_mtd_super+0x23/0x70 [ 70.648375][ T5620] jffs2_kill_sb+0x96/0xb0 [ 70.652782][ T5620] deactivate_locked_super+0xbe/0x110 [ 70.658145][ T5620] cleanup_mnt+0x204/0x2a0 [ 70.662550][ T5620] task_work_run+0x1d9/0x260 [ 70.667137][ T5620] ? __pfx_task_work_run+0x10/0x10 [ 70.672244][ T5620] ? path_umount+0x1be/0xc50 [ 70.676830][ T5620] ptrace_notify+0x258/0x290 [ 70.681404][ T5620] ? __pfx_ptrace_notify+0x10/0x10 [ 70.686500][ T5620] ? __x64_sys_umount+0x12a/0x170 [ 70.691513][ T5620] ? __pfx___x64_sys_umount+0x10/0x10 [ 70.696885][ T5620] ptrace_report_syscall_exit+0x2d/0x50 [ 70.702424][ T5620] do_syscall_64+0x4a0/0x520 [ 70.707004][ T5620] ? trace_irq_disable+0x3b/0x140 [ 70.712014][ T5620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.718064][ T5620] ? clear_bhb_loop+0x70/0xc0 [ 70.722729][ T5620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.728613][ T5620] RIP: 0033:0x7fe40f8a8eb7 [ 70.733028][ T5620] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 8b 09 00 00 00 00 00 eb 96 e8 61 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 70.752626][ T5620] RSP: 002b:00007ffec0154488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 70.761041][ T5620] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe40f8a8eb7 [ 70.769007][ T5620] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec0154540 [ 70.776970][ T5620] RBP: 00007ffec0154540 R08: 00007ffec0155540 R09: 00000000ffffffff [ 70.784938][ T5620] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffec01555b0 [ 70.792916][ T5620] R13: 000055556427d770 R14: 00007ffec01555b0 R15: 0000000000000001 [ 70.800882][ T5620] [ 70.803885][ T5620] Modules linked in: [ 70.808386][ T5620] ---[ end trace 0000000000000000 ]--- [ 70.814165][ T5620] RIP: 0010:jffs2_del_ino_cache+0x2b9/0x2c0 [ 70.814198][ T5620] Code: fe e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 b2 bd f4 fe e9 42 fe ff ff e8 c8 04 7f fe 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 70.814211][ T5620] RSP: 0018:ffffc9000395f978 EFLAGS: 00010293 [ 70.814227][ T5620] RAX: ffffffff8349bc48 RBX: ffff88807cd0eec0 RCX: ffff88807f255dc0 [ 70.814241][ T5620] RDX: 0000000000000000 RSI: ffff88807cd0eec0 RDI: ffff8880378d4000 [ 70.814254][ T5620] RBP: 0000000000000006 R08: ffff8880378d4363 R09: 1ffff11006f1a86c [ 70.814267][ T5620] R10: dffffc0000000000 R11: ffffed1006f1a86d R12: ffff88807cd0eec0 [ 70.814280][ T5620] R13: dffffc0000000000 R14: ffff88807cd0eee0 R15: ffff8880378d4000 [ 70.814295][ T5620] FS: 000055556427c400(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 70.814311][ T5620] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.814323][ T5620] CR2: 00007ffec015449c CR3: 0000000021f54000 CR4: 00000000003526f0 [ 70.814342][ T5620] Kernel panic - not syncing: Fatal exception [ 70.915377][ T5620] Kernel Offset: disabled [ 70.919690][ T5620] Rebooting in 86400 seconds..