./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2877117630 <...> DUID 00:04:e3:38:52:80:67:3f:e9:c9:a2:47:22:a3:59:23:7d:1e forked to background, child pid 4646 [ 30.515053][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.525899][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.5' (ECDSA) to the list of known hosts. execve("./syz-executor2877117630", ["./syz-executor2877117630"], 0x7ffc88d4dd70 /* 10 vars */) = 0 brk(NULL) = 0x555556874000 brk(0x555556874c40) = 0x555556874c40 arch_prctl(ARCH_SET_FS, 0x555556874300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2877117630", 4096) = 28 brk(0x555556895c40) = 0x555556895c40 brk(0x555556896000) = 0x555556896000 mprotect(0x7f0df6fae000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0deeaf5000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144 munmap(0x7f0deeaf5000, 262144) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 syzkaller login: [ 51.615013][ T5068] loop0: detected capacity change from 0 to 512 [ 51.677177][ T5068] EXT4-fs (loop0): Test dummy encryption mode enabled [ 51.683960][ T5068] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.697182][ T5068] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.711595][ T5068] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2197: inode #15: comm syz-executor287: corrupted in-inode xattr mount("/dev/loop0", "./bus", "ext4", MS_NOSUID|MS_NODEV|MS_NOEXEC, "usrjquota=,abort,debug_want_extra_isize=0x000000000000002c,test_dummy_encryption,nojournal_checksum,"...) = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "./file0", O_RDONLY) = 4 [ 51.724921][ T5068] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz-executor287: couldn't read orphan inode 15 (err -117) [ 51.737657][ T5068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: none. mkdirat(4, "./bus", 000) = 0 [ 51.821275][ T5068] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 51.882360][ T5068] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 51.890368][ T5068] ------------[ cut here ]------------ [ 51.895881][ T5068] WARNING: CPU: 0 PID: 5068 at mm/page_alloc.c:5525 __alloc_pages+0x30a/0x560 [ 51.904816][ T5068] Modules linked in: [ 51.908745][ T5068] CPU: 0 PID: 5068 Comm: syz-executor287 Not tainted 6.2.0-rc1-syzkaller #0 [ 51.917468][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 51.927578][ T5068] RIP: 0010:__alloc_pages+0x30a/0x560 [ 51.932960][ T5068] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 d6 68 ad 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45 [ 51.952675][ T5068] RSP: 0018:ffffc90003c8f1c0 EFLAGS: 00010246 [ 51.958855][ T5068] RAX: ffffc90003c8f220 RBX: 0000000000000014 RCX: 0000000000000000 [ 51.966911][ T5068] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003c8f248 [ 51.974902][ T5068] RBP: ffffc90003c8f2d8 R08: dffffc0000000000 R09: ffffc90003c8f220 [ 51.982941][ T5068] R10: fffff52000791e49 R11: 1ffff92000791e44 R12: 0000000000040d40 [ 51.990961][ T5068] R13: 1ffff92000791e40 R14: dffffc0000000000 R15: 1ffff92000791e3c [ 51.998966][ T5068] FS: 0000555556874300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 52.008076][ T5068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.014649][ T5068] CR2: 00007f2c3e30c300 CR3: 000000001d387000 CR4: 00000000003506f0 [ 52.022686][ T5068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.031013][ T5068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.039131][ T5068] Call Trace: [ 52.042413][ T5068] [ 52.045338][ T5068] ? zone_statistics+0x160/0x160 [ 52.050341][ T5068] ? ext4_match+0x121/0x710 [ 52.054857][ T5068] ? xattr_find_entry+0x135/0x340 [ 52.059958][ T5068] ? xattr_find_entry+0x2d6/0x340 [ 52.065000][ T5068] __kmalloc_large_node+0x95/0x1e0 [ 52.070194][ T5068] ? ext4_update_inline_data+0x236/0x6b0 [ 52.075840][ T5068] __kmalloc+0xfe/0x190 [ 52.080045][ T5068] ext4_update_inline_data+0x236/0x6b0 [ 52.085518][ T5068] ? zero_user_segments+0x6b0/0x6b0 [ 52.090819][ T5068] ? get_max_inline_xattr_value_size+0x3f8/0x510 [ 52.097221][ T5068] ext4_try_add_inline_entry+0x328/0x990 [ 52.102863][ T5068] ? ext4_fname_setup_filename+0x1ba/0x2a0 [ 52.108749][ T5068] ? ext4_da_convert_inline_data_to_extent+0xa30/0xa30 [ 52.115610][ T5068] ? __ext4_new_inode+0x3a93/0x46f0 [ 52.120890][ T5068] ext4_add_entry+0x5a4/0xeb0 [ 52.125586][ T5068] ? ext4_inc_count+0x190/0x190 [ 52.130537][ T5068] ? d_splice_alias+0x122/0x3b0 [ 52.135411][ T5068] ext4_add_nondir+0x96/0x260 [ 52.140142][ T5068] ext4_create+0x36c/0x560 [ 52.144573][ T5068] ? ext4_lookup+0x690/0x690 [ 52.149576][ T5068] ? generic_permission+0x229/0x500 [ 52.154789][ T5068] ? inode_permission+0xf5/0x450 [ 52.159803][ T5068] ? bpf_lsm_inode_create+0x5/0x10 [ 52.164925][ T5068] ? security_inode_create+0xdd/0x120 [ 52.170394][ T5068] ? ext4_lookup+0x690/0x690 [ 52.174989][ T5068] path_openat+0x12ac/0x2dd0 [ 52.179678][ T5068] ? do_filp_open+0x4f0/0x4f0 [ 52.184378][ T5068] do_filp_open+0x264/0x4f0 [ 52.188964][ T5068] ? vfs_tmpfile+0x490/0x490 [ 52.193575][ T5068] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.198825][ T5068] ? _raw_spin_unlock+0x24/0x40 [ 52.203683][ T5068] ? alloc_fd+0x5a7/0x640 [ 52.208081][ T5068] do_sys_openat2+0x124/0x4e0 [ 52.212766][ T5068] ? print_irqtrace_events+0x220/0x220 [ 52.218292][ T5068] ? ptrace_stop+0x74d/0x970 [ 52.222901][ T5068] ? do_sys_open+0x220/0x220 [ 52.227590][ T5068] ? lockdep_hardirqs_on+0x8d/0x130 [ 52.232816][ T5068] ? _raw_spin_unlock_irq+0x2a/0x40 [ 52.238082][ T5068] ? ptrace_notify+0x245/0x340 [ 52.242863][ T5068] __x64_sys_openat+0x243/0x290 [ 52.247794][ T5068] ? __ia32_sys_open+0x270/0x270 [ 52.252744][ T5068] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 52.258789][ T5068] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 52.264781][ T5068] do_syscall_64+0x3d/0xb0 [ 52.269263][ T5068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.275164][ T5068] RIP: 0033:0x7f0df6f41ba9 [ 52.279637][ T5068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.299317][ T5068] RSP: 002b:00007ffe0b9eb1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.307841][ T5068] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0df6f41ba9 [ 52.315817][ T5068] RDX: 000000000000275a RSI: 0000000020000080 RDI: 0000000000000004 [ 52.323885][ T5068] RBP: 00007f0df6f011b0 R08: 0000000000000000 R09: 0000000000000000 [ 52.331931][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0df6f01240 [ 52.339986][ T5068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.348040][ T5068] [ 52.351063][ T5068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 52.358327][ T5068] CPU: 0 PID: 5068 Comm: syz-executor287 Not tainted 6.2.0-rc1-syzkaller #0 [ 52.366985][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 52.377022][ T5068] Call Trace: [ 52.380287][ T5068] [ 52.383204][ T5068] dump_stack_lvl+0x1b1/0x290 [ 52.387873][ T5068] ? nf_tcp_handle_invalid+0x630/0x630 [ 52.393321][ T5068] ? panic+0x710/0x710 [ 52.397378][ T5068] ? vscnprintf+0x59/0x80 [ 52.401693][ T5068] ? __alloc_pages+0x300/0x560 [ 52.406457][ T5068] panic+0x2d6/0x710 [ 52.410351][ T5068] ? __warn+0x16d/0x2d0 [ 52.414506][ T5068] ? memcpy_page_flushcache+0x100/0x100 [ 52.420056][ T5068] ? __alloc_pages+0x30a/0x560 [ 52.424821][ T5068] __warn+0x284/0x2d0 [ 52.428798][ T5068] ? __alloc_pages+0x30a/0x560 [ 52.433552][ T5068] report_bug+0x1b3/0x2d0 [ 52.437879][ T5068] handle_bug+0x3d/0x70 [ 52.442021][ T5068] exc_invalid_op+0x16/0x40 [ 52.446518][ T5068] asm_exc_invalid_op+0x16/0x20 [ 52.451355][ T5068] RIP: 0010:__alloc_pages+0x30a/0x560 [ 52.456713][ T5068] Code: 5c 24 04 0f 85 f3 00 00 00 44 89 e1 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cc 41 89 cc e9 e3 00 00 00 c6 05 d6 68 ad 0c 01 <0f> 0b 83 fb 0a 0f 86 c8 fd ff ff 31 db 48 c7 44 24 20 0e 36 e0 45 [ 52.476299][ T5068] RSP: 0018:ffffc90003c8f1c0 EFLAGS: 00010246 [ 52.482351][ T5068] RAX: ffffc90003c8f220 RBX: 0000000000000014 RCX: 0000000000000000 [ 52.490306][ T5068] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc90003c8f248 [ 52.498259][ T5068] RBP: ffffc90003c8f2d8 R08: dffffc0000000000 R09: ffffc90003c8f220 [ 52.506211][ T5068] R10: fffff52000791e49 R11: 1ffff92000791e44 R12: 0000000000040d40 [ 52.514163][ T5068] R13: 1ffff92000791e40 R14: dffffc0000000000 R15: 1ffff92000791e3c [ 52.522131][ T5068] ? zone_statistics+0x160/0x160 [ 52.527060][ T5068] ? ext4_match+0x121/0x710 [ 52.531555][ T5068] ? xattr_find_entry+0x135/0x340 [ 52.536584][ T5068] ? xattr_find_entry+0x2d6/0x340 [ 52.541596][ T5068] __kmalloc_large_node+0x95/0x1e0 [ 52.546693][ T5068] ? ext4_update_inline_data+0x236/0x6b0 [ 52.552316][ T5068] __kmalloc+0xfe/0x190 [ 52.556456][ T5068] ext4_update_inline_data+0x236/0x6b0 [ 52.561906][ T5068] ? zero_user_segments+0x6b0/0x6b0 [ 52.567103][ T5068] ? get_max_inline_xattr_value_size+0x3f8/0x510 [ 52.573419][ T5068] ext4_try_add_inline_entry+0x328/0x990 [ 52.579036][ T5068] ? ext4_fname_setup_filename+0x1ba/0x2a0 [ 52.584833][ T5068] ? ext4_da_convert_inline_data_to_extent+0xa30/0xa30 [ 52.591669][ T5068] ? __ext4_new_inode+0x3a93/0x46f0 [ 52.596852][ T5068] ext4_add_entry+0x5a4/0xeb0 [ 52.601522][ T5068] ? ext4_inc_count+0x190/0x190 [ 52.606366][ T5068] ? d_splice_alias+0x122/0x3b0 [ 52.611204][ T5068] ext4_add_nondir+0x96/0x260 [ 52.615875][ T5068] ext4_create+0x36c/0x560 [ 52.620279][ T5068] ? ext4_lookup+0x690/0x690 [ 52.624857][ T5068] ? generic_permission+0x229/0x500 [ 52.630047][ T5068] ? inode_permission+0xf5/0x450 [ 52.634970][ T5068] ? bpf_lsm_inode_create+0x5/0x10 [ 52.640067][ T5068] ? security_inode_create+0xdd/0x120 [ 52.645430][ T5068] ? ext4_lookup+0x690/0x690 [ 52.649999][ T5068] path_openat+0x12ac/0x2dd0 [ 52.654594][ T5068] ? do_filp_open+0x4f0/0x4f0 [ 52.659268][ T5068] do_filp_open+0x264/0x4f0 [ 52.663761][ T5068] ? vfs_tmpfile+0x490/0x490 [ 52.668345][ T5068] ? do_raw_spin_unlock+0x134/0x8a0 [ 52.673531][ T5068] ? _raw_spin_unlock+0x24/0x40 [ 52.678371][ T5068] ? alloc_fd+0x5a7/0x640 [ 52.682689][ T5068] do_sys_openat2+0x124/0x4e0 [ 52.687346][ T5068] ? print_irqtrace_events+0x220/0x220 [ 52.692784][ T5068] ? ptrace_stop+0x74d/0x970 [ 52.697361][ T5068] ? do_sys_open+0x220/0x220 [ 52.701934][ T5068] ? lockdep_hardirqs_on+0x8d/0x130 [ 52.707113][ T5068] ? _raw_spin_unlock_irq+0x2a/0x40 [ 52.712295][ T5068] ? ptrace_notify+0x245/0x340 [ 52.717043][ T5068] __x64_sys_openat+0x243/0x290 [ 52.721879][ T5068] ? __ia32_sys_open+0x270/0x270 [ 52.726800][ T5068] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 52.732762][ T5068] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 52.738725][ T5068] do_syscall_64+0x3d/0xb0 [ 52.743125][ T5068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.749004][ T5068] RIP: 0033:0x7f0df6f41ba9 [ 52.753402][ T5068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.772990][ T5068] RSP: 002b:00007ffe0b9eb1e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.781388][ T5068] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0df6f41ba9 [ 52.789358][ T5068] RDX: 000000000000275a RSI: 0000000020000080 RDI: 0000000000000004 [ 52.797311][ T5068] RBP: 00007f0df6f011b0 R08: 0000000000000000 R09: 0000000000000000 [ 52.805263][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0df6f01240 [ 52.813217][ T5068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 52.821178][ T5068] [ 52.824492][ T5068] Kernel Offset: disabled [ 52.828889][ T5068] Rebooting in 86400 seconds..