./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4138800421 <...> DUID 00:04:ac:03:58:10:d0:76:5c:28:30:a7:8a:8b:4a:a3:06:e2 forked to background, child pid 4812 [ 29.193621][ T4813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.206021][ T4813] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. execve("./syz-executor4138800421", ["./syz-executor4138800421"], 0x7ffc802e0d30 /* 10 vars */) = 0 brk(NULL) = 0x555556a27000 brk(0x555556a27c40) = 0x555556a27c40 arch_prctl(ARCH_SET_FS, 0x555556a27300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4138800421", 4096) = 28 brk(0x555556a48c40) = 0x555556a48c40 brk(0x555556a49000) = 0x555556a49000 mprotect(0x7f1033ad7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5235 attached , child_tidptr=0x555556a275d0) = 5235 [pid 5235] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5235] setsid() = 1 [pid 5235] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5235] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5235] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5235] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5235] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5235] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5235] unshare(CLONE_NEWNS) = 0 [pid 5235] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5235] unshare(CLONE_NEWIPC) = 0 [pid 5235] unshare(CLONE_NEWCGROUP) = 0 [pid 5235] unshare(CLONE_NEWUTS) = 0 [pid 5235] unshare(CLONE_SYSVSEM) = 0 [pid 5235] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "16777216", 8) = 8 [pid 5235] close(3) = 0 [pid 5235] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "536870912", 9) = 9 [pid 5235] close(3) = 0 [pid 5235] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1024", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "8192", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1024", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1024", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5235] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5235] close(3) = 0 [pid 5235] getpid() = 1 [pid 5235] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 33 ff ff ff 4c 89 ff e8 6b 82 f4 fe e9 8e fd ff ff e8 61 [ 53.242276][ T5235] RSP: 0018:ffffc90003a1fac8 EFLAGS: 00010293 [ 53.248408][ T5235] RAX: 0000000000000000 RBX: ffff888072460158 RCX: 0000000000000000 [ 53.256458][ T5235] RDX: ffff888077ba0000 RSI: ffffffff82d4da46 RDI: 0000000000000005 [ 53.264834][ T5235] RBP: ffff888025841800 R08: 0000000000000005 R09: 0000000000000000 [ 53.272856][ T5235] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880298f4000 [ 53.281231][ T5235] R13: ffff8880258418c0 R14: 0000000000000001 R15: ffff8880298f4678 [ 53.289494][ T5235] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 53.298943][ T5235] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.305635][ T5235] CR2: 00007f1033ade290 CR3: 0000000026b5f000 CR4: 00000000003506e0 [ 53.313617][ T5235] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.321697][ T5235] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.329750][ T5235] Call Trace: [ 53.333036][ T5235] [ 53.336042][ T5235] udf_evict_inode+0x348/0x580 [ 53.340828][ T5235] ? udf_setsize+0x1080/0x1080 [ 53.345666][ T5235] evict+0x2ed/0x6b0 [ 53.349576][ T5235] iput.part.0+0x59b/0x880 [ 53.354060][ T5235] iput+0x58/0x70 [ 53.357710][ T5235] udf_sb_free_partitions.isra.0+0x325/0x560 [ 53.363680][ T5235] ? __sync_dirty_buffer+0x1f7/0x370 [ 53.369003][ T5235] ? udf_close_lvid.isra.0+0x44c/0x550 [ 53.374508][ T5235] udf_put_super+0x133/0x220 [ 53.379087][ T5235] ? udf_close_lvid.isra.0+0x550/0x550 [ 53.384588][ T5235] generic_shutdown_super+0x154/0x410 [ 53.389973][ T5235] kill_block_super+0x97/0xf0 [ 53.394703][ T5235] deactivate_locked_super+0x94/0x160 [ 53.400088][ T5235] deactivate_super+0xad/0xd0 [ 53.404801][ T5235] cleanup_mnt+0x2ae/0x3d0 [ 53.409228][ T5235] task_work_run+0x16b/0x270 [ 53.413815][ T5235] ? task_work_cancel+0x30/0x30 [ 53.418740][ T5235] do_exit+0xaa0/0x28c0 [ 53.422917][ T5235] ? lock_downgrade+0x6e0/0x6e0 [ 53.427808][ T5235] ? do_raw_spin_lock+0x120/0x2a0 [ 53.432841][ T5235] ? mm_update_next_owner+0x7b0/0x7b0 [ 53.438280][ T5235] ? rwlock_bug.part.0+0x90/0x90 [ 53.443229][ T5235] ? _raw_spin_unlock_irq+0x1f/0x40 [ 53.448704][ T5235] do_group_exit+0xd0/0x2a0 [ 53.453254][ T5235] __x64_sys_exit_group+0x3a/0x50 [ 53.458763][ T5235] do_syscall_64+0x35/0xb0 [ 53.463231][ T5235] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.469395][ T5235] RIP: 0033:0x7f1033a66c49 [ 53.473828][ T5235] Code: Unable to access opcode bytes at 0x7f1033a66c1f. [ 53.481015][ T5235] RSP: 002b:00007ffe24ef02e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.489711][ T5235] RAX: ffffffffffffffda RBX: 00007f1033add3f0 RCX: 00007f1033a66c49 [ 53.497940][ T5235] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 53.506186][ T5235] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f1033ad7e40 [ 53.514409][ T5235] R10: 00007f1033ad7e40 R11: 0000000000000246 R12: 00007f1033add3f0 [ 53.522411][ T5235] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 53.530521][ T5235] [ 53.533553][ T5235] Kernel panic - not syncing: panic_on_warn set ... [ 53.540117][ T5235] CPU: 0 PID: 5235 Comm: syz-executor413 Not tainted 6.1.0-rc3-next-20221104-syzkaller #0 [ 53.549993][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.560032][ T5235] Call Trace: [ 53.563296][ T5235] [ 53.566215][ T5235] dump_stack_lvl+0xcd/0x134 [ 53.571065][ T5235] panic+0x2c8/0x622 [ 53.574950][ T5235] ? panic_print_sys_info.part.0+0x110/0x110 [ 53.580929][ T5235] ? __warn.cold+0x24b/0x350 [ 53.585515][ T5235] ? udf_free_inode+0x2b6/0x320 [ 53.590370][ T5235] __warn.cold+0x25c/0x350 [ 53.594782][ T5235] ? udf_free_inode+0x2b6/0x320 [ 53.599625][ T5235] report_bug+0x1bc/0x210 [ 53.603945][ T5235] handle_bug+0x3c/0x70 [ 53.608085][ T5235] exc_invalid_op+0x14/0x40 [ 53.612573][ T5235] asm_exc_invalid_op+0x16/0x20 [ 53.617409][ T5235] RIP: 0010:udf_free_inode+0x2b6/0x320 [ 53.622858][ T5235] Code: 24 01 e9 72 fe ff ff e8 e8 f5 a7 fe 0f 0b 48 89 df e8 6e 82 f4 fe e9 04 fe ff ff e8 74 82 f4 fe e9 50 fe ff ff e8 ca f5 a7 fe <0f> 0b e9 33 ff ff ff 4c 89 ff e8 6b 82 f4 fe e9 8e fd ff ff e8 61 [ 53.642449][ T5235] RSP: 0018:ffffc90003a1fac8 EFLAGS: 00010293 [ 53.648500][ T5235] RAX: 0000000000000000 RBX: ffff888072460158 RCX: 0000000000000000 [ 53.656456][ T5235] RDX: ffff888077ba0000 RSI: ffffffff82d4da46 RDI: 0000000000000005 [ 53.664413][ T5235] RBP: ffff888025841800 R08: 0000000000000005 R09: 0000000000000000 [ 53.672372][ T5235] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880298f4000 [ 53.680325][ T5235] R13: ffff8880258418c0 R14: 0000000000000001 R15: ffff8880298f4678 [ 53.688286][ T5235] ? udf_free_inode+0x2b6/0x320 [ 53.693136][ T5235] ? udf_free_inode+0x2b6/0x320 [ 53.697979][ T5235] udf_evict_inode+0x348/0x580 [ 53.702727][ T5235] ? udf_setsize+0x1080/0x1080 [ 53.707476][ T5235] evict+0x2ed/0x6b0 [ 53.711368][ T5235] iput.part.0+0x59b/0x880 [ 53.715775][ T5235] iput+0x58/0x70 [ 53.719406][ T5235] udf_sb_free_partitions.isra.0+0x325/0x560 [ 53.725374][ T5235] ? __sync_dirty_buffer+0x1f7/0x370 [ 53.730649][ T5235] ? udf_close_lvid.isra.0+0x44c/0x550 [ 53.736097][ T5235] udf_put_super+0x133/0x220 [ 53.740670][ T5235] ? udf_close_lvid.isra.0+0x550/0x550 [ 53.746119][ T5235] generic_shutdown_super+0x154/0x410 [ 53.751481][ T5235] kill_block_super+0x97/0xf0 [ 53.756146][ T5235] deactivate_locked_super+0x94/0x160 [ 53.761506][ T5235] deactivate_super+0xad/0xd0 [ 53.766170][ T5235] cleanup_mnt+0x2ae/0x3d0 [ 53.770573][ T5235] task_work_run+0x16b/0x270 [ 53.775155][ T5235] ? task_work_cancel+0x30/0x30 [ 53.780002][ T5235] do_exit+0xaa0/0x28c0 [ 53.784145][ T5235] ? lock_downgrade+0x6e0/0x6e0 [ 53.788982][ T5235] ? do_raw_spin_lock+0x120/0x2a0 [ 53.793992][ T5235] ? mm_update_next_owner+0x7b0/0x7b0 [ 53.799357][ T5235] ? rwlock_bug.part.0+0x90/0x90 [ 53.804281][ T5235] ? _raw_spin_unlock_irq+0x1f/0x40 [ 53.809476][ T5235] do_group_exit+0xd0/0x2a0 [ 53.813965][ T5235] __x64_sys_exit_group+0x3a/0x50 [ 53.818975][ T5235] do_syscall_64+0x35/0xb0 [ 53.823391][ T5235] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.829278][ T5235] RIP: 0033:0x7f1033a66c49 [ 53.833676][ T5235] Code: Unable to access opcode bytes at 0x7f1033a66c1f. [ 53.840673][ T5235] RSP: 002b:00007ffe24ef02e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 53.849068][ T5235] RAX: ffffffffffffffda RBX: 00007f1033add3f0 RCX: 00007f1033a66c49 [ 53.857022][ T5235] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 53.864975][ T5235] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f1033ad7e40 [ 53.872932][ T5235] R10: 00007f1033ad7e40 R11: 0000000000000246 R12: 00007f1033add3f0 [ 53.880888][ T5235] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 53.888854][ T5235] [ 53.892048][ T5235] Kernel Offset: disabled [ 53.896436][ T5235] Rebooting in 86400 seconds..