./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor650286742 <...> DUID 00:04:53:46:a9:9d:03:7a:46:b2:48:ff:4a:ea:3f:46:f2:43 forked to background, child pid 4813 [ 29.848412][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.858449][ T4814] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.202' (ECDSA) to the list of known hosts. execve("./syz-executor650286742", ["./syz-executor650286742"], 0x7ffc51cfa9c0 /* 10 vars */) = 0 brk(NULL) = 0x555556318000 brk(0x555556318c40) = 0x555556318c40 arch_prctl(ARCH_SET_FS, 0x555556318300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor650286742", 4096) = 27 brk(0x555556339c40) = 0x555556339c40 brk(0x55555633a000) = 0x55555633a000 mprotect(0x7f61b9644000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5236 attached , child_tidptr=0x5555563185d0) = 5236 [pid 5236] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5236] setsid() = 1 [pid 5236] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5236] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5236] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5236] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5236] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5236] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5236] unshare(CLONE_NEWNS) = 0 [pid 5236] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5236] unshare(CLONE_NEWIPC) = 0 [pid 5236] unshare(CLONE_NEWCGROUP) = 0 [pid 5236] unshare(CLONE_NEWUTS) = 0 [pid 5236] unshare(CLONE_SYSVSEM) = 0 [pid 5236] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "16777216", 8) = 8 [pid 5236] close(3) = 0 [pid 5236] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "536870912", 9) = 9 [pid 5236] close(3) = 0 [pid 5236] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1024", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "8192", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1024", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1024", 4) = 4 [pid 5236] close(3) = 0 [pid 5236] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5236] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5236] close(3) = 0 [pid 5236] getpid() = 1 [pid 5236] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e9 b4 f9 ff ff e8 c9 20 94 ff 0f 0b e9 06 fa ff ff e8 bd 20 [ 54.114262][ T5236] RSP: 0018:ffffc90003b2f858 EFLAGS: 00010293 [ 54.120374][ T5236] RAX: 0000000000000000 RBX: ffff8880738911d0 RCX: 0000000000000000 [ 54.128378][ T5236] RDX: ffff88807ec13a80 RSI: ffffffff81e8af3b RDI: 0000000000000001 [ 54.136356][ T5236] RBP: ffff888073912e00 R08: 0000000000000001 R09: 0000000000000000 [ 54.144368][ T5236] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 54.152367][ T5236] R13: ffff88801f5c11f0 R14: ffff8880738911d0 R15: ffff888073912e20 [ 54.160370][ T5236] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 54.169330][ T5236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.175910][ T5236] CR2: 0000562d36bcea18 CR3: 000000000bc8e000 CR4: 00000000003506f0 [ 54.183937][ T5236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.191956][ T5236] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.199987][ T5236] Call Trace: [ 54.203277][ T5236] [ 54.206213][ T5236] nilfs_segctor_do_construct+0x480/0x6af0 [ 54.212067][ T5236] ? find_held_lock+0x2d/0x110 [ 54.216868][ T5236] ? nilfs_segctor_confirm+0x107/0x190 [ 54.222370][ T5236] ? nilfs_segctor_abort_construction+0xe20/0xe20 [ 54.228820][ T5236] ? do_raw_spin_lock+0x120/0x2a0 [ 54.233843][ T5236] ? rwlock_bug.part.0+0x90/0x90 [ 54.238827][ T5236] ? do_raw_spin_unlock+0x171/0x230 [ 54.244042][ T5236] ? _raw_spin_unlock+0x24/0x40 [ 54.248935][ T5236] nilfs_segctor_construct+0x8e3/0xb30 [ 54.254404][ T5236] ? rcu_read_lock_sched_held+0x3a/0x70 [ 54.259995][ T5236] ? trace_nilfs2_transaction_transition+0x227/0x2e0 [ 54.266695][ T5236] nilfs_detach_log_writer+0x3bb/0x9f0 [ 54.272200][ T5236] ? nilfs_clean_segments+0xa80/0xa80 [ 54.277625][ T5236] ? hook_sb_remount+0xe0/0xe0 [ 54.282390][ T5236] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 54.288140][ T5236] ? dispose_list+0x1e0/0x1e0 [ 54.292836][ T5236] nilfs_put_super+0x3f/0x1a0 [ 54.297559][ T5236] ? nilfs_freeze+0xc0/0xc0 [ 54.302082][ T5236] generic_shutdown_super+0x154/0x410 [ 54.307448][ T5236] kill_block_super+0x97/0xf0 [ 54.312187][ T5236] deactivate_locked_super+0x94/0x160 [ 54.317632][ T5236] deactivate_super+0xad/0xd0 [ 54.322337][ T5236] cleanup_mnt+0x2ae/0x3d0 [ 54.326766][ T5236] task_work_run+0x16b/0x270 [ 54.331396][ T5236] ? task_work_cancel+0x30/0x30 [ 54.336273][ T5236] do_exit+0xaa0/0x28c0 [ 54.340467][ T5236] ? lock_downgrade+0x6e0/0x6e0 [ 54.345326][ T5236] ? do_raw_spin_lock+0x120/0x2a0 [ 54.350384][ T5236] ? mm_update_next_owner+0x7b0/0x7b0 [ 54.355764][ T5236] ? rwlock_bug.part.0+0x90/0x90 [ 54.360742][ T5236] ? _raw_spin_unlock_irq+0x1f/0x40 [ 54.365962][ T5236] do_group_exit+0xd0/0x2a0 [ 54.370508][ T5236] __x64_sys_exit_group+0x3a/0x50 [ 54.375545][ T5236] do_syscall_64+0x35/0xb0 [ 54.380007][ T5236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.385917][ T5236] RIP: 0033:0x7f61b95d2b29 [ 54.390362][ T5236] Code: Unable to access opcode bytes at 0x7f61b95d2aff. [ 54.397381][ T5236] RSP: 002b:00007ffdc8f5ead8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 54.405828][ T5236] RAX: ffffffffffffffda RBX: 00007f61b964a330 RCX: 00007f61b95d2b29 [ 54.413836][ T5236] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 54.421840][ T5236] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f61b9644e40 [ 54.429866][ T5236] R10: 00005555563182c0 R11: 0000000000000246 R12: 00007f61b964a330 [ 54.437885][ T5236] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 54.445908][ T5236] [ 54.448973][ T5236] Kernel panic - not syncing: panic_on_warn set ... [ 54.455557][ T5236] CPU: 0 PID: 5236 Comm: syz-executor650 Not tainted 6.1.0-rc3-next-20221103-syzkaller #0 [ 54.465431][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 54.475470][ T5236] Call Trace: [ 54.478737][ T5236] [ 54.481659][ T5236] dump_stack_lvl+0xcd/0x134 [ 54.486247][ T5236] panic+0x2c8/0x622 [ 54.490139][ T5236] ? panic_print_sys_info.part.0+0x110/0x110 [ 54.496117][ T5236] ? __warn.cold+0x24b/0x350 [ 54.500703][ T5236] ? mark_buffer_dirty+0x67b/0xa40 [ 54.505809][ T5236] __warn.cold+0x25c/0x350 [ 54.510218][ T5236] ? mark_buffer_dirty+0x67b/0xa40 [ 54.515329][ T5236] report_bug+0x1bc/0x210 [ 54.519652][ T5236] handle_bug+0x3c/0x70 [ 54.523804][ T5236] exc_invalid_op+0x14/0x40 [ 54.528309][ T5236] asm_exc_invalid_op+0x16/0x20 [ 54.533155][ T5236] RIP: 0010:mark_buffer_dirty+0x67b/0xa40 [ 54.538872][ T5236] Code: 89 f5 41 83 e5 01 4c 89 ee e8 e1 1d 94 ff 4d 85 ed 0f 84 d3 fd ff ff e8 e3 20 94 ff 49 8d 5e ff e9 c5 fd ff ff e8 d5 20 94 ff <0f> 0b e9 b4 f9 ff ff e8 c9 20 94 ff 0f 0b e9 06 fa ff ff e8 bd 20 [ 54.558507][ T5236] RSP: 0018:ffffc90003b2f858 EFLAGS: 00010293 [ 54.564582][ T5236] RAX: 0000000000000000 RBX: ffff8880738911d0 RCX: 0000000000000000 [ 54.572557][ T5236] RDX: ffff88807ec13a80 RSI: ffffffff81e8af3b RDI: 0000000000000001 [ 54.580529][ T5236] RBP: ffff888073912e00 R08: 0000000000000001 R09: 0000000000000000 [ 54.588497][ T5236] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 54.596466][ T5236] R13: ffff88801f5c11f0 R14: ffff8880738911d0 R15: ffff888073912e20 [ 54.604446][ T5236] ? mark_buffer_dirty+0x67b/0xa40 [ 54.609582][ T5236] ? mark_buffer_dirty+0x67b/0xa40 [ 54.614714][ T5236] nilfs_segctor_do_construct+0x480/0x6af0 [ 54.620522][ T5236] ? find_held_lock+0x2d/0x110 [ 54.625321][ T5236] ? nilfs_segctor_confirm+0x107/0x190 [ 54.630793][ T5236] ? nilfs_segctor_abort_construction+0xe20/0xe20 [ 54.637211][ T5236] ? do_raw_spin_lock+0x120/0x2a0 [ 54.642242][ T5236] ? rwlock_bug.part.0+0x90/0x90 [ 54.647192][ T5236] ? do_raw_spin_unlock+0x171/0x230 [ 54.652396][ T5236] ? _raw_spin_unlock+0x24/0x40 [ 54.657260][ T5236] nilfs_segctor_construct+0x8e3/0xb30 [ 54.662721][ T5236] ? rcu_read_lock_sched_held+0x3a/0x70 [ 54.668287][ T5236] ? trace_nilfs2_transaction_transition+0x227/0x2e0 [ 54.674980][ T5236] nilfs_detach_log_writer+0x3bb/0x9f0 [ 54.680452][ T5236] ? nilfs_clean_segments+0xa80/0xa80 [ 54.685833][ T5236] ? hook_sb_remount+0xe0/0xe0 [ 54.690608][ T5236] ? __fsnotify_vfsmount_delete+0x20/0x20 [ 54.696334][ T5236] ? dispose_list+0x1e0/0x1e0 [ 54.701023][ T5236] nilfs_put_super+0x3f/0x1a0 [ 54.705714][ T5236] ? nilfs_freeze+0xc0/0xc0 [ 54.710228][ T5236] generic_shutdown_super+0x154/0x410 [ 54.715611][ T5236] kill_block_super+0x97/0xf0 [ 54.720293][ T5236] deactivate_locked_super+0x94/0x160 [ 54.725673][ T5236] deactivate_super+0xad/0xd0 [ 54.730368][ T5236] cleanup_mnt+0x2ae/0x3d0 [ 54.734789][ T5236] task_work_run+0x16b/0x270 [ 54.739397][ T5236] ? task_work_cancel+0x30/0x30 [ 54.744268][ T5236] do_exit+0xaa0/0x28c0 [ 54.748427][ T5236] ? lock_downgrade+0x6e0/0x6e0 [ 54.753282][ T5236] ? do_raw_spin_lock+0x120/0x2a0 [ 54.758323][ T5236] ? mm_update_next_owner+0x7b0/0x7b0 [ 54.763705][ T5236] ? rwlock_bug.part.0+0x90/0x90 [ 54.768660][ T5236] ? _raw_spin_unlock_irq+0x1f/0x40 [ 54.773872][ T5236] do_group_exit+0xd0/0x2a0 [ 54.778378][ T5236] __x64_sys_exit_group+0x3a/0x50 [ 54.783405][ T5236] do_syscall_64+0x35/0xb0 [ 54.787920][ T5236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.793827][ T5236] RIP: 0033:0x7f61b95d2b29 [ 54.798239][ T5236] Code: Unable to access opcode bytes at 0x7f61b95d2aff. [ 54.805267][ T5236] RSP: 002b:00007ffdc8f5ead8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 54.813704][ T5236] RAX: ffffffffffffffda RBX: 00007f61b964a330 RCX: 00007f61b95d2b29 [ 54.821684][ T5236] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 54.829656][ T5236] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f61b9644e40 [ 54.837645][ T5236] R10: 00005555563182c0 R11: 0000000000000246 R12: 00007f61b964a330 [ 54.845623][ T5236] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 54.853619][ T5236] [ 54.856846][ T5236] Kernel Offset: disabled [ 54.861240][ T5236] Rebooting in 86400 seconds..