ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-linux-next-kasan-gce-root/syz-executor3373701766 <...> Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. execve("ci-upstream-linux-next-kasan-gce-root/syz-executor3373701766", ["ci-upstream-linux-next-kasan-gce-root/syz-executor3373701766"], 0x7ffd513afb90 /* 10 vars */) = 0 brk(NULL) = 0x555576a8a000 brk(0x555576a8ad80) = 0x555576a8ad80 arch_prctl(ARCH_SET_FS, 0x555576a8a400) = 0 set_tid_address(0x555576a8a6d0) = 5646 set_robust_list(0x555576a8a6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-linux-next-kasan-gce-root/syz-executor3373701766", 4096) = 66 getrandom("\x35\x57\xa8\x93\xe2\x98\xe9\x8a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555576a8ad80 brk(0x555576aabd80) = 0x555576aabd80 brk(0x555576aac000) = 0x555576aac000 mprotect(0x7f101b5a5000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555576a8a6d0) = 5647 rt_sigprocmask(SIG_SETMASK, []ci-upstream-linux-next-kasan-gce-root/strace-static-x86_64: Process 5647 attached , NULL, 8) = 0 [pid 5647] set_robust_list(0x555576a8a6e0, 24) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 executing program [pid 5647] write(1, "executing program\n", 18) = 18 [pid 5647] memfd_create("syzkaller", 0) = 3 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1013000000 [pid 5647] write(3, "\x68\x73\x71\x73\x07\x00\x00\x00\xfd\xf1\x7c\x63\x00\x10\x00\x00\x00\x00\x00\x00\x01\x00\x0c\x00\xdb\x01\x01\x00\x04\x00\x00\x00\x27\x01\x00\x00\x00\x00\x00\x00\xfa\x06\x00\x00\x00\x00\x00\x00\xf2\x06\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xff\xe8\x04\x00\x00\x00\x00\x00\x00\x31\x06\x00\x00\x00\x00\x00\x00\xaa\x06\x00\x00\x00\x00\x00\x00\xe4\x06\x00\x00\x00\x00\x00\x00\x73\x79\x7a\xd3"..., 4096) = 4096 [pid 5647] munmap(0x7f1013000000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5647] close(3) = 0 [pid 5647] close(4) = 0 [pid 5647] mkdir("./file1", 0777) = 0 [pid 5647] mount("/dev/loop0", "./file1", "squashfs", MS_NOSUID|MS_NODIRATIME|MS_RELATIME, "") = 0 [pid 5647] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file1") = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5647] close(4) = 0 [pid 5647] mmap(0x200000000000, 2097152, PROT_READ|PROT_WRITE|PROT_SEM|PROT_GROWSDOWN|PROT_GROWSUP, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_NORESERVE|0x200000, -1, 0xec776000) = 0x200000000000 [ 72.214436][ T5647] loop0: detected capacity change from 0 to 8 [ 72.257571][ T5647] SQUASHFS error: Unable to read inode 0x87 [ 72.257700][ T5647] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 72.275467][ T5647] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 72.283873][ T5647] CPU: 1 UID: 0 PID: 5647 Comm: syz-executor337 Not tainted syzkaller #0 PREEMPT(full) [ 72.293562][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 72.303593][ T5647] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 72.309654][ T5647] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 72.329238][ T5647] RSP: 0018:ffffc90003b1f758 EFLAGS: 00010203 [ 72.335289][ T5647] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 72.343239][ T5647] RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff888077497d40 [ 72.351193][ T5647] RBP: ffffc90003b1f9b0 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 72.359151][ T5647] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 72.367121][ T5647] R13: dffffc0000000000 R14: ffff888077497d40 R15: 0000000000000024 [ 72.375085][ T5647] FS: 0000555576a8a400(0000) GS:ffff8881234cd000(0000) knlGS:0000000000000000 [ 72.383991][ T5647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.390565][ T5647] CR2: 00002000000000c0 CR3: 0000000034bb2000 CR4: 00000000003526f0 [ 72.398546][ T5647] Call Trace: [ 72.401805][ T5647] [ 72.404715][ T5647] d_splice_alias_ops+0x72/0x440 [ 72.409635][ T5647] ? d_splice_alias+0x12/0x30 [ 72.414288][ T5647] squashfs_lookup+0xc5e/0x14e0 [ 72.419116][ T5647] ? __d_alloc_parallel+0x3a4/0x1740 [ 72.424376][ T5647] ? __d_alloc_parallel+0x3a4/0x1740 [ 72.429638][ T5647] ? __pfx_squashfs_lookup+0x10/0x10 [ 72.434899][ T5647] ? __pfx___d_alloc_parallel+0x10/0x10 [ 72.440420][ T5647] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 72.446566][ T5647] ? mode_strip_sgid+0xa1/0x1b0 [ 72.451393][ T5647] lookup_open+0x816/0x16e0 [ 72.455875][ T5647] path_openat+0x7a5/0x20e0 [ 72.460358][ T5647] do_file_open+0x23e/0x4a0 [ 72.464837][ T5647] ? __pfx_do_file_open+0x10/0x10 [ 72.469843][ T5647] ? _raw_spin_unlock+0x28/0x50 [ 72.474667][ T5647] ? alloc_fd+0x6af/0x760 [ 72.478974][ T5647] do_sys_openat2+0x115/0x200 [ 72.483626][ T5647] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.488798][ T5647] ? __pfx_do_sys_openat2+0x10/0x10 [ 72.493971][ T5647] ? do_user_addr_fault+0xd3f/0x1480 [ 72.499231][ T5647] __x64_sys_openat+0x138/0x170 [ 72.504059][ T5647] do_syscall_64+0x171/0x540 [ 72.508626][ T5647] ? trace_irq_disable+0x3b/0x140 [ 72.513623][ T5647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.519662][ T5647] ? clear_bhb_loop+0x70/0xc0 [ 72.524310][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.530176][ T5647] RIP: 0033:0x00007f101b51a909 [ 72.534930][ T5647] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 72.554508][ T5647] RSP: 002b:00007ffd8afc50d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.562893][ T5647] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f101b51a909 [ 72.570836][ T5647] RDX: 0000000000040042 RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 72.578783][ T5647] RBP: 0000000000000001 R08: 00000000ec776000 R09: 00000000ec776000 [ 72.586728][ T5647] R10: 0000000000000001 R11: 0000000000000246 R12: 00007ffd8afc5110 [ 72.594677][ T5647] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007f101b57a04b [ 72.602628][ T5647] [ 72.605621][ T5647] Modules linked in: [ 72.609898][ T5647] ---[ end trace 0000000000000000 ]--- [ 72.616055][ T5647] RIP: 0010:security_d_instantiate+0x2f/0x1d0 [ 72.616090][ T5647] Code: 41 57 41 56 53 48 89 f3 49 89 fe e8 bb 2c 20 fd 48 85 db 74 42 4c 8d 7b 04 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 9d 00 00 00 41 8b 2f 89 ee 81 e6 00 02 00 [ 72.616106][ T5647] RSP: 0018:ffffc90003b1f758 EFLAGS: 00010203 [ 72.616122][ T5647] RAX: 0000000000000004 RBX: 0000000000000020 RCX: dffffc0000000000 [ 72.616132][ T5647] RDX: 0000000000000000 RSI: 0000000000000020 RDI: ffff888077497d40 [ 72.616143][ T5647] RBP: ffffc90003b1f9b0 R08: ffffffff91bec8bf R09: 1ffffffff237d917 [ 72.616155][ T5647] R10: dffffc0000000000 R11: fffffbfff237d918 R12: 0000000000000000 [ 72.616167][ T5647] R13: dffffc0000000000 R14: ffff888077497d40 R15: 0000000000000024 [ 72.616179][ T5647] FS: 0000555576a8a400(0000) GS:ffff8881234cd000(0000) knlGS:0000000000000000 [ 72.616194][ T5647] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.616206][ T5647] CR2: 00002000000000c0 CR3: 0000000034bb2000 CR4: 00000000003526f0 [ 72.616223][ T5647] Kernel panic - not syncing: Fatal exception [ 72.717320][ T5647] Kernel Offset: disabled [ 72.721627][ T5647] Rebooting in 86400 seconds..