./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3092898816 <...> DUID 00:04:2f:bc:f2:2f:e4:1d:55:f7:99:3b:0f:15:66:5c:e9:07 forked to background, child pid 4634 [ 32.649556][ T4635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.673966][ T4635] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.78' (ECDSA) to the list of known hosts. execve("./syz-executor3092898816", ["./syz-executor3092898816"], 0x7ffce847eaa0 /* 10 vars */) = 0 brk(NULL) = 0x555556e93000 brk(0x555556e93c40) = 0x555556e93c40 arch_prctl(ARCH_SET_FS, 0x555556e93300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3092898816", 4096) = 28 brk(0x555556eb4c40) = 0x555556eb4c40 brk(0x555556eb5000) = 0x555556eb5000 mprotect(0x7f4a0eb05000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4a0664c000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 munmap(0x7f4a0664c000, 262144) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 syzkaller login: [ 53.502351][ T5059] loop0: detected capacity change from 0 to 512 [ 53.567068][ T5059] EXT4-fs (loop0): Test dummy encryption mode enabled [ 53.574185][ T5059] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.587310][ T5059] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.602583][ T5059] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2197: inode #15: comm syz-executor309: corrupted in-inode xattr mount("/dev/loop0", "./bus", "ext4", MS_NOSUID|MS_NODEV|MS_NOEXEC, "usrjquota=,abort,debug_want_extra_isize=0x000000000000002c,test_dummy_encryption,nojournal_checksum,"...) = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "./file0", O_RDONLY) = 4 [ 53.615846][ T5059] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor309: couldn't read orphan inode 15 (err -117) [ 53.628688][ T5059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. mkdirat(4, "./bus", 000) = 0 [ 53.717475][ T5059] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 53.782824][ T5059] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 53.790588][ T5059] ------------[ cut here ]------------ [ 53.796766][ T5059] WARNING: CPU: 0 PID: 5059 at mm/page_alloc.c:5525 __alloc_pages+0x30a/0x560 [ 53.806195][ T5059] Modules linked in: [ 53.810098][ T5059] CPU: 0 PID: 5059 Comm: syz-executor309 Not tainted 6.2.0-rc1-syzkaller #0 [ 53.819336][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.829977][ T5059] RIP: 0010:__alloc_pages+0x30a/0x560 [ 53.835676][ T5059] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 65 46 c4 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45 [ 53.855861][ T5059] RSP: 0018:ffffc90003c7f1e0 EFLAGS: 00010246 [ 53.862065][ T5059] RAX: ffffc90003c7f240 RBX: 0000000000000014 RCX: 0000000000000000 [ 53.870037][ T5059] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003c7f268 [ 53.878048][ T5059] RBP: ffffc90003c7f2f8 R08: dffffc0000000000 R09: ffffc90003c7f240 [ 53.886082][ T5059] R10: fffff5200078fe4d R11: 1ffff9200078fe48 R12: 0000000000040d40 [ 53.894102][ T5059] R13: 1ffff9200078fe44 R14: dffffc0000000000 R15: 1ffff9200078fe40 [ 53.902166][ T5059] FS: 0000555556e93300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 53.911099][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.917741][ T5059] CR2: 00007f0c65796300 CR3: 0000000028cf4000 CR4: 00000000003506e0 [ 53.925790][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.933808][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.941855][ T5059] Call Trace: [ 53.945159][ T5059] [ 53.948126][ T5059] ? zone_statistics+0x160/0x160 [ 53.953154][ T5059] ? ext4_match+0x21b/0x6e0 [ 53.957738][ T5059] __kmalloc_large_node+0x95/0x1f0 [ 53.962922][ T5059] ? ext4_update_inline_data+0x236/0x6b0 [ 53.968689][ T5059] __kmalloc+0xfe/0x190 [ 53.972906][ T5059] ext4_update_inline_data+0x236/0x6b0 [ 53.978391][ T5059] ? zero_user_segments+0x6b0/0x6b0 [ 53.983829][ T5059] ? get_max_inline_xattr_value_size+0x3f8/0x510 [ 53.990172][ T5059] ext4_try_add_inline_entry+0x334/0x990 [ 53.995917][ T5059] ? ext4_fname_setup_filename+0x1cc/0x2a0 [ 54.001776][ T5059] ? ext4_da_convert_inline_data_to_extent+0xa30/0xa30 [ 54.008722][ T5059] ext4_add_entry+0x518/0xfe0 [ 54.013476][ T5059] ? ext4_inc_count+0x190/0x190 [ 54.018367][ T5059] ext4_add_nondir+0x96/0x260 [ 54.023113][ T5059] ext4_create+0x36c/0x560 [ 54.027550][ T5059] ? ext4_lookup+0x740/0x740 [ 54.032208][ T5059] ? generic_permission+0x229/0x500 [ 54.037422][ T5059] ? bpf_lsm_inode_create+0x5/0x10 [ 54.042622][ T5059] ? security_inode_create+0xdd/0x120 [ 54.048015][ T5059] ? ext4_lookup+0x740/0x740 [ 54.052665][ T5059] path_openat+0x12be/0x2de0 [ 54.057296][ T5059] ? do_filp_open+0x500/0x500 [ 54.062321][ T5059] ? alloc_fd+0x5a7/0x640 [ 54.066685][ T5059] do_filp_open+0x275/0x500 [ 54.071189][ T5059] ? vfs_tmpfile+0x490/0x490 [ 54.075863][ T5059] ? _raw_spin_unlock+0x24/0x40 [ 54.080739][ T5059] ? alloc_fd+0x5a7/0x640 [ 54.085136][ T5059] do_sys_openat2+0x13b/0x500 [ 54.089824][ T5059] ? do_raw_spin_unlock+0x134/0x8a0 [ 54.095083][ T5059] ? do_sys_open+0x220/0x220 [ 54.099683][ T5059] ? _raw_spin_unlock_irq+0x2a/0x40 [ 54.104951][ T5059] ? ptrace_notify+0x245/0x340 [ 54.109731][ T5059] __x64_sys_openat+0x243/0x290 [ 54.114637][ T5059] ? __ia32_sys_open+0x270/0x270 [ 54.119673][ T5059] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 54.125728][ T5059] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 54.131727][ T5059] do_syscall_64+0x2b/0x70 [ 54.136212][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.142184][ T5059] RIP: 0033:0x7f4a0ea98ba9 [ 54.146591][ T5059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 54.166262][ T5059] RSP: 002b:00007ffeb52f6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.174738][ T5059] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a0ea98ba9 [ 54.182836][ T5059] RDX: 000000000000275a RSI: 0000000020000080 RDI: 0000000000000004 [ 54.190832][ T5059] RBP: 00007f4a0ea581b0 R08: 0000000000000000 R09: 0000000000000000 [ 54.198918][ T5059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a0ea58240 [ 54.206943][ T5059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.215069][ T5059] [ 54.218101][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.225369][ T5059] CPU: 1 PID: 5059 Comm: syz-executor309 Not tainted 6.2.0-rc1-syzkaller #0 [ 54.234026][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 54.244152][ T5059] Call Trace: [ 54.247471][ T5059] [ 54.250479][ T5059] dump_stack_lvl+0x1e3/0x2d0 [ 54.255156][ T5059] ? nf_tcp_handle_invalid+0x630/0x630 [ 54.260601][ T5059] ? panic+0x770/0x770 [ 54.264663][ T5059] ? vscnprintf+0x59/0x80 [ 54.268984][ T5059] ? __alloc_pages+0x2e0/0x560 [ 54.273756][ T5059] panic+0x316/0x770 [ 54.277649][ T5059] ? __warn+0x16d/0x2d0 [ 54.281816][ T5059] ? memcpy_page_flushcache+0x100/0x100 [ 54.287361][ T5059] ? __alloc_pages+0x30a/0x560 [ 54.292122][ T5059] __warn+0x284/0x2d0 [ 54.296108][ T5059] ? __alloc_pages+0x30a/0x560 [ 54.300870][ T5059] report_bug+0x1b3/0x2d0 [ 54.305240][ T5059] handle_bug+0x3d/0x70 [ 54.309394][ T5059] exc_invalid_op+0x16/0x40 [ 54.313896][ T5059] asm_exc_invalid_op+0x16/0x20 [ 54.318751][ T5059] RIP: 0010:__alloc_pages+0x30a/0x560 [ 54.324133][ T5059] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 65 46 c4 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45 [ 54.343824][ T5059] RSP: 0018:ffffc90003c7f1e0 EFLAGS: 00010246 [ 54.349892][ T5059] RAX: ffffc90003c7f240 RBX: 0000000000000014 RCX: 0000000000000000 [ 54.357861][ T5059] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003c7f268 [ 54.365829][ T5059] RBP: ffffc90003c7f2f8 R08: dffffc0000000000 R09: ffffc90003c7f240 [ 54.373804][ T5059] R10: fffff5200078fe4d R11: 1ffff9200078fe48 R12: 0000000000040d40 [ 54.381770][ T5059] R13: 1ffff9200078fe44 R14: dffffc0000000000 R15: 1ffff9200078fe40 [ 54.389759][ T5059] ? zone_statistics+0x160/0x160 [ 54.394708][ T5059] ? ext4_match+0x21b/0x6e0 [ 54.399221][ T5059] __kmalloc_large_node+0x95/0x1f0 [ 54.404331][ T5059] ? ext4_update_inline_data+0x236/0x6b0 [ 54.409963][ T5059] __kmalloc+0xfe/0x190 [ 54.414115][ T5059] ext4_update_inline_data+0x236/0x6b0 [ 54.419586][ T5059] ? zero_user_segments+0x6b0/0x6b0 [ 54.424801][ T5059] ? get_max_inline_xattr_value_size+0x3f8/0x510 [ 54.431128][ T5059] ext4_try_add_inline_entry+0x334/0x990 [ 54.436757][ T5059] ? ext4_fname_setup_filename+0x1cc/0x2a0 [ 54.442576][ T5059] ? ext4_da_convert_inline_data_to_extent+0xa30/0xa30 [ 54.449432][ T5059] ext4_add_entry+0x518/0xfe0 [ 54.454115][ T5059] ? ext4_inc_count+0x190/0x190 [ 54.458979][ T5059] ext4_add_nondir+0x96/0x260 [ 54.463659][ T5059] ext4_create+0x36c/0x560 [ 54.468078][ T5059] ? ext4_lookup+0x740/0x740 [ 54.472666][ T5059] ? generic_permission+0x229/0x500 [ 54.477868][ T5059] ? bpf_lsm_inode_create+0x5/0x10 [ 54.482979][ T5059] ? security_inode_create+0xdd/0x120 [ 54.488380][ T5059] ? ext4_lookup+0x740/0x740 [ 54.492970][ T5059] path_openat+0x12be/0x2de0 [ 54.497586][ T5059] ? do_filp_open+0x500/0x500 [ 54.502258][ T5059] ? alloc_fd+0x5a7/0x640 [ 54.506600][ T5059] do_filp_open+0x275/0x500 [ 54.511105][ T5059] ? vfs_tmpfile+0x490/0x490 [ 54.515713][ T5059] ? _raw_spin_unlock+0x24/0x40 [ 54.520561][ T5059] ? alloc_fd+0x5a7/0x640 [ 54.524911][ T5059] do_sys_openat2+0x13b/0x500 [ 54.529586][ T5059] ? do_raw_spin_unlock+0x134/0x8a0 [ 54.534870][ T5059] ? do_sys_open+0x220/0x220 [ 54.539463][ T5059] ? _raw_spin_unlock_irq+0x2a/0x40 [ 54.544666][ T5059] ? ptrace_notify+0x245/0x340 [ 54.549602][ T5059] __x64_sys_openat+0x243/0x290 [ 54.554456][ T5059] ? __ia32_sys_open+0x270/0x270 [ 54.559392][ T5059] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 54.565379][ T5059] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 54.571373][ T5059] do_syscall_64+0x2b/0x70 [ 54.575789][ T5059] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.581680][ T5059] RIP: 0033:0x7f4a0ea98ba9 [ 54.586176][ T5059] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 54.605861][ T5059] RSP: 002b:00007ffeb52f6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 54.614270][ T5059] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4a0ea98ba9 [ 54.622240][ T5059] RDX: 000000000000275a RSI: 0000000020000080 RDI: 0000000000000004 [ 54.630206][ T5059] RBP: 00007f4a0ea581b0 R08: 0000000000000000 R09: 0000000000000000 [ 54.638262][ T5059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a0ea58240 [ 54.646237][ T5059] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.654218][ T5059] [ 54.657416][ T5059] Kernel Offset: disabled [ 54.661823][ T5059] Rebooting in 86400 seconds..