./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor663435203 <...> Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. execve("./syz-executor663435203", ["./syz-executor663435203"], 0x7ffd82dac960 /* 10 vars */) = 0 brk(NULL) = 0x555555dd5000 brk(0x555555dd5d00) = 0x555555dd5d00 arch_prctl(ARCH_SET_FS, 0x555555dd5380) = 0 set_tid_address(0x555555dd5650) = 5020 set_robust_list(0x555555dd5660, 24) = 0 rseq(0x555555dd5ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor663435203", 4096) = 27 getrandom("\x77\x9d\xd7\x15\x88\x64\x05\x8f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555dd5d00 brk(0x555555df6d00) = 0x555555df6d00 brk(0x555555df7000) = 0x555555df7000 mprotect(0x7f5eaa591000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 [ 79.941941][ T26] audit: type=1400 audit(1691523372.681:83): avc: denied { write } for pid=5017 comm="strace-static-x" path="pipe:[29460]" dev="pipefs" ino=29460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5021 attached , child_tidptr=0x555555dd5650) = 5021 [pid 5021] set_robust_list(0x555555dd5660, 24) = 0 [pid 5021] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5021] setsid() = 1 [pid 5021] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5021] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5021] unshare(CLONE_NEWNS) = 0 [pid 5021] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5021] unshare(CLONE_NEWIPC) = 0 [pid 5021] unshare(CLONE_NEWCGROUP) = 0 [pid 5021] unshare(CLONE_NEWUTS) = 0 [pid 5021] unshare(CLONE_SYSVSEM) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "16777216", 8) = 8 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "536870912", 9) = 9 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "8192", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024", 4) = 4 [pid 5021] close(3) = 0 [pid 5021] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5021] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5021] close(3) = 0 [pid 5021] getpid() = 1 [pid 5021] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<nohomeok > 0) [ 80.494172][ T106] ------------[ cut here ]------------ [ 80.499747][ T106] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 80.507203][ T106] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 80.513318][ T106] CPU: 0 PID: 106 Comm: jfsCommit Not tainted 6.5.0-rc5-syzkaller-00029-g14f9643dc90a #0 [ 80.523140][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 80.533209][ T106] RIP: 0010:txUnlock+0xcb4/0xd10 [ 80.538176][ T106] Code: fe e9 89 f6 ff ff e8 5b 56 90 fe 48 c7 c1 40 fa a9 8a ba a3 03 00 00 48 c7 c6 c0 f9 a9 8a 48 c7 c7 00 fa a9 8a e8 1c b8 73 fe <0f> 0b e8 05 82 e3 fe e9 e0 f5 ff ff e8 2b 56 90 fe 48 c7 c1 80 f9 [ 80.557888][ T106] RSP: 0000:ffffc90002d0fd58 EFLAGS: 00010282 [ 80.563975][ T106] RAX: 0000000000000037 RBX: ffffc90002862090 RCX: 0000000000000000 [ 80.571965][ T106] RDX: 0000000000000000 RSI: ffffffff81691740 RDI: 0000000000000005 [ 80.579948][ T106] RBP: ffff88802c0300f8 R08: 0000000000000005 R09: 0000000000000000 [ 80.587930][ T106] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 80.595913][ T106] R13: 0000000000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 80.603984][ T106] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 80.613104][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.619703][ T106] CR2: 00007f134ee6d6a0 CR3: 000000002de7c000 CR4: 00000000003506f0 [ 80.627705][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.635693][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.643676][ T106] Call Trace: [ 80.646974][ T106] [ 80.649913][ T106] ? die+0x31/0x80 [ 80.653658][ T106] ? do_trap+0x1ab/0x3b0 [ 80.657933][ T106] ? txUnlock+0xcb4/0xd10 [ 80.662284][ T106] ? do_error_trap+0x9e/0x160 [ 80.666989][ T106] ? txUnlock+0xcb4/0xd10 [ 80.671340][ T106] ? handle_invalid_op+0x2c/0x30 [ 80.676305][ T106] ? txUnlock+0xcb4/0xd10 [ 80.680653][ T106] ? exc_invalid_op+0x2d/0x40 [ 80.685362][ T106] ? asm_exc_invalid_op+0x1a/0x20 [ 80.690404][ T106] ? vprintk+0x90/0xa0 [ 80.694497][ T106] ? txUnlock+0xcb4/0xd10 [ 80.698934][ T106] ? txUnlock+0xcb4/0xd10 [ 80.703285][ T106] jfs_lazycommit+0x726/0xb20 [ 80.707986][ T106] ? txCommit+0x4fc0/0x4fc0 [ 80.712510][ T106] ? wake_up_state+0x10/0x10 [ 80.717129][ T106] ? __kthread_parkme+0x152/0x220 [ 80.722182][ T106] ? txCommit+0x4fc0/0x4fc0 [ 80.726726][ T106] kthread+0x33a/0x430 [ 80.730814][ T106] ? kthread_complete_and_exit+0x40/0x40 [ 80.736464][ T106] ret_from_fork+0x2c/0x70 [ 80.740903][ T106] ? kthread_complete_and_exit+0x40/0x40 [ 80.746552][ T106] ret_from_fork_asm+0x11/0x20 [ 80.751348][ T106] [ 80.754371][ T106] Modules linked in: [ 80.763127][ T106] ---[ end trace 0000000000000000 ]--- [ 80.768639][ T106] RIP: 0010:txUnlock+0xcb4/0xd10 [ 80.773597][ T106] Code: fe e9 89 f6 ff ff e8 5b 56 90 fe 48 c7 c1 40 fa a9 8a ba a3 03 00 00 48 c7 c6 c0 f9 a9 8a 48 c7 c7 00 fa a9 8a e8 1c b8 73 fe <0f> 0b e8 05 82 e3 fe e9 e0 f5 ff ff e8 2b 56 90 fe 48 c7 c1 80 f9 [ 80.793548][ T106] RSP: 0000:ffffc90002d0fd58 EFLAGS: 00010282 [ 80.799931][ T106] RAX: 0000000000000037 RBX: ffffc90002862090 RCX: 0000000000000000 [ 80.808021][ T106] RDX: 0000000000000000 RSI: ffffffff81691740 RDI: 0000000000000005 [ 80.816070][ T106] RBP: ffff88802c0300f8 R08: 0000000000000005 R09: 0000000000000000 [ 80.824169][ T106] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000000 [ 80.832196][ T106] R13: 0000000000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 80.840273][ T106] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 80.849266][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.856081][ T106] CR2: 00007f134e995ed8 CR3: 000000000c776000 CR4: 00000000003506e0 [ 80.864169][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.872181][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.880244][ T106] Kernel panic - not syncing: Fatal exception [ 80.886702][ T106] Kernel Offset: disabled [ 80.891029][ T106] Rebooting in 86400 seconds..