./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor421969359 <...> DUID 00:04:e6:d8:3e:4c:c1:15:84:42:dc:00:60:8c:e3:5f:26:b4 forked to background, child pid 3187 [ 24.855616][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.865375][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.167' (ECDSA) to the list of known hosts. execve("./syz-executor421969359", ["./syz-executor421969359"], 0x7fffce3577d0 /* 10 vars */) = 0 brk(NULL) = 0x5555574d0000 brk(0x5555574d0c40) = 0x5555574d0c40 arch_prctl(ARCH_SET_FS, 0x5555574d0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor421969359", 4096) = 27 brk(0x5555574f1c40) = 0x5555574f1c40 brk(0x5555574f2000) = 0x5555574f2000 mprotect(0x7f8d1073f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3609 attached , child_tidptr=0x5555574d05d0) = 3609 [pid 3609] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3609] setsid() = 1 [pid 3609] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3609] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3609] unshare(CLONE_NEWNS) = 0 [pid 3609] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3609] unshare(CLONE_NEWIPC) = 0 [pid 3609] unshare(CLONE_NEWCGROUP) = 0 [pid 3609] unshare(CLONE_NEWUTS) = 0 [pid 3609] unshare(CLONE_SYSVSEM) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "16777216", 8) = 8 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "536870912", 9) = 9 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "8192", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024", 4) = 4 [pid 3609] close(3) = 0 [pid 3609] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3609] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3609] close(3) = 0 [pid 3609] getpid() = 1 [pid 3609] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 43 80 3c 3c 00 0f 85 36 fd ff ff e9 39 fd ff ff 48 c7 c1 54 [ 57.771353][ T3609] RSP: 0018:ffffc90003b3f6b8 EFLAGS: 00010093 [ 57.777417][ T3609] RAX: ffffffff81b640fa RBX: 0000000000000000 RCX: ffff88807c9a1d80 [ 57.785382][ T3609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.793345][ T3609] RBP: ffff888012427578 R08: ffffffff81b640be R09: ffffed1002484eb0 [ 57.801301][ T3609] R10: ffffed1002484eb0 R11: 1ffff11002484eaf R12: 1ffff11002484eaf [ 57.809268][ T3609] R13: 0000000000000001 R14: ffffea0001f30480 R15: dffffc0000000000 [ 57.817229][ T3609] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 57.826145][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.832713][ T3609] CR2: 00007ffdce840000 CR3: 0000000027af8000 CR4: 00000000003506e0 [ 57.840683][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.848648][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.856603][ T3609] Call Trace: [ 57.859867][ T3609] [ 57.862875][ T3609] __folio_mark_dirty+0x125/0x260 [ 57.867894][ T3609] mark_buffer_dirty+0x253/0x550 [ 57.872821][ T3609] gfs2_unpin+0x10b/0xa20 [ 57.877143][ T3609] buf_lo_after_commit+0x172/0x1d0 [ 57.882238][ T3609] ? buf_lo_before_commit+0xe0/0xe0 [ 57.887419][ T3609] gfs2_log_flush+0x1179/0x26a0 [ 57.892272][ T3609] ? gfs2_ail_drain+0xdb0/0xdb0 [ 57.897107][ T3609] ? slab_free_freelist_hook+0x12e/0x1a0 [ 57.902723][ T3609] ? do_sync+0x9ef/0xc80 [ 57.906947][ T3609] ? kfree+0xda/0x210 [ 57.910915][ T3609] do_sync+0xa3c/0xc80 [ 57.914963][ T3609] ? gfs2_quota_sync+0x380/0x8b0 [ 57.919888][ T3609] ? slot_put+0x1f0/0x1f0 [ 57.924199][ T3609] ? do_raw_spin_lock+0x148/0x360 [ 57.929205][ T3609] ? __lock_acquire+0x1f60/0x1f60 [ 57.934229][ T3609] ? do_raw_spin_unlock+0x134/0x8a0 [ 57.939410][ T3609] ? qd_check_sync+0xba/0x3f0 [ 57.944084][ T3609] gfs2_quota_sync+0x3da/0x8b0 [ 57.948842][ T3609] gfs2_sync_fs+0x49/0xb0 [ 57.953156][ T3609] sync_filesystem+0xe8/0x220 [ 57.957819][ T3609] generic_shutdown_super+0x6b/0x300 [ 57.963092][ T3609] kill_block_super+0x79/0xd0 [ 57.967753][ T3609] deactivate_locked_super+0xa7/0xf0 [ 57.973026][ T3609] cleanup_mnt+0x4ce/0x560 [ 57.977432][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.982640][ T3609] task_work_run+0x146/0x1c0 [ 57.987228][ T3609] do_exit+0x55e/0x20a0 [ 57.991365][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.996563][ T3609] ? lockdep_hardirqs_on+0x8d/0x130 [ 58.001831][ T3609] ? _raw_spin_unlock_irq+0x2a/0x40 [ 58.007012][ T3609] ? ptrace_notify+0x245/0x340 [ 58.011758][ T3609] ? mm_update_next_owner+0x6d0/0x6d0 [ 58.017114][ T3609] ? do_notify_parent+0xe00/0xe00 [ 58.022129][ T3609] do_group_exit+0x23b/0x2f0 [ 58.026720][ T3609] __x64_sys_exit_group+0x3b/0x40 [ 58.031727][ T3609] do_syscall_64+0x3d/0xb0 [ 58.036129][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.042018][ T3609] RIP: 0033:0x7f8d10697139 [ 58.046416][ T3609] Code: Unable to access opcode bytes at RIP 0x7f8d1069710f. [ 58.053760][ T3609] RSP: 002b:00007ffdce83f9e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 58.062157][ T3609] RAX: ffffffffffffffda RBX: 00007f8d10745330 RCX: 00007f8d10697139 [ 58.070109][ T3609] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 58.078061][ T3609] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00005555574d02c0 [ 58.086015][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d10745330 [ 58.093969][ T3609] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 58.101946][ T3609] [ 58.105046][ T3609] Kernel panic - not syncing: panic_on_warn set ... [ 58.111612][ T3609] CPU: 1 PID: 3609 Comm: syz-executor421 Not tainted 6.0.0-rc7-syzkaller-00042-g46452d3786a8 #0 [ 58.122011][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 58.132047][ T3609] Call Trace: [ 58.135315][ T3609] [ 58.138230][ T3609] dump_stack_lvl+0x1b1/0x28e [ 58.142894][ T3609] ? fortify_panic+0x13/0x13 [ 58.147492][ T3609] ? panic+0x715/0x715 [ 58.151549][ T3609] ? vscnprintf+0x59/0x80 [ 58.155874][ T3609] ? folio_account_dirtied+0x520/0x720 [ 58.161328][ T3609] panic+0x2d6/0x715 [ 58.165211][ T3609] ? __warn+0x131/0x220 [ 58.169352][ T3609] ? fb_is_primary_device+0xcc/0xcc [ 58.174544][ T3609] ? folio_account_dirtied+0x61a/0x720 [ 58.179997][ T3609] __warn+0x1fa/0x220 [ 58.183961][ T3609] ? folio_account_dirtied+0x61a/0x720 [ 58.189402][ T3609] report_bug+0x1b3/0x2d0 [ 58.193718][ T3609] handle_bug+0x3d/0x70 [ 58.197875][ T3609] exc_invalid_op+0x16/0x40 [ 58.202382][ T3609] asm_exc_invalid_op+0x16/0x20 [ 58.207255][ T3609] RIP: 0010:folio_account_dirtied+0x61a/0x720 [ 58.213328][ T3609] Code: ff ff e9 6e fd ff ff e8 a4 48 d1 ff 4c 89 f7 4c 89 e6 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3b ed 2a 00 e8 86 48 d1 ff <0f> 0b 43 80 3c 3c 00 0f 85 36 fd ff ff e9 39 fd ff ff 48 c7 c1 54 [ 58.232917][ T3609] RSP: 0018:ffffc90003b3f6b8 EFLAGS: 00010093 [ 58.238968][ T3609] RAX: ffffffff81b640fa RBX: 0000000000000000 RCX: ffff88807c9a1d80 [ 58.246924][ T3609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.255036][ T3609] RBP: ffff888012427578 R08: ffffffff81b640be R09: ffffed1002484eb0 [ 58.263004][ T3609] R10: ffffed1002484eb0 R11: 1ffff11002484eaf R12: 1ffff11002484eaf [ 58.270961][ T3609] R13: 0000000000000001 R14: ffffea0001f30480 R15: dffffc0000000000 [ 58.279017][ T3609] ? folio_account_dirtied+0x5de/0x720 [ 58.284460][ T3609] ? folio_account_dirtied+0x61a/0x720 [ 58.289904][ T3609] ? folio_account_dirtied+0x61a/0x720 [ 58.295359][ T3609] __folio_mark_dirty+0x125/0x260 [ 58.300388][ T3609] mark_buffer_dirty+0x253/0x550 [ 58.305310][ T3609] gfs2_unpin+0x10b/0xa20 [ 58.309629][ T3609] buf_lo_after_commit+0x172/0x1d0 [ 58.314731][ T3609] ? buf_lo_before_commit+0xe0/0xe0 [ 58.319922][ T3609] gfs2_log_flush+0x1179/0x26a0 [ 58.324767][ T3609] ? gfs2_ail_drain+0xdb0/0xdb0 [ 58.329601][ T3609] ? slab_free_freelist_hook+0x12e/0x1a0 [ 58.335219][ T3609] ? do_sync+0x9ef/0xc80 [ 58.339474][ T3609] ? kfree+0xda/0x210 [ 58.343454][ T3609] do_sync+0xa3c/0xc80 [ 58.347506][ T3609] ? gfs2_quota_sync+0x380/0x8b0 [ 58.352433][ T3609] ? slot_put+0x1f0/0x1f0 [ 58.356747][ T3609] ? do_raw_spin_lock+0x148/0x360 [ 58.361765][ T3609] ? __lock_acquire+0x1f60/0x1f60 [ 58.366791][ T3609] ? do_raw_spin_unlock+0x134/0x8a0 [ 58.372004][ T3609] ? qd_check_sync+0xba/0x3f0 [ 58.376683][ T3609] gfs2_quota_sync+0x3da/0x8b0 [ 58.381791][ T3609] gfs2_sync_fs+0x49/0xb0 [ 58.386132][ T3609] sync_filesystem+0xe8/0x220 [ 58.390794][ T3609] generic_shutdown_super+0x6b/0x300 [ 58.396064][ T3609] kill_block_super+0x79/0xd0 [ 58.400724][ T3609] deactivate_locked_super+0xa7/0xf0 [ 58.405993][ T3609] cleanup_mnt+0x4ce/0x560 [ 58.410391][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 58.415576][ T3609] task_work_run+0x146/0x1c0 [ 58.420151][ T3609] do_exit+0x55e/0x20a0 [ 58.424289][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 58.429470][ T3609] ? lockdep_hardirqs_on+0x8d/0x130 [ 58.434657][ T3609] ? _raw_spin_unlock_irq+0x2a/0x40 [ 58.439866][ T3609] ? ptrace_notify+0x245/0x340 [ 58.444624][ T3609] ? mm_update_next_owner+0x6d0/0x6d0 [ 58.449980][ T3609] ? do_notify_parent+0xe00/0xe00 [ 58.454994][ T3609] do_group_exit+0x23b/0x2f0 [ 58.459571][ T3609] __x64_sys_exit_group+0x3b/0x40 [ 58.464596][ T3609] do_syscall_64+0x3d/0xb0 [ 58.469005][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.474887][ T3609] RIP: 0033:0x7f8d10697139 [ 58.479290][ T3609] Code: Unable to access opcode bytes at RIP 0x7f8d1069710f. [ 58.486644][ T3609] RSP: 002b:00007ffdce83f9e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 58.495055][ T3609] RAX: ffffffffffffffda RBX: 00007f8d10745330 RCX: 00007f8d10697139 [ 58.503012][ T3609] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 58.510977][ T3609] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00005555574d02c0 [ 58.518957][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8d10745330 [ 58.526938][ T3609] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 58.534970][ T3609] [ 58.538277][ T3609] Kernel Offset: disabled [ 58.542744][ T3609] Rebooting in 86400 seconds..