./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2287269232 <...> Warning: Permanently added '10.128.0.247' (ED25519) to the list of known hosts. execve("./syz-executor2287269232", ["./syz-executor2287269232"], 0x7fff9a1b4de0 /* 10 vars */) = 0 brk(NULL) = 0x555575d29000 brk(0x555575d29d00) = 0x555575d29d00 arch_prctl(ARCH_SET_FS, 0x555575d29380) = 0 set_tid_address(0x555575d29650) = 5233 set_robust_list(0x555575d29660, 24) = 0 rseq(0x555575d29ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2287269232", 4096) = 28 getrandom("\xae\x92\x9a\x8d\x01\xce\xb0\xfa", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555575d29d00 brk(0x555575d4ad00) = 0x555575d4ad00 brk(0x555575d4b000) = 0x555575d4b000 mprotect(0x7fc5c4b3d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5234 attached [pid 5234] set_robust_list(0x555575d29660, 24 [pid 5233] <... clone resumed>, child_tidptr=0x555575d29650) = 5234 [pid 5233] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5234] <... set_robust_list resumed>) = 0 [pid 5234] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5235 attached [pid 5233] <... clone resumed>, child_tidptr=0x555575d29650) = 5235 ./strace-static-x86_64: Process 5236 attached [pid 5233] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5235] set_robust_list(0x555575d29660, 24 [pid 5236] set_robust_list(0x555575d29660, 24 [pid 5234] <... clone resumed>, child_tidptr=0x555575d29650) = 5236 [pid 5236] <... set_robust_list resumed>) = 0 [pid 5235] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5237 attached [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5233] <... clone resumed>, child_tidptr=0x555575d29650) = 5237 [pid 5237] set_robust_list(0x555575d29660, 24 [pid 5236] <... prctl resumed>) = 0 [pid 5235] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5237] <... set_robust_list resumed>) = 0 [pid 5237] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5233] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5236] setpgid(0, 0./strace-static-x86_64: Process 5240 attached ./strace-static-x86_64: Process 5239 attached ./strace-static-x86_64: Process 5238 attached [pid 5237] <... clone resumed>, child_tidptr=0x555575d29650) = 5238 [pid 5236] <... setpgid resumed>) = 0 [pid 5235] <... clone resumed>, child_tidptr=0x555575d29650) = 5239 [pid 5233] <... clone resumed>, child_tidptr=0x555575d29650) = 5240 [pid 5240] set_robust_list(0x555575d29660, 24 [pid 5239] set_robust_list(0x555575d29660, 24 [pid 5238] set_robust_list(0x555575d29660, 24 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5240] <... set_robust_list resumed>) = 0 [pid 5239] <... set_robust_list resumed>) = 0 [pid 5238] <... set_robust_list resumed>) = 0 [pid 5233] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5239] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5238] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5236] <... openat resumed>) = 3 [pid 5239] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5241 attached [pid 5239] setpgid(0, 0 [pid 5238] <... prctl resumed>) = 0 [pid 5236] write(3, "1000", 4 [pid 5238] setpgid(0, 0 [pid 5239] <... setpgid resumed>) = 0 [pid 5238] <... setpgid resumed>) = 0 [pid 5236] <... write resumed>) = 4 ./strace-static-x86_64: Process 5242 attached [pid 5233] <... clone resumed>, child_tidptr=0x555575d29650) = 5241 [pid 5241] set_robust_list(0x555575d29660, 24 [pid 5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5236] close(3 [pid 5242] set_robust_list(0x555575d29660, 24 [pid 5241] <... set_robust_list resumed>) = 0 [pid 5238] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5242] <... set_robust_list resumed>) = 0 [pid 5242] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5241] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5240] <... clone resumed>, child_tidptr=0x555575d29650) = 5242 executing program [pid 5236] <... close resumed>) = 0 [pid 5239] <... openat resumed>) = 3 [pid 5238] <... openat resumed>) = 3 [pid 5236] write(1, "executing program\n", 18./strace-static-x86_64: Process 5243 attached [pid 5242] <... prctl resumed>) = 0 [pid 5239] write(3, "1000", 4 [pid 5238] write(3, "1000", 4 [pid 5236] <... write resumed>) = 18 [pid 5243] set_robust_list(0x555575d29660, 24 [pid 5242] setpgid(0, 0 [pid 5241] <... clone resumed>, child_tidptr=0x555575d29650) = 5243 [pid 5239] <... write resumed>) = 4 [pid 5238] <... write resumed>) = 4 [pid 5236] creat("./file0", 000 [pid 5243] <... set_robust_list resumed>) = 0 [pid 5242] <... setpgid resumed>) = 0 [pid 5239] close(3 [pid 5238] close(3 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5242] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5239] <... close resumed>) = 0 [pid 5238] <... close resumed>) = 0 [pid 5242] <... openat resumed>) = 3 [pid 5239] write(1, "executing program\n", 18executing program executing program [pid 5238] write(1, "executing program\n", 18 [pid 5242] write(3, "1000", 4 [pid 5239] <... write resumed>) = 18 [pid 5238] <... write resumed>) = 18 [pid 5236] <... creat resumed>) = 3 [pid 5243] <... prctl resumed>) = 0 [pid 5242] <... write resumed>) = 4 [pid 5243] setpgid(0, 0 [pid 5242] close(3 [pid 5239] creat("./file0", 000 [pid 5238] creat("./file0", 000 [pid 5236] pipe2( [pid 5243] <... setpgid resumed>) = 0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5242] <... close resumed>) = 0 [pid 5238] <... creat resumed>) = 3 [pid 5236] <... pipe2 resumed>[4, 5], 0) = 0 [pid 5243] <... openat resumed>) = 3 executing program [pid 5242] write(1, "executing program\n", 18 [pid 5239] <... creat resumed>) = 3 [pid 5238] pipe2( [pid 5236] dup(5 [pid 5243] write(3, "1000", 4 [pid 5242] <... write resumed>) = 18 [pid 5239] pipe2( [pid 5236] <... dup resumed>) = 6 [pid 5243] <... write resumed>) = 4 [pid 5238] <... pipe2 resumed>[4, 5], 0) = 0 [pid 5243] close(3 [pid 5239] <... pipe2 resumed>[4, 5], 0) = 0 [pid 5243] <... close resumed>) = 0 [pid 5243] write(1, "executing program\n", 18executing program ) = 18 [pid 5242] creat("./file0", 000 [pid 5239] dup(5 [pid 5238] dup(5 [pid 5236] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000004,wfdno=0x0000000000000006,cache=mmap,k" [pid 5242] <... creat resumed>) = 3 [pid 5239] <... dup resumed>) = 6 [pid 5238] <... dup resumed>) = 6 [pid 5243] creat("./file0", 000 [pid 5238] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000004,wfdno=0x0000000000000006,cache=mmap,k" [pid 5243] <... creat resumed>) = 3 [pid 5239] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000004,wfdno=0x0000000000000006,cache=mmap,k" [pid 5243] pipe2( [pid 5242] pipe2( [pid 5243] <... pipe2 resumed>[4, 5], 0) = 0 [pid 5242] <... pipe2 resumed>[4, 5], 0) = 0 [pid 5243] dup(5 [pid 5242] dup(5 [pid 5243] <... dup resumed>) = 6 [pid 5243] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000004,wfdno=0x0000000000000006,cache=mmap,k" [pid 5242] <... dup resumed>) = 6 [ 55.382040][ T5238] ------------[ cut here ]------------ [ 55.387781][ T5238] kmem_cache of name '9p-fcall-cache-(null)' already exists [ 55.400671][ T5238] WARNING: CPU: 0 PID: 5238 at mm/slab_common.c:108 __kmem_cache_create_args+0xa7/0x320 [ 55.410689][ T5238] Modules linked in: [ 55.414987][ T5238] CPU: 0 UID: 0 PID: 5238 Comm: syz-executor228 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 55.425664][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.435843][ T5238] RIP: 0010:__kmem_cache_create_args+0xa7/0x320 [ 55.442136][ T5238] Code: 8e 48 8b 1b 48 39 eb 74 25 48 8b 7b f8 4c 89 fe e8 ce 95 e7 09 85 c0 75 e8 90 48 c7 c7 e7 08 0c 8e 4c 89 fe e8 ea 59 78 ff 90 <0f> 0b 90 90 4c 89 ff be 20 00 00 00 e8 28 97 e7 09 48 85 c0 0f 85 [ 55.461805][ T5238] RSP: 0018:ffffc90003b27788 EFLAGS: 00010246 [ 55.467973][ T5238] RAX: 2fb66cc0785cd500 RBX: ffff88803255cba8 RCX: ffff888020bd3c00 [ 55.476000][ T5238] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 55.484015][ T5238] RBP: ffffffff8ea20cf8 R08: ffffffff8155d7b2 R09: fffffbfff1cfa3e0 [ 55.492005][ T5238] R10: dffffc0000000000 R11: fffffbfff1cfa3e0 R12: 0000000000020018 [ 55.500030][ T5238] R13: 0000000000000000 R14: ffffc90003b27860 R15: ffff88802d4f3880 [ 55.508079][ T5238] FS: 0000555575d29380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 55.517391][ T5238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.524029][ T5238] CR2: 00007fc5c4ae0560 CR3: 0000000078888000 CR4: 00000000003526f0 [ 55.532007][ T5238] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.540024][ T5238] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.548067][ T5238] Call Trace: [ 55.551450][ T5238] [ 55.554425][ T5238] ? __warn+0x168/0x4e0 [ 55.558609][ T5238] ? __kmem_cache_create_args+0xa7/0x320 [ 55.564330][ T5238] ? report_bug+0x2b3/0x500 [ 55.568861][ T5238] ? __kmem_cache_create_args+0xa7/0x320 [ 55.574632][ T5238] ? handle_bug+0x60/0x90 [ 55.578971][ T5238] ? exc_invalid_op+0x1a/0x50 [ 55.583703][ T5238] ? asm_exc_invalid_op+0x1a/0x20 [ 55.588742][ T5238] ? __warn_printk+0x292/0x360 [ 55.593498][ T5238] ? __kmem_cache_create_args+0xa7/0x320 [ 55.599214][ T5238] ? __kmem_cache_create_args+0xa6/0x320 [ 55.605046][ T5238] p9_client_create+0xbc0/0x1150 [ 55.609994][ T5238] ? __pfx_p9_client_create+0x10/0x10 [ 55.615408][ T5238] ? __asan_memset+0x23/0x50 [ 55.620032][ T5238] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 55.625953][ T5238] ? __raw_spin_lock_init+0x45/0x100 [ 55.631280][ T5238] v9fs_session_init+0x1e4/0x1b80 [ 55.636415][ T5238] ? __pfx_v9fs_session_init+0x10/0x10 [ 55.641936][ T5238] ? __kasan_kmalloc+0x98/0xb0 [ 55.646848][ T5238] ? __kmalloc_cache_noprof+0x243/0x390 [ 55.652820][ T5238] ? v9fs_mount+0xb2/0xaa0 [ 55.657346][ T5238] v9fs_mount+0xcf/0xaa0 [ 55.661616][ T5238] ? __pfx_aa_get_newest_label+0x10/0x10 [ 55.667309][ T5238] ? __pfx_v9fs_mount+0x10/0x10 [ 55.672188][ T5238] ? __kmalloc_cache_noprof+0x243/0x390 [ 55.677839][ T5238] legacy_get_tree+0xee/0x190 [ 55.682643][ T5238] ? __pfx_v9fs_mount+0x10/0x10 [ 55.687582][ T5238] vfs_get_tree+0x90/0x2b0 [ 55.692024][ T5238] do_new_mount+0x2be/0xb40 [ 55.696593][ T5238] ? __pfx_do_new_mount+0x10/0x10 [ 55.701639][ T5238] __se_sys_mount+0x2d6/0x3c0 [ 55.706386][ T5238] ? __pfx___se_sys_mount+0x10/0x10 [ 55.711612][ T5238] ? exc_page_fault+0x590/0x8c0 [ 55.716544][ T5238] ? __x64_sys_mount+0x20/0xc0 [ 55.721341][ T5238] do_syscall_64+0xf3/0x230 [ 55.725905][ T5238] ? clear_bhb_loop+0x35/0x90 [ 55.730602][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.736550][ T5238] RIP: 0033:0x7fc5c4ac9e69 [ 55.740995][ T5238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.760651][ T5238] RSP: 002b:00007ffdb8596448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 55.769142][ T5238] RAX: ffffffffffffffda RBX: 00007fc5c4b1304e RCX: 00007fc5c4ac9e69 [ 55.777182][ T5238] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 55.785214][ T5238] RBP: 00000000000f4240 R08: 0000000020000180 R09: 00000000000000a0 [ 55.793188][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.801208][ T5238] R13: 00007ffdb8596668 R14: 00007ffdb8596470 R15: 00007ffdb8596460 [ 55.809287][ T5238] [ 55.812370][ T5238] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 55.819642][ T5238] CPU: 0 UID: 0 PID: 5238 Comm: syz-executor228 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 55.830221][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.840273][ T5238] Call Trace: [ 55.843570][ T5238] [ 55.846507][ T5238] dump_stack_lvl+0x241/0x360 [ 55.851175][ T5238] ? __pfx_dump_stack_lvl+0x10/0x10 [ 55.856365][ T5238] ? __pfx__printk+0x10/0x10 [ 55.860952][ T5238] ? vscnprintf+0x5d/0x90 [ 55.865287][ T5238] panic+0x349/0x880 [ 55.869208][ T5238] ? __warn+0x177/0x4e0 [ 55.873367][ T5238] ? __pfx_panic+0x10/0x10 [ 55.877877][ T5238] __warn+0x34b/0x4e0 [ 55.881852][ T5238] ? __kmem_cache_create_args+0xa7/0x320 [ 55.887479][ T5238] report_bug+0x2b3/0x500 [ 55.891801][ T5238] ? __kmem_cache_create_args+0xa7/0x320 [ 55.897447][ T5238] handle_bug+0x60/0x90 [ 55.901591][ T5238] exc_invalid_op+0x1a/0x50 [ 55.906087][ T5238] asm_exc_invalid_op+0x1a/0x20 [ 55.910944][ T5238] RIP: 0010:__kmem_cache_create_args+0xa7/0x320 [ 55.917191][ T5238] Code: 8e 48 8b 1b 48 39 eb 74 25 48 8b 7b f8 4c 89 fe e8 ce 95 e7 09 85 c0 75 e8 90 48 c7 c7 e7 08 0c 8e 4c 89 fe e8 ea 59 78 ff 90 <0f> 0b 90 90 4c 89 ff be 20 00 00 00 e8 28 97 e7 09 48 85 c0 0f 85 [ 55.936893][ T5238] RSP: 0018:ffffc90003b27788 EFLAGS: 00010246 [ 55.942959][ T5238] RAX: 2fb66cc0785cd500 RBX: ffff88803255cba8 RCX: ffff888020bd3c00 [ 55.950931][ T5238] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 55.958902][ T5238] RBP: ffffffff8ea20cf8 R08: ffffffff8155d7b2 R09: fffffbfff1cfa3e0 [ 55.966873][ T5238] R10: dffffc0000000000 R11: fffffbfff1cfa3e0 R12: 0000000000020018 [ 55.974850][ T5238] R13: 0000000000000000 R14: ffffc90003b27860 R15: ffff88802d4f3880 [ 55.982824][ T5238] ? __warn_printk+0x292/0x360 [ 55.987592][ T5238] ? __kmem_cache_create_args+0xa6/0x320 [ 55.993225][ T5238] p9_client_create+0xbc0/0x1150 [ 55.998171][ T5238] ? __pfx_p9_client_create+0x10/0x10 [ 56.003537][ T5238] ? __asan_memset+0x23/0x50 [ 56.008128][ T5238] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 56.013941][ T5238] ? __raw_spin_lock_init+0x45/0x100 [ 56.019226][ T5238] v9fs_session_init+0x1e4/0x1b80 [ 56.024263][ T5238] ? __pfx_v9fs_session_init+0x10/0x10 [ 56.029729][ T5238] ? __kasan_kmalloc+0x98/0xb0 [ 56.034491][ T5238] ? __kmalloc_cache_noprof+0x243/0x390 [ 56.040032][ T5238] ? v9fs_mount+0xb2/0xaa0 [ 56.044450][ T5238] v9fs_mount+0xcf/0xaa0 [ 56.048687][ T5238] ? __pfx_aa_get_newest_label+0x10/0x10 [ 56.054314][ T5238] ? __pfx_v9fs_mount+0x10/0x10 [ 56.059153][ T5238] ? __kmalloc_cache_noprof+0x243/0x390 [ 56.064710][ T5238] legacy_get_tree+0xee/0x190 [ 56.069390][ T5238] ? __pfx_v9fs_mount+0x10/0x10 [ 56.074235][ T5238] vfs_get_tree+0x90/0x2b0 [ 56.078657][ T5238] do_new_mount+0x2be/0xb40 [ 56.083249][ T5238] ? __pfx_do_new_mount+0x10/0x10 [ 56.088301][ T5238] __se_sys_mount+0x2d6/0x3c0 [ 56.092982][ T5238] ? __pfx___se_sys_mount+0x10/0x10 [ 56.098180][ T5238] ? exc_page_fault+0x590/0x8c0 [ 56.103036][ T5238] ? __x64_sys_mount+0x20/0xc0 [ 56.107798][ T5238] do_syscall_64+0xf3/0x230 [ 56.112315][ T5238] ? clear_bhb_loop+0x35/0x90 [ 56.116999][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.123062][ T5238] RIP: 0033:0x7fc5c4ac9e69 [ 56.127470][ T5238] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.147066][ T5238] RSP: 002b:00007ffdb8596448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.155562][ T5238] RAX: ffffffffffffffda RBX: 00007fc5c4b1304e RCX: 00007fc5c4ac9e69 [ 56.163621][ T5238] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 56.171854][ T5238] RBP: 00000000000f4240 R08: 0000000020000180 R09: 00000000000000a0 [ 56.179819][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.187783][ T5238] R13: 00007ffdb8596668 R14: 00007ffdb8596470 R15: 00007ffdb8596460 [ 56.195760][ T5238] [ 56.198905][ T5238] Kernel Offset: disabled [ 56.203253][ T5238] Rebooting in 86400 seconds..