ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor1560363088 <...> Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor1560363088", ["ci2-upstream-fs/syz-executor1560363088"], 0x7ffd9ccf0b20 /* 10 vars */) = 0 brk(NULL) = 0x55557e2cd000 brk(0x55557e2cdd80) = 0x55557e2cdd80 arch_prctl(ARCH_SET_FS, 0x55557e2cd400) = 0 set_tid_address(0x55557e2cd6d0) = 5629 set_robust_list(0x55557e2cd6e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor1560363088", 4096) = 44 getrandom("\x10\xf5\x40\x55\xf8\xec\xfd\xcd", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557e2cdd80 brk(0x55557e2eed80) = 0x55557e2eed80 brk(0x55557e2ef000) = 0x55557e2ef000 mprotect(0x7f1439cad000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5630 attached , child_tidptr=0x55557e2cd6d0) = 5630 [pid 5629] rt_sigprocmask(SIG_SETMASK, [] [pid 5630] set_robust_list(0x55557e2cd6e0, 24 [pid 5629] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5630] <... set_robust_list resumed>) = 0 [pid 5630] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5630] setpgid(0, 0) = 0 [pid 5630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5630] write(3, "1000", 4) = 4 [pid 5630] close(3) = 0 [pid 5630] write(1, "executing program\n", 18) = 18 executing program [pid 5630] memfd_create("syzkaller", 0) = 3 [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f14317f3000 [pid 5630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8388608) = 8388608 [pid 5630] munmap(0x7f14317f3000, 138412032) = 0 [pid 5630] lseek(3, 0, SEEK_END) = 8388608 [pid 5630] ftruncate(3, 25165824) = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5630] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5630] close(3) = 0 [pid 5630] close(4) = 0 [pid 5630] mkdir("./file0", 0777) = 0 [ 99.051071][ T5630] loop0: detected capacity change from 0 to 49152 [ 99.109271][ T5630] ======================================================= [ 99.109271][ T5630] WARNING: The mand mount option has been deprecated and [ 99.109271][ T5630] and is ignored by this kernel. Remove the mand [ 99.109271][ T5630] option from the mount to silence this warning. [ 99.109271][ T5630] ======================================================= [pid 5630] mount("/dev/loop0", "./file0", "ext4", MS_NOEXEC|MS_MANDLOCK|MS_DIRSYNC|MS_POSIXACL|MS_I_VERSION|MS_STRICTATIME, "dioread_nolock,stripe=0x0000000000000006,data=journal,data=ordered,,errors=continue") = 0 [ 99.160644][ T5630] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [pid 5630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 5630] chdir("./file0") = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5630] ioctl(4, LOOP_CLR_FD) = 0 [pid 5630] close(4) = 0 [ 99.224821][ T5630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w with ordered data mode. Quota mode: journalled. [ 99.288033][ T5630] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 99.299960][ T5630] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 99.308463][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: syz-executor156 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 99.318742][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 99.328842][ T5630] RIP: 0010:jbd2_journal_file_inode+0x10e/0x5c0 [ 99.335144][ T5630] Code: 94 ff 49 8b 06 48 89 44 24 08 48 8d b8 e8 08 00 00 48 89 7c 24 30 e8 a1 96 d2 08 48 8b 04 24 48 8d 78 28 48 89 f8 48 c1 e8 03 <80> 3c 28 00 74 05 e8 07 2f 94 ff 48 8b 1c 24 4c 09 7b 28 4c 8d 7b [ 99.354812][ T5630] RSP: 0018:ffffc90004af7690 EFLAGS: 00010206 [ 99.360947][ T5630] RAX: 0000000000000005 RBX: 0000000000000000 RCX: ffffffff9adaca01 [ 99.368963][ T5630] RDX: 00000000b801c601 RSI: ffffffff8bed2a60 RDI: 0000000000000028 [ 99.376955][ T5630] RBP: dffffc0000000000 R08: ffffffff8b79afe2 R09: 0000000000000000 [ 99.384948][ T5630] R10: dffffc0000000000 R11: fffffbfff21ab638 R12: 1ffff11005172ee0 [ 99.392964][ T5630] R13: 00000000000007ff R14: ffff888028b97700 R15: 0000000000000006 [ 99.400972][ T5630] FS: 000055557e2cd400(0000) GS:ffff888124709000(0000) knlGS:0000000000000000 [ 99.409951][ T5630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.416575][ T5630] CR2: 0000200000001f80 CR3: 0000000047250000 CR4: 00000000003526f0 [ 99.424573][ T5630] Call Trace: [ 99.427871][ T5630] [ 99.430832][ T5630] ext4_map_blocks+0x161e/0x1c60 [ 99.435813][ T5630] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 99.441659][ T5630] ? __pfx_ext4_map_blocks+0x10/0x10 [ 99.447005][ T5630] ? __asan_memcpy+0x40/0x70 [ 99.451618][ T5630] ? ext4_read_inline_data+0x100/0x2b0 [ 99.457104][ T5630] ext4_convert_inline_data_nolock+0x25d/0x980 [ 99.463348][ T5630] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.469199][ T5630] ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10 [ 99.475908][ T5630] ext4_convert_inline_data+0x484/0x5c0 [ 99.481484][ T5630] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 99.487589][ T5630] ? smack_inode_setattr+0x193/0x230 [ 99.492936][ T5630] ext4_setattr+0xef2/0x1560 [ 99.497649][ T5630] ? __pfx_ext4_setattr+0x10/0x10 [ 99.502802][ T5630] notify_change+0xbb8/0xec0 [ 99.507424][ T5630] do_truncate+0x1c2/0x250 [ 99.511862][ T5630] ? __pfx_do_truncate+0x10/0x10 [ 99.516823][ T5630] ? ima_iint_find+0x53/0x110 [ 99.521520][ T5630] ? ima_path_truncate+0x13c/0x190 [ 99.526657][ T5630] vfs_truncate+0x4ba/0x540 [ 99.531182][ T5630] ? __pfx_vfs_truncate+0x10/0x10 [ 99.536240][ T5630] ? do_getname+0x151/0x250 [ 99.540775][ T5630] ksys_truncate+0xf3/0x1c0 [ 99.545301][ T5630] ? __pfx_ksys_truncate+0x10/0x10 [ 99.550434][ T5630] ? do_user_addr_fault+0xd3f/0x1480 [ 99.555748][ T5630] __x64_sys_truncate+0x5b/0x70 [ 99.560623][ T5630] do_syscall_64+0x16a/0x530 [ 99.565244][ T5630] ? trace_irq_disable+0x3b/0x140 [ 99.570300][ T5630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.576387][ T5630] ? clear_bhb_loop+0x70/0xc0 [ 99.581086][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.587007][ T5630] RIP: 0033:0x7f1439c1fbc9 [ 99.591469][ T5630] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d8 ff ff ff f7 d8 64 89 01 48 [ 99.611111][ T5630] RSP: 002b:00007ffc4638bd98 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 99.619604][ T5630] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1439c1fbc9 [ 99.627605][ T5630] RDX: 00007ffc4638bc20 RSI: 0000000000000a75 RDI: 0000200000001f80 [ 99.635599][ T5630] RBP: 0000000000000001 R08: 0000000000000000 R09: 000055557e2ce560 [ 99.643584][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4638bdc0 [ 99.651578][ T5630] R13: 0000000000000002 R14: 431bde82d7b634db R15: 00007f1439c7f04b [ 99.659584][ T5630] [ 99.662632][ T5630] Modules linked in: [ 99.666624][ T5630] ---[ end trace 0000000000000000 ]--- [ 99.675674][ T5630] RIP: 0010:jbd2_journal_file_inode+0x10e/0x5c0 [ 99.675722][ T5630] Code: 94 ff 49 8b 06 48 89 44 24 08 48 8d b8 e8 08 00 00 48 89 7c 24 30 e8 a1 96 d2 08 48 8b 04 24 48 8d 78 28 48 89 f8 48 c1 e8 03 <80> 3c 28 00 74 05 e8 07 2f 94 ff 48 8b 1c 24 4c 09 7b 28 4c 8d 7b [ 99.675742][ T5630] RSP: 0018:ffffc90004af7690 EFLAGS: 00010206 [ 99.675762][ T5630] RAX: 0000000000000005 RBX: 0000000000000000 RCX: ffffffff9adaca01 [ 99.675778][ T5630] RDX: 00000000b801c601 RSI: ffffffff8bed2a60 RDI: 0000000000000028 [ 99.675794][ T5630] RBP: dffffc0000000000 R08: ffffffff8b79afe2 R09: 0000000000000000 [ 99.675810][ T5630] R10: dffffc0000000000 R11: fffffbfff21ab638 R12: 1ffff11005172ee0 [ 99.675827][ T5630] R13: 00000000000007ff R14: ffff888028b97700 R15: 0000000000000006 [ 99.675842][ T5630] FS: 000055557e2cd400(0000) GS:ffff888124709000(0000) knlGS:0000000000000000 [ 99.675862][ T5630] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.675878][ T5630] CR2: 0000200000001f80 CR3: 0000000047250000 CR4: 00000000003526f0 [ 99.675901][ T5630] Kernel panic - not syncing: Fatal exception [ 99.777918][ T5630] Kernel Offset: disabled [ 99.782254][ T5630] Rebooting in 86400 seconds..