./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor342308023 <...> Warning: Permanently added '10.128.0.113' (ECDSA) to the list of known hosts. execve("./syz-executor342308023", ["./syz-executor342308023"], 0x7ffc92afc590 /* 10 vars */) = 0 brk(NULL) = 0x55555625d000 brk(0x55555625dd00) = 0x55555625dd00 arch_prctl(ARCH_SET_FS, 0x55555625d3c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor342308023", 4096) = 27 brk(0x55555627ed00) = 0x55555627ed00 brk(0x55555627f000) = 0x55555627f000 mprotect(0x7fda37b05000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7fda37a56c30, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fda37a56f50}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7fda37a56c30, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fda37a56f50}, NULL, 8) = 0 mkdir("./file0", 0777) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0xffffffff81000000} --- pipe2([3, 4], 0) = 0 write(4, "\x15\x00\x00\x00\x65\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21 dup(4) = 5 mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error) write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 syzkaller login: [ 63.205896][ T4995] ------------[ cut here ]------------ [ 63.211544][ T4995] WARNING: CPU: 0 PID: 4995 at mm/page_alloc.c:4744 __alloc_pages+0x340/0x670 [ 63.220593][ T4995] Modules linked in: [ 63.224533][ T4995] CPU: 0 PID: 4995 Comm: syz-executor342 Not tainted 6.3.0-syzkaller-13449-g994e2419f1e7 #0 [ 63.234728][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 63.244822][ T4995] RIP: 0010:__alloc_pages+0x340/0x670 [ 63.250203][ T4995] Code: 8b 1c 24 0f 85 fd 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ed 00 00 00 c6 05 49 90 6a 0c 01 <0f> 0b 83 fb 0a 0f 86 97 fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 e0 [ 63.269865][ T4995] RSP: 0018:ffffc90003b5f9e0 EFLAGS: 00010246 [ 63.275966][ T4995] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 63.284092][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003b5fa68 [ 63.292088][ T4995] RBP: ffffc90003b5fb00 R08: dffffc0000000000 R09: 0000000000000000 [ 63.300094][ T4995] R10: ffffc90003b5fa40 R11: dffffc0000000001 R12: 1ffff9200076bf44 [ 63.308127][ T4995] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff9200076bf40 [ 63.316176][ T4995] FS: 000055555625d3c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 63.325213][ T4995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.331814][ T4995] CR2: 00007f7d9ad47ae0 CR3: 0000000021e46000 CR4: 00000000003506f0 [ 63.339827][ T4995] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.347880][ T4995] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.355902][ T4995] Call Trace: [ 63.359190][ T4995] [ 63.362119][ T4995] ? zone_statistics+0x170/0x170 [ 63.367132][ T4995] ? v9fs_fid_find+0x240/0x240 [ 63.371936][ T4995] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 63.377979][ T4995] ? print_irqtrace_events+0x220/0x220 [ 63.383545][ T4995] __kmalloc_large_node+0x91/0x1d0 [ 63.388678][ T4995] ? v9fs_fid_get_acl+0x4f/0xf0 [ 63.393573][ T4995] __kmalloc+0x11b/0x230 [ 63.397862][ T4995] v9fs_fid_get_acl+0x4f/0xf0 [ 63.402567][ T4995] v9fs_get_acl+0x12e/0x340 [ 63.407157][ T4995] v9fs_mount+0x976/0xc60 [ 63.411525][ T4995] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 63.416970][ T4995] ? cap_capable+0x1b4/0x240 [ 63.421598][ T4995] legacy_get_tree+0xef/0x190 [ 63.426353][ T4995] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 63.431758][ T4995] vfs_get_tree+0x8c/0x270 [ 63.436228][ T4995] do_new_mount+0x28f/0xae0 [ 63.440761][ T4995] ? path_mount+0x5f2/0xf80 [ 63.445330][ T4995] ? do_move_mount_old+0x170/0x170 [ 63.450462][ T4995] ? user_path_at_empty+0x12f/0x180 [ 63.455724][ T4995] __se_sys_mount+0x2d9/0x3c0 [ 63.460446][ T4995] ? __x64_sys_mount+0xc0/0xc0 [ 63.465288][ T4995] ? syscall_enter_from_user_mode+0x32/0x230 [ 63.471309][ T4995] ? __x64_sys_mount+0x20/0xc0 [ 63.476149][ T4995] do_syscall_64+0x41/0xc0 [ 63.480598][ T4995] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.486542][ T4995] RIP: 0033:0x7fda37a98999 [ 63.490972][ T4995] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 63.510632][ T4995] RSP: 002b:00007ffd19fc1a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.519099][ T4995] RAX: ffffffffffffffda RBX: 00007ffd19fc1a28 RCX: 00007fda37a98999 [ 63.527192][ T4995] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 0000000000000000 [ 63.535210][ T4995] RBP: 00007ffd19fc1a20 R08: 00000000200003c0 R09: 00007fda37a56c30 [ 63.543196][ T4995] R10: 0000000002004812 R11: 0000000000000246 R12: 0000000000000000 [ 63.551226][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.559245][ T4995] [ 63.562271][ T4995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.569546][ T4995] CPU: 0 PID: 4995 Comm: syz-executor342 Not tainted 6.3.0-syzkaller-13449-g994e2419f1e7 #0 [ 63.579773][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 63.589846][ T4995] Call Trace: [ 63.593135][ T4995] [ 63.596073][ T4995] dump_stack_lvl+0x1e7/0x2d0 [ 63.600782][ T4995] ? nf_tcp_handle_invalid+0x650/0x650 [ 63.606275][ T4995] ? panic+0x770/0x770 [ 63.610358][ T4995] ? vscnprintf+0x5d/0x80 [ 63.614787][ T4995] panic+0x30f/0x770 [ 63.618690][ T4995] ? __warn+0x171/0x4a0 [ 63.622859][ T4995] ? __memcpy_flushcache+0x2b0/0x2b0 [ 63.628253][ T4995] __warn+0x314/0x4a0 [ 63.632247][ T4995] ? __alloc_pages+0x340/0x670 [ 63.637041][ T4995] report_bug+0x2b3/0x500 [ 63.641387][ T4995] ? __alloc_pages+0x340/0x670 [ 63.646172][ T4995] handle_bug+0x3d/0x70 [ 63.650435][ T4995] exc_invalid_op+0x1a/0x50 [ 63.654964][ T4995] asm_exc_invalid_op+0x1a/0x20 [ 63.659827][ T4995] RIP: 0010:__alloc_pages+0x340/0x670 [ 63.665216][ T4995] Code: 8b 1c 24 0f 85 fd 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ed 00 00 00 c6 05 49 90 6a 0c 01 <0f> 0b 83 fb 0a 0f 86 97 fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 e0 [ 63.684842][ T4995] RSP: 0018:ffffc90003b5f9e0 EFLAGS: 00010246 [ 63.690926][ T4995] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000 [ 63.698906][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003b5fa68 [ 63.706885][ T4995] RBP: ffffc90003b5fb00 R08: dffffc0000000000 R09: 0000000000000000 [ 63.714869][ T4995] R10: ffffc90003b5fa40 R11: dffffc0000000001 R12: 1ffff9200076bf44 [ 63.722847][ T4995] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff9200076bf40 [ 63.730843][ T4995] ? zone_statistics+0x170/0x170 [ 63.735804][ T4995] ? v9fs_fid_find+0x240/0x240 [ 63.740568][ T4995] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 63.746650][ T4995] ? print_irqtrace_events+0x220/0x220 [ 63.752125][ T4995] __kmalloc_large_node+0x91/0x1d0 [ 63.757252][ T4995] ? v9fs_fid_get_acl+0x4f/0xf0 [ 63.762106][ T4995] __kmalloc+0x11b/0x230 [ 63.766362][ T4995] v9fs_fid_get_acl+0x4f/0xf0 [ 63.771046][ T4995] v9fs_get_acl+0x12e/0x340 [ 63.775554][ T4995] v9fs_mount+0x976/0xc60 [ 63.779894][ T4995] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 63.785279][ T4995] ? cap_capable+0x1b4/0x240 [ 63.789901][ T4995] legacy_get_tree+0xef/0x190 [ 63.794591][ T4995] ? xfs_fs_commit_blocks+0x7c0/0x7c0 [ 63.799989][ T4995] vfs_get_tree+0x8c/0x270 [ 63.804426][ T4995] do_new_mount+0x28f/0xae0 [ 63.808944][ T4995] ? path_mount+0x5f2/0xf80 [ 63.813459][ T4995] ? do_move_mount_old+0x170/0x170 [ 63.818595][ T4995] ? user_path_at_empty+0x12f/0x180 [ 63.823818][ T4995] __se_sys_mount+0x2d9/0x3c0 [ 63.828511][ T4995] ? __x64_sys_mount+0xc0/0xc0 [ 63.833287][ T4995] ? syscall_enter_from_user_mode+0x32/0x230 [ 63.839283][ T4995] ? __x64_sys_mount+0x20/0xc0 [ 63.844055][ T4995] do_syscall_64+0x41/0xc0 [ 63.848489][ T4995] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.854394][ T4995] RIP: 0033:0x7fda37a98999 [ 63.858824][ T4995] Code: 28 c3 e8 5a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 63.878708][ T4995] RSP: 002b:00007ffd19fc1a18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.887129][ T4995] RAX: ffffffffffffffda RBX: 00007ffd19fc1a28 RCX: 00007fda37a98999 [ 63.895106][ T4995] RDX: 0000000020000140 RSI: 0000000020000200 RDI: 0000000000000000 [ 63.903093][ T4995] RBP: 00007ffd19fc1a20 R08: 00000000200003c0 R09: 00007fda37a56c30 [ 63.911068][ T4995] R10: 0000000002004812 R11: 0000000000000246 R12: 0000000000000000 [ 63.919126][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 63.927114][ T4995] [ 63.930432][ T4995] Kernel Offset: disabled [ 63.934838][ T4995] Rebooting in 86400 seconds..