./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2069940438 <...> DUID 00:04:e6:bc:8e:bc:c3:7a:f3:fc:35:c5:a5:4f:9b:64:01:ce forked to background, child pid 4669 [ 31.300402][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.312654][ T4670] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.97' (ECDSA) to the list of known hosts. execve("./syz-executor2069940438", ["./syz-executor2069940438"], 0x7fff2bb4fe90 /* 10 vars */) = 0 brk(NULL) = 0x555557405000 brk(0x555557405c40) = 0x555557405c40 arch_prctl(ARCH_SET_FS, 0x555557405300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2069940438", 4096) = 28 brk(0x555557426c40) = 0x555557426c40 brk(0x555557427000) = 0x555557427000 mprotect(0x7f845bf6e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5002 attached , child_tidptr=0x5555574055d0) = 5002 [pid 5002] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5002] setsid() = 1 [pid 5002] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5002] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5002] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5002] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5002] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5002] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5002] unshare(CLONE_NEWNS) = 0 [pid 5002] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5002] unshare(CLONE_NEWIPC) = 0 [pid 5002] unshare(CLONE_NEWCGROUP) = 0 [pid 5002] unshare(CLONE_NEWUTS) = 0 [pid 5002] unshare(CLONE_SYSVSEM) = 0 [pid 5002] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "16777216", 8) = 8 [pid 5002] close(3) = 0 [pid 5002] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "536870912", 9) = 9 [pid 5002] close(3) = 0 [pid 5002] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "1024", 4) = 4 [pid 5002] close(3) = 0 [pid 5002] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "8192", 4) = 4 [pid 5002] close(3) = 0 [pid 5002] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "1024", 4) = 4 [pid 5002] close(3) = 0 [pid 5002] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "1024", 4) = 4 [pid 5002] close(3) = 0 [pid 5002] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5002] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5002] close(3) = 0 [pid 5002] getpid() = 1 [pid 5002] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 56.295197][ T5002] dump_stack_lvl+0xd9/0x150 [ 56.299816][ T5002] print_address_description.constprop.0+0x2c/0x3c0 [ 56.306407][ T5002] ? udf_close_lvid.isra.0+0x4a7/0x550 [ 56.311960][ T5002] kasan_report+0x11c/0x130 [ 56.316472][ T5002] ? udf_close_lvid.isra.0+0x4a7/0x550 [ 56.321953][ T5002] udf_close_lvid.isra.0+0x4a7/0x550 [ 56.327260][ T5002] ? sync_blockdev+0x79/0x90 [ 56.331867][ T5002] udf_put_super+0x1bb/0x230 [ 56.336483][ T5002] ? udf_close_lvid.isra.0+0x550/0x550 [ 56.341958][ T5002] generic_shutdown_super+0x158/0x480 [ 56.347343][ T5002] kill_block_super+0xa1/0x100 [ 56.352117][ T5002] deactivate_locked_super+0x98/0x160 [ 56.357856][ T5002] deactivate_super+0xb1/0xd0 [ 56.362548][ T5002] cleanup_mnt+0x2ae/0x3d0 [ 56.367007][ T5002] task_work_run+0x16f/0x270 [ 56.371600][ T5002] ? task_work_cancel+0x30/0x30 [ 56.376455][ T5002] do_exit+0xb0d/0x29f0 [ 56.380614][ T5002] ? lock_downgrade+0x690/0x690 [ 56.385473][ T5002] ? do_raw_spin_lock+0x124/0x2b0 [ 56.390508][ T5002] ? mm_update_next_owner+0x7b0/0x7b0 [ 56.395884][ T5002] ? spin_bug+0x1c0/0x1c0 [ 56.400223][ T5002] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.405431][ T5002] do_group_exit+0xd4/0x2a0 [ 56.409935][ T5002] __x64_sys_exit_group+0x3e/0x50 [ 56.414961][ T5002] do_syscall_64+0x39/0xb0 [ 56.419389][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.425290][ T5002] RIP: 0033:0x7f845befeea9 [ 56.429698][ T5002] Code: Unable to access opcode bytes at 0x7f845befee7f. [ 56.436716][ T5002] RSP: 002b:00007fff3eda5af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.445133][ T5002] RAX: ffffffffffffffda RBX: 00007f845bf743f0 RCX: 00007f845befeea9 [ 56.453103][ T5002] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 56.461079][ T5002] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f845bf6ee40 [ 56.469052][ T5002] R10: 0000000000010001 R11: 0000000000000246 R12: 00007f845bf743f0 [ 56.477023][ T5002] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 56.484998][ T5002] [ 56.488025][ T5002] [ 56.490352][ T5002] The buggy address belongs to the physical page: [ 56.496762][ T5002] page:ffffea0002403880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x900e2 [ 56.506917][ T5002] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.514022][ T5002] page_type: 0xffffffff() [ 56.518347][ T5002] raw: 00fff00000000000 ffffea0002403888 ffffea0002403888 0000000000000000 [ 56.526928][ T5002] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 56.535501][ T5002] page dumped because: kasan: bad access detected [ 56.541920][ T5002] page_owner info is not present (never set?) [ 56.547968][ T5002] [ 56.550282][ T5002] Memory state around the buggy address: [ 56.555904][ T5002] ffff8880900e2680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.563973][ T5002] ffff8880900e2700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.572034][ T5002] >ffff8880900e2780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.580089][ T5002] ^ [ 56.584669][ T5002] ffff8880900e2800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.592724][ T5002] ffff8880900e2880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.600783][ T5002] ================================================================== [ 56.610168][ T5002] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 56.617393][ T5002] CPU: 0 PID: 5002 Comm: syz-executor206 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 56.627284][ T5002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 56.637332][ T5002] Call Trace: [ 56.640603][ T5002] [ 56.643532][ T5002] dump_stack_lvl+0xd9/0x150 [ 56.648136][ T5002] panic+0x686/0x730 [ 56.652039][ T5002] ? panic_smp_self_stop+0xa0/0xa0 [ 56.657159][ T5002] ? preempt_schedule_thunk+0x1a/0x20 [ 56.662540][ T5002] ? preempt_schedule_common+0x45/0xb0 [ 56.668000][ T5002] check_panic_on_warn+0xb1/0xc0 [ 56.672947][ T5002] end_report+0xe9/0x120 [ 56.677188][ T5002] ? udf_close_lvid.isra.0+0x4a7/0x550 [ 56.682655][ T5002] kasan_report+0xf9/0x130 [ 56.687070][ T5002] ? udf_close_lvid.isra.0+0x4a7/0x550 [ 56.692538][ T5002] udf_close_lvid.isra.0+0x4a7/0x550 [ 56.697830][ T5002] ? sync_blockdev+0x79/0x90 [ 56.702426][ T5002] udf_put_super+0x1bb/0x230 [ 56.707021][ T5002] ? udf_close_lvid.isra.0+0x550/0x550 [ 56.712485][ T5002] generic_shutdown_super+0x158/0x480 [ 56.717865][ T5002] kill_block_super+0xa1/0x100 [ 56.722641][ T5002] deactivate_locked_super+0x98/0x160 [ 56.728021][ T5002] deactivate_super+0xb1/0xd0 [ 56.732703][ T5002] cleanup_mnt+0x2ae/0x3d0 [ 56.737125][ T5002] task_work_run+0x16f/0x270 [ 56.741714][ T5002] ? task_work_cancel+0x30/0x30 [ 56.746566][ T5002] do_exit+0xb0d/0x29f0 [ 56.750720][ T5002] ? lock_downgrade+0x690/0x690 [ 56.755575][ T5002] ? do_raw_spin_lock+0x124/0x2b0 [ 56.760609][ T5002] ? mm_update_next_owner+0x7b0/0x7b0 [ 56.765979][ T5002] ? spin_bug+0x1c0/0x1c0 [ 56.770315][ T5002] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.775520][ T5002] do_group_exit+0xd4/0x2a0 [ 56.780024][ T5002] __x64_sys_exit_group+0x3e/0x50 [ 56.785049][ T5002] do_syscall_64+0x39/0xb0 [ 56.789475][ T5002] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.795375][ T5002] RIP: 0033:0x7f845befeea9 [ 56.799784][ T5002] Code: Unable to access opcode bytes at 0x7f845befee7f. [ 56.806790][ T5002] RSP: 002b:00007fff3eda5af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.815199][ T5002] RAX: ffffffffffffffda RBX: 00007f845bf743f0 RCX: 00007f845befeea9 [ 56.823165][ T5002] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 56.831133][ T5002] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f845bf6ee40 [ 56.839098][ T5002] R10: 0000000000010001 R11: 0000000000000246 R12: 00007f845bf743f0 [ 56.847066][ T5002] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 56.855056][ T5002] [ 56.858230][ T5002] Kernel Offset: disabled [ 56.862545][ T5002] Rebooting in 86400 seconds..