./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1486071466 <...> Warning: Permanently added '10.128.1.129' (ED25519) to the list of known hosts. execve("./syz-executor1486071466", ["./syz-executor1486071466"], 0x7ffd282d41a0 /* 10 vars */) = 0 brk(NULL) = 0x555556bc9000 brk(0x555556bc9d00) = 0x555556bc9d00 arch_prctl(ARCH_SET_FS, 0x555556bc9380) = 0 set_tid_address(0x555556bc9650) = 5061 set_robust_list(0x555556bc9660, 24) = 0 rseq(0x555556bc9ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1486071466", 4096) = 28 getrandom("\xe3\x1c\xcf\xe4\xed\xcb\x36\xe3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556bc9d00 brk(0x555556bead00) = 0x555556bead00 brk(0x555556beb000) = 0x555556beb000 mprotect(0x7f1f32647000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556bc9650) = 5062 ./strace-static-x86_64: Process 5062 attached [pid 5062] set_robust_list(0x555556bc9660, 24) = 0 [pid 5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5062] setpgid(0, 0) = 0 [pid 5062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5062] write(3, "1000", 4) = 4 [pid 5062] close(3) = 0 [pid 5062] mkdirat(AT_FDCWD, "./file0", 000) = 0 [pid 5062] pipe2([3, 4], 0) = 0 [pid 5062] write(4, "\x15\x00\x00\x00\x65\xff\xff\x09\x7b\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x2e\x4c", 21) = 21 [pid 5062] dup(4) = 5 [pid 5062] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5062] write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 [pid 5062] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,posixacl,") = -1 EIO (Input/output error) [pid 5062] exit_group(0) = ? [pid 5062] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5062, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5064 attached , child_tidptr=0x555556bc9650) = 5064 [pid 5064] set_robust_list(0x555556bc9660, 24) = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4) = 4 [pid 5064] close(3) = 0 [pid 5064] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 5064] pipe2([3, 4], 0) = 0 [pid 5064] write(4, "\x15\x00\x00\x00\x65\xff\xff\x09\x7b\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x2e\x4c", 21) = 21 [pid 5064] dup(4) = 5 [pid 5064] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5064] write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 [ 71.645565][ T5064] ------------[ cut here ]------------ [ 71.651300][ T5064] WARNING: CPU: 1 PID: 5064 at mm/page_alloc.c:4544 __alloc_pages+0x343/0x680 [ 71.660268][ T5064] Modules linked in: [ 71.664206][ T5064] CPU: 1 PID: 5064 Comm: syz-executor148 Not tainted 6.7.0-rc4-syzkaller-00111-g5e3f5b81de80 #0 [ 71.674703][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 71.684817][ T5064] RIP: 0010:__alloc_pages+0x343/0x680 [ 71.690317][ T5064] Code: 1c 24 0f 85 ff 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ef 00 00 00 c6 05 c6 93 0d 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 93 fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 71.710027][ T5064] RSP: 0018:ffffc9000410f9e0 EFLAGS: 00010246 [ 71.716166][ T5064] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 71.724186][ T5064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000410fa68 [ 71.732241][ T5064] RBP: ffffc9000410fb00 R08: ffffc9000410fa67 R09: 0000000000000000 [ 71.740283][ T5064] R10: ffffc9000410fa40 R11: fffff52000821f4d R12: 1ffff92000821f44 [ 71.748343][ T5064] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff92000821f40 [ 71.756386][ T5064] FS: 0000555556bc9380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 71.765359][ T5064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.772022][ T5064] CR2: 0000000020001000 CR3: 000000001c0c5000 CR4: 00000000003506f0 [ 71.780066][ T5064] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.788115][ T5064] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.796182][ T5064] Call Trace: [ 71.799486][ T5064] [ 71.802423][ T5064] ? __warn+0x162/0x4b0 [ 71.806665][ T5064] ? __alloc_pages+0x343/0x680 [ 71.811466][ T5064] ? report_bug+0x2b3/0x500 [ 71.816055][ T5064] ? __alloc_pages+0x343/0x680 [ 71.820860][ T5064] ? handle_bug+0x3e/0x60 [ 71.825211][ T5064] ? exc_invalid_op+0x1a/0x50 [ 71.829995][ T5064] ? asm_exc_invalid_op+0x1a/0x20 [ 71.835085][ T5064] ? __alloc_pages+0x343/0x680 [ 71.839938][ T5064] ? zone_statistics+0x170/0x170 [ 71.844923][ T5064] ? v9fs_fid_find+0x240/0x240 [ 71.849763][ T5064] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 71.855845][ T5064] ? print_irqtrace_events+0x220/0x220 [ 71.861422][ T5064] __kmalloc_large_node+0x91/0x1d0 [ 71.866626][ T5064] ? v9fs_fid_get_acl+0x4f/0xf0 [ 71.871523][ T5064] __kmalloc+0x102/0x1a0 [ 71.875841][ T5064] v9fs_fid_get_acl+0x4f/0xf0 [ 71.880553][ T5064] v9fs_get_acl+0x12d/0x340 [ 71.885073][ T5064] v9fs_mount+0x972/0xc60 [ 71.889497][ T5064] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 71.894912][ T5064] ? cap_capable+0x1b4/0x240 [ 71.899594][ T5064] legacy_get_tree+0xef/0x190 [ 71.904316][ T5064] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 71.909776][ T5064] vfs_get_tree+0x8c/0x2a0 [ 71.914232][ T5064] do_new_mount+0x28f/0xae0 [ 71.918829][ T5064] ? do_move_mount_old+0x170/0x170 [ 71.923996][ T5064] __se_sys_mount+0x2d9/0x3c0 [ 71.928746][ T5064] ? __x64_sys_mount+0xc0/0xc0 [ 71.933523][ T5064] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 71.939564][ T5064] ? syscall_enter_from_user_mode+0xf5/0x2d0 [ 71.945614][ T5064] ? __x64_sys_mount+0x20/0xc0 [ 71.950402][ T5064] do_syscall_64+0x45/0x110 [ 71.954946][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 71.960925][ T5064] RIP: 0033:0x7f1f325d3e79 [ 71.965472][ T5064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.985197][ T5064] RSP: 002b:00007ffccae05668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.993706][ T5064] RAX: ffffffffffffffda RBX: 00007f1f3261d03b RCX: 00007f1f325d3e79 [ 72.001745][ T5064] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 72.009784][ T5064] RBP: 0000000000011763 R08: 0000000020000140 R09: 0000000000000006 [ 72.017851][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccae0567c [ 72.025903][ T5064] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.033921][ T5064] [ 72.037029][ T5064] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.044325][ T5064] CPU: 1 PID: 5064 Comm: syz-executor148 Not tainted 6.7.0-rc4-syzkaller-00111-g5e3f5b81de80 #0 [ 72.054747][ T5064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 72.064815][ T5064] Call Trace: [ 72.068121][ T5064] [ 72.071071][ T5064] dump_stack_lvl+0x1e7/0x2d0 [ 72.075797][ T5064] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.081299][ T5064] ? panic+0x850/0x850 [ 72.085407][ T5064] ? vscnprintf+0x5d/0x80 [ 72.089777][ T5064] panic+0x349/0x850 [ 72.093692][ T5064] ? __warn+0x171/0x4b0 [ 72.097864][ T5064] ? __memcpy_flushcache+0x2b0/0x2b0 [ 72.103184][ T5064] __warn+0x318/0x4b0 [ 72.107185][ T5064] ? __alloc_pages+0x343/0x680 [ 72.111965][ T5064] report_bug+0x2b3/0x500 [ 72.116323][ T5064] ? __alloc_pages+0x343/0x680 [ 72.121110][ T5064] handle_bug+0x3e/0x60 [ 72.125294][ T5064] exc_invalid_op+0x1a/0x50 [ 72.129819][ T5064] asm_exc_invalid_op+0x1a/0x20 [ 72.134682][ T5064] RIP: 0010:__alloc_pages+0x343/0x680 [ 72.140069][ T5064] Code: 1c 24 0f 85 ff 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ef 00 00 00 c6 05 c6 93 0d 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 93 fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 72.159686][ T5064] RSP: 0018:ffffc9000410f9e0 EFLAGS: 00010246 [ 72.165768][ T5064] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 72.173747][ T5064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000410fa68 [ 72.181733][ T5064] RBP: ffffc9000410fb00 R08: ffffc9000410fa67 R09: 0000000000000000 [ 72.189716][ T5064] R10: ffffc9000410fa40 R11: fffff52000821f4d R12: 1ffff92000821f44 [ 72.197703][ T5064] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff92000821f40 [ 72.205708][ T5064] ? zone_statistics+0x170/0x170 [ 72.210670][ T5064] ? v9fs_fid_find+0x240/0x240 [ 72.215450][ T5064] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 72.221448][ T5064] ? print_irqtrace_events+0x220/0x220 [ 72.226926][ T5064] __kmalloc_large_node+0x91/0x1d0 [ 72.232059][ T5064] ? v9fs_fid_get_acl+0x4f/0xf0 [ 72.236933][ T5064] __kmalloc+0x102/0x1a0 [ 72.241196][ T5064] v9fs_fid_get_acl+0x4f/0xf0 [ 72.245891][ T5064] v9fs_get_acl+0x12d/0x340 [ 72.250406][ T5064] v9fs_mount+0x972/0xc60 [ 72.254761][ T5064] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 72.260166][ T5064] ? cap_capable+0x1b4/0x240 [ 72.264782][ T5064] legacy_get_tree+0xef/0x190 [ 72.269477][ T5064] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 72.274872][ T5064] vfs_get_tree+0x8c/0x2a0 [ 72.279307][ T5064] do_new_mount+0x28f/0xae0 [ 72.283835][ T5064] ? do_move_mount_old+0x170/0x170 [ 72.288972][ T5064] __se_sys_mount+0x2d9/0x3c0 [ 72.293672][ T5064] ? __x64_sys_mount+0xc0/0xc0 [ 72.298476][ T5064] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 72.304475][ T5064] ? syscall_enter_from_user_mode+0xf5/0x2d0 [ 72.310467][ T5064] ? __x64_sys_mount+0x20/0xc0 [ 72.315250][ T5064] do_syscall_64+0x45/0x110 [ 72.319780][ T5064] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 72.325695][ T5064] RIP: 0033:0x7f1f325d3e79 [ 72.330122][ T5064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.349741][ T5064] RSP: 002b:00007ffccae05668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.358175][ T5064] RAX: ffffffffffffffda RBX: 00007f1f3261d03b RCX: 00007f1f325d3e79 [ 72.366172][ T5064] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 72.374161][ T5064] RBP: 0000000000011763 R08: 0000000020000140 R09: 0000000000000006 [ 72.382147][ T5064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffccae0567c [ 72.390139][ T5064] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 72.398144][ T5064] [ 72.401515][ T5064] Kernel Offset: disabled [ 72.405937][ T5064] Rebooting in 86400 seconds..