./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor358063865 <...> Warning: Permanently added '10.128.1.150' (ECDSA) to the list of known hosts. execve("./syz-executor358063865", ["./syz-executor358063865"], 0x7ffd8eb67f70 /* 10 vars */) = 0 brk(NULL) = 0x555556685000 brk(0x555556685c40) = 0x555556685c40 arch_prctl(ARCH_SET_FS, 0x555556685300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor358063865", 4096) = 27 brk(0x5555566a6c40) = 0x5555566a6c40 brk(0x5555566a7000) = 0x5555566a7000 mprotect(0x7f96b5b69000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 getpid() = 5078 openat(AT_FDCWD, "/sys/kernel/debug/x86/nmi_longest_ns", O_WRONLY|O_CLOEXEC) = 3 write(3, "10000000000", 11) = 11 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/hung_task_check_interval_secs", O_WRONLY|O_CLOEXEC) = 3 write(3, "20", 2) = 2 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_kallsyms", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/net/core/bpf_jit_harden", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/kptr_restrict", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/softlockup_all_cpu_backtrace", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/mount-max", O_WRONLY|O_CLOEXEC) = 3 write(3, "100", 3) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_dump_tasks", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/debug/exception-trace", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/printk", O_WRONLY|O_CLOEXEC) = 3 write(3, "7 4 1 3", 7) = 7 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/keys/gc_delay", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/vm/oom_kill_allocating_task", O_WRONLY|O_CLOEXEC) = 3 write(3, "1", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/ctrl-alt-del", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/proc/sys/kernel/cad_pid", O_WRONLY|O_CLOEXEC) = 3 write(3, "5078", 4) = 4 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE) = 3 socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 sendto(4, [{nlmsg_len=36, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=704, nlmsg_type=nlctrl, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5078}, "\x01\x02\x00\x00\x0d\x00\x02\x00\x6e\x6c\x38\x30\x32\x31\x35\x34\x00\x00\x00\x00\x06\x00\x01\x00\x1d\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x26\x00\x00\x00\x48\x02\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x01\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x05\x00\x00\x00\x08\x00\x02\x00\x0e\x00\x00\x00\x14\x00\x03\x00"...], 4096, 0, NULL, NULL) = 704 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5078}, {error=0, msg={nlmsg_len=36, nlmsg_type=nlctrl, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 access("/proc/net", R_OK) = 0 access("/proc/net/unix", R_OK) = 0 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0b\x00\x00\x00\x06\x00\x0a\x00\xa0\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5078}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan0", ifr_ifindex=11}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x00\x00\x00\x00\x0b\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x0c\x00\x01\x00\x02\x00\xaa\xaa\xaa\xaa\xaa\xaa"], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5078}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 sendto(3, [{nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=0, ifi_flags=0, ifi_change=0}, [[{nla_len=11, nla_type=IFLA_IFNAME}, "lowpan0"...], [{nla_len=16, nla_type=IFLA_LINKINFO}, [{nla_len=10, nla_type=IFLA_INFO_KIND}, "lowpan"...]], [{nla_len=8, nla_type=IFLA_LINK}, 11]]], 68, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 68 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5078}, {error=0, msg={nlmsg_len=68, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK|NLM_F_EXCL|NLM_F_CREATE, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(4, [{nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x0b\x00\x00\x00\x08\x00\x03\x00\x0c\x00\x00\x00\x06\x00\x0a\x00\xa1\xaa\x00\x00"], 36, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 36 recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5078}, {error=0, msg={nlmsg_len=36, nlmsg_type=nl802154, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5 ioctl(5, SIOCGIFINDEX, {ifr_name="wpan1", ifr_ifindex=12}) = 0 close(5) = 0 sendto(3, [{nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, {ifi_family=AF_UNSPEC, ifi_type=ARPHRD_NETROM, ifi_index=if_nametoindex("wpan1"), ifi_flags=IFF_UP, ifi_change=0x1}, [{nla_len=12, nla_type=IFLA_ADDRESS}, 02:01:aa:aa:aa:aa:aa]], 44, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 44 recvfrom(3, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5078}, {error=0, msg={nlmsg_len=44, nlmsg_type=RTM_NEWLINK, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 close(3) = 0 close(4) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached , child_tidptr=0x5555566855d0) = 5081 [pid 5081] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5081] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5081] setsid() = 1 [pid 5081] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5081] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5081] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5081] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5081] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5081] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5081] unshare(CLONE_NEWNS) = 0 [pid 5081] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5081] unshare(CLONE_NEWIPC) = 0 [pid 5081] unshare(CLONE_NEWCGROUP) = 0 [pid 5081] unshare(CLONE_NEWUTS) = 0 [pid 5081] unshare(CLONE_SYSVSEM) = 0 [pid 5081] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "16777216", 8) = 8 [pid 5081] close(3) = 0 [pid 5081] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "536870912", 9) = 9 [pid 5081] close(3) = 0 [pid 5081] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1024", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "8192", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1024", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1024", 4) = 4 [pid 5081] close(3) = 0 [pid 5081] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5081] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5081] close(3) = 0 [pid 5081] getpid() = 1 [pid 5081] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 84.436871][ T5081] dump_stack_lvl+0x136/0x150 [ 84.441588][ T5081] should_fail_ex+0x4a3/0x5b0 [ 84.446294][ T5081] prepare_alloc_pages+0x178/0x570 [ 84.451421][ T5081] ? get_page_from_freelist+0x11db/0x2d50 [ 84.457165][ T5081] __alloc_pages+0x149/0x5c0 [ 84.461795][ T5081] ? __alloc_pages_slowpath.constprop.0+0x23f0/0x23f0 [ 84.468618][ T5081] ? __filemap_get_folio+0x253/0xdc0 [ 84.473941][ T5081] ? xas_start+0x14e/0x7a0 [ 84.478411][ T5081] alloc_pages+0x1aa/0x270 [ 84.482881][ T5081] folio_alloc+0x20/0x70 [ 84.487165][ T5081] filemap_alloc_folio+0x3ad/0x450 [ 84.492329][ T5081] ? trace_mm_filemap_delete_from_page_cache+0x2d0/0x2d0 [ 84.499411][ T5081] ? lock_downgrade+0x690/0x690 [ 84.504297][ T5081] ? trace_lock_acquire+0x1f1/0x2b0 [ 84.509537][ T5081] do_read_cache_folio+0x193/0x510 [ 84.514715][ T5081] ? last_read_complete+0x430/0x430 [ 84.519948][ T5081] read_cache_page+0x5d/0x160 [ 84.524657][ T5081] __get_metapage+0x9ae/0x1170 [ 84.529469][ T5081] diMount+0xe6/0x830 [ 84.533500][ T5081] jfs_mount_rw+0x239/0x6d0 [ 84.538056][ T5081] ? updateSuper+0x7b0/0x7b0 [ 84.542689][ T5081] ? list_lru_walk_node+0x15a/0x2f0 [ 84.547939][ T5081] ? list_lru_walk_one+0xe0/0xe0 [ 84.552925][ T5081] jfs_remount+0x520/0x660 [ 84.557378][ T5081] ? parse_options+0xef0/0xef0 [ 84.562191][ T5081] ? shrink_dcache_sb+0x1a3/0x2a0 [ 84.567250][ T5081] ? shrink_dentry_list+0x4f0/0x4f0 [ 84.572485][ T5081] ? path_mount+0x13f8/0x1e40 [ 84.577197][ T5081] ? lock_acquire+0x32/0xc0 [ 84.581739][ T5081] ? parse_options+0xef0/0xef0 [ 84.586539][ T5081] legacy_reconfigure+0x119/0x180 [ 84.591602][ T5081] reconfigure_super+0x40c/0xa30 [ 84.596573][ T5081] ? fs_umode_to_dtype+0xd0/0xd0 [ 84.601564][ T5081] path_mount+0x183d/0x1e40 [ 84.606104][ T5081] ? kmem_cache_free+0xec/0x4e0 [ 84.610994][ T5081] ? finish_automount+0x9b0/0x9b0 [ 84.616068][ T5081] ? putname+0x102/0x140 [ 84.620364][ T5081] __x64_sys_mount+0x283/0x300 [ 84.625166][ T5081] ? copy_mnt_ns+0xb30/0xb30 [ 84.629798][ T5081] ? lockdep_hardirqs_on+0x7d/0x100 [ 84.635029][ T5081] ? _raw_spin_unlock_irq+0x2e/0x50 [ 84.640265][ T5081] ? ptrace_notify+0xfe/0x140 [ 84.644979][ T5081] do_syscall_64+0x39/0xb0 [ 84.649441][ T5081] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 84.655370][ T5081] RIP: 0033:0x7f96b5afbfca [ 84.659810][ T5081] Code: 48 c7 c2 c0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 f8 03 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 84.679792][ T5081] RSP: 002b:00007ffe04c3f378 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 84.688241][ T5081] RAX: ffffffffffffffda RBX: 00005555566852c0 RCX: 00007f96b5afbfca [pid 5081] mount(NULL, ".", 0x20000040, MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_I_VERSION|MS_STRICTATIME, "") = -1 EIO (Input/output error) [pid 5081] exit_group(1) = ? [ 84.696238][ T5081] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 84.704243][ T5081] RBP: 0000000000000000 R08: 00007ffe04c3f400 R09: 0000000000000002 [ 84.712231][ T5081] R10: 00000000018084a0 R11: 0000000000000286 R12: 00000000ffffffff [ 84.720225][ T5081] R13: 00007ffe04c3f400 R14: 0000000000000000 R15: 0000000020000080 [ 84.728238][ T5081] [ 84.732953][ T5081] read_mapping_page failed! [ 84.737556][ T5081] jfs_mount_rw: diMount failed! [ 84.764001][ T5081] ------------[ cut here ]------------ [ 84.769520][ T5081] WARNING: CPU: 0 PID: 5081 at mm/slab_common.c:935 free_large_kmalloc+0xad/0x100 [ 84.778825][ T5081] Modules linked in: [ 84.782782][ T5081] CPU: 0 PID: 5081 Comm: syz-executor358 Not tainted 6.2.0-rc7-next-20230208-syzkaller #0 [ 84.792774][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 84.802894][ T5081] RIP: 0010:free_large_kmalloc+0xad/0x100 [ 84.808640][ T5081] Code: ee 48 89 ef 5d 41 5c 41 5d e9 0f 9a 0d 00 e8 da 55 d0 ff 44 89 e2 be 06 00 00 00 48 89 ef e8 0a 31 20 00 e8 75 53 d0 ff eb c6 <0f> 0b 80 3d 61 91 a5 0c 00 74 1f 48 8b 74 24 20 4c 89 e7 45 31 ed [ 84.828362][ T5081] RSP: 0018:ffffc90003e2fbc8 EFLAGS: 00010246 [ 84.834514][ T5081] RAX: 00fff00000000000 RBX: ffff888076df2930 RCX: 0000000000000000 [ 84.842606][ T5081] RDX: 0000000000000000 RSI: ffff88807bdb8000 RDI: ffffea0001ef6e00 [ 84.850618][ T5081] RBP: ffffea0001ef6e00 R08: 0000000000000007 R09: 0000000000000000 [ 84.858699][ T5081] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807bdb8000 [ 84.866812][ T5081] R13: ffff888145211800 R14: ffff888076df0d70 R15: ffff888076df2930 [ 84.875090][ T5081] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 84.884413][ T5081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.891018][ T5081] CR2: 00007ffe04c40000 CR3: 00000000288bf000 CR4: 00000000003506f0 [ 84.899068][ T5081] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.907227][ T5081] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.915278][ T5081] Call Trace: [ 84.918589][ T5081] [ 84.921636][ T5081] diUnmount+0xf1/0x130 [ 84.925880][ T5081] jfs_umount+0x189/0x430 [ 84.930250][ T5081] jfs_put_super+0x85/0x1d0 [ 84.935117][ T5081] ? jfs_quota_off+0x170/0x170 [ 84.939965][ T5081] generic_shutdown_super+0x158/0x480 [ 84.945535][ T5081] kill_block_super+0x9b/0xf0 [ 84.950290][ T5081] deactivate_locked_super+0x98/0x160 [ 84.956041][ T5081] deactivate_super+0xb1/0xd0 [ 84.960798][ T5081] cleanup_mnt+0x2ae/0x3d0 [ 84.965348][ T5081] task_work_run+0x16f/0x270 [ 84.970014][ T5081] ? task_work_cancel+0x30/0x30 [ 84.974979][ T5081] do_exit+0xb42/0x2b60 [ 84.979361][ T5081] ? mm_update_next_owner+0x7b0/0x7b0 [ 84.984868][ T5081] ? _raw_spin_unlock_irq+0x23/0x50 [ 84.990225][ T5081] do_group_exit+0xd4/0x2a0 [ 84.994842][ T5081] __x64_sys_exit_group+0x3e/0x50 [ 85.000090][ T5081] do_syscall_64+0x39/0xb0 [ 85.004856][ T5081] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.010852][ T5081] RIP: 0033:0x7f96b5af96f9 [ 85.015370][ T5081] Code: Unable to access opcode bytes at 0x7f96b5af96cf. [ 85.022499][ T5081] RSP: 002b:00007ffe04c3f4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 85.031434][ T5081] RAX: ffffffffffffffda RBX: 00007f96b5b6f3f0 RCX: 00007f96b5af96f9 [ 85.039461][ T5081] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 85.047652][ T5081] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000002 [ 85.055700][ T5081] R10: 00000000018084a0 R11: 0000000000000246 R12: 00007f96b5b6f3f0 [ 85.063791][ T5081] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 85.071866][ T5081] [ 85.075163][ T5081] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.082468][ T5081] CPU: 0 PID: 5081 Comm: syz-executor358 Not tainted 6.2.0-rc7-next-20230208-syzkaller #0 [ 85.092660][ T5081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023 [ 85.102730][ T5081] Call Trace: [ 85.106031][ T5081] [ 85.108995][ T5081] dump_stack_lvl+0xd9/0x150 [ 85.113624][ T5081] panic+0x61b/0x6c0 [ 85.117638][ T5081] ? panic_smp_self_stop+0x90/0x90 [ 85.122863][ T5081] ? show_trace_log_lvl+0x285/0x390 [ 85.128122][ T5081] ? free_large_kmalloc+0xad/0x100 [ 85.133357][ T5081] check_panic_on_warn+0xb1/0xc0 [ 85.138358][ T5081] __warn+0xf2/0x4f0 [ 85.142296][ T5081] ? free_large_kmalloc+0xad/0x100 [ 85.147450][ T5081] report_bug+0x2da/0x500 [ 85.151912][ T5081] handle_bug+0x3c/0x70 [ 85.156115][ T5081] exc_invalid_op+0x18/0x50 [ 85.160668][ T5081] asm_exc_invalid_op+0x1a/0x20 [ 85.165561][ T5081] RIP: 0010:free_large_kmalloc+0xad/0x100 [ 85.171314][ T5081] Code: ee 48 89 ef 5d 41 5c 41 5d e9 0f 9a 0d 00 e8 da 55 d0 ff 44 89 e2 be 06 00 00 00 48 89 ef e8 0a 31 20 00 e8 75 53 d0 ff eb c6 <0f> 0b 80 3d 61 91 a5 0c 00 74 1f 48 8b 74 24 20 4c 89 e7 45 31 ed [ 85.191039][ T5081] RSP: 0018:ffffc90003e2fbc8 EFLAGS: 00010246 [ 85.197138][ T5081] RAX: 00fff00000000000 RBX: ffff888076df2930 RCX: 0000000000000000 [ 85.205133][ T5081] RDX: 0000000000000000 RSI: ffff88807bdb8000 RDI: ffffea0001ef6e00 [ 85.213216][ T5081] RBP: ffffea0001ef6e00 R08: 0000000000000007 R09: 0000000000000000 [ 85.221308][ T5081] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807bdb8000 [ 85.229401][ T5081] R13: ffff888145211800 R14: ffff888076df0d70 R15: ffff888076df2930 [ 85.237418][ T5081] ? free_large_kmalloc+0x15/0x100 [ 85.242578][ T5081] diUnmount+0xf1/0x130 [ 85.246779][ T5081] jfs_umount+0x189/0x430 [ 85.251168][ T5081] jfs_put_super+0x85/0x1d0 [ 85.255708][ T5081] ? jfs_quota_off+0x170/0x170 [ 85.260954][ T5081] generic_shutdown_super+0x158/0x480 [ 85.266359][ T5081] kill_block_super+0x9b/0xf0 [ 85.271065][ T5081] deactivate_locked_super+0x98/0x160 [ 85.276475][ T5081] deactivate_super+0xb1/0xd0 [ 85.281278][ T5081] cleanup_mnt+0x2ae/0x3d0 [ 85.285725][ T5081] task_work_run+0x16f/0x270 [ 85.290360][ T5081] ? task_work_cancel+0x30/0x30 [ 85.295363][ T5081] do_exit+0xb42/0x2b60 [ 85.299602][ T5081] ? mm_update_next_owner+0x7b0/0x7b0 [ 85.305532][ T5081] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.310862][ T5081] do_group_exit+0xd4/0x2a0 [ 85.315399][ T5081] __x64_sys_exit_group+0x3e/0x50 [ 85.320451][ T5081] do_syscall_64+0x39/0xb0 [ 85.325261][ T5081] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.331193][ T5081] RIP: 0033:0x7f96b5af96f9 [ 85.335626][ T5081] Code: Unable to access opcode bytes at 0x7f96b5af96cf. [ 85.342657][ T5081] RSP: 002b:00007ffe04c3f4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 85.351360][ T5081] RAX: ffffffffffffffda RBX: 00007f96b5b6f3f0 RCX: 00007f96b5af96f9 [ 85.359438][ T5081] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 85.367426][ T5081] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000002 [ 85.375416][ T5081] R10: 00000000018084a0 R11: 0000000000000246 R12: 00007f96b5b6f3f0 [ 85.383404][ T5081] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 85.391412][ T5081] [ 85.394676][ T5081] Kernel Offset: disabled [ 85.399111][ T5081] Rebooting in 86400 seconds..