./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2932463559 <...> Warning: Permanently added '10.128.1.4' (ECDSA) to the list of known hosts. execve("./syz-executor2932463559", ["./syz-executor2932463559"], 0x7fff5686bd50 /* 10 vars */) = 0 brk(NULL) = 0x555556399000 brk(0x555556399c40) = 0x555556399c40 arch_prctl(ARCH_SET_FS, 0x555556399300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2932463559", 4096) = 28 brk(0x5555563bac40) = 0x5555563bac40 brk(0x5555563bb000) = 0x5555563bb000 mprotect(0x7fdcfca6b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5299 attached , child_tidptr=0x5555563995d0) = 5299 [pid 5299] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5299] setsid() = 1 [pid 5299] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5299] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5299] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5299] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5299] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5299] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5299] unshare(CLONE_NEWNS) = 0 [pid 5299] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5299] unshare(CLONE_NEWIPC) = 0 [pid 5299] unshare(CLONE_NEWCGROUP) = 0 [pid 5299] unshare(CLONE_NEWUTS) = 0 [pid 5299] unshare(CLONE_SYSVSEM) = 0 [pid 5299] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "16777216", 8) = 8 [pid 5299] close(3) = 0 [pid 5299] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "536870912", 9) = 9 [pid 5299] close(3) = 0 [pid 5299] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1024", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "8192", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1024", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1024", 4) = 4 [pid 5299] close(3) = 0 [pid 5299] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5299] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5299] close(3) = 0 [pid 5299] getpid() = 1 [pid 5299] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 53.629734][ T5299] dump_stack_lvl+0xd1/0x138 [ 53.634331][ T5299] should_fail_ex.cold+0x5/0xa [ 53.639099][ T5299] prepare_alloc_pages+0x178/0x570 [ 53.644209][ T5299] __alloc_pages+0x149/0x5b0 [ 53.648792][ T5299] ? __alloc_pages_slowpath.constprop.0+0x2380/0x2380 [ 53.655561][ T5299] ? find_held_lock+0x2d/0x110 [ 53.660365][ T5299] ? free_unref_page+0x284/0x490 [ 53.665319][ T5299] ? lock_downgrade+0x6e0/0x6e0 [ 53.670200][ T5299] ? free_unref_page_commit+0x38f/0x6e0 [ 53.675765][ T5299] __kmalloc_large_node+0x85/0x160 [ 53.680903][ T5299] kmalloc_large+0x1c/0x70 [ 53.685347][ T5299] diMount+0x29/0x830 [ 53.689354][ T5299] jfs_mount_rw+0x239/0x690 [ 53.693868][ T5299] ? updateSuper+0x7a0/0x7a0 [ 53.698472][ T5299] ? list_lru_walk_node+0x15a/0x2f0 [ 53.703705][ T5299] ? list_lru_walk_one+0xe0/0xe0 [ 53.708672][ T5299] ? shrink_dentry_list+0x1a/0x800 [ 53.713802][ T5299] jfs_remount+0x520/0x650 [ 53.718245][ T5299] ? parse_options+0xec0/0xec0 [ 53.723031][ T5299] ? shrink_dcache_sb+0x1bf/0x360 [ 53.728075][ T5299] ? shrink_dentry_list+0x800/0x800 [ 53.733296][ T5299] ? parse_options+0xec0/0xec0 [ 53.738088][ T5299] legacy_reconfigure+0x119/0x180 [ 53.743133][ T5299] reconfigure_super+0x40c/0xa30 [ 53.748090][ T5299] ? fs_umode_to_dtype+0xd0/0xd0 [ 53.753054][ T5299] __do_sys_fsconfig+0xa3a/0xc20 [ 53.758023][ T5299] ? fscontext_read+0x310/0x310 [ 53.762901][ T5299] ? lockdep_hardirqs_on+0x7d/0x100 [ 53.768123][ T5299] ? _raw_spin_unlock_irq+0x2e/0x50 [ 53.773353][ T5299] ? ptrace_notify+0xfe/0x140 [ 53.778065][ T5299] do_syscall_64+0x39/0xb0 [ 53.782496][ T5299] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.788410][ T5299] RIP: 0033:0x7fdcfc9f8189 [ 53.792834][ T5299] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.812452][ T5299] RSP: 002b:00007ffe9b47d518 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 53.820877][ T5299] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fdcfc9f8189 [ 53.828855][ T5299] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 53.836831][ T5299] RBP: 00007ffe9b47d530 R08: 0000000000000000 R09: 00007ffe9b47d6b8 [ 53.844815][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 53.852795][ T5299] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.860792][ T5299] [pid 5299] fsconfig(4, FSCONFIG_CMD_RECONFIGURE, NULL, NULL, 0) = -1 ENOMEM (Cannot allocate memory) [pid 5299] exit_group(1) = ? [ 53.866535][ T5299] jfs_mount_rw: diMount failed! [ 53.883820][ T5299] ------------[ cut here ]------------ [ 53.889678][ T5299] WARNING: CPU: 1 PID: 5299 at mm/slab_common.c:923 free_large_kmalloc+0xad/0xe0 [ 53.899133][ T5299] Modules linked in: [ 53.903061][ T5299] CPU: 1 PID: 5299 Comm: syz-executor293 Not tainted 6.1.0-rc6-next-20221125-syzkaller #0 [ 53.917488][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 53.927675][ T5299] RIP: 0010:free_large_kmalloc+0xad/0xe0 [ 53.933336][ T5299] Code: ee 48 89 ef 5d 41 5c 41 5d e9 cf bd 0d 00 e8 3a 22 d1 ff 44 89 e2 be 06 00 00 00 48 89 ef e8 2a fc 1f 00 e8 95 23 d1 ff eb c6 <0f> 0b 80 3d 06 a4 a6 0c 00 0f 84 e5 75 0b 08 48 8b 74 24 20 4c 89 [ 53.952997][ T5299] RSP: 0018:ffffc90003dafbc8 EFLAGS: 00010246 [ 53.959098][ T5299] RAX: 00fff00000000000 RBX: ffff8880765b2930 RCX: 0000000000000000 [ 53.967104][ T5299] RDX: 0000000000000000 RSI: ffff88801d468000 RDI: ffffea0000751a00 [ 53.975274][ T5299] RBP: ffffea0000751a00 R08: 0000000000000007 R09: 0000000000000000 [ 53.983244][ T5299] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801d468000 [ 53.991270][ T5299] R13: ffff88802009c200 R14: ffff8880765b0d70 R15: ffff8880765b2930 [ 53.999308][ T5299] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 54.008325][ T5299] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.015040][ T5299] CR2: 0000559d632cbd28 CR3: 000000000c48e000 CR4: 00000000003506e0 [ 54.023052][ T5299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.031119][ T5299] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.039150][ T5299] Call Trace: [ 54.042458][ T5299] [ 54.045468][ T5299] diUnmount+0xf1/0x130 [ 54.049639][ T5299] jfs_umount+0x189/0x410 [ 54.053966][ T5299] jfs_put_super+0x85/0x1a0 [ 54.058514][ T5299] ? jfs_quota_off+0x170/0x170 [ 54.063303][ T5299] generic_shutdown_super+0x158/0x410 [ 54.068729][ T5299] kill_block_super+0x9b/0xf0 [ 54.073425][ T5299] deactivate_locked_super+0x98/0x160 [ 54.078872][ T5299] deactivate_super+0xb1/0xd0 [ 54.083569][ T5299] cleanup_mnt+0x2ae/0x3d0 [ 54.088029][ T5299] task_work_run+0x16f/0x270 [ 54.092646][ T5299] ? task_work_cancel+0x30/0x30 [ 54.097549][ T5299] do_exit+0xaa8/0x28d0 [ 54.101732][ T5299] ? lock_downgrade+0x6e0/0x6e0 [ 54.106646][ T5299] ? do_raw_spin_lock+0x124/0x2b0 [ 54.111703][ T5299] ? mm_update_next_owner+0x7b0/0x7b0 [ 54.117142][ T5299] ? rwlock_bug.part.0+0x90/0x90 [ 54.122095][ T5299] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.127357][ T5299] do_group_exit+0xd4/0x2a0 [ 54.131890][ T5299] __x64_sys_exit_group+0x3e/0x50 [ 54.137178][ T5299] do_syscall_64+0x39/0xb0 [ 54.141623][ T5299] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.147564][ T5299] RIP: 0033:0x7fdcfc9f6ce9 [ 54.152000][ T5299] Code: Unable to access opcode bytes at 0x7fdcfc9f6cbf. [ 54.159059][ T5299] RSP: 002b:00007ffe9b47d4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 54.167555][ T5299] RAX: ffffffffffffffda RBX: 00007fdcfca713f0 RCX: 00007fdcfc9f6ce9 [ 54.175583][ T5299] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 54.183566][ T5299] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007ffe9b47d6b8 [ 54.191624][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdcfca713f0 [ 54.199658][ T5299] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 54.207740][ T5299] [ 54.210793][ T5299] Kernel panic - not syncing: panic_on_warn set ... [ 54.217386][ T5299] CPU: 1 PID: 5299 Comm: syz-executor293 Not tainted 6.1.0-rc6-next-20221125-syzkaller #0 [ 54.227290][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 54.237436][ T5299] Call Trace: [ 54.240720][ T5299] [ 54.243665][ T5299] dump_stack_lvl+0xd1/0x138 [ 54.248286][ T5299] panic+0x2cc/0x626 [ 54.252207][ T5299] ? panic_print_sys_info.part.0+0x110/0x110 [ 54.258216][ T5299] ? __warn.cold+0x24b/0x350 [ 54.262843][ T5299] ? free_large_kmalloc+0xad/0xe0 [ 54.267895][ T5299] __warn.cold+0x25c/0x350 [ 54.272335][ T5299] ? free_large_kmalloc+0xad/0xe0 [ 54.277392][ T5299] report_bug+0x1c0/0x210 [ 54.281781][ T5299] handle_bug+0x3c/0x70 [ 54.285966][ T5299] exc_invalid_op+0x18/0x50 [ 54.290494][ T5299] asm_exc_invalid_op+0x1a/0x20 [ 54.295376][ T5299] RIP: 0010:free_large_kmalloc+0xad/0xe0 [ 54.301049][ T5299] Code: ee 48 89 ef 5d 41 5c 41 5d e9 cf bd 0d 00 e8 3a 22 d1 ff 44 89 e2 be 06 00 00 00 48 89 ef e8 2a fc 1f 00 e8 95 23 d1 ff eb c6 <0f> 0b 80 3d 06 a4 a6 0c 00 0f 84 e5 75 0b 08 48 8b 74 24 20 4c 89 [ 54.320687][ T5299] RSP: 0018:ffffc90003dafbc8 EFLAGS: 00010246 [ 54.326771][ T5299] RAX: 00fff00000000000 RBX: ffff8880765b2930 RCX: 0000000000000000 [ 54.334763][ T5299] RDX: 0000000000000000 RSI: ffff88801d468000 RDI: ffffea0000751a00 [ 54.342753][ T5299] RBP: ffffea0000751a00 R08: 0000000000000007 R09: 0000000000000000 [ 54.350748][ T5299] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801d468000 [ 54.358733][ T5299] R13: ffff88802009c200 R14: ffff8880765b0d70 R15: ffff8880765b2930 [ 54.366736][ T5299] ? free_large_kmalloc+0x15/0xe0 [ 54.371786][ T5299] diUnmount+0xf1/0x130 [ 54.375954][ T5299] jfs_umount+0x189/0x410 [ 54.380303][ T5299] jfs_put_super+0x85/0x1a0 [ 54.384828][ T5299] ? jfs_quota_off+0x170/0x170 [ 54.389612][ T5299] generic_shutdown_super+0x158/0x410 [ 54.395004][ T5299] kill_block_super+0x9b/0xf0 [ 54.399702][ T5299] deactivate_locked_super+0x98/0x160 [ 54.405091][ T5299] deactivate_super+0xb1/0xd0 [ 54.409785][ T5299] cleanup_mnt+0x2ae/0x3d0 [ 54.414216][ T5299] task_work_run+0x16f/0x270 [ 54.418832][ T5299] ? task_work_cancel+0x30/0x30 [ 54.423711][ T5299] do_exit+0xaa8/0x28d0 [ 54.427895][ T5299] ? lock_downgrade+0x6e0/0x6e0 [ 54.432771][ T5299] ? do_raw_spin_lock+0x124/0x2b0 [ 54.437807][ T5299] ? mm_update_next_owner+0x7b0/0x7b0 [ 54.443198][ T5299] ? rwlock_bug.part.0+0x90/0x90 [ 54.448151][ T5299] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.453379][ T5299] do_group_exit+0xd4/0x2a0 [ 54.457907][ T5299] __x64_sys_exit_group+0x3e/0x50 [ 54.462953][ T5299] do_syscall_64+0x39/0xb0 [ 54.467385][ T5299] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.473299][ T5299] RIP: 0033:0x7fdcfc9f6ce9 [ 54.477722][ T5299] Code: Unable to access opcode bytes at 0x7fdcfc9f6cbf. [ 54.484740][ T5299] RSP: 002b:00007ffe9b47d4c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 54.493164][ T5299] RAX: ffffffffffffffda RBX: 00007fdcfca713f0 RCX: 00007fdcfc9f6ce9 [ 54.501141][ T5299] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 54.509131][ T5299] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007ffe9b47d6b8 [ 54.517107][ T5299] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdcfca713f0 [ 54.525084][ T5299] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 54.533081][ T5299] [ 54.536268][ T5299] Kernel Offset: disabled [ 54.540669][ T5299] Rebooting in 86400 seconds..