./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3727116994 <...> DUID 00:04:53:46:a9:9d:03:7a:46:b2:48:ff:4a:ea:3f:46:f2:43 forked to background, child pid 3181 [ 23.303258][ T3182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.312068][ T3182] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. execve("./syz-executor3727116994", ["./syz-executor3727116994"], 0x7ffc36113ae0 /* 10 vars */) = 0 brk(NULL) = 0x555556b64000 brk(0x555556b64c40) = 0x555556b64c40 arch_prctl(ARCH_SET_FS, 0x555556b64300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3727116994", 4096) = 28 brk(0x555556b85c40) = 0x555556b85c40 brk(0x555556b86000) = 0x555556b86000 mprotect(0x7fe0f25b1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556b645d0) = 3611 ./strace-static-x86_64: Process 3611 attached [pid 3611] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3611] setsid() = 1 [pid 3611] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 3611] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3611] unshare(CLONE_NEWNS) = 0 [pid 3611] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3611] unshare(CLONE_NEWIPC) = 0 [pid 3611] unshare(CLONE_NEWCGROUP) = 0 [pid 3611] unshare(CLONE_NEWUTS) = 0 [pid 3611] unshare(CLONE_SYSVSEM) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "16777216", 8) = 8 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "536870912", 9) = 9 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "8192", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024", 4) = 4 [pid 3611] close(3) = 0 [pid 3611] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3611] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3611] close(3) = 0 [pid 3611] getpid() = 1 [pid 3611] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 0d fe ff ff e8 3c c8 a0 fe e9 c6 fb ff ff e8 32 c8 a0 fe [ 41.681779][ T3612] RSP: 0018:ffffc90003cafa80 EFLAGS: 00010293 [ 41.687864][ T3612] RAX: 0000000000000000 RBX: ffff8880728ea160 RCX: 0000000000000000 [ 41.695851][ T3612] RDX: ffff888021f7ba80 RSI: ffffffff832859c8 RDI: 0000000000000005 [ 41.703847][ T3612] RBP: ffff88801e38e050 R08: 0000000000000005 R09: 0000000000000000 [ 41.711839][ T3612] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 41.719827][ T3612] R13: 1ffff92000795f55 R14: ffff8880728ea5e8 R15: 000000006360560e [ 41.727822][ T3612] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 41.736775][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.743364][ T3612] CR2: 000055b5312f7b30 CR3: 000000007d393000 CR4: 00000000003506e0 [ 41.751360][ T3612] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.759354][ T3612] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.767354][ T3612] Call Trace: [ 41.770635][ T3612] [ 41.773560][ T3612] ? nilfs_sufile_set_segment_usage+0x0/0x6a0 [ 41.779680][ T3612] ? memcpy+0x39/0x60 [ 41.783681][ T3612] nilfs_segctor_do_construct+0x1f78/0x6af0 [ 41.789636][ T3612] ? nilfs_segctor_do_construct+0x0/0x6af0 [ 41.795473][ T3612] ? do_raw_spin_lock+0x120/0x2a0 [ 41.800538][ T3612] ? do_raw_spin_lock+0x0/0x2a0 [ 41.805402][ T3612] ? do_raw_spin_unlock+0x171/0x230 [ 41.810630][ T3612] ? _raw_spin_unlock+0x24/0x40 [ 41.815492][ T3612] nilfs_segctor_construct+0x8e3/0xb30 [ 41.820983][ T3612] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.826475][ T3612] ? trace_nilfs2_transaction_transition+0x227/0x2e0 [ 41.833145][ T3612] nilfs_segctor_thread+0x3c3/0xf30 [ 41.838369][ T3612] ? nilfs_segctor_thread+0x0/0xf30 [ 41.843584][ T3612] ? do_raw_spin_lock+0x0/0x2a0 [ 41.848463][ T3612] ? __schedule+0x0/0x53f0 [ 41.852895][ T3612] ? autoremove_wake_function+0x0/0x140 [ 41.858475][ T3612] ? __kthread_parkme+0x15f/0x220 [ 41.863509][ T3612] ? nilfs_segctor_thread+0x0/0xf30 [ 41.868755][ T3612] kthread+0x2e4/0x3a0 [ 41.872830][ T3612] ? kthread+0x0/0x3a0 [ 41.876921][ T3612] ret_from_fork+0x1f/0x30 [ 41.881377][ T3612] [ 41.884393][ T3612] Kernel panic - not syncing: panic_on_warn set ... [ 41.890968][ T3612] CPU: 1 PID: 3612 Comm: segctord Not tainted 6.1.0-rc1-next-20221021-syzkaller #0 [ 41.900237][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 41.910282][ T3612] Call Trace: [ 41.913549][ T3612] [ 41.916469][ T3612] dump_stack_lvl+0xcd/0x134 [ 41.921057][ T3612] panic+0x2c8/0x622 [ 41.925035][ T3612] ? panic+0x0/0x622 [ 41.928922][ T3612] ? __warn.cold+0x24b/0x350 [ 41.933507][ T3612] ? nilfs_sufile_set_segment_usage+0x518/0x6a0 [ 41.939753][ T3612] __warn.cold+0x25c/0x350 [ 41.944180][ T3612] ? nilfs_sufile_set_segment_usage+0x518/0x6a0 [ 41.950436][ T3612] report_bug+0x1bc/0x210 [ 41.954770][ T3612] handle_bug+0x3c/0x70 [ 41.958931][ T3612] exc_invalid_op+0x14/0x40 [ 41.963442][ T3612] asm_exc_int3-0xa/0x40 [ 41.967692][ T3612] RIP: 0010:nilfs_sufile_set_segment_usage+0x518/0x6a0 [ 41.974553][ T3612] Code: 3b 54 fe 48 8b 6c 24 48 48 85 ed 0f 85 5b ff ff ff e9 63 ff ff ff e8 77 3b 54 fe e8 b2 1d d8 fd e9 db fe ff ff e8 68 3b 54 fe <0f> 0b e9 0d fe ff ff e8 3c c8 a0 fe e9 c6 fb ff ff e8 32 c8 a0 fe [ 41.994159][ T3612] RSP: 0018:ffffc90003cafa80 EFLAGS: 00010293 [ 42.000224][ T3612] RAX: 0000000000000000 RBX: ffff8880728ea160 RCX: 0000000000000000 [ 42.008193][ T3612] RDX: ffff888021f7ba80 RSI: ffffffff832859c8 RDI: 0000000000000005 [ 42.016161][ T3612] RBP: ffff88801e38e050 R08: 0000000000000005 R09: 0000000000000000 [ 42.024133][ T3612] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 42.032100][ T3612] R13: 1ffff92000795f55 R14: ffff8880728ea5e8 R15: 000000006360560e [ 42.040076][ T3612] ? nilfs_sufile_set_segment_usage+0x518/0x6a0 [ 42.046335][ T3612] ? nilfs_sufile_set_segment_usage+0x0/0x6a0 [ 42.052415][ T3612] ? memcpy+0x39/0x60 [ 42.056404][ T3612] nilfs_segctor_do_construct+0x1f78/0x6af0 [ 42.062317][ T3612] ? nilfs_segctor_do_construct+0x0/0x6af0 [ 42.068136][ T3612] ? do_raw_spin_lock+0x120/0x2a0 [ 42.073169][ T3612] ? do_raw_spin_lock+0x0/0x2a0 [ 42.078025][ T3612] ? do_raw_spin_unlock+0x171/0x230 [ 42.083228][ T3612] ? _raw_spin_unlock+0x24/0x40 [ 42.088083][ T3612] nilfs_segctor_construct+0x8e3/0xb30 [ 42.093551][ T3612] ? rcu_read_lock_sched_held+0xd/0x70 [ 42.099023][ T3612] ? trace_nilfs2_transaction_transition+0x227/0x2e0 [ 42.105709][ T3612] nilfs_segctor_thread+0x3c3/0xf30 [ 42.110926][ T3612] ? nilfs_segctor_thread+0x0/0xf30 [ 42.116138][ T3612] ? do_raw_spin_lock+0x0/0x2a0 [ 42.120994][ T3612] ? __schedule+0x0/0x53f0 [ 42.125421][ T3612] ? autoremove_wake_function+0x0/0x140 [ 42.130985][ T3612] ? __kthread_parkme+0x15f/0x220 [ 42.136012][ T3612] ? nilfs_segctor_thread+0x0/0xf30 [ 42.141223][ T3612] kthread+0x2e4/0x3a0 [ 42.145293][ T3612] ? kthread+0x0/0x3a0 [ 42.149364][ T3612] ret_from_fork+0x1f/0x30 [ 42.153793][ T3612] [ 42.156963][ T3612] Kernel Offset: disabled [ 42.161287][ T3612] Rebooting in 86400 seconds..