./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2113784689 <...> DUID 00:04:76:8b:f6:84:a4:3b:36:39:6c:68:e7:10:38:dd:b7:2c forked to background, child pid 3183 [ 21.093061][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 21.103836][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.9' (ECDSA) to the list of known hosts. execve("./syz-executor2113784689", ["./syz-executor2113784689"], 0x7ffc8cf01b00 /* 10 vars */) = 0 brk(NULL) = 0x5555574d6000 brk(0x5555574d6c40) = 0x5555574d6c40 arch_prctl(ARCH_SET_FS, 0x5555574d6300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2113784689", 4096) = 28 brk(0x5555574f7c40) = 0x5555574f7c40 brk(0x5555574f8000) = 0x5555574f8000 mprotect(0x7f36c4fbc000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574d65d0) = 3605 ./strace-static-x86_64: Process 3605 attached [pid 3605] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3605] setsid() = 1 [pid 3605] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3605] unshare(CLONE_NEWNS) = 0 [pid 3605] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3605] unshare(CLONE_NEWIPC) = 0 [pid 3605] unshare(CLONE_NEWCGROUP) = 0 [pid 3605] unshare(CLONE_NEWUTS) = 0 [pid 3605] unshare(CLONE_SYSVSEM) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "16777216", 8) = 8 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "536870912", 9) = 9 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "8192", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3605] close(3) = 0 [pid 3605] getpid() = 1 [pid 3605] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 77 fd ff ff e8 a2 aa 8c ff 48 ff cb e9 91 fe ff ff e8 95 [ 50.209846][ T3605] RSP: 0018:ffffc90003bdefe8 EFLAGS: 00010293 [ 50.215938][ T3605] RAX: ffffffff81fb2532 RBX: dffffc0000000001 RCX: ffff88801cacba80 [ 50.224102][ T3605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.232145][ T3605] RBP: ffffc90003bdf100 R08: ffffffff81fb22a3 R09: ffffed100e4ffc01 [ 50.241547][ T3605] R10: ffffed100e4ffc01 R11: 1ffff1100e4ffc00 R12: ffffc90003bdf078 [ 50.249572][ T3605] R13: 1ffff9200077be08 R14: ffff8880727fe000 R15: ffff8880727a8158 [ 50.257562][ T3605] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 50.266472][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.273109][ T3605] CR2: 00007f36c4fc31d0 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 50.281099][ T3605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.290302][ T3605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.298312][ T3605] Call Trace: [ 50.301593][ T3605] [ 50.304509][ T3605] nilfs_dat_mark_dirty+0xf0/0x1f0 [ 50.309674][ T3605] ? nilfs_dat_abort_update+0x70/0x70 [ 50.315054][ T3605] ? kmem_cache_alloc+0x85/0x300 [ 50.320017][ T3605] ? nilfs_btree_propagate+0x95/0xe10 [ 50.325396][ T3605] nilfs_btree_propagate+0xa9e/0xe10 [ 50.331929][ T3605] nilfs_bmap_propagate+0x6d/0x120 [ 50.337079][ T3605] nilfs_segctor_apply_buffers+0x192/0x380 [ 50.342883][ T3605] ? nilfs_collect_file_data+0xc0/0xc0 [ 50.348503][ T3605] nilfs_segctor_scan_file+0x8b5/0xaf0 [ 50.353967][ T3605] ? trace_nilfs2_collection_stage_transition+0x2b0/0x2b0 [ 50.361106][ T3605] ? trace_writeback_dirty_inode_enqueue+0xdb/0x2b0 [ 50.368774][ T3605] ? rcu_read_lock_sched_held+0x5d/0x110 [ 50.374404][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.380414][ T3605] ? nilfs_segbuf_reset+0x142/0x320 [ 50.385629][ T3605] nilfs_segctor_do_construct+0x1d2c/0x6f80 [ 50.391535][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.397537][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.403501][ T3605] ? nilfs_bmap_test_and_clear_dirty+0x60/0xa0 [ 50.409664][ T3605] ? read_lock_is_recursive+0x10/0x10 [ 50.415038][ T3605] ? rcu_read_lock_sched_held+0x5d/0x110 [ 50.420703][ T3605] ? nilfs_transaction_unlock+0x210/0x210 [ 50.426429][ T3605] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 50.431917][ T3605] ? __might_sleep+0xc0/0xc0 [ 50.436548][ T3605] ? rcu_read_lock_sched_held+0x5d/0x110 [ 50.442185][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.448198][ T3605] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 50.454099][ T3605] ? nilfs_segctor_confirm+0x24b/0x2d0 [ 50.459621][ T3605] ? trace_lock_release+0x95/0x220 [ 50.464752][ T3605] ? nilfs_segctor_confirm+0x24b/0x2d0 [ 50.470245][ T3605] ? lock_release+0x81/0x820 [ 50.474838][ T3605] ? read_lock_is_recursive+0x10/0x10 [ 50.480239][ T3605] ? __up_read+0x690/0x690 [ 50.484686][ T3605] ? do_raw_spin_lock+0x148/0x360 [ 50.489731][ T3605] ? __lock_acquire+0x1f60/0x1f60 [ 50.494759][ T3605] ? do_raw_spin_unlock+0x134/0x8a0 [ 50.499990][ T3605] ? _raw_spin_unlock+0x24/0x40 [ 50.504840][ T3605] ? nilfs_segctor_confirm+0x24b/0x2d0 [ 50.510336][ T3605] nilfs_segctor_construct+0x143/0x8d0 [ 50.515791][ T3605] ? trace_nilfs2_transaction_transition+0xec/0x2e0 [ 50.522561][ T3605] nilfs_detach_log_writer+0x537/0xbd0 [ 50.528332][ T3605] ? __might_sleep+0xc0/0xc0 [ 50.532967][ T3605] ? nilfs_attach_log_writer+0x8d0/0x8d0 [ 50.538726][ T3605] ? hook_sb_delete+0x988/0xab0 [ 50.543587][ T3605] ? wake_bit_function+0x240/0x240 [ 50.548753][ T3605] ? hook_inode_free_security+0xa0/0xa0 [ 50.554300][ T3605] ? clear_inode+0x150/0x150 [ 50.559037][ T3605] ? nilfs_free_inode+0x70/0x70 [ 50.563899][ T3605] nilfs_put_super+0x4b/0x150 [ 50.568616][ T3605] ? nilfs_free_inode+0x70/0x70 [ 50.573477][ T3605] generic_shutdown_super+0x130/0x310 [ 50.578898][ T3605] kill_block_super+0x79/0xd0 [ 50.583583][ T3605] deactivate_locked_super+0xa7/0xf0 [ 50.588905][ T3605] cleanup_mnt+0x494/0x520 [ 50.593337][ T3605] task_work_run+0x243/0x300 [ 50.597949][ T3605] ? task_work_cancel+0x290/0x290 [ 50.602970][ T3605] ? do_exit+0x65f/0x2070 [ 50.607310][ T3605] do_exit+0x664/0x2070 [ 50.611469][ T3605] ? __lock_acquire+0x1f60/0x1f60 [ 50.616525][ T3605] ? ptrace_notify+0x245/0x340 [ 50.621309][ T3605] ? mm_update_next_owner+0x6d0/0x6d0 [ 50.626717][ T3605] ? print_irqtrace_events+0x220/0x220 [ 50.632179][ T3605] do_group_exit+0x1fd/0x2b0 [ 50.636888][ T3605] __x64_sys_exit_group+0x3b/0x40 [ 50.641925][ T3605] do_syscall_64+0x3d/0xb0 [ 50.646355][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.652289][ T3605] RIP: 0033:0x7f36c4f4ab69 [ 50.656719][ T3605] Code: Unable to access opcode bytes at 0x7f36c4f4ab3f. [ 50.663715][ T3605] RSP: 002b:00007ffd5dc22718 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 50.672144][ T3605] RAX: ffffffffffffffda RBX: 00007f36c4fc2330 RCX: 00007f36c4f4ab69 [ 50.680124][ T3605] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 50.688124][ T3605] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f36c4fbce40 [ 50.696094][ T3605] R10: 00005555574d62c0 R11: 0000000000000246 R12: 00007f36c4fc2330 [ 50.704103][ T3605] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 50.712119][ T3605] [ 50.715140][ T3605] Kernel panic - not syncing: panic_on_warn set ... [ 50.721710][ T3605] CPU: 1 PID: 3605 Comm: syz-executor211 Not tainted 6.1.0-rc2-syzkaller-00105-gb229b6ca5abb #0 [ 50.732096][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 50.742134][ T3605] Call Trace: [ 50.745395][ T3605] [ 50.748314][ T3605] dump_stack_lvl+0x1b1/0x28e [ 50.752976][ T3605] ? nf_tcp_handle_invalid+0x62e/0x62e [ 50.758415][ T3605] ? panic+0x710/0x710 [ 50.762469][ T3605] ? vscnprintf+0x59/0x80 [ 50.766838][ T3605] ? mark_buffer_dirty+0x290/0x550 [ 50.771928][ T3605] panic+0x2d6/0x710 [ 50.775810][ T3605] ? __warn+0x131/0x220 [ 50.779951][ T3605] ? memcpy_page_flushcache+0xfc/0xfc [ 50.785307][ T3605] ? mark_buffer_dirty+0x2c2/0x550 [ 50.790416][ T3605] __warn+0x1fa/0x220 [ 50.794385][ T3605] ? mark_buffer_dirty+0x2c2/0x550 [ 50.799476][ T3605] report_bug+0x1b3/0x2d0 [ 50.803788][ T3605] handle_bug+0x3d/0x70 [ 50.807926][ T3605] exc_invalid_op+0x16/0x40 [ 50.812411][ T3605] asm_exc_invalid_op+0x16/0x20 [ 50.817247][ T3605] RIP: 0010:mark_buffer_dirty+0x2c2/0x550 [ 50.822945][ T3605] Code: 5d 41 5e 41 5f 5d c3 e8 cc aa 8c ff eb 05 e8 c5 aa 8c ff 4c 89 f7 5b 41 5c 41 5d 41 5e 41 5f 5d e9 03 7a e7 ff e8 ae aa 8c ff <0f> 0b e9 77 fd ff ff e8 a2 aa 8c ff 48 ff cb e9 91 fe ff ff e8 95 [ 50.842529][ T3605] RSP: 0018:ffffc90003bdefe8 EFLAGS: 00010293 [ 50.848577][ T3605] RAX: ffffffff81fb2532 RBX: dffffc0000000001 RCX: ffff88801cacba80 [ 50.856529][ T3605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.864477][ T3605] RBP: ffffc90003bdf100 R08: ffffffff81fb22a3 R09: ffffed100e4ffc01 [ 50.872434][ T3605] R10: ffffed100e4ffc01 R11: 1ffff1100e4ffc00 R12: ffffc90003bdf078 [ 50.880383][ T3605] R13: 1ffff9200077be08 R14: ffff8880727fe000 R15: ffff8880727a8158 [ 50.888335][ T3605] ? mark_buffer_dirty+0x33/0x550 [ 50.893339][ T3605] ? mark_buffer_dirty+0x2c2/0x550 [ 50.898429][ T3605] ? mark_buffer_dirty+0x2c2/0x550 [ 50.903517][ T3605] nilfs_dat_mark_dirty+0xf0/0x1f0 [ 50.908611][ T3605] ? nilfs_dat_abort_update+0x70/0x70 [ 50.913966][ T3605] ? kmem_cache_alloc+0x85/0x300 [ 50.918884][ T3605] ? nilfs_btree_propagate+0x95/0xe10 [ 50.924240][ T3605] nilfs_btree_propagate+0xa9e/0xe10 [ 50.929506][ T3605] nilfs_bmap_propagate+0x6d/0x120 [ 50.934596][ T3605] nilfs_segctor_apply_buffers+0x192/0x380 [ 50.940398][ T3605] ? nilfs_collect_file_data+0xc0/0xc0 [ 50.945841][ T3605] nilfs_segctor_scan_file+0x8b5/0xaf0 [ 50.951279][ T3605] ? trace_nilfs2_collection_stage_transition+0x2b0/0x2b0 [ 50.958365][ T3605] ? trace_writeback_dirty_inode_enqueue+0xdb/0x2b0 [ 50.964937][ T3605] ? rcu_read_lock_sched_held+0x5d/0x110 [ 50.970549][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.976515][ T3605] ? nilfs_segbuf_reset+0x142/0x320 [ 50.981697][ T3605] nilfs_segctor_do_construct+0x1d2c/0x6f80 [ 50.987568][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.993537][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 50.999499][ T3605] ? nilfs_bmap_test_and_clear_dirty+0x60/0xa0 [ 51.005635][ T3605] ? read_lock_is_recursive+0x10/0x10 [ 51.010987][ T3605] ? rcu_read_lock_sched_held+0x5d/0x110 [ 51.016600][ T3605] ? nilfs_transaction_unlock+0x210/0x210 [ 51.022300][ T3605] ? _raw_spin_lock_irqsave+0xbf/0x100 [ 51.027754][ T3605] ? __might_sleep+0xc0/0xc0 [ 51.032341][ T3605] ? rcu_read_lock_sched_held+0x5d/0x110 [ 51.037962][ T3605] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 51.043939][ T3605] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 51.049826][ T3605] ? nilfs_segctor_confirm+0x24b/0x2d0 [ 51.055268][ T3605] ? trace_lock_release+0x95/0x220 [ 51.060364][ T3605] ? nilfs_segctor_confirm+0x24b/0x2d0 [ 51.065801][ T3605] ? lock_release+0x81/0x820 [ 51.070383][ T3605] ? read_lock_is_recursive+0x10/0x10 [ 51.075738][ T3605] ? __up_read+0x690/0x690 [ 51.080136][ T3605] ? do_raw_spin_lock+0x148/0x360 [ 51.085149][ T3605] ? __lock_acquire+0x1f60/0x1f60 [ 51.090167][ T3605] ? do_raw_spin_unlock+0x134/0x8a0 [ 51.095353][ T3605] ? _raw_spin_unlock+0x24/0x40 [ 51.100191][ T3605] ? nilfs_segctor_confirm+0x24b/0x2d0 [ 51.105642][ T3605] nilfs_segctor_construct+0x143/0x8d0 [ 51.111102][ T3605] ? trace_nilfs2_transaction_transition+0xec/0x2e0 [ 51.117674][ T3605] nilfs_detach_log_writer+0x537/0xbd0 [ 51.123118][ T3605] ? __might_sleep+0xc0/0xc0 [ 51.127703][ T3605] ? nilfs_attach_log_writer+0x8d0/0x8d0 [ 51.133320][ T3605] ? hook_sb_delete+0x988/0xab0 [ 51.138159][ T3605] ? wake_bit_function+0x240/0x240 [ 51.143256][ T3605] ? hook_inode_free_security+0xa0/0xa0 [ 51.148791][ T3605] ? clear_inode+0x150/0x150 [ 51.153366][ T3605] ? nilfs_free_inode+0x70/0x70 [ 51.158200][ T3605] nilfs_put_super+0x4b/0x150 [ 51.162865][ T3605] ? nilfs_free_inode+0x70/0x70 [ 51.167700][ T3605] generic_shutdown_super+0x130/0x310 [ 51.173318][ T3605] kill_block_super+0x79/0xd0 [ 51.177982][ T3605] deactivate_locked_super+0xa7/0xf0 [ 51.183254][ T3605] cleanup_mnt+0x494/0x520 [ 51.187663][ T3605] task_work_run+0x243/0x300 [ 51.192241][ T3605] ? task_work_cancel+0x290/0x290 [ 51.197246][ T3605] ? do_exit+0x65f/0x2070 [ 51.201563][ T3605] do_exit+0x664/0x2070 [ 51.205705][ T3605] ? __lock_acquire+0x1f60/0x1f60 [ 51.210716][ T3605] ? ptrace_notify+0x245/0x340 [ 51.215580][ T3605] ? mm_update_next_owner+0x6d0/0x6d0 [ 51.220935][ T3605] ? print_irqtrace_events+0x220/0x220 [ 51.226382][ T3605] do_group_exit+0x1fd/0x2b0 [ 51.230978][ T3605] __x64_sys_exit_group+0x3b/0x40 [ 51.235987][ T3605] do_syscall_64+0x3d/0xb0 [ 51.240651][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.246536][ T3605] RIP: 0033:0x7f36c4f4ab69 [ 51.250938][ T3605] Code: Unable to access opcode bytes at 0x7f36c4f4ab3f. [ 51.257937][ T3605] RSP: 002b:00007ffd5dc22718 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 51.266332][ T3605] RAX: ffffffffffffffda RBX: 00007f36c4fc2330 RCX: 00007f36c4f4ab69 [ 51.274284][ T3605] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 51.282236][ T3605] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f36c4fbce40 [ 51.290193][ T3605] R10: 00005555574d62c0 R11: 0000000000000246 R12: 00007f36c4fc2330 [ 51.298148][ T3605] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 51.306107][ T3605] [ 51.309258][ T3605] Kernel Offset: disabled [ 51.313576][ T3605] Rebooting in 86400 seconds..