./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor540050313 <...> Warning: Permanently added '10.128.1.189' (ECDSA) to the list of known hosts. execve("./syz-executor540050313", ["./syz-executor540050313"], 0x7fff683a0970 /* 10 vars */) = 0 brk(NULL) = 0x555556c53000 brk(0x555556c53c40) = 0x555556c53c40 arch_prctl(ARCH_SET_FS, 0x555556c53300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor540050313", 4096) = 27 brk(0x555556c74c40) = 0x555556c74c40 brk(0x555556c75000) = 0x555556c75000 mprotect(0x7f8996cde000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f898e81b000 syzkaller login: [ 45.319682][ T4998] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4998 'syz-executor540' write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xca\x7e\x21\x01\xb8\xf1\x48\x38\x8e\x2d\x76\x37\xb9\x06\x20\xe6\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x05\x01\x00\x00\x00\x00\x00\x00\x05\x02\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x02\x70"..., 16777216) = 16777216 munmap(0x7f898e81b000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 45.422236][ T4998] loop0: detected capacity change from 0 to 32768 [ 45.436749][ T4998] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 45.462272][ T4998] XFS (loop0): Ending clean mount mount("/dev/loop0", "./file0", "xfs", 0, "inode64,gqnoenforce,largeio,,nouuid") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 ioctl(4, _IOC(_IOC_READ|_IOC_WRITE, 0x58, 0x72, 0x10), 0x20000380) = 0 openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 ioctl(5, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0) = -1 ENOSPC (No space left on device) openat(AT_FDCWD, ".", O_RDONLY) = 6 [ 45.469745][ T4998] XFS (loop0): Quotacheck needed: Please wait. [ 45.488472][ T4998] XFS (loop0): Quotacheck: Done. [ 45.504213][ T4998] XFS (loop0): xfs_buf_map_verify: daddr 0x7ffffffffff0 out of range, EOFS 0x8000 [ 45.514367][ T4998] ------------[ cut here ]------------ [ 45.519946][ T4998] WARNING: CPU: 0 PID: 4998 at fs/xfs/xfs_buf.c:535 xfs_buf_get_map+0x1da6/0x2fc0 [ 45.529326][ T4998] Modules linked in: [ 45.533201][ T4998] CPU: 0 PID: 4998 Comm: syz-executor540 Not tainted 6.4.0-syzkaller-01406-ge8f75c0270d9 #0 [ 45.543315][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 45.553419][ T4998] RIP: 0010:xfs_buf_get_map+0x1da6/0x2fc0 [ 45.559203][ T4998] Code: 32 75 fe 48 8b b5 50 ff ff ff 49 89 d9 4d 89 f8 48 c7 c1 a0 88 8b 8a 48 c7 c2 60 84 8b 8a 48 c7 c7 c0 84 8b 8a e8 aa 58 06 00 <0f> 0b 41 bd 8b ff ff ff e9 dc ee ff ff e8 f8 31 75 fe 4c 89 e7 e8 [ 45.578907][ T4998] RSP: 0018:ffffc90003aaf560 EFLAGS: 00010286 [ 45.584991][ T4998] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 0000000000000000 [ 45.593007][ T4998] RDX: ffff88802c620000 RSI: ffffffff8315a7c6 RDI: 0000000000000005 [ 45.601013][ T4998] RBP: ffffc90003aaf6a8 R08: 0000000000000005 R09: 0000000000000000 [ 45.609013][ T4998] R10: 00000000ffffffea R11: 0000000000000001 R12: 0000000000000001 [ 45.616983][ T4998] R13: 0000000000000003 R14: dffffc0000000000 R15: 00007ffffffffff0 [ 45.625008][ T4998] FS: 0000555556c53300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 45.633973][ T4998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.640593][ T4998] CR2: 000000000066c7e0 CR3: 0000000022de4000 CR4: 0000000000350ef0 [ 45.649383][ T4998] Call Trace: [ 45.652645][ T4998] [ 45.655554][ T4998] ? __warn+0xe6/0x390 [ 45.659660][ T4998] ? xfs_buf_get_map+0x1da6/0x2fc0 [ 45.664782][ T4998] ? report_bug+0x2da/0x500 [ 45.669337][ T4998] ? handle_bug+0x3c/0x70 [ 45.673678][ T4998] ? exc_invalid_op+0x18/0x50 [ 45.678384][ T4998] ? asm_exc_invalid_op+0x1a/0x20 [ 45.683433][ T4998] ? xfs_printk_level+0x166/0x260 [ 45.688505][ T4998] ? xfs_buf_get_map+0x1da6/0x2fc0 [ 45.693617][ T4998] ? xfs_bmapi_minleft+0x240/0x240 [ 45.698831][ T4998] ? xfs_buf_unlock+0x1e0/0x1e0 [ 45.703704][ T4998] ? xfs_trans_buf_item_match+0x252/0x300 [ 45.709586][ T4998] xfs_trans_get_buf_map+0x298/0x710 [ 45.714893][ T4998] ? xfs_trans_bjoin+0x210/0x210 [ 45.719884][ T4998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 45.725795][ T4998] xfs_dquot_disk_alloc+0x859/0xb80 [ 45.731030][ T4998] ? xfs_dquot_from_disk+0xb70/0xb70 [ 45.736329][ T4998] ? xfs_qm_dquot_logitem_init+0x48/0x90 [ 45.741998][ T4998] xfs_qm_dqread+0x4dd/0x570 [ 45.746681][ T4998] ? xfs_qm_dqdestroy+0x240/0x240 [ 45.751737][ T4998] ? xfs_qm_dqget_cache_lookup+0x3b2/0x810 [ 45.757580][ T4998] xfs_qm_dqget+0x141/0x660 [ 45.762093][ T4998] ? xfs_dquot_to_disk+0x750/0x750 [ 45.767206][ T4998] ? from_kuid_munged+0x130/0x130 [ 45.772354][ T4998] ? xfs_qm_vop_dqalloc+0x599/0xe70 [ 45.777675][ T4998] ? rcu_is_watching+0x12/0xb0 [ 45.782433][ T4998] xfs_qm_vop_dqalloc+0x5f2/0xe70 [ 45.787493][ T4998] ? xfs_qm_mount_quotas+0x690/0x690 [ 45.792806][ T4998] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 45.798677][ T4998] ? from_kgid+0x8b/0xd0 [ 45.802927][ T4998] ? from_vfsgid+0x10f/0x170 [ 45.807548][ T4998] ? make_vfsgid+0x170/0x170 [ 45.812144][ T4998] ? apparmor_capable+0x1dc/0x460 [ 45.817158][ T4998] xfs_setattr_nonsize+0xab1/0xd30 [ 45.822315][ T4998] ? xfs_initxattrs+0x1f0/0x1f0 [ 45.827169][ T4998] ? setattr_prepare+0x140/0x9b0 [ 45.832170][ T4998] ? xfs_vn_change_ok+0xc0/0x160 [ 45.837122][ T4998] xfs_vn_setattr+0x2ce/0x5e0 [ 45.841862][ T4998] ? xfs_setattr_size+0xc00/0xc00 [ 45.846902][ T4998] ? make_vfsgid+0x170/0x170 [ 45.851546][ T4998] ? xfs_setattr_size+0xc00/0xc00 [ 45.856577][ T4998] notify_change+0xb2c/0x1180 [ 45.861302][ T4998] ? chown_common+0x57f/0x650 [ 45.865990][ T4998] chown_common+0x57f/0x650 [ 45.870532][ T4998] ? __ia32_sys_chmod+0x80/0x80 [ 45.875393][ T4998] ? lock_sync+0x190/0x190 [ 45.879859][ T4998] ? __mnt_want_write+0x1fe/0x2e0 [ 45.884891][ T4998] ksys_fchown+0x118/0x170 [ 45.889338][ T4998] __x64_sys_fchown+0x73/0xb0 [ 45.894047][ T4998] do_syscall_64+0x39/0xb0 [ 45.898490][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.904389][ T4998] RIP: 0033:0x7f8996c67969 [ 45.908848][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.928495][ T4998] RSP: 002b:00007ffea725dd68 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 45.936893][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8996c67969 [ 45.944941][ T4998] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000000000000006 [ 45.952938][ T4998] RBP: 00007f8996c27200 R08: 0000000000000000 R09: 0000000000000000 [ 45.960966][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8996c27290 [ 45.968980][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.976967][ T4998] [ 45.980023][ T4998] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 45.987320][ T4998] CPU: 0 PID: 4998 Comm: syz-executor540 Not tainted 6.4.0-syzkaller-01406-ge8f75c0270d9 #0 [ 45.997368][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 46.007430][ T4998] Call Trace: [ 46.010701][ T4998] [ 46.013614][ T4998] dump_stack_lvl+0xd9/0x150 [ 46.018194][ T4998] panic+0x686/0x730 [ 46.022076][ T4998] ? panic_smp_self_stop+0xa0/0xa0 [ 46.027174][ T4998] ? show_trace_log_lvl+0x284/0x390 [ 46.032367][ T4998] ? xfs_buf_get_map+0x1da6/0x2fc0 [ 46.037468][ T4998] check_panic_on_warn+0xb1/0xc0 [ 46.042406][ T4998] __warn+0xf2/0x390 [ 46.046283][ T4998] ? xfs_buf_get_map+0x1da6/0x2fc0 [ 46.051382][ T4998] report_bug+0x2da/0x500 [ 46.055712][ T4998] handle_bug+0x3c/0x70 [ 46.059864][ T4998] exc_invalid_op+0x18/0x50 [ 46.064354][ T4998] asm_exc_invalid_op+0x1a/0x20 [ 46.069186][ T4998] RIP: 0010:xfs_buf_get_map+0x1da6/0x2fc0 [ 46.074885][ T4998] Code: 32 75 fe 48 8b b5 50 ff ff ff 49 89 d9 4d 89 f8 48 c7 c1 a0 88 8b 8a 48 c7 c2 60 84 8b 8a 48 c7 c7 c0 84 8b 8a e8 aa 58 06 00 <0f> 0b 41 bd 8b ff ff ff e9 dc ee ff ff e8 f8 31 75 fe 4c 89 e7 e8 [ 46.094481][ T4998] RSP: 0018:ffffc90003aaf560 EFLAGS: 00010286 [ 46.100558][ T4998] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 0000000000000000 [ 46.108513][ T4998] RDX: ffff88802c620000 RSI: ffffffff8315a7c6 RDI: 0000000000000005 [ 46.116470][ T4998] RBP: ffffc90003aaf6a8 R08: 0000000000000005 R09: 0000000000000000 [ 46.124442][ T4998] R10: 00000000ffffffea R11: 0000000000000001 R12: 0000000000000001 [ 46.132399][ T4998] R13: 0000000000000003 R14: dffffc0000000000 R15: 00007ffffffffff0 [ 46.140364][ T4998] ? xfs_printk_level+0x166/0x260 [ 46.145386][ T4998] ? xfs_bmapi_minleft+0x240/0x240 [ 46.150501][ T4998] ? xfs_buf_unlock+0x1e0/0x1e0 [ 46.155343][ T4998] ? xfs_trans_buf_item_match+0x252/0x300 [ 46.161063][ T4998] xfs_trans_get_buf_map+0x298/0x710 [ 46.166338][ T4998] ? xfs_trans_bjoin+0x210/0x210 [ 46.171265][ T4998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 46.177158][ T4998] xfs_dquot_disk_alloc+0x859/0xb80 [ 46.182351][ T4998] ? xfs_dquot_from_disk+0xb70/0xb70 [ 46.187650][ T4998] ? xfs_qm_dquot_logitem_init+0x48/0x90 [ 46.193282][ T4998] xfs_qm_dqread+0x4dd/0x570 [ 46.197863][ T4998] ? xfs_qm_dqdestroy+0x240/0x240 [ 46.202890][ T4998] ? xfs_qm_dqget_cache_lookup+0x3b2/0x810 [ 46.208694][ T4998] xfs_qm_dqget+0x141/0x660 [ 46.213195][ T4998] ? xfs_dquot_to_disk+0x750/0x750 [ 46.218296][ T4998] ? from_kuid_munged+0x130/0x130 [ 46.223322][ T4998] ? xfs_qm_vop_dqalloc+0x599/0xe70 [ 46.228518][ T4998] ? rcu_is_watching+0x12/0xb0 [ 46.233285][ T4998] xfs_qm_vop_dqalloc+0x5f2/0xe70 [ 46.238314][ T4998] ? xfs_qm_mount_quotas+0x690/0x690 [ 46.243595][ T4998] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 46.249515][ T4998] ? from_kgid+0x8b/0xd0 [ 46.253770][ T4998] ? from_vfsgid+0x10f/0x170 [ 46.258378][ T4998] ? make_vfsgid+0x170/0x170 [ 46.262967][ T4998] ? apparmor_capable+0x1dc/0x460 [ 46.268168][ T4998] xfs_setattr_nonsize+0xab1/0xd30 [ 46.273296][ T4998] ? xfs_initxattrs+0x1f0/0x1f0 [ 46.278159][ T4998] ? setattr_prepare+0x140/0x9b0 [ 46.283100][ T4998] ? xfs_vn_change_ok+0xc0/0x160 [ 46.288032][ T4998] xfs_vn_setattr+0x2ce/0x5e0 [ 46.292696][ T4998] ? xfs_setattr_size+0xc00/0xc00 [ 46.297707][ T4998] ? make_vfsgid+0x170/0x170 [ 46.302323][ T4998] ? xfs_setattr_size+0xc00/0xc00 [ 46.307335][ T4998] notify_change+0xb2c/0x1180 [ 46.312013][ T4998] ? chown_common+0x57f/0x650 [ 46.316683][ T4998] chown_common+0x57f/0x650 [ 46.321204][ T4998] ? __ia32_sys_chmod+0x80/0x80 [ 46.326048][ T4998] ? lock_sync+0x190/0x190 [ 46.330464][ T4998] ? __mnt_want_write+0x1fe/0x2e0 [ 46.335501][ T4998] ksys_fchown+0x118/0x170 [ 46.339924][ T4998] __x64_sys_fchown+0x73/0xb0 [ 46.344605][ T4998] do_syscall_64+0x39/0xb0 [ 46.349018][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 46.354906][ T4998] RIP: 0033:0x7f8996c67969 [ 46.359309][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 46.378926][ T4998] RSP: 002b:00007ffea725dd68 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 46.387347][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8996c67969 [ 46.395312][ T4998] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000000000000006 [ 46.403273][ T4998] RBP: 00007f8996c27200 R08: 0000000000000000 R09: 0000000000000000 [ 46.411232][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8996c27290 [ 46.419187][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 46.427157][ T4998] [ 46.431019][ T4998] Kernel Offset: disabled [ 46.435419][ T4998] Rebooting in 86400 seconds..