ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-linux-next-kasan-gce-root/syz-executor3727583288 <...> Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. execve("ci-upstream-linux-next-kasan-gce-root/syz-executor3727583288", ["ci-upstream-linux-next-kasan-gce-root/syz-executor3727583288"], 0x7ffd84826370 /* 10 vars */) = 0 brk(NULL) = 0x55556efe9000 brk(0x55556efe9d80) = 0x55556efe9d80 arch_prctl(ARCH_SET_FS, 0x55556efe9400) = 0 set_tid_address(0x55556efe96d0) = 5646 set_robust_list(0x55556efe96e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-linux-next-kasan-gce-root/syz-executor3727583288", 4096) = 66 getrandom("\x60\xf5\xfe\x2c\xab\x3f\xed\xad", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556efe9d80 brk(0x55556f00ad80) = 0x55556f00ad80 brk(0x55556f00b000) = 0x55556f00b000 mprotect(0x7fab552e9000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5647 attached , child_tidptr=0x55556efe96d0) = 5647 [pid 5647] set_robust_list(0x55556efe96e0, 24) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] <... prctl resumed>) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] <... openat resumed>) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] write(1, "executing program\n", 18) = 18 [pid 5647] memfd_create("syzkaller", 0) = 3 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fab4ce00000 [pid 5647] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x10\x00\x00\x00\x00\x00\x00\x01\x00\x0c\x00\xdb\x01\x01\x00\x04\x00\x00\x00\x27\x01\x00\x00\x00\x00\x00\x00\xfa\x06\x00\x00\x00\x00\x00\x00\xf2\x06\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xe8\x04\x00\x00\x00\x00\x00\x00\x31\x06\x00\x00\x00\x00\x00\x00\xaa\x06\x00\x00\x00\x00\x00\x00\xe4\x06\x00\x00\x00\x00\x00\x00\x73\x79\x7a\xd3"..., 4096) = 4096 executing program [pid 5647] munmap(0x7fab4ce00000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5647] close(3) = 0 [pid 5647] close(4) = 0 [pid 5647] mkdir("./file0", 0777) = 0 [pid 5647] mount("/dev/loop0", "./file0", "squashfs", MS_I_VERSION, "") = 0 [pid 5647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file0") = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5647] close(4) = 0 [pid 5647] openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 76.931655][ T5647] loop0: detected capacity change from 0 to 8 [ 76.974257][ T5647] SQUASHFS error: Unable to read inode 0x87 [ 76.974384][ T5647] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI [ 76.992170][ T5647] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 77.000573][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: syz-executor372 Not tainted syzkaller #0 PREEMPT(full) [ 77.010261][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 77.020291][ T5647] RIP: 0010:__d_obtain_alias+0x50/0x880 [ 77.025836][ T5647] Code: e8 25 e6 64 ff eb 53 e8 1e e6 64 ff 49 c7 c5 8c ff ff ff eb 45 49 bf 00 00 00 00 00 fc ff df 49 8d 7d 28 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 14 da e4 ff 4d 8b 75 28 4c 89 ef e8 a8 a8 [ 77.045422][ T5647] RSP: 0018:ffffc90003b2f9d0 EFLAGS: 00010206 [ 77.051485][ T5647] RAX: 0000000000000009 RBX: 0000000000000002 RCX: ffff888079600000 [ 77.059436][ T5647] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000048 [ 77.067387][ T5647] RBP: 0000000000000001 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 77.075340][ T5647] R10: dffffc0000000000 R11: fffffbfff237d918 R12: ffff88807deca000 [ 77.083295][ T5647] R13: 0000000000000020 R14: 1ffff92000765f4c R15: dffffc0000000000 [ 77.091248][ T5647] FS: 000055556efe9400(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 77.100164][ T5647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.106739][ T5647] CR2: 00007ffc93144b5c CR3: 000000007b0fe000 CR4: 00000000003526f0 [ 77.114712][ T5647] Call Trace: [ 77.117977][ T5647] [ 77.120899][ T5647] squashfs_export_iget+0x1d8/0x370 [ 77.126087][ T5647] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 77.131886][ T5647] ? __pfx_squashfs_export_iget+0x10/0x10 [ 77.137595][ T5647] ? kasan_save_track+0x51/0x90 [ 77.142432][ T5647] ? kasan_save_track+0x3f/0x90 [ 77.147267][ T5647] ? __kasan_kmalloc+0x93/0xb0 [ 77.152018][ T5647] exportfs_decode_fh_raw+0x1c8/0x770 [ 77.157379][ T5647] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 77.163171][ T5647] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 77.169065][ T5647] do_handle_to_path+0xa4/0x1a0 [ 77.173909][ T5647] do_handle_open+0x6dd/0xb10 [ 77.178571][ T5647] ? __pfx_do_handle_open+0x10/0x10 [ 77.183770][ T5647] ? __pfx_ptrace_notify+0x10/0x10 [ 77.188876][ T5647] do_syscall_64+0x171/0x540 [ 77.193454][ T5647] ? trace_irq_disable+0x3b/0x140 [ 77.198460][ T5647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.204508][ T5647] ? clear_bhb_loop+0x70/0xc0 [ 77.209172][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.215048][ T5647] RIP: 0033:0x00007fab5525dc49 [ 77.219816][ T5647] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 77.239408][ T5647] RSP: 002b:00007fff9e969ae8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 77.247813][ T5647] RAX: ffffffffffffffda RBX: 00007fab552bd0b0 RCX: 00007fab5525dc49 [ 77.255773][ T5647] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 77.263731][ T5647] RBP: 0000000000000001 R08: 000055556efea580 R09: 000055556efea580 [ 77.271692][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9e969b10 [ 77.279646][ T5647] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007fab552bd04b [ 77.287616][ T5647] [ 77.290638][ T5647] Modules linked in: [ 77.295136][ T5647] ---[ end trace 0000000000000000 ]--- [ 77.302271][ T5647] RIP: 0010:__d_obtain_alias+0x50/0x880 [ 77.302301][ T5647] Code: e8 25 e6 64 ff eb 53 e8 1e e6 64 ff 49 c7 c5 8c ff ff ff eb 45 49 bf 00 00 00 00 00 fc ff df 49 8d 7d 28 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 14 da e4 ff 4d 8b 75 28 4c 89 ef e8 a8 a8 [ 77.302316][ T5647] RSP: 0018:ffffc90003b2f9d0 EFLAGS: 00010206 [ 77.302332][ T5647] RAX: 0000000000000009 RBX: 0000000000000002 RCX: ffff888079600000 [ 77.302345][ T5647] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000048 [ 77.302355][ T5647] RBP: 0000000000000001 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 77.302366][ T5647] R10: dffffc0000000000 R11: fffffbfff237d918 R12: ffff88807deca000 [ 77.302379][ T5647] R13: 0000000000000020 R14: 1ffff92000765f4c R15: dffffc0000000000 [ 77.302391][ T5647] FS: 000055556efe9400(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000 [ 77.302405][ T5647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.302416][ T5647] CR2: 00007ffc93144b5c CR3: 000000007b0fe000 CR4: 00000000003526f0 [ 77.302433][ T5647] Kernel panic - not syncing: Fatal exception [ 77.402951][ T5647] Kernel Offset: disabled [ 77.407260][ T5647] Rebooting in 86400 seconds..