./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4292688901 <...> DUID 00:04:7c:7c:42:18:3f:30:8d:b4:e2:57:c6:a5:0a:a4:65:8b forked to background, child pid 4725 [ 33.141324][ T4726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.160562][ T4726] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.3' (ED25519) to the list of known hosts. execve("./syz-executor4292688901", ["./syz-executor4292688901"], 0x7ffc1e5cd5f0 /* 10 vars */) = 0 brk(NULL) = 0x5555917ee000 brk(0x5555917eed00) = 0x5555917eed00 arch_prctl(ARCH_SET_FS, 0x5555917ee380) = 0 set_tid_address(0x5555917ee650) = 5056 set_robust_list(0x5555917ee660, 24) = 0 rseq(0x5555917eeca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4292688901", 4096) = 28 getrandom("\xe8\xd1\x8f\x27\x77\x7d\x82\x41", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555917eed00 brk(0x55559180fd00) = 0x55559180fd00 brk(0x555591810000) = 0x555591810000 mprotect(0x7f3d6cd51000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d64800000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 munmap(0x7f3d64800000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 57.099122][ T5056] loop0: detected capacity change from 0 to 2048 mount("/dev/loop0", "./file0", "nilfs2", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 openat(AT_FDCWD, "memory.events", O_WRONLY|O_TRUNC|O_NONBLOCK|O_DSYNC|O_DIRECT|FASYNC|0x4) = 5 [ 57.147993][ T5058] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds write(5, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = -1 EIO (Input/output error) [ 57.193667][ T5058] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 57.204617][ T5058] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 57.215414][ T5058] Remounting filesystem read-only [ 57.220869][ T5056] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 57.227874][ T5056] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 57.235139][ T5056] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 write(5, "0x0000000000000000", 18) = -1 EROFS (Read-only file system) [ 57.244002][ T5056] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.252950][ T5056] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 57.272813][ T5056] NILFS (loop0): nilfs_get_block (ino=18): a race condition while inserting a data block at offset=0 [ 57.284070][ T5056] ------------[ cut here ]------------ [ 57.289605][ T5056] kernel BUG at fs/buffer.c:2768! [ 57.294713][ T5056] invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 57.301131][ T5056] CPU: 0 PID: 5056 Comm: syz-executor429 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 57.311184][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 57.321230][ T5056] RIP: 0010:submit_bh_wbc+0x543/0x560 [ 57.326609][ T5056] Code: 07 7d ff be 00 10 00 00 48 c7 c7 80 f8 26 8e 4c 89 fa e8 f0 cd be 02 e9 98 fe ff ff e8 86 07 7d ff 90 0f 0b e8 7e 07 7d ff 90 <0f> 0b e8 76 07 7d ff 90 0f 0b e8 6e 07 7d ff 90 0f 0b e8 66 07 7d [ 57.346216][ T5056] RSP: 0018:ffffc9000399f838 EFLAGS: 00010293 [ 57.352325][ T5056] RAX: ffffffff8217ecd2 RBX: 0000000000000000 RCX: ffff88807cfe3c00 [ 57.360278][ T5056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.368318][ T5056] RBP: 0000000000000000 R08: ffffffff8217e833 R09: 1ffff1100f095cae [ 57.376271][ T5056] R10: dffffc0000000000 R11: ffffed100f095caf R12: 0000000000000000 [ 57.384245][ T5056] R13: ffff8880784ae570 R14: 0000000000000000 R15: 1ffff1100f095cae [ 57.392219][ T5056] FS: 00005555917ee380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 57.401165][ T5056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.407735][ T5056] CR2: 000000000066c7e0 CR3: 000000007f430000 CR4: 00000000003506f0 [ 57.415698][ T5056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.423652][ T5056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.431647][ T5056] Call Trace: [ 57.434932][ T5056] [ 57.437865][ T5056] ? __die_body+0x88/0xe0 [ 57.442183][ T5056] ? die+0xcf/0x110 [ 57.446005][ T5056] ? do_trap+0x15a/0x3a0 [ 57.450265][ T5056] ? submit_bh_wbc+0x543/0x560 [ 57.455042][ T5056] ? do_error_trap+0x1dc/0x2c0 [ 57.459791][ T5056] ? submit_bh_wbc+0x543/0x560 [ 57.464538][ T5056] ? __pfx_do_error_trap+0x10/0x10 [ 57.469633][ T5056] ? handle_invalid_op+0x34/0x40 [ 57.474566][ T5056] ? submit_bh_wbc+0x543/0x560 [ 57.479334][ T5056] ? exc_invalid_op+0x38/0x50 [ 57.484003][ T5056] ? asm_exc_invalid_op+0x1a/0x20 [ 57.489012][ T5056] ? submit_bh_wbc+0xa3/0x560 [ 57.493671][ T5056] ? submit_bh_wbc+0x542/0x560 [ 57.498438][ T5056] ? submit_bh_wbc+0x543/0x560 [ 57.503206][ T5056] ? submit_bh_wbc+0x542/0x560 [ 57.507981][ T5056] __block_write_begin_int+0x12d0/0x1a70 [ 57.513613][ T5056] ? __pfx_nilfs_get_block+0x10/0x10 [ 57.518887][ T5056] ? __pfx___block_write_begin_int+0x10/0x10 [ 57.524859][ T5056] ? __pfx_nilfs_get_block+0x10/0x10 [ 57.530127][ T5056] block_write_begin+0x9b/0x1e0 [ 57.534991][ T5056] nilfs_write_begin+0xa0/0x110 [ 57.539822][ T5056] generic_perform_write+0x322/0x640 [ 57.545094][ T5056] ? __pfx_generic_perform_write+0x10/0x10 [ 57.550968][ T5056] ? generic_file_direct_write+0x3a8/0x400 [ 57.556758][ T5056] __generic_file_write_iter+0x1b8/0x230 [ 57.562383][ T5056] generic_file_write_iter+0xaf/0x310 [ 57.567764][ T5056] vfs_write+0xa84/0xcb0 [ 57.572004][ T5056] ? __pfx_vfs_write+0x10/0x10 [ 57.576779][ T5056] ? lockdep_hardirqs_on+0x99/0x150 [ 57.581976][ T5056] ? __fdget_pos+0x272/0x320 [ 57.586550][ T5056] ksys_write+0x1a0/0x2c0 [ 57.590866][ T5056] ? __pfx_ksys_write+0x10/0x10 [ 57.595697][ T5056] ? do_syscall_64+0x10a/0x240 [ 57.600442][ T5056] ? syscall_trace_enter+0x5f/0x150 [ 57.605641][ T5056] do_syscall_64+0xfb/0x240 [ 57.610125][ T5056] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 57.616003][ T5056] RIP: 0033:0x7f3d6ccdd9f9 [ 57.620398][ T5056] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.639984][ T5056] RSP: 002b:00007ffc74baec58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.648377][ T5056] RAX: ffffffffffffffda RBX: 0073746e6576652e RCX: 00007f3d6ccdd9f9 [ 57.656331][ T5056] RDX: 0000000000000020 RSI: 0000000020000140 RDI: 0000000000000005 [ 57.664298][ T5056] RBP: 652e79726f6d656d R08: 00000000000b15f8 R09: 00000000000b15f8 [ 57.672268][ T5056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.680230][ T5056] R13: 00007ffc74baee28 R14: 0000000000000001 R15: 0000000000000001 [ 57.688197][ T5056] [ 57.691242][ T5056] Modules linked in: [ 57.695269][ T5056] ---[ end trace 0000000000000000 ]--- [ 57.700748][ T5056] RIP: 0010:submit_bh_wbc+0x543/0x560 [ 57.706204][ T5056] Code: 07 7d ff be 00 10 00 00 48 c7 c7 80 f8 26 8e 4c 89 fa e8 f0 cd be 02 e9 98 fe ff ff e8 86 07 7d ff 90 0f 0b e8 7e 07 7d ff 90 <0f> 0b e8 76 07 7d ff 90 0f 0b e8 6e 07 7d ff 90 0f 0b e8 66 07 7d [ 57.725979][ T5056] RSP: 0018:ffffc9000399f838 EFLAGS: 00010293 [ 57.732068][ T5056] RAX: ffffffff8217ecd2 RBX: 0000000000000000 RCX: ffff88807cfe3c00 [ 57.740139][ T5056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.748261][ T5056] RBP: 0000000000000000 R08: ffffffff8217e833 R09: 1ffff1100f095cae [ 57.756347][ T5056] R10: dffffc0000000000 R11: ffffed100f095caf R12: 0000000000000000 [ 57.764379][ T5056] R13: ffff8880784ae570 R14: 0000000000000000 R15: 1ffff1100f095cae [ 57.772344][ T5056] FS: 00005555917ee380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 57.781304][ T5056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.788457][ T5056] CR2: 000000000066c7e0 CR3: 000000007f430000 CR4: 00000000003506f0 [ 57.796491][ T5056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.804520][ T5056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.812496][ T5056] Kernel panic - not syncing: Fatal exception [ 57.818797][ T5056] Kernel Offset: disabled [ 57.823110][ T5056] Rebooting in 86400 seconds..