./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1385220462 <...> DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c forked to background, child pid 3182 [ 21.934473][ T3183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.945384][ T3183] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.140' (ECDSA) to the list of known hosts. execve("./syz-executor1385220462", ["./syz-executor1385220462"], 0x7fff80727ee0 /* 10 vars */) = 0 brk(NULL) = 0x555555a8f000 brk(0x555555a8fc40) = 0x555555a8fc40 arch_prctl(ARCH_SET_FS, 0x555555a8f300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1385220462", 4096) = 28 brk(0x555555ab0c40) = 0x555555ab0c40 brk(0x555555ab1000) = 0x555555ab1000 mprotect(0x7f7541ac8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3611 attached , child_tidptr=0x555555a8f5d0) = 3611 [pid 3611] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3611] setsid() = 1 [pid 3611] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3611] unshare(CLONE_NEWNS) = 0 [pid 3611] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3611] unshare(CLONE_NEWIPC) = 0 [pid 3611] unshare(CLONE_NEWCGROUP) = 0 [pid 3611] unshare(CLONE_NEWUTS) = 0 [pid 3611] unshare(CLONE_SYSVSEM) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "16777216", 8) = 8 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "536870912", 9) = 9 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "8192", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3611] close(3) = 0 [pid 3611] getpid() = 1 [pid 3611] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b eb 80 44 89 e9 80 e1 07 fe c1 38 c1 0f 8c 65 fe ff ff 4c 89 [ 39.883685][ T3611] RSP: 0018:ffffc90003c3fa78 EFLAGS: 00010293 [ 39.890065][ T3611] RAX: ffffffff82f8baeb RBX: 0000000000000001 RCX: ffff888022ad0000 [ 39.898123][ T3611] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 39.906094][ T3611] RBP: ffff88807bf7001f R08: ffffffff82f8ba61 R09: fffffbfff1c1b5e6 [ 39.914078][ T3611] R10: fffffbfff1c1b5e6 R11: 1ffffffff1c1b5e5 R12: 1ffff11028f154cf [ 39.922071][ T3611] R13: ffff888073bc0158 R14: ffff8881478aa000 R15: ffff8881478aa678 [ 39.930066][ T3611] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 39.939024][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.945614][ T3611] CR2: 00007fb63e571c70 CR3: 0000000027d49000 CR4: 00000000003506e0 [ 39.953635][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.961635][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.969611][ T3611] Call Trace: [ 39.972879][ T3611] [ 39.975794][ T3611] ? udf_new_inode+0xf30/0xf30 [ 39.980576][ T3611] evict+0x2a4/0x620 [ 39.984471][ T3611] udf_sb_free_partitions+0x134/0x570 [ 39.989858][ T3611] udf_put_super+0x10f/0x160 [ 39.994443][ T3611] ? udf_free_in_core_inode+0x20/0x20 [ 39.999839][ T3611] generic_shutdown_super+0x130/0x310 [ 40.005204][ T3611] kill_block_super+0x79/0xd0 [ 40.009891][ T3611] deactivate_locked_super+0xa7/0xf0 [ 40.015168][ T3611] cleanup_mnt+0x494/0x520 [ 40.019617][ T3611] task_work_run+0x243/0x300 [ 40.024210][ T3611] ? task_work_cancel+0x290/0x290 [ 40.029313][ T3611] ? do_exit+0x65f/0x2070 [ 40.033641][ T3611] do_exit+0x664/0x2070 [ 40.037818][ T3611] ? __lock_acquire+0x1f60/0x1f60 [ 40.042840][ T3611] ? ptrace_notify+0x245/0x340 [ 40.047613][ T3611] ? mm_update_next_owner+0x6d0/0x6d0 [ 40.052979][ T3611] ? print_irqtrace_events+0x220/0x220 [ 40.058601][ T3611] do_group_exit+0x1fd/0x2b0 [ 40.063184][ T3611] __x64_sys_exit_group+0x3b/0x40 [ 40.068227][ T3611] do_syscall_64+0x3d/0xb0 [ 40.072641][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.078572][ T3611] RIP: 0033:0x7f7541a57c99 [ 40.082992][ T3611] Code: Unable to access opcode bytes at 0x7f7541a57c6f. [ 40.090056][ T3611] RSP: 002b:00007fff12323b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 40.098527][ T3611] RAX: ffffffffffffffda RBX: 00007f7541ace3f0 RCX: 00007f7541a57c99 [ 40.106495][ T3611] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 40.114490][ T3611] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f7541ac8e40 [ 40.122492][ T3611] R10: 00007f7541ac8e40 R11: 0000000000000246 R12: 00007f7541ace3f0 [ 40.130473][ T3611] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 40.138518][ T3611] [ 40.141534][ T3611] Kernel panic - not syncing: panic_on_warn set ... [ 40.148103][ T3611] CPU: 1 PID: 3611 Comm: syz-executor138 Not tainted 6.1.0-rc2-syzkaller #0 [ 40.156770][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 40.166819][ T3611] Call Trace: [ 40.170091][ T3611] [ 40.173011][ T3611] dump_stack_lvl+0x1b1/0x28e [ 40.177684][ T3611] ? nf_tcp_handle_invalid+0x62e/0x62e [ 40.183146][ T3611] ? panic+0x710/0x710 [ 40.187219][ T3611] ? vscnprintf+0x59/0x80 [ 40.191540][ T3611] ? udf_free_inode+0x140/0x2d0 [ 40.196394][ T3611] panic+0x2d6/0x710 [ 40.200296][ T3611] ? __warn+0x131/0x220 [ 40.204456][ T3611] ? memcpy_page_flushcache+0xfc/0xfc [ 40.209829][ T3611] ? udf_free_inode+0x22b/0x2d0 [ 40.214670][ T3611] __warn+0x1fa/0x220 [ 40.218660][ T3611] ? udf_free_inode+0x22b/0x2d0 [ 40.223510][ T3611] report_bug+0x1b3/0x2d0 [ 40.227851][ T3611] handle_bug+0x3d/0x70 [ 40.232002][ T3611] exc_invalid_op+0x16/0x40 [ 40.236492][ T3611] asm_exc_invalid_op+0x16/0x20 [ 40.241332][ T3611] RIP: 0010:udf_free_inode+0x22b/0x2d0 [ 40.246806][ T3611] Code: ff ff 4c 89 f7 31 f6 4c 89 ea 31 c9 41 b8 01 00 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3a 59 ff ff e8 35 14 8f fe <0f> 0b eb 80 44 89 e9 80 e1 07 fe c1 38 c1 0f 8c 65 fe ff ff 4c 89 [ 40.266419][ T3611] RSP: 0018:ffffc90003c3fa78 EFLAGS: 00010293 [ 40.272489][ T3611] RAX: ffffffff82f8baeb RBX: 0000000000000001 RCX: ffff888022ad0000 [ 40.280456][ T3611] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 40.288451][ T3611] RBP: ffff88807bf7001f R08: ffffffff82f8ba61 R09: fffffbfff1c1b5e6 [ 40.296411][ T3611] R10: fffffbfff1c1b5e6 R11: 1ffffffff1c1b5e5 R12: 1ffff11028f154cf [ 40.304381][ T3611] R13: ffff888073bc0158 R14: ffff8881478aa000 R15: ffff8881478aa678 [ 40.312349][ T3611] ? udf_free_inode+0x1a1/0x2d0 [ 40.317204][ T3611] ? udf_free_inode+0x22b/0x2d0 [ 40.322054][ T3611] ? udf_free_inode+0x22b/0x2d0 [ 40.326898][ T3611] ? udf_new_inode+0xf30/0xf30 [ 40.331654][ T3611] evict+0x2a4/0x620 [ 40.335545][ T3611] udf_sb_free_partitions+0x134/0x570 [ 40.340919][ T3611] udf_put_super+0x10f/0x160 [ 40.345501][ T3611] ? udf_free_in_core_inode+0x20/0x20 [ 40.350868][ T3611] generic_shutdown_super+0x130/0x310 [ 40.356234][ T3611] kill_block_super+0x79/0xd0 [ 40.360901][ T3611] deactivate_locked_super+0xa7/0xf0 [ 40.366172][ T3611] cleanup_mnt+0x494/0x520 [ 40.370580][ T3611] task_work_run+0x243/0x300 [ 40.375418][ T3611] ? task_work_cancel+0x290/0x290 [ 40.380424][ T3611] ? do_exit+0x65f/0x2070 [ 40.384738][ T3611] do_exit+0x664/0x2070 [ 40.388877][ T3611] ? __lock_acquire+0x1f60/0x1f60 [ 40.393888][ T3611] ? ptrace_notify+0x245/0x340 [ 40.398639][ T3611] ? mm_update_next_owner+0x6d0/0x6d0 [ 40.403992][ T3611] ? print_irqtrace_events+0x220/0x220 [ 40.409437][ T3611] do_group_exit+0x1fd/0x2b0 [ 40.414011][ T3611] __x64_sys_exit_group+0x3b/0x40 [ 40.419016][ T3611] do_syscall_64+0x3d/0xb0 [ 40.423419][ T3611] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.429298][ T3611] RIP: 0033:0x7f7541a57c99 [ 40.433696][ T3611] Code: Unable to access opcode bytes at 0x7f7541a57c6f. [ 40.440696][ T3611] RSP: 002b:00007fff12323b58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 40.449091][ T3611] RAX: ffffffffffffffda RBX: 00007f7541ace3f0 RCX: 00007f7541a57c99 [ 40.457045][ T3611] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 40.464997][ T3611] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f7541ac8e40 [ 40.472950][ T3611] R10: 00007f7541ac8e40 R11: 0000000000000246 R12: 00007f7541ace3f0 [ 40.480903][ T3611] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 40.488862][ T3611] [ 40.492028][ T3611] Kernel Offset: disabled [ 40.496337][ T3611] Rebooting in 86400 seconds..