./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2334599169 <...> DUID 00:04:53:46:a9:9d:03:7a:46:b2:48:ff:4a:ea:3f:46:f2:43 forked to background, child pid 4693 [ 47.241723][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.255351][ T4694] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.75' (ECDSA) to the list of known hosts. execve("./syz-executor2334599169", ["./syz-executor2334599169"], 0x7ffe9beaa880 /* 10 vars */) = 0 brk(NULL) = 0x555555b11000 brk(0x555555b11c40) = 0x555555b11c40 arch_prctl(ARCH_SET_FS, 0x555555b11300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2334599169", 4096) = 28 brk(0x555555b32c40) = 0x555555b32c40 brk(0x555555b33000) = 0x555555b33000 mprotect(0x7f1e3ee6e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b115d0) = 5031 ./strace-static-x86_64: Process 5031 attached [pid 5031] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5031] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5031] setsid() = 1 [pid 5031] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5031] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5031] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5031] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5031] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5031] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5031] unshare(CLONE_NEWNS) = 0 [pid 5031] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5031] unshare(CLONE_NEWIPC) = 0 [pid 5031] unshare(CLONE_NEWCGROUP) = 0 [pid 5031] unshare(CLONE_NEWUTS) = 0 [pid 5031] unshare(CLONE_SYSVSEM) = 0 [pid 5031] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "16777216", 8) = 8 [pid 5031] close(3) = 0 [pid 5031] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "536870912", 9) = 9 [pid 5031] close(3) = 0 [pid 5031] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "1024", 4) = 4 [pid 5031] close(3) = 0 [pid 5031] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "8192", 4) = 4 [pid 5031] close(3) = 0 [pid 5031] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "1024", 4) = 4 [pid 5031] close(3) = 0 [pid 5031] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "1024", 4) = 4 [pid 5031] close(3) = 0 [pid 5031] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5031] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5031] close(3) = 0 [pid 5031] getpid() = 1 [pid 5031] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 e0 fb ff ff e8 02 39 90 fd 4c 8d ab a8 00 00 00 31 f6 4c [ 76.447613][ T5031] RSP: 0018:ffffc9000396fa28 EFLAGS: 00010293 [ 76.454061][ T5031] RAX: 0000000000000000 RBX: ffff88801ac70000 RCX: 0000000000000000 [ 76.462447][ T5031] RDX: ffff8880285c8000 RSI: ffffffff83f42912 RDI: 0000000000000001 [ 76.470739][ T5031] RBP: ffff88814132b000 R08: 0000000000000000 R09: fffffbfff1d53172 [ 76.478873][ T5031] R10: ffffffff8ea98b97 R11: 0000000000000003 R12: ffff88801ac70038 [ 76.487093][ T5031] R13: ffffc90003a11000 R14: ffff88814132b460 R15: ffff88801ac70000 [ 76.495148][ T5031] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 76.504278][ T5031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.510933][ T5031] CR2: 00007f1e3ee426f8 CR3: 000000000c775000 CR4: 00000000003506f0 [ 76.518937][ T5031] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.527005][ T5031] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.535125][ T5031] Call Trace: [ 76.538593][ T5031] [ 76.541639][ T5031] ? __warn+0xe6/0x390 [ 76.545772][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.550366][ T5031] ? report_bug+0x2da/0x500 [ 76.554932][ T5031] ? handle_bug+0x3c/0x70 [ 76.559288][ T5031] ? exc_invalid_op+0x18/0x50 [ 76.564091][ T5031] ? asm_exc_invalid_op+0x1a/0x20 [ 76.569178][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.573815][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.578464][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.583109][ T5031] free_journal_ram+0x421/0x5c0 [ 76.588016][ T5031] journal_release+0x276/0x630 [ 76.592896][ T5031] ? reiserfs_end_persistent_transaction+0x1b0/0x1b0 [ 76.599722][ T5031] ? do_raw_spin_unlock+0x175/0x230 [ 76.605021][ T5031] reiserfs_put_super+0xe4/0x5c0 [ 76.610080][ T5031] ? reiserfs_quota_read+0x4f0/0x4f0 [ 76.615430][ T5031] ? dispose_list+0x1e0/0x1e0 [ 76.620224][ T5031] ? fscrypt_destroy_keyring+0x1a/0x380 [ 76.625824][ T5031] ? reiserfs_quota_read+0x4f0/0x4f0 [ 76.631202][ T5031] generic_shutdown_super+0x158/0x480 [ 76.636641][ T5031] kill_block_super+0x64/0xb0 [ 76.641464][ T5031] deactivate_locked_super+0x98/0x160 [ 76.646900][ T5031] deactivate_super+0xb1/0xd0 [ 76.651848][ T5031] cleanup_mnt+0x2ae/0x3d0 [ 76.656356][ T5031] task_work_run+0x16f/0x270 [ 76.661062][ T5031] ? task_work_cancel+0x30/0x30 [ 76.666050][ T5031] ? __put_net+0x61/0x70 [ 76.670404][ T5031] do_exit+0xadc/0x2a30 [ 76.674644][ T5031] ? lock_downgrade+0x690/0x690 [ 76.679546][ T5031] ? do_raw_spin_lock+0x124/0x2b0 [ 76.684800][ T5031] ? mm_update_next_owner+0x7b0/0x7b0 [ 76.690250][ T5031] ? spin_bug+0x1c0/0x1c0 [ 76.694642][ T5031] ? _raw_spin_unlock_irq+0x23/0x50 [ 76.699953][ T5031] do_group_exit+0xd4/0x2a0 [ 76.704507][ T5031] __x64_sys_exit_group+0x3e/0x50 [ 76.709566][ T5031] do_syscall_64+0x39/0xb0 [ 76.714076][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.720108][ T5031] RIP: 0033:0x7f1e3edfdcf9 [ 76.724552][ T5031] Code: Unable to access opcode bytes at 0x7f1e3edfdccf. [ 76.731639][ T5031] RSP: 002b:00007fff84dab398 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 76.740200][ T5031] RAX: ffffffffffffffda RBX: 00007f1e3ee743f0 RCX: 00007f1e3edfdcf9 [ 76.748607][ T5031] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 76.756658][ T5031] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00000000000010f7 [ 76.764761][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e3ee743f0 [ 76.772908][ T5031] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 76.781075][ T5031] [ 76.784162][ T5031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.791536][ T5031] CPU: 0 PID: 5031 Comm: syz-executor233 Not tainted 6.4.0-rc6-next-20230616-syzkaller #0 [ 76.801440][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 76.811504][ T5031] Call Trace: [ 76.814789][ T5031] [ 76.817731][ T5031] dump_stack_lvl+0xd9/0x150 [ 76.822348][ T5031] panic+0x686/0x730 [ 76.826270][ T5031] ? panic_smp_self_stop+0xa0/0xa0 [ 76.831412][ T5031] ? show_trace_log_lvl+0x284/0x390 [ 76.836665][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.841291][ T5031] check_panic_on_warn+0xb1/0xc0 [ 76.846350][ T5031] __warn+0xf2/0x390 [ 76.850275][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.854818][ T5031] report_bug+0x2da/0x500 [ 76.859175][ T5031] handle_bug+0x3c/0x70 [ 76.863353][ T5031] exc_invalid_op+0x18/0x50 [ 76.867886][ T5031] asm_exc_invalid_op+0x1a/0x20 [ 76.872758][ T5031] RIP: 0010:blkdev_put+0x562/0x8a0 [ 76.877902][ T5031] Code: c0 74 08 3c 03 0f 8e 23 03 00 00 41 83 ac 24 f0 04 00 00 01 e9 2b fe ff ff e8 1a 39 90 fd 0f 0b e9 4b fc ff ff e8 0e 39 90 fd <0f> 0b e9 e0 fb ff ff e8 02 39 90 fd 4c 8d ab a8 00 00 00 31 f6 4c [ 76.897624][ T5031] RSP: 0018:ffffc9000396fa28 EFLAGS: 00010293 [ 76.903733][ T5031] RAX: 0000000000000000 RBX: ffff88801ac70000 RCX: 0000000000000000 [ 76.912856][ T5031] RDX: ffff8880285c8000 RSI: ffffffff83f42912 RDI: 0000000000000001 [ 76.920850][ T5031] RBP: ffff88814132b000 R08: 0000000000000000 R09: fffffbfff1d53172 [ 76.928844][ T5031] R10: ffffffff8ea98b97 R11: 0000000000000003 R12: ffff88801ac70038 [ 76.936841][ T5031] R13: ffffc90003a11000 R14: ffff88814132b460 R15: ffff88801ac70000 [ 76.944935][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.949490][ T5031] ? blkdev_put+0x562/0x8a0 [ 76.954042][ T5031] free_journal_ram+0x421/0x5c0 [ 76.958935][ T5031] journal_release+0x276/0x630 [ 76.963737][ T5031] ? reiserfs_end_persistent_transaction+0x1b0/0x1b0 [ 76.970450][ T5031] ? do_raw_spin_unlock+0x175/0x230 [ 76.975708][ T5031] reiserfs_put_super+0xe4/0x5c0 [ 76.980861][ T5031] ? reiserfs_quota_read+0x4f0/0x4f0 [ 76.986200][ T5031] ? dispose_list+0x1e0/0x1e0 [ 76.990920][ T5031] ? fscrypt_destroy_keyring+0x1a/0x380 [ 76.996518][ T5031] ? reiserfs_quota_read+0x4f0/0x4f0 [ 77.001870][ T5031] generic_shutdown_super+0x158/0x480 [ 77.007296][ T5031] kill_block_super+0x64/0xb0 [ 77.012014][ T5031] deactivate_locked_super+0x98/0x160 [ 77.017430][ T5031] deactivate_super+0xb1/0xd0 [ 77.022147][ T5031] cleanup_mnt+0x2ae/0x3d0 [ 77.026728][ T5031] task_work_run+0x16f/0x270 [ 77.031351][ T5031] ? task_work_cancel+0x30/0x30 [ 77.036235][ T5031] ? __put_net+0x61/0x70 [ 77.040536][ T5031] do_exit+0xadc/0x2a30 [ 77.044732][ T5031] ? lock_downgrade+0x690/0x690 [ 77.049742][ T5031] ? do_raw_spin_lock+0x124/0x2b0 [ 77.054815][ T5031] ? mm_update_next_owner+0x7b0/0x7b0 [ 77.060216][ T5031] ? spin_bug+0x1c0/0x1c0 [ 77.064590][ T5031] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.069912][ T5031] do_group_exit+0xd4/0x2a0 [ 77.074539][ T5031] __x64_sys_exit_group+0x3e/0x50 [ 77.079595][ T5031] do_syscall_64+0x39/0xb0 [ 77.084052][ T5031] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 77.089996][ T5031] RIP: 0033:0x7f1e3edfdcf9 [ 77.094435][ T5031] Code: Unable to access opcode bytes at 0x7f1e3edfdccf. [ 77.101472][ T5031] RSP: 002b:00007fff84dab398 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 77.109935][ T5031] RAX: ffffffffffffffda RBX: 00007f1e3ee743f0 RCX: 00007f1e3edfdcf9 [ 77.118026][ T5031] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 77.126021][ T5031] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00000000000010f7 [ 77.134015][ T5031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1e3ee743f0 [ 77.142010][ T5031] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 77.150027][ T5031] [ 77.153440][ T5031] Kernel Offset: disabled [ 77.157880][ T5031] Rebooting in 86400 seconds..