./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1491763839 <...> Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts. execve("./syz-executor1491763839", ["./syz-executor1491763839"], 0x7ffd4d8a1670 /* 10 vars */) = 0 brk(NULL) = 0x55555673a000 brk(0x55555673ac40) = 0x55555673ac40 arch_prctl(ARCH_SET_FS, 0x55555673a300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1491763839", 4096) = 28 brk(0x55555675bc40) = 0x55555675bc40 brk(0x55555675c000) = 0x55555675c000 mprotect(0x7f528e71f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5078 attached , child_tidptr=0x55555673a5d0) = 5078 [pid 5078] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5078] setsid() = 1 [pid 5078] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5078] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5078] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5078] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5078] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5078] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5078] unshare(CLONE_NEWNS) = 0 [pid 5078] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5078] unshare(CLONE_NEWIPC) = 0 [pid 5078] unshare(CLONE_NEWCGROUP) = 0 [pid 5078] unshare(CLONE_NEWUTS) = 0 [pid 5078] unshare(CLONE_SYSVSEM) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "16777216", 8) = 8 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "536870912", 9) = 9 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1024", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "8192", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1024", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1024", 4) = 4 [pid 5078] close(3) = 0 [pid 5078] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5078] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5078] close(3) = 0 [pid 5078] getpid() = 1 [pid 5078] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 85 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0b f6 ff [ 66.003659][ T1062] RSP: 0018:ffffc900059e7160 EFLAGS: 00010293 [ 66.009791][ T1062] RAX: ffffffff825ca4a3 RBX: 0000000000000058 RCX: ffff888020423a80 [ 66.017791][ T1062] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000000000f8 [ 66.025842][ T1062] RBP: ffffc900059e7510 R08: ffffffff825c9f1e R09: ffffed1004a33029 [ 66.033903][ T1062] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880251981b0 [ 66.041953][ T1062] R13: dffffc0000000000 R14: ffffc900059e71c0 R15: ffffc900059e7220 [ 66.049991][ T1062] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 66.058986][ T1062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.065596][ T1062] CR2: 000055be3340ba10 CR3: 000000001cf2e000 CR4: 00000000003506f0 [ 66.073634][ T1062] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.081667][ T1062] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 66.089691][ T1062] Call Trace: [ 66.092987][ T1062] [ 66.096108][ T1062] ? hfsplus_get_perms+0x840/0x840 [ 66.101475][ T1062] ? trace_contention_end+0x3c/0xf0 [ 66.106713][ T1062] ? __mutex_lock_common+0x42d/0x2530 [ 66.112233][ T1062] ? __lock_acquire+0x1f80/0x1f80 [ 66.117289][ T1062] ? do_raw_spin_lock+0x14d/0x3a0 [ 66.122400][ T1062] ? hfsplus_write_inode+0x198/0x5e0 [ 66.127732][ T1062] __writeback_single_inode+0x69b/0xfb0 [ 66.133362][ T1062] writeback_sb_inodes+0x8ef/0x11d0 [ 66.138627][ T1062] ? queue_io+0x570/0x570 [ 66.143149][ T1062] ? __writeback_inodes_wb+0x260/0x260 [ 66.148651][ T1062] ? queue_io+0x3d5/0x570 [ 66.153074][ T1062] wb_writeback+0x458/0xc70 [ 66.157634][ T1062] ? rcu_lock_release+0x30/0x30 [ 66.162565][ T1062] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 66.168603][ T1062] wb_workfn+0x400/0xff0 [ 66.172947][ T1062] ? inode_wait_for_writeback+0x290/0x290 [ 66.178731][ T1062] ? read_lock_is_recursive+0x20/0x20 [ 66.184222][ T1062] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 66.190310][ T1062] ? print_irqtrace_events+0x220/0x220 [ 66.195802][ T1062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 66.201790][ T1062] process_one_work+0x8a0/0x10e0 [ 66.206778][ T1062] ? worker_detach_from_pool+0x290/0x290 [ 66.212537][ T1062] ? _raw_spin_lock_irqsave+0x120/0x120 [ 66.218148][ T1062] ? kthread_data+0x52/0xc0 [ 66.222791][ T1062] ? wq_worker_running+0x9b/0x1a0 [ 66.227854][ T1062] worker_thread+0xa63/0x1210 [ 66.232676][ T1062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 66.238637][ T1062] ? _raw_spin_unlock+0x40/0x40 [ 66.243594][ T1062] kthread+0x270/0x300 [ 66.247708][ T1062] ? pr_cont_work+0x5e0/0x5e0 [ 66.252463][ T1062] ? kthread_blkcg+0xd0/0xd0 [ 66.257087][ T1062] ret_from_fork+0x1f/0x30 [ 66.261615][ T1062] [ 66.264660][ T1062] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 66.271938][ T1062] CPU: 0 PID: 1062 Comm: kworker/u4:5 Not tainted 6.3.0-rc4-syzkaller-00039-gffe78bbd5121 #0 [ 66.282103][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 66.292183][ T1062] Workqueue: writeback wb_workfn (flush-7:0) [ 66.298199][ T1062] Call Trace: [ 66.301484][ T1062] [ 66.304421][ T1062] dump_stack_lvl+0x1e7/0x2d0 [ 66.309130][ T1062] ? nf_tcp_handle_invalid+0x650/0x650 [ 66.314610][ T1062] ? panic+0x770/0x770 [ 66.318696][ T1062] ? vscnprintf+0x5d/0x80 [ 66.323040][ T1062] panic+0x31c/0x770 [ 66.326961][ T1062] ? __warn+0x171/0x4a0 [ 66.331122][ T1062] ? memcpy_page_flushcache+0x100/0x100 [ 66.336684][ T1062] ? ret_from_fork+0x1f/0x30 [ 66.341295][ T1062] __warn+0x314/0x4a0 [ 66.345300][ T1062] ? hfsplus_cat_write_inode+0xb33/0x1000 [ 66.351052][ T1062] report_bug+0x2b3/0x500 [ 66.355395][ T1062] ? hfsplus_cat_write_inode+0xb33/0x1000 [ 66.361219][ T1062] handle_bug+0x3d/0x70 [ 66.365388][ T1062] exc_invalid_op+0x1a/0x50 [ 66.370257][ T1062] asm_exc_invalid_op+0x1a/0x20 [ 66.375125][ T1062] RIP: 0010:hfsplus_cat_write_inode+0xb33/0x1000 [ 66.381482][ T1062] Code: 00 0f 85 e8 04 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 ae 2d ff 0f 0b e9 d4 f7 ff ff e8 4d ae 2d ff <0f> 0b e9 85 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0b f6 ff [ 66.401176][ T1062] RSP: 0018:ffffc900059e7160 EFLAGS: 00010293 [ 66.407246][ T1062] RAX: ffffffff825ca4a3 RBX: 0000000000000058 RCX: ffff888020423a80 [ 66.415405][ T1062] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000000000f8 [ 66.423383][ T1062] RBP: ffffc900059e7510 R08: ffffffff825c9f1e R09: ffffed1004a33029 [ 66.431359][ T1062] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880251981b0 [ 66.439421][ T1062] R13: dffffc0000000000 R14: ffffc900059e71c0 R15: ffffc900059e7220 [ 66.447415][ T1062] ? hfsplus_cat_write_inode+0x5ae/0x1000 [ 66.453153][ T1062] ? hfsplus_cat_write_inode+0xb33/0x1000 [ 66.458904][ T1062] ? hfsplus_get_perms+0x840/0x840 [ 66.464227][ T1062] ? trace_contention_end+0x3c/0xf0 [ 66.469450][ T1062] ? __mutex_lock_common+0x42d/0x2530 [ 66.474868][ T1062] ? __lock_acquire+0x1f80/0x1f80 [ 66.479894][ T1062] ? do_raw_spin_lock+0x14d/0x3a0 [ 66.484952][ T1062] ? hfsplus_write_inode+0x198/0x5e0 [ 66.490249][ T1062] __writeback_single_inode+0x69b/0xfb0 [ 66.495813][ T1062] writeback_sb_inodes+0x8ef/0x11d0 [ 66.501044][ T1062] ? queue_io+0x570/0x570 [ 66.505388][ T1062] ? __writeback_inodes_wb+0x260/0x260 [ 66.510862][ T1062] ? queue_io+0x3d5/0x570 [ 66.515202][ T1062] wb_writeback+0x458/0xc70 [ 66.519731][ T1062] ? rcu_lock_release+0x30/0x30 [ 66.524589][ T1062] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 66.530583][ T1062] wb_workfn+0x400/0xff0 [ 66.534846][ T1062] ? inode_wait_for_writeback+0x290/0x290 [ 66.540578][ T1062] ? read_lock_is_recursive+0x20/0x20 [ 66.545948][ T1062] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 66.551933][ T1062] ? print_irqtrace_events+0x220/0x220 [ 66.557404][ T1062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 66.563317][ T1062] process_one_work+0x8a0/0x10e0 [ 66.568277][ T1062] ? worker_detach_from_pool+0x290/0x290 [ 66.573937][ T1062] ? _raw_spin_lock_irqsave+0x120/0x120 [ 66.579503][ T1062] ? kthread_data+0x52/0xc0 [ 66.584106][ T1062] ? wq_worker_running+0x9b/0x1a0 [ 66.589143][ T1062] worker_thread+0xa63/0x1210 [ 66.593826][ T1062] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 66.599757][ T1062] ? _raw_spin_unlock+0x40/0x40 [ 66.604624][ T1062] kthread+0x270/0x300 [ 66.608689][ T1062] ? pr_cont_work+0x5e0/0x5e0 [ 66.613398][ T1062] ? kthread_blkcg+0xd0/0xd0 [ 66.618011][ T1062] ret_from_fork+0x1f/0x30 [ 66.622481][ T1062] [ 66.625770][ T1062] Kernel Offset: disabled [ 66.630230][ T1062] Rebooting in 86400 seconds..