./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor151703231 <...> Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 101.822969][ T26] cfg80211: failed to load regulatory.db execve("./syz-executor151703231", ["./syz-executor151703231"], 0x7ffcfd9794c0 /* 10 vars */) = 0 brk(NULL) = 0x55555676d000 brk(0x55555676dd00) = 0x55555676dd00 arch_prctl(ARCH_SET_FS, 0x55555676d380) = 0 set_tid_address(0x55555676d650) = 5070 set_robust_list(0x55555676d660, 24) = 0 rseq(0x55555676dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor151703231", 4096) = 27 getrandom("\x93\xe2\x3d\x84\x6f\xfb\xf6\x33", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555676dd00 brk(0x55555678ed00) = 0x55555678ed00 brk(0x55555678f000) = 0x55555678f000 mprotect(0x7fae26a49000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555676d650) = 5071 ./strace-static-x86_64: Process 5071 attached [pid 5071] set_robust_list(0x55555676d660, 24) = 0 [pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5071] setpgid(0, 0) = 0 [pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5071] write(3, "1000", 4) = 4 [pid 5071] close(3) = 0 [pid 5071] mkdirat(AT_FDCWD, "./file0", 000) = 0 [pid 5071] pipe2([3, 4], 0) = 0 [pid 5071] write(4, "\x15\x00\x00\x00\x65\xff\xff\x09\x7b\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x2e\x4c", 21) = 21 [pid 5071] dup(4) = 5 [pid 5071] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5071] write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 [pid 5071] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,posixacl,") = -1 EIO (Input/output error) [pid 5071] exit_group(0) = ? [pid 5071] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555676d650) = 5072 ./strace-static-x86_64: Process 5072 attached [pid 5072] set_robust_list(0x55555676d660, 24) = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] mkdirat(AT_FDCWD, "./file0", 000) = -1 EEXIST (File exists) [pid 5072] pipe2([3, 4], 0) = 0 [pid 5072] write(4, "\x15\x00\x00\x00\x65\xff\xff\x09\x7b\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x2e\x4c", 21) = 21 [pid 5072] dup(4) = 5 [pid 5072] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 5072] write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 [ 102.135197][ T5072] ------------[ cut here ]------------ [ 102.141001][ T5072] WARNING: CPU: 1 PID: 5072 at mm/page_alloc.c:4543 __alloc_pages+0x433/0x2440 [ 102.150164][ T5072] Modules linked in: [ 102.154362][ T5072] CPU: 1 PID: 5072 Comm: syz-executor151 Not tainted 6.8.0-rc6-syzkaller-00250-g04b8076df253 #0 [ 102.164862][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 102.174987][ T5072] RIP: 0010:__alloc_pages+0x433/0x2440 [ 102.180495][ T5072] Code: ff 00 0f 84 f7 fd ff ff 80 ce 01 e9 ef fd ff ff 83 fe 0a 0f 86 e8 fc ff ff 80 3d b8 23 ad 0d 00 75 0b c6 05 af 23 ad 0d 01 90 <0f> 0b 90 31 ed e9 80 fe ff ff e8 0e 41 99 ff 84 c0 0f 85 73 fe ff [ 102.200199][ T5072] RSP: 0018:ffffc90004267978 EFLAGS: 00010246 [ 102.206335][ T5072] RAX: 0000000000000000 RBX: 1ffff9200084cf43 RCX: 0000000000000000 [ 102.214461][ T5072] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040d40 [ 102.222507][ T5072] RBP: 0000000000000014 R08: 0000000000000007 R09: 0000000000000000 [ 102.230492][ T5072] R10: 0000000100000000 R11: ffffffff8ae0012b R12: 0000000000000000 [ 102.238540][ T5072] R13: 0000000000000d40 R14: 0000000100000000 R15: 0000000000000014 [ 102.246819][ T5072] FS: 000055555676d380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 102.255890][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.262567][ T5072] CR2: 0000000020001000 CR3: 00000000629c2000 CR4: 0000000000350ef0 [ 102.270681][ T5072] Call Trace: [ 102.274049][ T5072] [ 102.277004][ T5072] ? show_regs+0x8f/0xa0 [ 102.281331][ T5072] ? __warn+0xe6/0x390 [ 102.285447][ T5072] ? __alloc_pages+0x433/0x2440 [ 102.290324][ T5072] ? report_bug+0x3c0/0x580 [ 102.295491][ T5072] ? handle_bug+0x3d/0x70 [ 102.299870][ T5072] ? exc_invalid_op+0x17/0x50 [ 102.304622][ T5072] ? asm_exc_invalid_op+0x1a/0x20 [ 102.309725][ T5072] ? entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 102.315906][ T5072] ? __alloc_pages+0x433/0x2440 [ 102.320814][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.325736][ T5072] ? mark_held_locks+0x9f/0xe0 [ 102.330567][ T5072] ? kasan_quarantine_put+0x10a/0x240 [ 102.336050][ T5072] ? __pfx___alloc_pages+0x10/0x10 [ 102.341228][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.346113][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.350982][ T5072] ? kfree+0x124/0x370 [ 102.355146][ T5072] ? p9_client_clunk+0x12a/0x170 [ 102.360111][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.365037][ T5072] ? p9_client_clunk+0x12f/0x170 [ 102.370027][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.374979][ T5072] ? v9fs_fid_xattr_get+0x22d/0x320 [ 102.380247][ T5072] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 102.385904][ T5072] ? v9fs_fid_get_acl+0x7a/0x120 [ 102.390917][ T5072] __kmalloc_large_node+0x7f/0x1a0 [ 102.396192][ T5072] __kmalloc.cold+0xc/0x61 [ 102.400659][ T5072] ? kasan_quarantine_put+0x10a/0x240 [ 102.406109][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.410980][ T5072] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.416301][ T5072] v9fs_fid_get_acl+0x7a/0x120 [ 102.421157][ T5072] v9fs_get_acl+0x2e8/0x560 [ 102.425734][ T5072] v9fs_mount+0x65e/0xcd0 [ 102.430089][ T5072] ? __pfx_v9fs_mount+0x10/0x10 [ 102.435125][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.440017][ T5072] ? apparmor_capable+0x126/0x1e0 [ 102.445145][ T5072] ? __pfx_v9fs_mount+0x10/0x10 [ 102.450058][ T5072] legacy_get_tree+0x10c/0x220 [ 102.454922][ T5072] vfs_get_tree+0x92/0x380 [ 102.459378][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.464298][ T5072] path_mount+0x14ea/0x1f20 [ 102.468881][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.473840][ T5072] ? kmem_cache_free+0x129/0x360 [ 102.478834][ T5072] ? __pfx_path_mount+0x10/0x10 [ 102.483780][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.488675][ T5072] ? putname+0x12e/0x170 [ 102.493024][ T5072] __x64_sys_mount+0x297/0x320 [ 102.497860][ T5072] ? __pfx___x64_sys_mount+0x10/0x10 [ 102.503230][ T5072] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.508503][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50 [ 102.513814][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.518724][ T5072] ? ptrace_notify+0xf4/0x140 [ 102.523535][ T5072] do_syscall_64+0xd8/0x270 [ 102.528105][ T5072] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 102.534169][ T5072] RIP: 0033:0x7fae269d5e79 [ 102.538621][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 102.558336][ T5072] RSP: 002b:00007ffd360153c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.566822][ T5072] RAX: ffffffffffffffda RBX: 00007fae26a1f03b RCX: 00007fae269d5e79 [ 102.574871][ T5072] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 102.582905][ T5072] RBP: 0000000000018e28 R08: 0000000020000100 R09: 0000000000000006 [ 102.590900][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd360153dc [ 102.598965][ T5072] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 102.607018][ T5072] [ 102.610049][ T5072] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.617333][ T5072] CPU: 1 PID: 5072 Comm: syz-executor151 Not tainted 6.8.0-rc6-syzkaller-00250-g04b8076df253 #0 [ 102.627760][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 102.637824][ T5072] Call Trace: [ 102.641112][ T5072] [ 102.644052][ T5072] dump_stack_lvl+0xd9/0x1b0 [ 102.648677][ T5072] panic+0x6ee/0x7a0 [ 102.652596][ T5072] ? __pfx_panic+0x10/0x10 [ 102.657036][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.662007][ T5072] ? show_trace_log_lvl+0x363/0x500 [ 102.667296][ T5072] ? check_panic_on_warn+0x1f/0xb0 [ 102.672453][ T5072] ? __alloc_pages+0x433/0x2440 [ 102.677336][ T5072] check_panic_on_warn+0xab/0xb0 [ 102.682315][ T5072] __warn+0xf2/0x390 [ 102.686248][ T5072] ? __alloc_pages+0x433/0x2440 [ 102.691222][ T5072] report_bug+0x3c0/0x580 [ 102.695613][ T5072] handle_bug+0x3d/0x70 [ 102.699812][ T5072] exc_invalid_op+0x17/0x50 [ 102.704357][ T5072] asm_exc_invalid_op+0x1a/0x20 [ 102.709263][ T5072] RIP: 0010:__alloc_pages+0x433/0x2440 [ 102.714758][ T5072] Code: ff 00 0f 84 f7 fd ff ff 80 ce 01 e9 ef fd ff ff 83 fe 0a 0f 86 e8 fc ff ff 80 3d b8 23 ad 0d 00 75 0b c6 05 af 23 ad 0d 01 90 <0f> 0b 90 31 ed e9 80 fe ff ff e8 0e 41 99 ff 84 c0 0f 85 73 fe ff [ 102.734395][ T5072] RSP: 0018:ffffc90004267978 EFLAGS: 00010246 [ 102.740495][ T5072] RAX: 0000000000000000 RBX: 1ffff9200084cf43 RCX: 0000000000000000 [ 102.748495][ T5072] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000040d40 [ 102.756489][ T5072] RBP: 0000000000000014 R08: 0000000000000007 R09: 0000000000000000 [ 102.764484][ T5072] R10: 0000000100000000 R11: ffffffff8ae0012b R12: 0000000000000000 [ 102.773872][ T5072] R13: 0000000000000d40 R14: 0000000100000000 R15: 0000000000000014 [ 102.781877][ T5072] ? entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 102.788040][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.792924][ T5072] ? mark_held_locks+0x9f/0xe0 [ 102.797745][ T5072] ? kasan_quarantine_put+0x10a/0x240 [ 102.803158][ T5072] ? __pfx___alloc_pages+0x10/0x10 [ 102.808297][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.813188][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.818160][ T5072] ? kfree+0x124/0x370 [ 102.822266][ T5072] ? p9_client_clunk+0x12a/0x170 [ 102.827333][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.832214][ T5072] ? p9_client_clunk+0x12f/0x170 [ 102.837196][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.842518][ T5072] ? v9fs_fid_xattr_get+0x22d/0x320 [ 102.847769][ T5072] ? __pfx_v9fs_fid_xattr_get+0x10/0x10 [ 102.853378][ T5072] ? v9fs_fid_get_acl+0x7a/0x120 [ 102.858368][ T5072] __kmalloc_large_node+0x7f/0x1a0 [ 102.863544][ T5072] __kmalloc.cold+0xc/0x61 [ 102.867993][ T5072] ? kasan_quarantine_put+0x10a/0x240 [ 102.873575][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.878458][ T5072] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.883722][ T5072] v9fs_fid_get_acl+0x7a/0x120 [ 102.888551][ T5072] v9fs_get_acl+0x2e8/0x560 [ 102.893117][ T5072] v9fs_mount+0x65e/0xcd0 [ 102.897571][ T5072] ? __pfx_v9fs_mount+0x10/0x10 [ 102.902458][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.907343][ T5072] ? apparmor_capable+0x126/0x1e0 [ 102.912427][ T5072] ? __pfx_v9fs_mount+0x10/0x10 [ 102.917320][ T5072] legacy_get_tree+0x10c/0x220 [ 102.922138][ T5072] vfs_get_tree+0x92/0x380 [ 102.926588][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.931475][ T5072] path_mount+0x14ea/0x1f20 [ 102.936037][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.940917][ T5072] ? kmem_cache_free+0x129/0x360 [ 102.945905][ T5072] ? __pfx_path_mount+0x10/0x10 [ 102.950816][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.955697][ T5072] ? putname+0x12e/0x170 [ 102.959986][ T5072] __x64_sys_mount+0x297/0x320 [ 102.964811][ T5072] ? __pfx___x64_sys_mount+0x10/0x10 [ 102.970150][ T5072] ? lockdep_hardirqs_on+0x7d/0x110 [ 102.975402][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50 [ 102.980644][ T5072] ? srso_return_thunk+0x5/0x5f [ 102.985530][ T5072] ? ptrace_notify+0xf4/0x140 [ 102.990262][ T5072] do_syscall_64+0xd8/0x270 [ 102.994805][ T5072] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 103.000758][ T5072] RIP: 0033:0x7fae269d5e79 [ 103.005200][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 103.024837][ T5072] RSP: 002b:00007ffd360153c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.033283][ T5072] RAX: ffffffffffffffda RBX: 00007fae26a1f03b RCX: 00007fae269d5e79 [ 103.041281][ T5072] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 103.049274][ T5072] RBP: 0000000000018e28 R08: 0000000020000100 R09: 0000000000000006 [ 103.057265][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd360153dc [ 103.065262][ T5072] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 103.073276][ T5072] [ 103.076523][ T5072] Kernel Offset: disabled [ 103.080938][ T5072] Rebooting in 86400 seconds..