./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3385801971
<...>
Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts.
execve("./syz-executor3385801971", ["./syz-executor3385801971"], 0x7ffeebff8ce0 /* 10 vars */) = 0
brk(NULL) = 0x5555559f4000
brk(0x5555559f4d00) = 0x5555559f4d00
arch_prctl(ARCH_SET_FS, 0x5555559f43c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3385801971", 4096) = 28
brk(0x555555a15d00) = 0x555555a15d00
brk(0x555555a16000) = 0x555555a16000
mprotect(0x7f9e62665000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f9e625b5060, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f9e625b6410}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f9e625b5060, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f9e625b6410}, NULL, 8) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555559f4690) = 4991
./strace-static-x86_64: Process 4991 attached
[pid 4991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 4991] setpgid(0, 0) = 0
[pid 4991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 4991] write(3, "1000", 4) = 4
[pid 4991] close(3) = 0
[pid 4991] prctl(PR_SET_SECCOMP, SECCOMP_MODE_DISABLED, 0x20000040, 0, 0) = -1 EINVAL (Invalid argument)
[pid 4991] mkdir("./file0", 0777) = 0
[pid 4991] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 4991] pipe2([3, 4], 0) = 0
[pid 4991] write(4, "\x15\x00\x00\x00\x65\xff\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 21) = 21
[pid 4991] dup(4) = 5
[pid 4991] mount(NULL, "./file0", "9p", 0, "trans=fd,rfdno=0x0000000000000003,wfdno=0x0000000000000005,") = -1 EREMOTEIO (Remote I/O error)
[pid 4991] write(5, "\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24
[pid 4991] write(5, "\x4c\x01\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x18\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 311) = 311
syzkaller login: [ 51.558485][ T4991] ------------[ cut here ]------------
[ 51.564050][ T4991] WARNING: CPU: 1 PID: 4991 at mm/page_alloc.c:4735 __alloc_pages+0x340/0x670
[ 51.573218][ T4991] Modules linked in:
[ 51.577127][ T4991] CPU: 1 PID: 4991 Comm: syz-executor338 Not tainted 6.3.0-syzkaller-12049-g58390c8ce1bd #0
[ 51.587290][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 51.597478][ T4991] RIP: 0010:__alloc_pages+0x340/0x670
[ 51.602856][ T4991] Code: 8b 1c 24 0f 85 fd 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ed 00 00 00 c6 05 c9 46 6a 0c 01 <0f> 0b 83 fb 0a 0f 86 97 fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 e0
[ 51.622567][ T4991] RSP: 0018:ffffc90003a3f9e0 EFLAGS: 00010246
[ 51.628696][ T4991] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000
[ 51.636690][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003a3fa68
[ 51.644714][ T4991] RBP: ffffc90003a3fb00 R08: dffffc0000000000 R09: 0000000000000000
[ 51.652745][ T4991] R10: ffffc90003a3fa40 R11: dffffc0000000001 R12: 1ffff92000747f44
[ 51.660799][ T4991] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff92000747f40
[ 51.668836][ T4991] FS: 00005555559f43c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 51.677835][ T4991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 51.684412][ T4991] CR2: 0000000020001000 CR3: 000000007355b000 CR4: 00000000003506e0
[ 51.692449][ T4991] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 51.700486][ T4991] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 51.708517][ T4991] Call Trace:
[ 51.711800][ T4991]
[ 51.714722][ T4991] ? zone_statistics+0x170/0x170
[ 51.719722][ T4991] ? p9_fid_get+0xa0/0xa0
[ 51.724072][ T4991] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 51.730109][ T4991] ? print_irqtrace_events+0x220/0x220
[ 51.735670][ T4991] __kmalloc_large_node+0x91/0x1d0
[ 51.740863][ T4991] ? v9fs_fid_get_acl+0x4f/0xf0
[ 51.745723][ T4991] __kmalloc+0x11b/0x230
[ 51.750019][ T4991] v9fs_fid_get_acl+0x4f/0xf0
[ 51.754703][ T4991] v9fs_get_acl+0x12e/0x340
[ 51.759274][ T4991] v9fs_mount+0x958/0xc40
[ 51.763648][ T4991] ? xfs_fs_commit_blocks+0x7c0/0x7c0
[ 51.769082][ T4991] ? cap_capable+0x1b4/0x240
[ 51.773696][ T4991] legacy_get_tree+0xef/0x190
[ 51.778480][ T4991] ? xfs_fs_commit_blocks+0x7c0/0x7c0
[ 51.783878][ T4991] vfs_get_tree+0x8c/0x270
[ 51.788354][ T4991] do_new_mount+0x28f/0xae0
[ 51.792870][ T4991] ? path_mount+0x5f2/0xf80
[ 51.797441][ T4991] ? do_move_mount_old+0x170/0x170
[ 51.802563][ T4991] ? user_path_at_empty+0x12f/0x180
[ 51.807807][ T4991] __se_sys_mount+0x2d9/0x3c0
[ 51.812499][ T4991] ? __x64_sys_mount+0xc0/0xc0
[ 51.817371][ T4991] ? syscall_enter_from_user_mode+0x32/0x230
[ 51.823380][ T4991] ? __x64_sys_mount+0x20/0xc0
[ 51.828221][ T4991] do_syscall_64+0x41/0xc0
[ 51.832656][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 51.838628][ T4991] RIP: 0033:0x7f9e625f8709
[ 51.843050][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 51.862736][ T4991] RSP: 002b:00007ffd77c370b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 51.871211][ T4991] RAX: ffffffffffffffda RBX: 00007ffd77c370f8 RCX: 00007f9e625f8709
[ 51.879266][ T4991] RDX: 0000000020000140 RSI: 0000000020000340 RDI: 0000000000000000
[ 51.887303][ T4991] RBP: 0000000000000000 R08: 00000000200006c0 R09: 0000000000000000
[ 51.895651][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd77c370f0
[ 51.903997][ T4991] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 51.912037][ T4991]
[ 51.915070][ T4991] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 51.922347][ T4991] CPU: 1 PID: 4991 Comm: syz-executor338 Not tainted 6.3.0-syzkaller-12049-g58390c8ce1bd #0
[ 51.932418][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 51.942464][ T4991] Call Trace:
[ 51.945736][ T4991]
[ 51.948662][ T4991] dump_stack_lvl+0x1e7/0x2d0
[ 51.953368][ T4991] ? nf_tcp_handle_invalid+0x650/0x650
[ 51.958823][ T4991] ? panic+0x770/0x770
[ 51.962892][ T4991] ? vscnprintf+0x5d/0x80
[ 51.967219][ T4991] panic+0x30f/0x770
[ 51.971117][ T4991] ? __warn+0x171/0x4a0
[ 51.975273][ T4991] ? __memcpy_flushcache+0x2b0/0x2b0
[ 51.980573][ T4991] __warn+0x314/0x4a0
[ 51.984549][ T4991] ? __alloc_pages+0x340/0x670
[ 51.989331][ T4991] report_bug+0x2b3/0x500
[ 51.993659][ T4991] ? __alloc_pages+0x340/0x670
[ 51.998426][ T4991] handle_bug+0x3d/0x70
[ 52.002578][ T4991] exc_invalid_op+0x1a/0x50
[ 52.007080][ T4991] asm_exc_invalid_op+0x1a/0x20
[ 52.011929][ T4991] RIP: 0010:__alloc_pages+0x340/0x670
[ 52.017292][ T4991] Code: 8b 1c 24 0f 85 fd 00 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 41 0f 44 cd 41 89 cd e9 ed 00 00 00 c6 05 c9 46 6a 0c 01 <0f> 0b 83 fb 0a 0f 86 97 fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 e0
[ 52.037241][ T4991] RSP: 0018:ffffc90003a3f9e0 EFLAGS: 00010246
[ 52.043304][ T4991] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 0000000000000000
[ 52.051266][ T4991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003a3fa68
[ 52.059230][ T4991] RBP: ffffc90003a3fb00 R08: dffffc0000000000 R09: 0000000000000000
[ 52.067193][ T4991] R10: ffffc90003a3fa40 R11: dffffc0000000001 R12: 1ffff92000747f44
[ 52.075160][ T4991] R13: 0000000000040d40 R14: dffffc0000000000 R15: 1ffff92000747f40
[ 52.083137][ T4991] ? zone_statistics+0x170/0x170
[ 52.088093][ T4991] ? p9_fid_get+0xa0/0xa0
[ 52.092416][ T4991] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0
[ 52.098391][ T4991] ? print_irqtrace_events+0x220/0x220
[ 52.103844][ T4991] __kmalloc_large_node+0x91/0x1d0
[ 52.109043][ T4991] ? v9fs_fid_get_acl+0x4f/0xf0
[ 52.113882][ T4991] __kmalloc+0x11b/0x230
[ 52.118121][ T4991] v9fs_fid_get_acl+0x4f/0xf0
[ 52.122791][ T4991] v9fs_get_acl+0x12e/0x340
[ 52.127284][ T4991] v9fs_mount+0x958/0xc40
[ 52.131609][ T4991] ? xfs_fs_commit_blocks+0x7c0/0x7c0
[ 52.136977][ T4991] ? cap_capable+0x1b4/0x240
[ 52.141560][ T4991] legacy_get_tree+0xef/0x190
[ 52.146231][ T4991] ? xfs_fs_commit_blocks+0x7c0/0x7c0
[ 52.151597][ T4991] vfs_get_tree+0x8c/0x270
[ 52.156017][ T4991] do_new_mount+0x28f/0xae0
[ 52.160609][ T4991] ? path_mount+0x5f2/0xf80
[ 52.165106][ T4991] ? do_move_mount_old+0x170/0x170
[ 52.170214][ T4991] ? user_path_at_empty+0x12f/0x180
[ 52.175409][ T4991] __se_sys_mount+0x2d9/0x3c0
[ 52.180083][ T4991] ? __x64_sys_mount+0xc0/0xc0
[ 52.184855][ T4991] ? syscall_enter_from_user_mode+0x32/0x230
[ 52.190846][ T4991] ? __x64_sys_mount+0x20/0xc0
[ 52.195604][ T4991] do_syscall_64+0x41/0xc0
[ 52.200027][ T4991] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.205986][ T4991] RIP: 0033:0x7f9e625f8709
[ 52.210413][ T4991] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 52.230185][ T4991] RSP: 002b:00007ffd77c370b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 52.238594][ T4991] RAX: ffffffffffffffda RBX: 00007ffd77c370f8 RCX: 00007f9e625f8709
[ 52.246562][ T4991] RDX: 0000000020000140 RSI: 0000000020000340 RDI: 0000000000000000
[ 52.254542][ T4991] RBP: 0000000000000000 R08: 00000000200006c0 R09: 0000000000000000
[ 52.262521][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd77c370f0
[ 52.270488][ T4991] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 52.278461][ T4991]
[ 52.281643][ T4991] Kernel Offset: disabled
[ 52.286054][ T4991] Rebooting in 86400 seconds..