./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2739139825 <...> Warning: Permanently added '10.128.1.73' (ECDSA) to the list of known hosts. execve("./syz-executor2739139825", ["./syz-executor2739139825"], 0x7ffdccad6100 /* 10 vars */) = 0 brk(NULL) = 0x55555688d000 brk(0x55555688dc40) = 0x55555688dc40 arch_prctl(ARCH_SET_FS, 0x55555688d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2739139825", 4096) = 28 brk(0x5555568aec40) = 0x5555568aec40 brk(0x5555568af000) = 0x5555568af000 mprotect(0x7fd290bc2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd2886ff000 syzkaller login: [ 78.227899][ T5005] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5005 'syz-executor273' write(3, "\x58\x46\x53\x42\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xca\x7e\x21\x01\xb8\xf1\x48\x38\x8e\x2d\x76\x37\xb9\x06\x20\xe6\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x05\x01\x00\x00\x00\x00\x00\x00\x05\x02\x00\x00\x00\x01\x00\x00\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x02\x70"..., 16777216) = 16777216 munmap(0x7fd2886ff000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 [ 78.434703][ T5005] loop0: detected capacity change from 0 to 32768 [ 78.452832][ T5005] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 mount("/dev/loop0", "./file0", "xfs", 0, "inode64,gqnoenforce,largeio,,nouuid") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, ".log", O_WRONLY|O_CREAT|O_TRUNC|O_SYNC|O_CLOEXEC|FASYNC, 000) = 4 ioctl(4, _IOC(_IOC_READ|_IOC_WRITE, 0x58, 0x72, 0x10), 0x20000380) = 0 openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5 ioctl(5, _IOC(_IOC_WRITE, 0x58, 0x28, 0x30), 0x200007c0) = -1 ENOSPC (No space left on device) openat(AT_FDCWD, ".", O_RDONLY) = 6 [ 78.482765][ T5005] XFS (loop0): Ending clean mount [ 78.492095][ T5005] XFS (loop0): Quotacheck needed: Please wait. [ 78.522744][ T5005] XFS (loop0): Quotacheck: Done. [ 78.551363][ T5005] XFS (loop0): xfs_buf_map_verify: daddr 0x7ffffffffff0 out of range, EOFS 0x8000 [ 78.561554][ T5005] ------------[ cut here ]------------ [ 78.567249][ T5005] WARNING: CPU: 1 PID: 5005 at fs/xfs/xfs_buf.c:535 xfs_buf_get_map+0x1db3/0x2fd0 [ 78.576597][ T5005] Modules linked in: [ 78.580507][ T5005] CPU: 1 PID: 5005 Comm: syz-executor273 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 78.590607][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 78.600829][ T5005] RIP: 0010:xfs_buf_get_map+0x1db3/0x2fd0 [ 78.606632][ T5005] Code: eb 75 fe 48 8b b5 50 ff ff ff 49 89 d9 4d 89 f8 48 c7 c1 e0 81 8b 8a 48 c7 c2 40 7e 8b 8a 48 c7 c7 a0 7e 8b 8a e8 7d 22 06 00 <0f> 0b 41 bd 8b ff ff ff e9 cf ee ff ff e8 4b eb 75 fe 4c 89 e7 e8 [ 78.626393][ T5005] RSP: 0018:ffffc90003a0f560 EFLAGS: 00010286 [ 78.632492][ T5005] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 0000000000000000 [ 78.640572][ T5005] RDX: ffff888028141dc0 RSI: ffffffff83145c36 RDI: 0000000000000005 [ 78.648638][ T5005] RBP: ffffc90003a0f6a8 R08: 0000000000000005 R09: 0000000000000000 [ 78.656766][ T5005] R10: 00000000ffffffea R11: 0000000000000001 R12: 0000000000000001 [ 78.664773][ T5005] R13: 0000000000000003 R14: dffffc0000000000 R15: 00007ffffffffff0 [ 78.672912][ T5005] FS: 000055555688d300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 78.681903][ T5005] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.688575][ T5005] CR2: 000000000066c7e0 CR3: 0000000076741000 CR4: 00000000003506e0 [ 78.696800][ T5005] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.704796][ T5005] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.712857][ T5005] Call Trace: [ 78.716164][ T5005] [ 78.719155][ T5005] ? xfs_bmapi_minleft+0x240/0x240 [ 78.724328][ T5005] ? xfs_buf_find_lock+0x4f0/0x4f0 [ 78.729562][ T5005] ? xfs_trans_buf_item_match+0x252/0x300 [ 78.735348][ T5005] xfs_trans_get_buf_map+0x298/0x710 [ 78.740830][ T5005] ? xfs_trans_bjoin+0x210/0x210 [ 78.745840][ T5005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 78.752095][ T5005] xfs_dquot_disk_alloc+0x859/0xb80 [ 78.757511][ T5005] ? xfs_qm_init_dquot_blk.constprop.0+0x5b0/0x5b0 [ 78.764081][ T5005] ? xfs_qm_dquot_logitem_init+0x48/0x90 [ 78.769906][ T5005] xfs_qm_dqread+0x4dd/0x570 [ 78.774554][ T5005] ? xfs_qm_dqdestroy+0x240/0x240 [ 78.779667][ T5005] ? xfs_qm_dqget_cache_lookup+0x3b2/0x810 [ 78.785545][ T5005] xfs_qm_dqget+0x141/0x4b0 [ 78.790160][ T5005] ? xfs_dquot_to_disk+0x750/0x750 [ 78.795329][ T5005] ? from_kuid_munged+0x130/0x130 [ 78.800446][ T5005] ? rcu_is_watching+0x12/0xb0 [ 78.805262][ T5005] xfs_qm_vop_dqalloc+0x5f2/0xe70 [ 78.810427][ T5005] ? xfs_qm_mount_quotas+0x690/0x690 [ 78.815764][ T5005] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 78.821655][ T5005] ? from_kgid+0x8b/0xd0 [ 78.825952][ T5005] ? from_vfsgid+0x10f/0x170 [ 78.830635][ T5005] ? make_vfsgid+0x170/0x170 [ 78.835357][ T5005] ? apparmor_capable+0x1dc/0x460 [ 78.840473][ T5005] xfs_setattr_nonsize+0xab1/0xd30 [ 78.845649][ T5005] ? xfs_initxattrs+0x1f0/0x1f0 [ 78.850593][ T5005] ? setattr_prepare+0x140/0x9b0 [ 78.855577][ T5005] ? xfs_vn_change_ok+0xc0/0x160 [ 78.860596][ T5005] xfs_vn_setattr+0x1fb/0x260 [ 78.865410][ T5005] ? xfs_vn_change_ok+0x160/0x160 [ 78.870569][ T5005] ? make_vfsgid+0x170/0x170 [ 78.875219][ T5005] ? xfs_vn_change_ok+0x160/0x160 [ 78.880369][ T5005] notify_change+0xb2c/0x1180 [ 78.885119][ T5005] ? chown_common+0x57f/0x650 [ 78.889889][ T5005] chown_common+0x57f/0x650 [ 78.894447][ T5005] ? __ia32_sys_chmod+0x80/0x80 [ 78.899359][ T5005] ? trace_lock_acquire+0x12d/0x180 [ 78.904621][ T5005] ? __mnt_want_write+0x3f/0x2e0 [ 78.909750][ T5005] ? __mnt_want_write+0x1fe/0x2e0 [ 78.914830][ T5005] ksys_fchown+0x115/0x170 [ 78.919332][ T5005] __x64_sys_fchown+0x73/0xb0 [ 78.924047][ T5005] do_syscall_64+0x39/0xb0 [ 78.928586][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.934556][ T5005] RIP: 0033:0x7fd290b4b969 [ 78.939048][ T5005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.958739][ T5005] RSP: 002b:00007fff36598308 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 78.967215][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd290b4b969 [ 78.975215][ T5005] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000000000000006 [ 78.983269][ T5005] RBP: 00007fd290b0b200 R08: 0000000000000000 R09: 0000000000000000 [ 78.991329][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd290b0b290 [ 78.999507][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.007582][ T5005] [ 79.010642][ T5005] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 79.018024][ T5005] CPU: 1 PID: 5005 Comm: syz-executor273 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 79.027926][ T5005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 79.038010][ T5005] Call Trace: [ 79.041292][ T5005] [ 79.044232][ T5005] dump_stack_lvl+0xd9/0x150 [ 79.048871][ T5005] panic+0x686/0x730 [ 79.052796][ T5005] ? panic_smp_self_stop+0xa0/0xa0 [ 79.057929][ T5005] ? show_trace_log_lvl+0x285/0x390 [ 79.063182][ T5005] ? xfs_buf_get_map+0x1db3/0x2fd0 [ 79.068313][ T5005] check_panic_on_warn+0xb1/0xc0 [ 79.073277][ T5005] __warn+0xf2/0x390 [ 79.077198][ T5005] ? xfs_buf_get_map+0x1db3/0x2fd0 [ 79.082327][ T5005] report_bug+0x2da/0x500 [ 79.086689][ T5005] handle_bug+0x3c/0x70 [ 79.090856][ T5005] exc_invalid_op+0x18/0x50 [ 79.095371][ T5005] asm_exc_invalid_op+0x1a/0x20 [ 79.100254][ T5005] RIP: 0010:xfs_buf_get_map+0x1db3/0x2fd0 [ 79.105997][ T5005] Code: eb 75 fe 48 8b b5 50 ff ff ff 49 89 d9 4d 89 f8 48 c7 c1 e0 81 8b 8a 48 c7 c2 40 7e 8b 8a 48 c7 c7 a0 7e 8b 8a e8 7d 22 06 00 <0f> 0b 41 bd 8b ff ff ff e9 cf ee ff ff e8 4b eb 75 fe 4c 89 e7 e8 [ 79.125626][ T5005] RSP: 0018:ffffc90003a0f560 EFLAGS: 00010286 [ 79.131723][ T5005] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 0000000000000000 [ 79.139713][ T5005] RDX: ffff888028141dc0 RSI: ffffffff83145c36 RDI: 0000000000000005 [ 79.147705][ T5005] RBP: ffffc90003a0f6a8 R08: 0000000000000005 R09: 0000000000000000 [ 79.155693][ T5005] R10: 00000000ffffffea R11: 0000000000000001 R12: 0000000000000001 [ 79.163680][ T5005] R13: 0000000000000003 R14: dffffc0000000000 R15: 00007ffffffffff0 [ 79.171696][ T5005] ? xfs_printk_level+0x166/0x260 [ 79.176772][ T5005] ? xfs_bmapi_minleft+0x240/0x240 [ 79.181929][ T5005] ? xfs_buf_find_lock+0x4f0/0x4f0 [ 79.187093][ T5005] ? xfs_trans_buf_item_match+0x252/0x300 [ 79.192865][ T5005] xfs_trans_get_buf_map+0x298/0x710 [ 79.198197][ T5005] ? xfs_trans_bjoin+0x210/0x210 [ 79.203172][ T5005] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 79.209130][ T5005] xfs_dquot_disk_alloc+0x859/0xb80 [ 79.214380][ T5005] ? xfs_qm_init_dquot_blk.constprop.0+0x5b0/0x5b0 [ 79.220940][ T5005] ? xfs_qm_dquot_logitem_init+0x48/0x90 [ 79.226608][ T5005] xfs_qm_dqread+0x4dd/0x570 [ 79.231238][ T5005] ? xfs_qm_dqdestroy+0x240/0x240 [ 79.236306][ T5005] ? xfs_qm_dqget_cache_lookup+0x3b2/0x810 [ 79.242162][ T5005] xfs_qm_dqget+0x141/0x4b0 [ 79.246727][ T5005] ? xfs_dquot_to_disk+0x750/0x750 [ 79.251905][ T5005] ? from_kuid_munged+0x130/0x130 [ 79.257077][ T5005] ? rcu_is_watching+0x12/0xb0 [ 79.261879][ T5005] xfs_qm_vop_dqalloc+0x5f2/0xe70 [ 79.266993][ T5005] ? xfs_qm_mount_quotas+0x690/0x690 [ 79.272305][ T5005] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 79.278150][ T5005] ? from_kgid+0x8b/0xd0 [ 79.282432][ T5005] ? from_vfsgid+0x10f/0x170 [ 79.287050][ T5005] ? make_vfsgid+0x170/0x170 [ 79.291682][ T5005] ? apparmor_capable+0x1dc/0x460 [ 79.296742][ T5005] xfs_setattr_nonsize+0xab1/0xd30 [ 79.301894][ T5005] ? xfs_initxattrs+0x1f0/0x1f0 [ 79.306779][ T5005] ? setattr_prepare+0x140/0x9b0 [ 79.311750][ T5005] ? xfs_vn_change_ok+0xc0/0x160 [ 79.316724][ T5005] xfs_vn_setattr+0x1fb/0x260 [ 79.321438][ T5005] ? xfs_vn_change_ok+0x160/0x160 [ 79.326515][ T5005] ? make_vfsgid+0x170/0x170 [ 79.331133][ T5005] ? xfs_vn_change_ok+0x160/0x160 [ 79.336189][ T5005] notify_change+0xb2c/0x1180 [ 79.340894][ T5005] ? chown_common+0x57f/0x650 [ 79.345600][ T5005] chown_common+0x57f/0x650 [ 79.350129][ T5005] ? __ia32_sys_chmod+0x80/0x80 [ 79.355004][ T5005] ? trace_lock_acquire+0x12d/0x180 [ 79.360242][ T5005] ? __mnt_want_write+0x3f/0x2e0 [ 79.365221][ T5005] ? __mnt_want_write+0x1fe/0x2e0 [ 79.370292][ T5005] ksys_fchown+0x115/0x170 [ 79.374744][ T5005] __x64_sys_fchown+0x73/0xb0 [ 79.379449][ T5005] do_syscall_64+0x39/0xb0 [ 79.383922][ T5005] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.389857][ T5005] RIP: 0033:0x7fd290b4b969 [ 79.394288][ T5005] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.413914][ T5005] RSP: 002b:00007fff36598308 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 79.422439][ T5005] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd290b4b969 [ 79.430429][ T5005] RDX: 000000000000ee00 RSI: 0000000000000000 RDI: 0000000000000006 [ 79.438417][ T5005] RBP: 00007fd290b0b200 R08: 0000000000000000 R09: 0000000000000000 [ 79.446417][ T5005] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd290b0b290 [ 79.454426][ T5005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.462623][ T5005] [ 79.465887][ T5005] Kernel Offset: disabled [ 79.470320][ T5005] Rebooting in 86400 seconds..