./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1962320436 <...> Warning: Permanently added '10.128.1.169' (ECDSA) to the list of known hosts. execve("./syz-executor1962320436", ["./syz-executor1962320436"], 0x7ffc71043580 /* 10 vars */) = 0 brk(NULL) = 0x555556c4d000 brk(0x555556c4dc40) = 0x555556c4dc40 arch_prctl(ARCH_SET_FS, 0x555556c4d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1962320436", 4096) = 28 brk(0x555556c6ec40) = 0x555556c6ec40 brk(0x555556c6f000) = 0x555556c6f000 mprotect(0x7f3956aba000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdirat(AT_FDCWD, "./file0", 000) = 0 pipe2([3, 4], 0) = 0 write(4, "\x15\x00\x00\x00\x65\xff\xff\x09\x7b\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x2e\x4c", 21) = 21 dup(4) = 5 write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 [ 58.807082][ T5025] ------------[ cut here ]------------ [ 58.812715][ T5025] WARNING: CPU: 0 PID: 5025 at mm/page_alloc.c:4489 __alloc_pages+0x3a2/0x4a0 [ 58.821814][ T5025] Modules linked in: [ 58.826007][ T5025] CPU: 0 PID: 5025 Comm: syz-executor196 Not tainted 6.4.0-next-20230630-syzkaller #0 [ 58.835589][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 58.845701][ T5025] RIP: 0010:__alloc_pages+0x3a2/0x4a0 [ 58.851099][ T5025] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 01 31 c7 0c 00 75 09 c6 05 f8 30 c7 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff e8 cf a8 a0 ff 84 c0 0f 85 80 fe ff [ 58.870985][ T5025] RSP: 0018:ffffc9000397fac0 EFLAGS: 00010246 [ 58.877145][ T5025] RAX: 0000000000000000 RBX: 1ffff9200072ff59 RCX: 0000000000000000 [ 58.885158][ T5025] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000000 [ 58.893136][ T5025] RBP: 0000000000040d40 R08: 0000000000000007 R09: 0000000000000000 [ 58.901196][ T5025] R10: 0000000100000000 R11: ffffffff8a2085d9 R12: 0000000000000014 [ 58.909215][ T5025] R13: 0000000000000000 R14: 0000000000040d40 R15: 0000000000000000 [ 58.917245][ T5025] FS: 0000555556c4d300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 58.926241][ T5025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.932841][ T5025] CR2: 0000000020001000 CR3: 000000002c14a000 CR4: 00000000003506f0 [ 58.940929][ T5025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.948965][ T5025] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.956985][ T5025] Call Trace: [ 58.960265][ T5025] [ 58.963184][ T5025] ? __warn+0xe6/0x390 [ 58.967309][ T5025] ? __alloc_pages+0x3a2/0x4a0 [ 58.972096][ T5025] ? report_bug+0x2da/0x500 [ 58.976651][ T5025] ? handle_bug+0x3c/0x70 [ 58.980992][ T5025] ? exc_invalid_op+0x18/0x50 [ 58.985724][ T5025] ? asm_exc_invalid_op+0x1a/0x20 [ 58.990768][ T5025] ? do_syscall_64+0x39/0xb0 [ 58.995400][ T5025] ? __alloc_pages+0x3a2/0x4a0 [ 59.000191][ T5025] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 59.007015][ T5025] ? p9_client_clunk+0xc0/0x140 [ 59.011888][ T5025] ? v9fs_fid_lookup+0xf40/0xf40 [ 59.016965][ T5025] __kmalloc_large_node+0x94/0x1d0 [ 59.022101][ T5025] ? v9fs_fid_get_acl+0x78/0x120 [ 59.027091][ T5025] __kmalloc+0x104/0x190 [ 59.031354][ T5025] v9fs_fid_get_acl+0x78/0x120 [ 59.036157][ T5025] v9fs_get_acl+0x3b3/0x5f0 [ 59.040675][ T5025] v9fs_mount+0x645/0xca0 [ 59.045058][ T5025] ? v9fs_statfs+0x4d0/0x4d0 [ 59.049668][ T5025] ? apparmor_capable+0x1dc/0x460 [ 59.054835][ T5025] ? v9fs_statfs+0x4d0/0x4d0 [ 59.059450][ T5025] legacy_get_tree+0x109/0x220 [ 59.064248][ T5025] vfs_get_tree+0x8d/0x350 [ 59.068739][ T5025] path_mount+0x136e/0x1e70 [ 59.073235][ T5025] ? putname+0x102/0x140 [ 59.077508][ T5025] ? kmem_cache_free+0xf0/0x490 [ 59.082379][ T5025] ? finish_automount+0xa30/0xa30 [ 59.087472][ T5025] ? putname+0x102/0x140 [ 59.091734][ T5025] __x64_sys_mount+0x283/0x300 [ 59.096536][ T5025] ? copy_mnt_ns+0xb30/0xb30 [ 59.101141][ T5025] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.106401][ T5025] ? _raw_spin_unlock_irq+0x2e/0x50 [ 59.111621][ T5025] ? ptrace_notify+0xfe/0x140 [ 59.116423][ T5025] do_syscall_64+0x39/0xb0 [ 59.120855][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.126801][ T5025] RIP: 0033:0x7f3956a4dfa9 [ 59.131224][ T5025] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.150881][ T5025] RSP: 002b:00007ffe0816f438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.159327][ T5025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3956a4dfa9 [ 59.167369][ T5025] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 59.175382][ T5025] RBP: 00007f3956a11ec0 R08: 0000000020000140 R09: 0000000000000000 [ 59.183387][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3956a11f50 [ 59.191446][ T5025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.199472][ T5025] [ 59.202491][ T5025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.209761][ T5025] CPU: 0 PID: 5025 Comm: syz-executor196 Not tainted 6.4.0-next-20230630-syzkaller #0 [ 59.219291][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 59.229333][ T5025] Call Trace: [ 59.232599][ T5025] [ 59.235520][ T5025] dump_stack_lvl+0xd9/0x150 [ 59.240104][ T5025] panic+0x686/0x730 [ 59.243994][ T5025] ? panic_smp_self_stop+0xa0/0xa0 [ 59.249099][ T5025] ? show_trace_log_lvl+0x284/0x390 [ 59.254314][ T5025] ? __alloc_pages+0x3a2/0x4a0 [ 59.259094][ T5025] check_panic_on_warn+0xb1/0xc0 [ 59.264028][ T5025] __warn+0xf2/0x390 [ 59.267913][ T5025] ? __alloc_pages+0x3a2/0x4a0 [ 59.272672][ T5025] report_bug+0x2da/0x500 [ 59.276995][ T5025] handle_bug+0x3c/0x70 [ 59.281145][ T5025] exc_invalid_op+0x18/0x50 [ 59.285647][ T5025] asm_exc_invalid_op+0x1a/0x20 [ 59.290508][ T5025] RIP: 0010:__alloc_pages+0x3a2/0x4a0 [ 59.295989][ T5025] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 01 31 c7 0c 00 75 09 c6 05 f8 30 c7 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff e8 cf a8 a0 ff 84 c0 0f 85 80 fe ff [ 59.315611][ T5025] RSP: 0018:ffffc9000397fac0 EFLAGS: 00010246 [ 59.321682][ T5025] RAX: 0000000000000000 RBX: 1ffff9200072ff59 RCX: 0000000000000000 [ 59.329655][ T5025] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000000 [ 59.337628][ T5025] RBP: 0000000000040d40 R08: 0000000000000007 R09: 0000000000000000 [ 59.345600][ T5025] R10: 0000000100000000 R11: ffffffff8a2085d9 R12: 0000000000000014 [ 59.353572][ T5025] R13: 0000000000000000 R14: 0000000000040d40 R15: 0000000000000000 [ 59.361551][ T5025] ? do_syscall_64+0x39/0xb0 [ 59.366168][ T5025] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 59.373049][ T5025] ? p9_client_clunk+0xc0/0x140 [ 59.377928][ T5025] ? v9fs_fid_lookup+0xf40/0xf40 [ 59.382888][ T5025] __kmalloc_large_node+0x94/0x1d0 [ 59.388028][ T5025] ? v9fs_fid_get_acl+0x78/0x120 [ 59.392983][ T5025] __kmalloc+0x104/0x190 [ 59.397244][ T5025] v9fs_fid_get_acl+0x78/0x120 [ 59.402030][ T5025] v9fs_get_acl+0x3b3/0x5f0 [ 59.406555][ T5025] v9fs_mount+0x645/0xca0 [ 59.410892][ T5025] ? v9fs_statfs+0x4d0/0x4d0 [ 59.415486][ T5025] ? apparmor_capable+0x1dc/0x460 [ 59.420529][ T5025] ? v9fs_statfs+0x4d0/0x4d0 [ 59.425209][ T5025] legacy_get_tree+0x109/0x220 [ 59.429987][ T5025] vfs_get_tree+0x8d/0x350 [ 59.434418][ T5025] path_mount+0x136e/0x1e70 [ 59.438930][ T5025] ? putname+0x102/0x140 [ 59.443173][ T5025] ? kmem_cache_free+0xf0/0x490 [ 59.448033][ T5025] ? finish_automount+0xa30/0xa30 [ 59.453074][ T5025] ? putname+0x102/0x140 [ 59.457325][ T5025] __x64_sys_mount+0x283/0x300 [ 59.462098][ T5025] ? copy_mnt_ns+0xb30/0xb30 [ 59.466694][ T5025] ? lockdep_hardirqs_on+0x7d/0x100 [ 59.471904][ T5025] ? _raw_spin_unlock_irq+0x2e/0x50 [ 59.477116][ T5025] ? ptrace_notify+0xfe/0x140 [ 59.481804][ T5025] do_syscall_64+0x39/0xb0 [ 59.486229][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.492130][ T5025] RIP: 0033:0x7f3956a4dfa9 [ 59.496558][ T5025] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.516168][ T5025] RSP: 002b:00007ffe0816f438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 59.524590][ T5025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3956a4dfa9 [ 59.532562][ T5025] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 59.540532][ T5025] RBP: 00007f3956a11ec0 R08: 0000000020000140 R09: 0000000000000000 [ 59.548506][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3956a11f50 [ 59.556480][ T5025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.564473][ T5025] [ 59.567612][ T5025] Kernel Offset: disabled [ 59.572003][ T5025] Rebooting in 86400 seconds..