./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1775955948 <...> forked to background, child pid 3183 no interfaces have a carrier [ 22.665743][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.676063][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. execve("./syz-executor1775955948", ["./syz-executor1775955948"], 0x7ffdce4caf80 /* 10 vars */) = 0 brk(NULL) = 0x555556872000 brk(0x555556872c40) = 0x555556872c40 arch_prctl(ARCH_SET_FS, 0x555556872300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1775955948", 4096) = 28 brk(0x555556893c40) = 0x555556893c40 brk(0x555556894000) = 0x555556894000 mprotect(0x7fe5d01f0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3612 attached , child_tidptr=0x5555568725d0) = 3612 [pid 3612] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3612] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3612] setsid() = 1 [pid 3612] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3612] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3612] unshare(CLONE_NEWNS) = 0 [pid 3612] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3612] unshare(CLONE_NEWIPC) = 0 [pid 3612] unshare(CLONE_NEWCGROUP) = 0 [pid 3612] unshare(CLONE_NEWUTS) = 0 [pid 3612] unshare(CLONE_SYSVSEM) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "16777216", 8) = 8 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "536870912", 9) = 9 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "8192", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024", 4) = 4 [pid 3612] close(3) = 0 [pid 3612] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3612] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3612] close(3) = 0 [pid 3612] getpid() = 1 [pid 3612] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 48 c7 c7 40 38 4b 8c e8 2a f3 f1 fe e9 55 fc ff ff e8 20 f3 [ 45.719259][ T3612] RSP: 0018:ffffc9000375fb70 EFLAGS: 00010293 [ 45.725313][ T3612] RAX: 0000000000000000 RBX: ffff88807fb50430 RCX: 0000000000000000 [ 45.733266][ T3612] RDX: ffff88807cce1d80 RSI: ffffffff82d67b58 RDI: ffff88807fb50420 [ 45.741222][ T3612] RBP: ffff88807fb500b8 R08: 0000000000000005 R09: 0000000000000000 [ 45.749185][ T3612] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807fb50508 [ 45.757144][ T3612] R13: ffff88807fb50458 R14: ffffffff8a293040 R15: ffff88807fb50f38 [ 45.765104][ T3612] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 45.774019][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.780580][ T3612] CR2: 000000002000c380 CR3: 000000007e5d6000 CR4: 0000000000350ef0 [ 45.788538][ T3612] Call Trace: [ 45.791798][ T3612] [ 45.794708][ T3612] ? jfs_write_inode+0x230/0x230 [ 45.799632][ T3612] evict+0x2ed/0x6b0 [ 45.803508][ T3612] dispose_list+0x117/0x1e0 [ 45.807991][ T3612] evict_inodes+0x352/0x450 [ 45.812478][ T3612] ? dispose_list+0x1e0/0x1e0 [ 45.817143][ T3612] ? shrink_dcache_for_umount+0x165/0x330 [ 45.822929][ T3612] generic_shutdown_super+0xab/0x400 [ 45.828196][ T3612] kill_block_super+0x97/0xf0 [ 45.832855][ T3612] deactivate_locked_super+0x94/0x160 [ 45.838207][ T3612] deactivate_super+0xad/0xd0 [ 45.842868][ T3612] cleanup_mnt+0x2ae/0x3d0 [ 45.847265][ T3612] task_work_run+0xdd/0x1a0 [ 45.851748][ T3612] do_exit+0xad5/0x29b0 [ 45.855883][ T3612] ? mm_update_next_owner+0x7a0/0x7a0 [ 45.861240][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40 [ 45.866443][ T3612] ? _raw_spin_unlock_irq+0x1f/0x40 [ 45.871622][ T3612] do_group_exit+0xd2/0x2f0 [ 45.876107][ T3612] __x64_sys_exit_group+0x3a/0x50 [ 45.881196][ T3612] do_syscall_64+0x35/0xb0 [ 45.885595][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.891467][ T3612] RIP: 0033:0x7fe5d01730e9 [ 45.895860][ T3612] Code: Unable to access opcode bytes at RIP 0x7fe5d01730bf. [ 45.903287][ T3612] RSP: 002b:00007ffc5fce8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 45.911681][ T3612] RAX: ffffffffffffffda RBX: 00007fe5d01f6330 RCX: 00007fe5d01730e9 [ 45.919642][ T3612] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 45.927619][ T3612] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000000 [ 45.935888][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5d01f6330 [ 45.944029][ T3612] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 45.952245][ T3612] [ 45.955247][ T3612] Modules linked in: [ 45.959580][ T3612] ---[ end trace 0000000000000000 ]--- [ 45.965137][ T3612] RIP: 0010:jfs_evict_inode+0x3d8/0x4a0 [ 45.970735][ T3612] Code: 7c 24 80 00 74 0d e8 e7 8c a5 fe 48 89 df e8 3f 56 02 00 e8 da 8c a5 fe 48 89 df e8 32 34 20 ff e9 f4 fc ff ff e8 c8 8c a5 fe <0f> 0b 48 c7 c7 40 38 4b 8c e8 2a f3 f1 fe e9 55 fc ff ff e8 20 f3 [ 45.990835][ T3612] RSP: 0018:ffffc9000375fb70 EFLAGS: 00010293 [ 45.997177][ T3612] RAX: 0000000000000000 RBX: ffff88807fb50430 RCX: 0000000000000000 [ 46.005392][ T3612] RDX: ffff88807cce1d80 RSI: ffffffff82d67b58 RDI: ffff88807fb50420 [ 46.013393][ T3612] RBP: ffff88807fb500b8 R08: 0000000000000005 R09: 0000000000000000 [ 46.021348][ T3612] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807fb50508 [ 46.029438][ T3612] R13: ffff88807fb50458 R14: ffffffff8a293040 R15: ffff88807fb50f38 [ 46.037428][ T3612] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 46.046714][ T3612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.053399][ T3612] CR2: 00007fe5d01f71d0 CR3: 000000007e5d6000 CR4: 0000000000350ee0 [ 46.061530][ T3612] Kernel panic - not syncing: Fatal exception [ 46.068328][ T3612] Kernel Offset: disabled [ 46.072643][ T3612] Rebooting in 86400 seconds..