./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor804840916 <...> Warning: Permanently added '10.128.1.0' (ECDSA) to the list of known hosts. execve("./syz-executor804840916", ["./syz-executor804840916"], 0x7ffeee5971a0 /* 10 vars */) = 0 brk(NULL) = 0x555555c64000 brk(0x555555c64d00) = 0x555555c64d00 arch_prctl(ARCH_SET_FS, 0x555555c643c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor804840916", 4096) = 27 brk(0x555555c85d00) = 0x555555c85d00 brk(0x555555c86000) = 0x555555c86000 mprotect(0x7f7b39a5b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f7b399aca90, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f7b399acd80}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f7b399aca90, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f7b399acd80}, NULL, 8) = 0 mkdir("./file0", 0777) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- pipe2([3, 4], 0) = 0 write(4, "\x15\x00\x00\x00\x01\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21 dup(4) = 5 mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error) write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 syzkaller login: [ 41.064435][ T3603] ------------[ cut here ]------------ [ 41.070019][ T3603] WARNING: CPU: 0 PID: 3603 at mm/page_alloc.c:5383 __alloc_pages+0x45d/0x500 [ 41.079261][ T3603] Modules linked in: [ 41.083756][ T3603] CPU: 0 PID: 3603 Comm: syz-executor804 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 41.094523][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.104842][ T3603] RIP: 0010:__alloc_pages+0x45d/0x500 [ 41.110219][ T3603] Code: be c9 00 00 00 48 c7 c7 00 2a d8 89 c6 05 61 9f e9 0b 01 e8 7a 30 6e 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ee 5f ff ff e9 [ 41.130668][ T3603] RSP: 0018:ffffc90002f0fb08 EFLAGS: 00010246 [ 41.136803][ T3603] RAX: 0000000000000000 RBX: 1ffff920005e1f62 RCX: dffffc0000000000 [ 41.144809][ T3603] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040d40 [ 41.152819][ T3603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 41.160815][ T3603] R10: ffffffff81c17bc5 R11: 0000000000000001 R12: 0000000000040d40 [ 41.168780][ T3603] R13: 0000000000000014 R14: 0000000000000000 R15: ffff88806f7e1318 [ 41.177064][ T3603] FS: 0000555555c643c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 41.186038][ T3603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.192638][ T3603] CR2: 000055945418cec0 CR3: 00000000191a8000 CR4: 0000000000350ee0 [ 41.200626][ T3603] Call Trace: [ 41.203898][ T3603] [ 41.206806][ T3603] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 41.213629][ T3603] ? p9_client_clunk+0xa5/0x2a0 [ 41.218514][ T3603] ? v9fs_fid_xattr_get+0x174/0x210 [ 41.223741][ T3603] ? v9fs_writeback_fid+0xd0/0xd0 [ 41.228770][ T3603] alloc_pages+0x1aa/0x310 [ 41.233218][ T3603] kmalloc_order+0x34/0xf0 [ 41.237640][ T3603] kmalloc_order_trace+0x14/0x120 [ 41.242684][ T3603] __v9fs_get_acl+0xb5/0x170 [ 41.247281][ T3603] v9fs_get_acl+0xf7/0x2f0 [ 41.251826][ T3603] v9fs_mount+0x607/0xa80 [ 41.256177][ T3603] ? v9fs_write_inode_dotl+0x140/0x140 [ 41.261715][ T3603] legacy_get_tree+0x105/0x220 [ 41.266482][ T3603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 41.272948][ T3603] vfs_get_tree+0x89/0x2f0 [ 41.277355][ T3603] path_mount+0x1320/0x1fa0 [ 41.281898][ T3603] ? kmem_cache_free+0xdd/0x5a0 [ 41.286969][ T3603] ? finish_automount+0xaf0/0xaf0 [ 41.292393][ T3603] ? putname+0xfe/0x140 [ 41.296682][ T3603] __x64_sys_mount+0x27f/0x300 [ 41.301770][ T3603] ? copy_mnt_ns+0xae0/0xae0 [ 41.306423][ T3603] ? lockdep_hardirqs_on+0x79/0x100 [ 41.311918][ T3603] ? _raw_spin_unlock_irq+0x2a/0x40 [ 41.317208][ T3603] ? ptrace_notify+0xfa/0x140 [ 41.321935][ T3603] do_syscall_64+0x35/0xb0 [ 41.326347][ T3603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 41.332361][ T3603] RIP: 0033:0x7f7b399ee7c9 [ 41.336793][ T3603] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.356445][ T3603] RSP: 002b:00007ffcc64b0598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.364875][ T3603] RAX: ffffffffffffffda RBX: 00007ffcc64b05a8 RCX: 00007f7b399ee7c9 [ 41.372861][ T3603] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 0000000000000000 [ 41.380873][ T3603] RBP: 00007ffcc64b05a0 R08: 00000000200004c0 R09: 00007f7b399aca90 [ 41.388945][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.396940][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.404953][ T3603] [ 41.407967][ T3603] Kernel panic - not syncing: panic_on_warn set ... [ 41.414556][ T3603] CPU: 1 PID: 3603 Comm: syz-executor804 Not tainted 5.18.0-rc6-syzkaller-00009-gfeb9c5e19e91 #0 [ 41.425026][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.435058][ T3603] Call Trace: [ 41.438319][ T3603] [ 41.441226][ T3603] dump_stack_lvl+0xcd/0x134 [ 41.445801][ T3603] panic+0x2d7/0x636 [ 41.449684][ T3603] ? panic_print_sys_info.part.0+0x10b/0x10b [ 41.455656][ T3603] ? __warn.cold+0x1d1/0x2c5 [ 41.460241][ T3603] ? __alloc_pages+0x45d/0x500 [ 41.464984][ T3603] __warn.cold+0x1e2/0x2c5 [ 41.469379][ T3603] ? __alloc_pages+0x45d/0x500 [ 41.474122][ T3603] report_bug+0x1bd/0x210 [ 41.478435][ T3603] handle_bug+0x3c/0x60 [ 41.482570][ T3603] exc_invalid_op+0x14/0x40 [ 41.487068][ T3603] asm_exc_invalid_op+0x12/0x20 [ 41.491896][ T3603] RIP: 0010:__alloc_pages+0x45d/0x500 [ 41.497261][ T3603] Code: be c9 00 00 00 48 c7 c7 00 2a d8 89 c6 05 61 9f e9 0b 01 e8 7a 30 6e 07 e9 6a ff ff ff 0f 0b e9 a0 fd ff ff 40 80 e5 3f eb 88 <0f> 0b e9 18 ff ff ff 4c 89 ef 44 89 e6 45 31 ed e8 ee 5f ff ff e9 [ 41.516843][ T3603] RSP: 0018:ffffc90002f0fb08 EFLAGS: 00010246 [ 41.522902][ T3603] RAX: 0000000000000000 RBX: 1ffff920005e1f62 RCX: dffffc0000000000 [ 41.530847][ T3603] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040d40 [ 41.538806][ T3603] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 41.546767][ T3603] R10: ffffffff81c17bc5 R11: 0000000000000001 R12: 0000000000040d40 [ 41.554733][ T3603] R13: 0000000000000014 R14: 0000000000000000 R15: ffff88806f7e1318 [ 41.562692][ T3603] ? policy_node+0x135/0x180 [ 41.567282][ T3603] ? __alloc_pages_slowpath.constprop.0+0x20e0/0x20e0 [ 41.574034][ T3603] ? p9_client_clunk+0xa5/0x2a0 [ 41.578874][ T3603] ? v9fs_fid_xattr_get+0x174/0x210 [ 41.584058][ T3603] ? v9fs_writeback_fid+0xd0/0xd0 [ 41.589073][ T3603] alloc_pages+0x1aa/0x310 [ 41.593491][ T3603] kmalloc_order+0x34/0xf0 [ 41.597905][ T3603] kmalloc_order_trace+0x14/0x120 [ 41.602923][ T3603] __v9fs_get_acl+0xb5/0x170 [ 41.607524][ T3603] v9fs_get_acl+0xf7/0x2f0 [ 41.611922][ T3603] v9fs_mount+0x607/0xa80 [ 41.616232][ T3603] ? v9fs_write_inode_dotl+0x140/0x140 [ 41.621687][ T3603] legacy_get_tree+0x105/0x220 [ 41.626438][ T3603] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 41.632661][ T3603] vfs_get_tree+0x89/0x2f0 [ 41.637061][ T3603] path_mount+0x1320/0x1fa0 [ 41.641548][ T3603] ? kmem_cache_free+0xdd/0x5a0 [ 41.646382][ T3603] ? finish_automount+0xaf0/0xaf0 [ 41.651391][ T3603] ? putname+0xfe/0x140 [ 41.655548][ T3603] __x64_sys_mount+0x27f/0x300 [ 41.660383][ T3603] ? copy_mnt_ns+0xae0/0xae0 [ 41.664953][ T3603] ? lockdep_hardirqs_on+0x79/0x100 [ 41.670139][ T3603] ? _raw_spin_unlock_irq+0x2a/0x40 [ 41.675320][ T3603] ? ptrace_notify+0xfa/0x140 [ 41.679990][ T3603] do_syscall_64+0x35/0xb0 [ 41.684392][ T3603] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 41.690267][ T3603] RIP: 0033:0x7f7b399ee7c9 [ 41.694663][ T3603] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.714255][ T3603] RSP: 002b:00007ffcc64b0598 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.722654][ T3603] RAX: ffffffffffffffda RBX: 00007ffcc64b05a8 RCX: 00007f7b399ee7c9 [ 41.730625][ T3603] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 0000000000000000 [ 41.738580][ T3603] RBP: 00007ffcc64b05a0 R08: 00000000200004c0 R09: 00007f7b399aca90 [ 41.746532][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.754488][ T3603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.762477][ T3603] [ 41.766392][ T3603] Kernel Offset: disabled [ 41.770769][ T3603] Rebooting in 86400 seconds..