./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1551916459 <...> Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. execve("./syz-executor1551916459", ["./syz-executor1551916459"], 0x7ffd67435350 /* 10 vars */) = 0 brk(NULL) = 0x555555bc3000 brk(0x555555bc3c40) = 0x555555bc3c40 arch_prctl(ARCH_SET_FS, 0x555555bc3300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1551916459", 4096) = 28 brk(0x555555be4c40) = 0x555555be4c40 brk(0x555555be5000) = 0x555555be5000 mprotect(0x7f397686a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdirat(AT_FDCWD, "./file0", 000) = 0 pipe2([3, 4], 0) = 0 write(4, "\x15\x00\x00\x00\x65\xff\xff\x09\x7b\x00\x00\x08\x00\x39\x50\x32\x30\x30\x30\x2e\x4c", 21) = 21 dup(4) = 5 write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311 syzkaller login: [ 41.161540][ T4995] ------------[ cut here ]------------ [ 41.167157][ T4995] WARNING: CPU: 0 PID: 4995 at mm/page_alloc.c:4744 __alloc_pages+0x3a2/0x4a0 [ 41.176039][ T4995] Modules linked in: [ 41.179996][ T4995] CPU: 0 PID: 4995 Comm: syz-executor155 Not tainted 6.4.0-rc4-syzkaller-00051-g48b1320a674e #0 [ 41.190422][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 41.200510][ T4995] RIP: 0010:__alloc_pages+0x3a2/0x4a0 [ 41.205897][ T4995] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 02 c7 98 0c 00 75 09 c6 05 f9 c6 98 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff e8 4f 78 a1 ff 84 c0 0f 85 80 fe ff [ 41.225538][ T4995] RSP: 0018:ffffc90003adfac0 EFLAGS: 00010246 [ 41.231618][ T4995] RAX: 0000000000000000 RBX: 1ffff9200075bf59 RCX: 0000000000000000 [ 41.239602][ T4995] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000000 [ 41.247610][ T4995] RBP: 0000000000040d40 R08: 0000000000000007 R09: 0000000000000000 [ 41.255585][ T4995] R10: 0000000100000000 R11: ffffffff81d6e785 R12: 0000000000000014 [ 41.263608][ T4995] R13: 0000000000000000 R14: 0000000000040d40 R15: 0000000000000000 [ 41.271700][ T4995] FS: 0000555555bc3300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 41.280667][ T4995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.287266][ T4995] CR2: 0000000020001000 CR3: 000000007e9cc000 CR4: 0000000000350ef0 [ 41.295215][ T4995] Call Trace: [ 41.298505][ T4995] [ 41.301431][ T4995] ? __warn+0xe6/0x390 [ 41.305487][ T4995] ? __alloc_pages+0x3a2/0x4a0 [ 41.310266][ T4995] ? report_bug+0x2da/0x500 [ 41.314881][ T4995] ? handle_bug+0x3c/0x70 [ 41.319222][ T4995] ? exc_invalid_op+0x18/0x50 [ 41.323908][ T4995] ? asm_exc_invalid_op+0x1a/0x20 [ 41.328952][ T4995] ? kasan_set_track+0x25/0x30 [ 41.333819][ T4995] ? __alloc_pages+0x3a2/0x4a0 [ 41.338605][ T4995] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 41.345372][ T4995] ? p9_client_clunk+0xc0/0x140 [ 41.350247][ T4995] ? v9fs_fid_lookup+0xf40/0xf40 [ 41.355189][ T4995] ? mark_held_locks+0x9f/0xe0 [ 41.359973][ T4995] __kmalloc_large_node+0x94/0x1d0 [ 41.365101][ T4995] ? v9fs_fid_get_acl+0x78/0x120 [ 41.370101][ T4995] __kmalloc+0x104/0x190 [ 41.374352][ T4995] v9fs_fid_get_acl+0x78/0x120 [ 41.379285][ T4995] v9fs_get_acl+0x3b2/0x5f0 [ 41.383804][ T4995] v9fs_mount+0x63a/0xc90 [ 41.388171][ T4995] ? v9fs_statfs+0x4d0/0x4d0 [ 41.392785][ T4995] ? apparmor_capable+0x1dc/0x460 [ 41.397829][ T4995] ? v9fs_statfs+0x4d0/0x4d0 [ 41.402427][ T4995] legacy_get_tree+0x109/0x220 [ 41.407212][ T4995] vfs_get_tree+0x8d/0x350 [ 41.411633][ T4995] path_mount+0x134b/0x1e40 [ 41.416115][ T4995] ? kmem_cache_free+0xe9/0x480 [ 41.420985][ T4995] ? finish_automount+0x9b0/0x9b0 [ 41.426016][ T4995] ? putname+0x102/0x140 [ 41.430275][ T4995] __x64_sys_mount+0x283/0x300 [ 41.435056][ T4995] ? copy_mnt_ns+0xb30/0xb30 [ 41.439673][ T4995] ? lockdep_hardirqs_on+0x7d/0x100 [ 41.444877][ T4995] ? _raw_spin_unlock_irq+0x2e/0x50 [ 41.450094][ T4995] ? ptrace_notify+0xfe/0x140 [ 41.454780][ T4995] do_syscall_64+0x39/0xb0 [ 41.459216][ T4995] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.465142][ T4995] RIP: 0033:0x7f39767fdfa9 [ 41.469568][ T4995] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.489212][ T4995] RSP: 002b:00007ffebb418a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.497659][ T4995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39767fdfa9 [ 41.505639][ T4995] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 41.513647][ T4995] RBP: 00007f39767c1ec0 R08: 0000000020000140 R09: 0000000000000000 [ 41.521633][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39767c1f50 [ 41.529614][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.537604][ T4995] [ 41.540601][ T4995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 41.547853][ T4995] CPU: 0 PID: 4995 Comm: syz-executor155 Not tainted 6.4.0-rc4-syzkaller-00051-g48b1320a674e #0 [ 41.558236][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 41.568267][ T4995] Call Trace: [ 41.571521][ T4995] [ 41.574429][ T4995] dump_stack_lvl+0xd9/0x150 [ 41.579003][ T4995] panic+0x686/0x730 [ 41.582877][ T4995] ? panic_smp_self_stop+0xa0/0xa0 [ 41.587968][ T4995] ? show_trace_log_lvl+0x284/0x390 [ 41.593155][ T4995] ? __alloc_pages+0x3a2/0x4a0 [ 41.597916][ T4995] check_panic_on_warn+0xb1/0xc0 [ 41.602844][ T4995] __warn+0xf2/0x390 [ 41.606719][ T4995] ? __alloc_pages+0x3a2/0x4a0 [ 41.611476][ T4995] report_bug+0x2da/0x500 [ 41.615791][ T4995] handle_bug+0x3c/0x70 [ 41.619928][ T4995] exc_invalid_op+0x18/0x50 [ 41.624423][ T4995] asm_exc_invalid_op+0x1a/0x20 [ 41.629270][ T4995] RIP: 0010:__alloc_pages+0x3a2/0x4a0 [ 41.634641][ T4995] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 02 c7 98 0c 00 75 09 c6 05 f9 c6 98 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff e8 4f 78 a1 ff 84 c0 0f 85 80 fe ff [ 41.654233][ T4995] RSP: 0018:ffffc90003adfac0 EFLAGS: 00010246 [ 41.660288][ T4995] RAX: 0000000000000000 RBX: 1ffff9200075bf59 RCX: 0000000000000000 [ 41.668246][ T4995] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000000 [ 41.676199][ T4995] RBP: 0000000000040d40 R08: 0000000000000007 R09: 0000000000000000 [ 41.684154][ T4995] R10: 0000000100000000 R11: ffffffff81d6e785 R12: 0000000000000014 [ 41.692109][ T4995] R13: 0000000000000000 R14: 0000000000040d40 R15: 0000000000000000 [ 41.700068][ T4995] ? kasan_set_track+0x25/0x30 [ 41.704842][ T4995] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 41.711606][ T4995] ? p9_client_clunk+0xc0/0x140 [ 41.716464][ T4995] ? v9fs_fid_lookup+0xf40/0xf40 [ 41.721393][ T4995] ? mark_held_locks+0x9f/0xe0 [ 41.726148][ T4995] __kmalloc_large_node+0x94/0x1d0 [ 41.731258][ T4995] ? v9fs_fid_get_acl+0x78/0x120 [ 41.736180][ T4995] __kmalloc+0x104/0x190 [ 41.740411][ T4995] v9fs_fid_get_acl+0x78/0x120 [ 41.745166][ T4995] v9fs_get_acl+0x3b2/0x5f0 [ 41.749655][ T4995] v9fs_mount+0x63a/0xc90 [ 41.753983][ T4995] ? v9fs_statfs+0x4d0/0x4d0 [ 41.758568][ T4995] ? apparmor_capable+0x1dc/0x460 [ 41.763587][ T4995] ? v9fs_statfs+0x4d0/0x4d0 [ 41.768169][ T4995] legacy_get_tree+0x109/0x220 [ 41.772930][ T4995] vfs_get_tree+0x8d/0x350 [ 41.777338][ T4995] path_mount+0x134b/0x1e40 [ 41.781835][ T4995] ? kmem_cache_free+0xe9/0x480 [ 41.786681][ T4995] ? finish_automount+0x9b0/0x9b0 [ 41.791695][ T4995] ? putname+0x102/0x140 [ 41.796012][ T4995] __x64_sys_mount+0x283/0x300 [ 41.800767][ T4995] ? copy_mnt_ns+0xb30/0xb30 [ 41.805343][ T4995] ? lockdep_hardirqs_on+0x7d/0x100 [ 41.810548][ T4995] ? _raw_spin_unlock_irq+0x2e/0x50 [ 41.815735][ T4995] ? ptrace_notify+0xfe/0x140 [ 41.820411][ T4995] do_syscall_64+0x39/0xb0 [ 41.824837][ T4995] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.830727][ T4995] RIP: 0033:0x7f39767fdfa9 [ 41.835130][ T4995] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.854725][ T4995] RSP: 002b:00007ffebb418a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.863125][ T4995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f39767fdfa9 [ 41.871079][ T4995] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 41.879037][ T4995] RBP: 00007f39767c1ec0 R08: 0000000020000140 R09: 0000000000000000 [ 41.886997][ T4995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f39767c1f50 [ 41.895037][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.903002][ T4995] [ 41.906774][ T4995] Kernel Offset: disabled [ 41.911141][ T4995] Rebooting in 86400 seconds..