./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2108158304 <...> DUID 00:04:cd:7d:74:7d:04:96:3f:c0:f2:1a:da:5a:49:b1:9f:fb forked to background, child pid 4812 [ 44.994562][ T4813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.017315][ T4813] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller syzkaller login: [ 56.068570][ T5028] sshd (5028) used greatest stack depth: 22760 bytes left Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts. execve("./syz-executor2108158304", ["./syz-executor2108158304"], 0x7ffc23584030 /* 10 vars */) = 0 brk(NULL) = 0x5555572ac000 brk(0x5555572acc40) = 0x5555572acc40 arch_prctl(ARCH_SET_FS, 0x5555572ac300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2108158304", 4096) = 28 brk(0x5555572cdc40) = 0x5555572cdc40 brk(0x5555572ce000) = 0x5555572ce000 mprotect(0x7f1002f4f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5244 attached , child_tidptr=0x5555572ac5d0) = 5244 [pid 5244] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5244] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5244] setsid() = 1 [pid 5244] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5244] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5244] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5244] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5244] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5244] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5244] unshare(CLONE_NEWNS) = 0 [pid 5244] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5244] unshare(CLONE_NEWIPC) = 0 [pid 5244] unshare(CLONE_NEWCGROUP) = 0 [pid 5244] unshare(CLONE_NEWUTS) = 0 [pid 5244] unshare(CLONE_SYSVSEM) = 0 [pid 5244] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "16777216", 8) = 8 [pid 5244] close(3) = 0 [pid 5244] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "536870912", 9) = 9 [pid 5244] close(3) = 0 [pid 5244] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1024", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "8192", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1024", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1024", 4) = 4 [pid 5244] close(3) = 0 [pid 5244] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5244] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5244] close(3) = 0 [pid 5244] getpid() = 1 [pid 5244] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 72.779680][ T123] dump_stack_lvl+0xcd/0x134 [ 72.784322][ T123] ubsan_epilogue+0xb/0x50 [ 72.788754][ T123] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 72.794927][ T123] ? lock_metapage+0xad/0x4d0 [ 72.799624][ T123] dbAdjTree+0x34c/0x360 [ 72.803888][ T123] ? folio_flags.constprop.0+0x53/0x150 [ 72.809456][ T123] dbJoin+0x1f0/0x240 [ 72.813472][ T123] dbFreeBits+0x15d/0x8c0 [ 72.817834][ T123] dbFreeDmap+0x61/0x1a0 [ 72.822108][ T123] dbFree+0x250/0x540 [ 72.826130][ T123] txFreeMap+0x8f1/0xd70 [ 72.830407][ T123] txUpdateMap+0x3cd/0xbe0 [ 72.834862][ T123] ? txFreeMap+0xd70/0xd70 [ 72.839300][ T123] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 72.845132][ T123] jfs_lazycommit+0x5bb/0xaa0 [ 72.849843][ T123] ? txCommit+0x4330/0x4330 [ 72.854366][ T123] ? wake_up_q+0xf0/0xf0 [ 72.858631][ T123] ? __kthread_parkme+0x15f/0x220 [ 72.863668][ T123] ? txCommit+0x4330/0x4330 [ 72.868188][ T123] kthread+0x2e4/0x3a0 [ 72.872268][ T123] ? kthread_complete_and_exit+0x40/0x40 [ 72.877921][ T123] ret_from_fork+0x1f/0x30 [ 72.882374][ T123] [ 72.885785][ T123] ================================================================================ [ 72.896311][ T123] Kernel panic - not syncing: panic_on_warn set ... [ 72.902929][ T123] CPU: 1 PID: 123 Comm: jfsCommit Not tainted 6.1.0-rc3-next-20221104-syzkaller #0 [ 72.912221][ T123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 72.922281][ T123] Call Trace: [ 72.925565][ T123] [ 72.928500][ T123] dump_stack_lvl+0xcd/0x134 [ 72.933116][ T123] panic+0x2c8/0x622 [ 72.937032][ T123] ? panic_print_sys_info.part.0+0x110/0x110 [ 72.943041][ T123] ? ubsan_epilogue+0x3e/0x50 [ 72.947736][ T123] ubsan_epilogue+0x4a/0x50 [ 72.952250][ T123] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 72.958418][ T123] ? lock_metapage+0xad/0x4d0 [ 72.963113][ T123] dbAdjTree+0x34c/0x360 [ 72.967469][ T123] ? folio_flags.constprop.0+0x53/0x150 [ 72.973034][ T123] dbJoin+0x1f0/0x240 [ 72.977039][ T123] dbFreeBits+0x15d/0x8c0 [ 72.981397][ T123] dbFreeDmap+0x61/0x1a0 [ 72.985672][ T123] dbFree+0x250/0x540 [ 72.989684][ T123] txFreeMap+0x8f1/0xd70 [ 72.993953][ T123] txUpdateMap+0x3cd/0xbe0 [ 72.998394][ T123] ? txFreeMap+0xd70/0xd70 [ 73.002861][ T123] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 73.008693][ T123] jfs_lazycommit+0x5bb/0xaa0 [ 73.014087][ T123] ? txCommit+0x4330/0x4330 [ 73.018723][ T123] ? wake_up_q+0xf0/0xf0 [ 73.022996][ T123] ? __kthread_parkme+0x15f/0x220 [ 73.028051][ T123] ? txCommit+0x4330/0x4330 [ 73.032588][ T123] kthread+0x2e4/0x3a0 [ 73.036779][ T123] ? kthread_complete_and_exit+0x40/0x40 [ 73.042448][ T123] ret_from_fork+0x1f/0x30 [ 73.046921][ T123] [ 73.050055][ T123] Kernel Offset: disabled [ 73.054482][ T123] Rebooting in 86400 seconds..