./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1149312786 <...> DUID 00:04:7b:a2:e0:73:6b:5f:a9:8e:d4:f6:53:82:b5:31:a7:5e forked to background, child pid 3209 [ 30.861466][ T3210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.872724][ T3210] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. execve("./syz-executor1149312786", ["./syz-executor1149312786"], 0x7ffdb2a53be0 /* 10 vars */) = 0 brk(NULL) = 0x555556e02000 brk(0x555556e02c40) = 0x555556e02c40 arch_prctl(ARCH_SET_FS, 0x555556e02300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1149312786", 4096) = 28 brk(0x555556e23c40) = 0x555556e23c40 brk(0x555556e24000) = 0x555556e24000 mprotect(0x7f687d3d1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556e025d0) = 3631 ./strace-static-x86_64: Process 3631 attached [pid 3631] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3631] setsid() = 1 [pid 3631] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3631] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3631] unshare(CLONE_NEWNS) = 0 [pid 3631] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3631] unshare(CLONE_NEWIPC) = 0 [pid 3631] unshare(CLONE_NEWCGROUP) = 0 [pid 3631] unshare(CLONE_NEWUTS) = 0 [pid 3631] unshare(CLONE_SYSVSEM) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "16777216", 8) = 8 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "536870912", 9) = 9 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "8192", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024", 4) = 4 [pid 3631] close(3) = 0 [pid 3631] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3631] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3631] close(3) = 0 [pid 3631] getpid() = 1 [pid 3631] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff [ 56.054458][ T3631] RSP: 0018:ffffc90003c8f8f0 EFLAGS: 00010093 [ 56.060715][ T3631] RAX: ffffffff81ba2769 RBX: 0000000000000000 RCX: ffff888020f41d40 [ 56.068687][ T3631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.077308][ T3631] RBP: ffff88801f07c978 R08: ffffffff81ba24ed R09: ffffed1003e0f930 [ 56.086095][ T3631] R10: ffffed1003e0f930 R11: 1ffff11003e0f92f R12: dffffc0000000000 [ 56.094174][ T3631] R13: ffffea00007fc080 R14: 0000000000000001 R15: 1ffff11003e0f92f [ 56.102257][ T3631] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.111192][ T3631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.117798][ T3631] CR2: 00007f687d3d5140 CR3: 0000000022167000 CR4: 00000000003506f0 [ 56.125779][ T3631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.133922][ T3631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.141978][ T3631] Call Trace: [ 56.145291][ T3631] [ 56.148236][ T3631] ? gfs2_write_log_header+0x8e2/0xad0 [ 56.153810][ T3631] __folio_mark_dirty+0x125/0x260 [ 56.159274][ T3631] mark_buffer_dirty+0x253/0x550 [ 56.164222][ T3631] gfs2_unpin+0x10b/0xa20 [ 56.168563][ T3631] ? log_pull_tail+0x7e/0x390 [ 56.173294][ T3631] buf_lo_after_commit+0x172/0x1d0 [ 56.178451][ T3631] ? buf_lo_before_commit+0xe0/0xe0 [ 56.183765][ T3631] gfs2_log_flush+0x1179/0x26a0 [ 56.188743][ T3631] ? gfs2_ail_drain+0xdb0/0xdb0 [ 56.193658][ T3631] ? radix_tree_delete_item+0x2e2/0x3d0 [ 56.199258][ T3631] ? trace_kfree+0x30/0xe0 [ 56.203726][ T3631] ? kfree+0x16/0xe0 [ 56.207742][ T3631] gfs2_kill_sb+0x50/0xd0 [ 56.212880][ T3631] deactivate_locked_super+0xa7/0xf0 [ 56.218442][ T3631] cleanup_mnt+0x494/0x520 [ 56.222877][ T3631] ? lockdep_hardirqs_on+0x8d/0x130 [ 56.228392][ T3631] task_work_run+0x243/0x300 [ 56.233193][ T3631] ? task_work_cancel+0x290/0x290 [ 56.238341][ T3631] ? do_exit+0x65f/0x2070 [ 56.242887][ T3631] do_exit+0x664/0x2070 [ 56.247190][ T3631] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 56.253213][ T3631] ? mm_update_next_owner+0x6d0/0x6d0 [ 56.258951][ T3631] ? print_irqtrace_events+0x220/0x220 [ 56.264421][ T3631] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.269622][ T3631] ? lockdep_hardirqs_on+0x8d/0x130 [ 56.274846][ T3631] do_group_exit+0x1fd/0x2b0 [ 56.279448][ T3631] __x64_sys_exit_group+0x3b/0x40 [ 56.284477][ T3631] do_syscall_64+0x3d/0xb0 [ 56.289339][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.295231][ T3631] RIP: 0033:0x7f687d32a9a9 [ 56.299644][ T3631] Code: Unable to access opcode bytes at 0x7f687d32a97f. [ 56.306657][ T3631] RSP: 002b:00007fffdf3d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.315191][ T3631] RAX: ffffffffffffffda RBX: 00007f687d3d7330 RCX: 00007f687d32a9a9 [ 56.323188][ T3631] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 56.331205][ T3631] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f687d3d1e40 [ 56.339743][ T3631] R10: 00007fffdf3cff50 R11: 0000000000000246 R12: 00007f687d3d7330 [ 56.347715][ T3631] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 56.355699][ T3631] [ 56.358717][ T3631] Kernel panic - not syncing: panic_on_warn set ... [ 56.365309][ T3631] CPU: 0 PID: 3631 Comm: syz-executor114 Not tainted 6.1.0-rc7-syzkaller-00012-gca57f02295f1 #0 [ 56.376180][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.386247][ T3631] Call Trace: [ 56.389558][ T3631] [ 56.392492][ T3631] dump_stack_lvl+0x1b1/0x28e [ 56.397529][ T3631] ? nf_tcp_handle_invalid+0x62e/0x62e [ 56.403347][ T3631] ? panic+0x710/0x710 [ 56.407430][ T3631] ? vscnprintf+0x59/0x80 [ 56.411771][ T3631] ? folio_account_dirtied+0x480/0x6e0 [ 56.417261][ T3631] panic+0x2d6/0x710 [ 56.421169][ T3631] ? __warn+0x131/0x220 [ 56.425608][ T3631] ? memcpy_page_flushcache+0xfc/0xfc [ 56.431022][ T3631] ? folio_account_dirtied+0x4e9/0x6e0 [ 56.436861][ T3631] __warn+0x1fa/0x220 [ 56.441333][ T3631] ? folio_account_dirtied+0x4e9/0x6e0 [ 56.447316][ T3631] report_bug+0x1b3/0x2d0 [ 56.451649][ T3631] handle_bug+0x3d/0x70 [ 56.455897][ T3631] exc_invalid_op+0x16/0x40 [ 56.460400][ T3631] asm_exc_invalid_op+0x16/0x20 [ 56.465355][ T3631] RIP: 0010:folio_account_dirtied+0x4e9/0x6e0 [ 56.471423][ T3631] Code: 5d 41 5e 41 5f 5d c3 e8 a5 70 d0 ff 4c 89 ef 4c 89 e6 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 5c ba 2b 00 e8 87 70 d0 ff <0f> 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff [ 56.491051][ T3631] RSP: 0018:ffffc90003c8f8f0 EFLAGS: 00010093 [ 56.497583][ T3631] RAX: ffffffff81ba2769 RBX: 0000000000000000 RCX: ffff888020f41d40 [ 56.505565][ T3631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.513555][ T3631] RBP: ffff88801f07c978 R08: ffffffff81ba24ed R09: ffffed1003e0f930 [ 56.521533][ T3631] R10: ffffed1003e0f930 R11: 1ffff11003e0f92f R12: dffffc0000000000 [ 56.529620][ T3631] R13: ffffea00007fc080 R14: 0000000000000001 R15: 1ffff11003e0f92f [ 56.538415][ T3631] ? folio_account_dirtied+0x26d/0x6e0 [ 56.543902][ T3631] ? folio_account_dirtied+0x4e9/0x6e0 [ 56.549375][ T3631] ? gfs2_write_log_header+0x8e2/0xad0 [ 56.554929][ T3631] __folio_mark_dirty+0x125/0x260 [ 56.559957][ T3631] mark_buffer_dirty+0x253/0x550 [ 56.564906][ T3631] gfs2_unpin+0x10b/0xa20 [ 56.569232][ T3631] ? log_pull_tail+0x7e/0x390 [ 56.573922][ T3631] buf_lo_after_commit+0x172/0x1d0 [ 56.579035][ T3631] ? buf_lo_before_commit+0xe0/0xe0 [ 56.584235][ T3631] gfs2_log_flush+0x1179/0x26a0 [ 56.589102][ T3631] ? gfs2_ail_drain+0xdb0/0xdb0 [ 56.593952][ T3631] ? radix_tree_delete_item+0x2e2/0x3d0 [ 56.599677][ T3631] ? trace_kfree+0x30/0xe0 [ 56.604202][ T3631] ? kfree+0x16/0xe0 [ 56.608137][ T3631] gfs2_kill_sb+0x50/0xd0 [ 56.612484][ T3631] deactivate_locked_super+0xa7/0xf0 [ 56.617771][ T3631] cleanup_mnt+0x494/0x520 [ 56.622280][ T3631] ? lockdep_hardirqs_on+0x8d/0x130 [ 56.627483][ T3631] task_work_run+0x243/0x300 [ 56.632081][ T3631] ? task_work_cancel+0x290/0x290 [ 56.637110][ T3631] ? do_exit+0x65f/0x2070 [ 56.641537][ T3631] do_exit+0x664/0x2070 [ 56.645712][ T3631] ? lockdep_hardirqs_on_prepare+0x428/0x790 [ 56.651688][ T3631] ? mm_update_next_owner+0x6d0/0x6d0 [ 56.657076][ T3631] ? print_irqtrace_events+0x220/0x220 [ 56.662629][ T3631] ? _raw_spin_unlock_irq+0x1f/0x40 [ 56.667926][ T3631] ? lockdep_hardirqs_on+0x8d/0x130 [ 56.673127][ T3631] do_group_exit+0x1fd/0x2b0 [ 56.677724][ T3631] __x64_sys_exit_group+0x3b/0x40 [ 56.682748][ T3631] do_syscall_64+0x3d/0xb0 [ 56.687251][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.693146][ T3631] RIP: 0033:0x7f687d32a9a9 [ 56.697556][ T3631] Code: Unable to access opcode bytes at 0x7f687d32a97f. [ 56.705723][ T3631] RSP: 002b:00007fffdf3d0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.714653][ T3631] RAX: ffffffffffffffda RBX: 00007f687d3d7330 RCX: 00007f687d32a9a9 [ 56.725052][ T3631] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 56.733108][ T3631] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f687d3d1e40 [ 56.741071][ T3631] R10: 00007fffdf3cff50 R11: 0000000000000246 R12: 00007f687d3d7330 [ 56.749034][ T3631] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 56.757109][ T3631] [ 56.760280][ T3631] Kernel Offset: disabled [ 56.764783][ T3631] Rebooting in 86400 seconds..