./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3278005643 <...> Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts. execve("./syz-executor3278005643", ["./syz-executor3278005643"], 0x7fff904883f0 /* 10 vars */) = 0 brk(NULL) = 0x555555ebf000 brk(0x555555ebfc40) = 0x555555ebfc40 arch_prctl(ARCH_SET_FS, 0x555555ebf300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3278005643", 4096) = 28 brk(0x555555ee0c40) = 0x555555ee0c40 brk(0x555555ee1000) = 0x555555ee1000 mprotect(0x7f8f6b702000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5063 attached , child_tidptr=0x555555ebf5d0) = 5063 [pid 5063] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5063] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5063] setsid() = 1 [pid 5063] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5063] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5063] unshare(CLONE_NEWNS) = 0 [pid 5063] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5063] unshare(CLONE_NEWIPC) = 0 [pid 5063] unshare(CLONE_NEWCGROUP) = 0 [pid 5063] unshare(CLONE_NEWUTS) = 0 [pid 5063] unshare(CLONE_SYSVSEM) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "16777216", 8) = 8 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "536870912", 9) = 9 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "8192", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024", 4) = 4 [pid 5063] close(3) = 0 [pid 5063] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5063] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5063] close(3) = 0 [pid 5063] getpid() = 1 [pid 5063] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 56 f9 ff ff e8 fc bb d2 ff e8 77 6c 57 08 31 ff 41 89 c4 [ 50.763296][ T5063] RSP: 0018:ffffc90003acfa60 EFLAGS: 00010093 [ 50.769355][ T5063] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 50.777325][ T5063] RDX: ffff888018b41d40 RSI: ffffffff81ae9638 RDI: 0000000000000005 [ 50.785303][ T5063] RBP: ffffea0000a51500 R08: 0000000000000005 R09: 0000000000000000 [ 50.793277][ T5063] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888144d66a78 [ 50.801246][ T5063] R13: ffffffff8e72d9c0 R14: 0000000000000293 R15: ffff88801dc1a258 [ 50.809230][ T5063] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 50.818166][ T5063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.824745][ T5063] CR2: 000055f60d5cd5d8 CR3: 0000000027b3a000 CR4: 0000000000350ef0 [ 50.832712][ T5063] Call Trace: [ 50.835984][ T5063] [ 50.838912][ T5063] mark_buffer_dirty+0x70d/0xa40 [ 50.843857][ T5063] gfs2_unpin+0x109/0xcf0 [ 50.848204][ T5063] buf_lo_after_commit+0x144/0x210 [ 50.853333][ T5063] ? gfs2_unpin+0xcf0/0xcf0 [ 50.857843][ T5063] gfs2_log_flush+0x140f/0x28a0 [ 50.862713][ T5063] ? gfs2_ail_drain+0x630/0x630 [ 50.867580][ T5063] gfs2_kill_sb+0x58/0x170 [ 50.872013][ T5063] deactivate_locked_super+0x98/0x160 [ 50.877569][ T5063] deactivate_super+0xb1/0xd0 [ 50.882264][ T5063] cleanup_mnt+0x2ae/0x3d0 [ 50.886685][ T5063] task_work_run+0x16f/0x270 [ 50.891290][ T5063] ? task_work_cancel+0x30/0x30 [ 50.896176][ T5063] do_exit+0xaa8/0x2950 [ 50.900350][ T5063] ? lock_downgrade+0x6e0/0x6e0 [ 50.905206][ T5063] ? do_raw_spin_lock+0x124/0x2b0 [ 50.910234][ T5063] ? mm_update_next_owner+0x7b0/0x7b0 [ 50.915625][ T5063] ? rwlock_bug.part.0+0x90/0x90 [ 50.920569][ T5063] ? _raw_spin_unlock_irq+0x23/0x50 [ 50.925780][ T5063] do_group_exit+0xd4/0x2a0 [ 50.930292][ T5063] __x64_sys_exit_group+0x3e/0x50 [ 50.935330][ T5063] do_syscall_64+0x39/0xb0 [ 50.939765][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.945671][ T5063] RIP: 0033:0x7f8f6b6809d9 [ 50.950081][ T5063] Code: Unable to access opcode bytes at 0x7f8f6b6809af. [ 50.957095][ T5063] RSP: 002b:00007ffec9b760f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 50.965688][ T5063] RAX: ffffffffffffffda RBX: 00007f8f6b708330 RCX: 00007f8f6b6809d9 [ 50.973657][ T5063] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 50.981629][ T5063] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f8f6b702e40 [ 50.989594][ T5063] R10: 00007ffec9b76010 R11: 0000000000000246 R12: 00007f8f6b708330 [ 50.997568][ T5063] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 51.005560][ T5063] [ 51.008575][ T5063] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 51.015850][ T5063] CPU: 0 PID: 5063 Comm: syz-executor327 Not tainted 6.2.0-rc1-syzkaller-00095-ge4cf7c25bae5 #0 [ 51.026268][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 51.036328][ T5063] Call Trace: [ 51.039603][ T5063] [ 51.042528][ T5063] dump_stack_lvl+0xd1/0x138 [ 51.047121][ T5063] panic+0x2cc/0x626 [ 51.051022][ T5063] ? panic_print_sys_info.part.0+0x110/0x110 [ 51.057027][ T5063] ? __folio_mark_dirty+0xba8/0xf50 [ 51.062234][ T5063] check_panic_on_warn.cold+0x19/0x35 [ 51.067620][ T5063] __warn+0xf2/0x1a0 [ 51.071517][ T5063] ? __folio_mark_dirty+0xba8/0xf50 [ 51.076721][ T5063] report_bug+0x1c0/0x210 [ 51.081056][ T5063] handle_bug+0x3c/0x70 [ 51.085218][ T5063] exc_invalid_op+0x18/0x50 [ 51.089729][ T5063] asm_exc_invalid_op+0x1a/0x20 [ 51.094577][ T5063] RIP: 0010:__folio_mark_dirty+0xba8/0xf50 [ 51.100379][ T5063] Code: 78 70 48 89 44 24 10 e8 66 6b 57 08 31 ff 89 c6 89 44 24 10 e8 c9 b8 d2 ff 8b 44 24 10 85 c0 0f 85 62 f9 ff ff e8 08 bc d2 ff <0f> 0b e9 56 f9 ff ff e8 fc bb d2 ff e8 77 6c 57 08 31 ff 41 89 c4 [ 51.120000][ T5063] RSP: 0018:ffffc90003acfa60 EFLAGS: 00010093 [ 51.126077][ T5063] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 51.134055][ T5063] RDX: ffff888018b41d40 RSI: ffffffff81ae9638 RDI: 0000000000000005 [ 51.142024][ T5063] RBP: ffffea0000a51500 R08: 0000000000000005 R09: 0000000000000000 [ 51.149992][ T5063] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888144d66a78 [ 51.157970][ T5063] R13: ffffffff8e72d9c0 R14: 0000000000000293 R15: ffff88801dc1a258 [ 51.165957][ T5063] ? __folio_mark_dirty+0xba8/0xf50 [ 51.171262][ T5063] mark_buffer_dirty+0x70d/0xa40 [ 51.176214][ T5063] gfs2_unpin+0x109/0xcf0 [ 51.180565][ T5063] buf_lo_after_commit+0x144/0x210 [ 51.185696][ T5063] ? gfs2_unpin+0xcf0/0xcf0 [ 51.190221][ T5063] gfs2_log_flush+0x140f/0x28a0 [ 51.195102][ T5063] ? gfs2_ail_drain+0x630/0x630 [ 51.199969][ T5063] gfs2_kill_sb+0x58/0x170 [ 51.204395][ T5063] deactivate_locked_super+0x98/0x160 [ 51.209775][ T5063] deactivate_super+0xb1/0xd0 [ 51.214468][ T5063] cleanup_mnt+0x2ae/0x3d0 [ 51.218895][ T5063] task_work_run+0x16f/0x270 [ 51.223501][ T5063] ? task_work_cancel+0x30/0x30 [ 51.228363][ T5063] do_exit+0xaa8/0x2950 [ 51.232529][ T5063] ? lock_downgrade+0x6e0/0x6e0 [ 51.237378][ T5063] ? do_raw_spin_lock+0x124/0x2b0 [ 51.242403][ T5063] ? mm_update_next_owner+0x7b0/0x7b0 [ 51.247864][ T5063] ? rwlock_bug.part.0+0x90/0x90 [ 51.252798][ T5063] ? _raw_spin_unlock_irq+0x23/0x50 [ 51.257997][ T5063] do_group_exit+0xd4/0x2a0 [ 51.262594][ T5063] __x64_sys_exit_group+0x3e/0x50 [ 51.267625][ T5063] do_syscall_64+0x39/0xb0 [ 51.272072][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.277972][ T5063] RIP: 0033:0x7f8f6b6809d9 [ 51.282380][ T5063] Code: Unable to access opcode bytes at 0x7f8f6b6809af. [ 51.289385][ T5063] RSP: 002b:00007ffec9b760f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 51.297908][ T5063] RAX: ffffffffffffffda RBX: 00007f8f6b708330 RCX: 00007f8f6b6809d9 [ 51.305887][ T5063] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 51.313967][ T5063] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f8f6b702e40 [ 51.321968][ T5063] R10: 00007ffec9b76010 R11: 0000000000000246 R12: 00007f8f6b708330 [ 51.330122][ T5063] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 51.338110][ T5063] [ 51.341962][ T5063] Kernel Offset: disabled [ 51.346486][ T5063] Rebooting in 86400 seconds..