./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2383978123 <...> DUID 00:04:e6:d8:3e:4c:c1:15:84:42:dc:00:60:8c:e3:5f:26:b4 forked to background, child pid 4646 [ 29.999442][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.009828][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.179' (ECDSA) to the list of known hosts. execve("./syz-executor2383978123", ["./syz-executor2383978123"], 0x7ffe71ded670 /* 10 vars */) = 0 brk(NULL) = 0x555555bb5000 brk(0x555555bb5c40) = 0x555555bb5c40 arch_prctl(ARCH_SET_FS, 0x555555bb5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2383978123", 4096) = 28 brk(0x555555bd6c40) = 0x555555bd6c40 brk(0x555555bd7000) = 0x555555bd7000 mprotect(0x7f2362a8c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5076 attached , child_tidptr=0x555555bb55d0) = 5076 [pid 5076] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5076] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5076] setsid() = 1 [pid 5076] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5076] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5076] unshare(CLONE_NEWNS) = 0 [pid 5076] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5076] unshare(CLONE_NEWIPC) = 0 [pid 5076] unshare(CLONE_NEWCGROUP) = 0 [pid 5076] unshare(CLONE_NEWUTS) = 0 [pid 5076] unshare(CLONE_SYSVSEM) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "16777216", 8) = 8 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "536870912", 9) = 9 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "8192", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024", 4) = 4 [pid 5076] close(3) = 0 [pid 5076] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5076] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5076] close(3) = 0 [pid 5076] getpid() = 1 [pid 5076] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff [ 57.362887][ T5076] RSP: 0018:ffffc90003c5f8d0 EFLAGS: 00010093 [ 57.368941][ T5076] RAX: ffffffff81bc8ae9 RBX: 0000000000000000 RCX: ffff88801e563a80 [ 57.376897][ T5076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.384850][ T5076] RBP: ffff888012c2be78 R08: ffffffff81bc886d R09: ffffed10025857d0 [ 57.392807][ T5076] R10: ffffed10025857d0 R11: 1ffff110025857cf R12: dffffc0000000000 [ 57.400764][ T5076] R13: ffffea0001e695c0 R14: 0000000000000001 R15: 1ffff110025857cf [ 57.408720][ T5076] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 57.417631][ T5076] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.424219][ T5076] CR2: 00007f2362a90140 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 57.432178][ T5076] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.440141][ T5076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.448096][ T5076] Call Trace: [ 57.451366][ T5076] [ 57.454298][ T5076] __folio_mark_dirty+0x125/0x260 [ 57.459316][ T5076] mark_buffer_dirty+0x253/0x550 [ 57.464243][ T5076] gfs2_unpin+0x10b/0xa20 [ 57.468576][ T5076] ? log_pull_tail+0x7e/0x390 [ 57.473248][ T5076] buf_lo_after_commit+0x172/0x1d0 [ 57.478351][ T5076] ? buf_lo_before_commit+0xe0/0xe0 [ 57.483533][ T5076] gfs2_log_flush+0x1179/0x26a0 [ 57.488381][ T5076] ? gfs2_ail_drain+0xdb0/0xdb0 [ 57.493215][ T5076] ? radix_tree_delete_item+0x2e2/0x3d0 [ 57.498750][ T5076] ? trace_kfree+0x30/0xe0 [ 57.503152][ T5076] ? kfree+0x16/0xe0 [ 57.507046][ T5076] gfs2_kill_sb+0x50/0xd0 [ 57.511364][ T5076] deactivate_locked_super+0xa7/0xf0 [ 57.516639][ T5076] cleanup_mnt+0x494/0x520 [ 57.521039][ T5076] ? lockdep_hardirqs_on+0x8d/0x130 [ 57.526228][ T5076] task_work_run+0x243/0x300 [ 57.530812][ T5076] ? task_work_cancel+0x290/0x290 [ 57.535826][ T5076] ? do_exit+0x63f/0x2150 [ 57.540152][ T5076] do_exit+0x644/0x2150 [ 57.544307][ T5076] ? mm_update_next_owner+0x6d0/0x6d0 [ 57.549669][ T5076] ? print_irqtrace_events+0x220/0x220 [ 57.555116][ T5076] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.560300][ T5076] ? lockdep_hardirqs_on+0x8d/0x130 [ 57.565489][ T5076] do_group_exit+0x1fd/0x2b0 [ 57.570067][ T5076] __x64_sys_exit_group+0x3b/0x40 [ 57.575772][ T5076] do_syscall_64+0x3d/0xb0 [ 57.580176][ T5076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.586054][ T5076] RIP: 0033:0x7f23629e59a9 [ 57.590452][ T5076] Code: Unable to access opcode bytes at 0x7f23629e597f. [ 57.597467][ T5076] RSP: 002b:00007ffe899fedf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 57.605871][ T5076] RAX: ffffffffffffffda RBX: 00007f2362a92330 RCX: 00007f23629e59a9 [ 57.613835][ T5076] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 57.621793][ T5076] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f2362a8ce40 [ 57.629756][ T5076] R10: 00007ffe899fed10 R11: 0000000000000246 R12: 00007f2362a92330 [ 57.638153][ T5076] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 57.646127][ T5076] [ 57.649134][ T5076] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.656436][ T5076] CPU: 1 PID: 5076 Comm: syz-executor238 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0 [ 57.666496][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 57.676629][ T5076] Call Trace: [ 57.680243][ T5076] [ 57.683161][ T5076] dump_stack_lvl+0x1b1/0x290 [ 57.687829][ T5076] ? nf_tcp_handle_invalid+0x630/0x630 [ 57.693273][ T5076] ? panic+0x710/0x710 [ 57.697333][ T5076] ? vscnprintf+0x59/0x80 [ 57.701675][ T5076] ? folio_account_dirtied+0x400/0x6e0 [ 57.707145][ T5076] panic+0x2d6/0x710 [ 57.711038][ T5076] ? __warn+0x16d/0x2d0 [ 57.715187][ T5076] ? memcpy_page_flushcache+0x100/0x100 [ 57.720734][ T5076] ? folio_account_dirtied+0x4e9/0x6e0 [ 57.726192][ T5076] __warn+0x284/0x2d0 [ 57.730169][ T5076] ? folio_account_dirtied+0x4e9/0x6e0 [ 57.735623][ T5076] report_bug+0x1b3/0x2d0 [ 57.739959][ T5076] handle_bug+0x3d/0x70 [ 57.744106][ T5076] exc_invalid_op+0x16/0x40 [ 57.748597][ T5076] asm_exc_invalid_op+0x16/0x20 [ 57.753432][ T5076] RIP: 0010:folio_account_dirtied+0x4e9/0x6e0 [ 57.759486][ T5076] Code: 5d 41 5e 41 5f 5d c3 e8 f5 4a cf ff 4c 89 ef 4c 89 e6 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6c 58 2c 00 e8 d7 4a cf ff <0f> 0b e9 8a fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 7a fb ff [ 57.779342][ T5076] RSP: 0018:ffffc90003c5f8d0 EFLAGS: 00010093 [ 57.785393][ T5076] RAX: ffffffff81bc8ae9 RBX: 0000000000000000 RCX: ffff88801e563a80 [ 57.793351][ T5076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.801307][ T5076] RBP: ffff888012c2be78 R08: ffffffff81bc886d R09: ffffed10025857d0 [ 57.809263][ T5076] R10: ffffed10025857d0 R11: 1ffff110025857cf R12: dffffc0000000000 [ 57.817234][ T5076] R13: ffffea0001e695c0 R14: 0000000000000001 R15: 1ffff110025857cf [ 57.825220][ T5076] ? folio_account_dirtied+0x26d/0x6e0 [ 57.830687][ T5076] ? folio_account_dirtied+0x4e9/0x6e0 [ 57.836160][ T5076] __folio_mark_dirty+0x125/0x260 [ 57.841189][ T5076] mark_buffer_dirty+0x253/0x550 [ 57.846124][ T5076] gfs2_unpin+0x10b/0xa20 [ 57.850437][ T5076] ? log_pull_tail+0x7e/0x390 [ 57.855104][ T5076] buf_lo_after_commit+0x172/0x1d0 [ 57.860203][ T5076] ? buf_lo_before_commit+0xe0/0xe0 [ 57.865398][ T5076] gfs2_log_flush+0x1179/0x26a0 [ 57.870330][ T5076] ? gfs2_ail_drain+0xdb0/0xdb0 [ 57.875167][ T5076] ? radix_tree_delete_item+0x2e2/0x3d0 [ 57.880699][ T5076] ? trace_kfree+0x30/0xe0 [ 57.885097][ T5076] ? kfree+0x16/0xe0 [ 57.889007][ T5076] gfs2_kill_sb+0x50/0xd0 [ 57.893326][ T5076] deactivate_locked_super+0xa7/0xf0 [ 57.898605][ T5076] cleanup_mnt+0x494/0x520 [ 57.903006][ T5076] ? lockdep_hardirqs_on+0x8d/0x130 [ 57.908192][ T5076] task_work_run+0x243/0x300 [ 57.912775][ T5076] ? task_work_cancel+0x290/0x290 [ 57.917787][ T5076] ? do_exit+0x63f/0x2150 [ 57.922110][ T5076] do_exit+0x644/0x2150 [ 57.926260][ T5076] ? mm_update_next_owner+0x6d0/0x6d0 [ 57.931619][ T5076] ? print_irqtrace_events+0x220/0x220 [ 57.937072][ T5076] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.942275][ T5076] ? lockdep_hardirqs_on+0x8d/0x130 [ 57.947460][ T5076] do_group_exit+0x1fd/0x2b0 [ 57.952035][ T5076] __x64_sys_exit_group+0x3b/0x40 [ 57.957053][ T5076] do_syscall_64+0x3d/0xb0 [ 57.961459][ T5076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.967344][ T5076] RIP: 0033:0x7f23629e59a9 [ 57.971743][ T5076] Code: Unable to access opcode bytes at 0x7f23629e597f. [ 57.978742][ T5076] RSP: 002b:00007ffe899fedf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 57.987138][ T5076] RAX: ffffffffffffffda RBX: 00007f2362a92330 RCX: 00007f23629e59a9 [ 57.995094][ T5076] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 58.003048][ T5076] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f2362a8ce40 [ 58.011012][ T5076] R10: 00007ffe899fed10 R11: 0000000000000246 R12: 00007f2362a92330 [ 58.018973][ T5076] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 58.026951][ T5076] [ 58.030141][ T5076] Kernel Offset: disabled [ 58.034625][ T5076] Rebooting in 86400 seconds..