ci-upstream-kasan-badwrites-root/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci-upstream-kasan-badwrites-root/syz-executor3534604619 <...> Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. execve("ci-upstream-kasan-badwrites-root/syz-executor3534604619", ["ci-upstream-kasan-badwrites-root/syz-executor3534604619"], 0x7ffe3620d080 /* 10 vars */) = 0 brk(NULL) = 0x555563351000 brk(0x555563351d80) = 0x555563351d80 arch_prctl(ARCH_SET_FS, 0x555563351400) = 0 set_tid_address(0x5555633516d0) = 5633 set_robust_list(0x5555633516e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci-upstream-kasan-badwrites-root/syz-executor3534604619", 4096) = 61 getrandom("\x3b\xd8\x95\x73\x1f\x3f\xfd\x55", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555563351d80 brk(0x555563372d80) = 0x555563372d80 brk(0x555563373000) = 0x555563373000 mprotect(0x7f9489552000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555633516d0) = 5634 ci-upstream-kasan-badwrites-root/strace-static-x86_64: Process 5634 attached [pid 5633] rt_sigprocmask(SIG_SETMASK, [] [pid 5634] set_robust_list(0x5555633516e0, 24 [pid 5633] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5634] <... set_robust_list resumed>) = 0 [pid 5634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5634] setpgid(0, 0) = 0 [pid 5634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5634] write(3, "1000", 4) = 4 [pid 5634] close(3) = 0 executing program [pid 5634] write(1, "executing program\n", 18) = 18 [pid 5634] memfd_create("syzkaller", 0) = 3 [pid 5634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9481000000 [pid 5634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5634] munmap(0x7f9481000000, 138412032) = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5634] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5634] close(3) = 0 [pid 5634] close(4) = 0 [pid 5634] mkdir("./file0", 0777) = 0 [pid 5634] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 [pid 5634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5634] chdir("./file0") = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5634] lchown("./file0", 0, 0) = 0 [pid 5634] fspick(AT_FDCWD, ".", 0) = 4 [pid 5634] fsconfig(4, FSCONFIG_SET_FLAG, "ro", NULL, 0) = 0 [ 93.886601][ T5634] loop0: detected capacity change from 0 to 32768 [ 93.918632][ T5634] [ 93.918632][ T5634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.918632][ T5634] [pid 5634] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = 0 [pid 5634] fspick(AT_FDCWD, ".", 0) = 5 [pid 5634] fsconfig(5, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 EINVAL (Invalid argument) [ 93.943081][ T12] read_mapping_page failed! [ 93.943095][ T12] ERROR: (device loop0): txAbort: [ 93.943095][ T12] [ 93.944101][ T12] jfs_write_inode: jfs_commit_inode failed! [ 93.945584][ T5634] [ 93.945584][ T5634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.945584][ T5634] [ 93.947253][ T5634] [ 93.947253][ T5634] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 93.947253][ T5634] [ 94.001024][ T5634] ERROR: (device loop0): txBegin: read-only filesystem [ 94.001024][ T5634] [ 94.001364][ T5634] jfs_dirty_inode called on read-only volume [ 94.001379][ T5634] Is remount racy? [ 94.001436][ T5634] jfs_dirty_inode called on read-only volume [ 94.001449][ T5634] Is remount racy? [ 94.001476][ T5634] jfs_dirty_inode called on read-only volume [ 94.001489][ T5634] Is remount racy? [ 94.001534][ T5634] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000cf: 0000 [#1] SMP KASAN NOPTI [ 94.051597][ T5634] KASAN: null-ptr-deref in range [0x0000000000000678-0x000000000000067f] [ 94.060021][ T5634] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor353 Not tainted syzkaller #0 PREEMPT(full) [ 94.069784][ T5634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 94.079830][ T5634] RIP: 0010:txEnd+0xdd/0x490 [ 94.084431][ T5634] Code: 48 c1 ea 03 80 3c 02 00 0f 85 a5 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 20 48 8d bd 78 06 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 75 03 00 00 48 8b ad 78 06 00 00 48 b8 00 00 00 [ 94.104039][ T5634] RSP: 0018:ffffc9000395f7c8 EFLAGS: 00010216 [ 94.110120][ T5634] RAX: dffffc0000000000 RBX: ffffc90002681000 RCX: 0000000000000000 [ 94.118092][ T5634] RDX: 00000000000000cf RSI: ffffffff8e39246c RDI: 0000000000000678 [ 94.126149][ T5634] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.134926][ T5634] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 94.142900][ T5634] R13: ffffffff8f465600 R14: 0000000000000000 R15: ffff88806dcb2778 [ 94.150875][ T5634] FS: 0000555563351400(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 94.159813][ T5634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.166400][ T5634] CR2: 00007f0a219f9000 CR3: 00000000702c4000 CR4: 0000000000350ef0 [ 94.174375][ T5634] Call Trace: [ 94.177653][ T5634] [ 94.180591][ T5634] jfs_create+0x92e/0xb10 [ 94.184954][ T5634] ? __pfx_jfs_create+0x10/0x10 [ 94.189816][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.195481][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.201132][ T5634] ? make_vfsuid+0xec/0x140 [ 94.205673][ T5634] ? inode_permission+0x374/0x620 [ 94.210724][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.216371][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.222021][ T5634] ? security_inode_create+0xc4/0x280 [ 94.227408][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.233056][ T5634] ? may_o_create+0x46/0x3a0 [ 94.237670][ T5634] ? __pfx_jfs_create+0x10/0x10 [ 94.242525][ T5634] lookup_open+0x1255/0x1990 [ 94.247238][ T5634] path_openat+0xa2c/0x2440 [ 94.251752][ T5634] ? __pfx_path_openat+0x10/0x10 [ 94.256701][ T5634] do_file_open+0x20e/0x430 [ 94.261215][ T5634] ? __pfx_do_file_open+0x10/0x10 [ 94.266264][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.271913][ T5634] ? alloc_fd+0x471/0x7a0 [ 94.276250][ T5634] ? do_getname+0x191/0x390 [ 94.280772][ T5634] do_sys_openat2+0x10f/0x1e0 [ 94.285461][ T5634] ? __pfx_do_sys_openat2+0x10/0x10 [ 94.290674][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.296321][ T5634] ? ptrace_do_notify+0x179/0x1f0 [ 94.301357][ T5634] __x64_sys_open+0xfe/0x1d0 [ 94.305966][ T5634] ? __pfx___x64_sys_open+0x10/0x10 [ 94.311209][ T5634] ? rcu_is_watching+0x13/0xc0 [ 94.316015][ T5634] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.321263][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.326927][ T5634] ? lockdep_hardirqs_on+0x7d/0x110 [ 94.332135][ T5634] ? srso_alias_return_thunk+0x5/0xfbef5 [ 94.337787][ T5634] do_syscall_64+0x123/0x790 [ 94.342474][ T5634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.348377][ T5634] RIP: 0033:0x7f94894c0929 [ 94.352793][ T5634] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 94.372414][ T5634] RSP: 002b:00007ffed748ccc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 94.380838][ T5634] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f94894c0929 [ 94.388817][ T5634] RDX: 0000000000000000 RSI: 0000000000143042 RDI: 0000200000000180 [ 94.396793][ T5634] RBP: 0030656c69662f2e R08: 0000555563352570 R09: 0000555563352570 [ 94.404770][ T5634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed748ccf0 [ 94.412744][ T5634] R13: 0000000000000002 R14: 431bde82d7b634db R15: 0000200000000000 [ 94.420736][ T5634] [ 94.423749][ T5634] Modules linked in: [ 94.428091][ T5634] ---[ end trace 0000000000000000 ]--- [ 94.433885][ T5634] RIP: 0010:txEnd+0xdd/0x490 [ 94.433932][ T5634] Code: 48 c1 ea 03 80 3c 02 00 0f 85 a5 03 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 20 48 8d bd 78 06 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 75 03 00 00 48 8b ad 78 06 00 00 48 b8 00 00 00 [ 94.433966][ T5634] RSP: 0018:ffffc9000395f7c8 EFLAGS: 00010216 [ 94.433995][ T5634] RAX: dffffc0000000000 RBX: ffffc90002681000 RCX: 0000000000000000 [ 94.434020][ T5634] RDX: 00000000000000cf RSI: ffffffff8e39246c RDI: 0000000000000678 [ 94.434044][ T5634] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 94.434066][ T5634] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 94.434087][ T5634] R13: ffffffff8f465600 R14: 0000000000000000 R15: ffff88806dcb2778 [ 94.434114][ T5634] FS: 0000555563351400(0000) GS:ffff888123c53000(0000) knlGS:0000000000000000 [ 94.434146][ T5634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.434171][ T5634] CR2: 00007f0a219f9000 CR3: 00000000702c4000 CR4: 0000000000350ef0 [ 94.434199][ T5634] Kernel panic - not syncing: Fatal exception [ 94.533818][ T5634] Kernel Offset: disabled [ 94.538139][ T5634] Rebooting in 86400 seconds..