./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2744395315
<...>
Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts.
execve("./syz-executor2744395315", ["./syz-executor2744395315"], 0x7fff747f6a40 /* 10 vars */) = 0
brk(NULL) = 0x55556fb18000
brk(0x55556fb18d00) = 0x55556fb18d00
arch_prctl(ARCH_SET_FS, 0x55556fb18380) = 0
set_tid_address(0x55556fb18650) = 5828
set_robust_list(0x55556fb18660, 24) = 0
rseq(0x55556fb18ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2744395315", 4096) = 28
getrandom("\xd6\x77\x7c\x66\xed\x46\x32\x16", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556fb18d00
brk(0x55556fb39d00) = 0x55556fb39d00
brk(0x55556fb3a000) = 0x55556fb3a000
mprotect(0x7f65bbd23000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18) = 18
io_uring_setup(14109, {flags=IORING_SETUP_SQPOLL, sq_thread_cpu=0x2, sq_thread_idle=233, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE|0xe000, sq_off={head=0, tail=4, ring_mask=16, ring_entries=24, flags=36, dropped=32, array=524352}, cq_off={head=8, tail=12, ring_mask=20, ring_entries=28, overflow=44, cqes=64, flags=40}}) = 3
mmap(NULL, 589888, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 3, 0) = 0x7f65bbbe0000
mmap(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 3, 0x10000000) = 0x7f65bbae0000
io_uring_register(3, IORING_REGISTER_PERSONALITY, NULL, 0) = 1
[ 63.765946][ T5828] ==================================================================
[ 63.774101][ T5828] BUG: KASAN: null-ptr-deref in __se_sys_io_uring_register+0x1227/0x3b60
[ 63.782543][ T5828] Write of size 8 at addr 0000000000000406 by task syz-executor274/5828
[ 63.791022][ T5828]
[ 63.793363][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor274 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0
[ 63.804027][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 63.814088][ T5828] Call Trace:
[ 63.817463][ T5828] <TASK>
[ 63.820381][ T5828] dump_stack_lvl+0x241/0x360
[ 63.825143][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10
[ 63.830343][ T5828] ? __pfx__printk+0x10/0x10
[ 63.834922][ T5828] ? _printk+0xd5/0x120
[ 63.839070][ T5828] print_report+0xe8/0x550
[ 63.843545][ T5828] ? __virt_addr_valid+0x58/0x530
[ 63.848578][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60
[ 63.854689][ T5828] kasan_report+0x143/0x180
[ 63.859205][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60
[ 63.865274][ T5828] kasan_check_range+0x282/0x290
[ 63.870206][ T5828] __se_sys_io_uring_register+0x1227/0x3b60
[ 63.876104][ T5828] ? __lock_acquire+0x1397/0x2100
[ 63.881124][ T5828] ? __pfx___se_sys_io_uring_register+0x10/0x10
[ 63.887364][ T5828] ? do_raw_spin_lock+0x14f/0x370
[ 63.892388][ T5828] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 63.898460][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 63.904782][ T5828] ? _raw_spin_unlock_irq+0x23/0x50
[ 63.909985][ T5828] ? lockdep_hardirqs_on+0x99/0x150
[ 63.915180][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50
[ 63.920381][ T5828] ? ptrace_notify+0x279/0x380
[ 63.925156][ T5828] ? __pfx_ptrace_notify+0x10/0x10
[ 63.930265][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 63.936680][ T5828] ? do_syscall_64+0x100/0x230
[ 63.941481][ T5828] do_syscall_64+0xf3/0x230
[ 63.945979][ T5828] ? clear_bhb_loop+0x35/0x90
[ 63.950677][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 63.956587][ T5828] RIP: 0033:0x7f65bbcb03a9
[ 63.961031][ T5828] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 63.980640][ T5828] RSP: 002b:00007ffe8fac7478 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 63.989107][ T5828] RAX: ffffffffffffffda RBX: 000000000000371d RCX: 00007f65bbcb03a9
[ 63.997174][ T5828] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003
[ 64.005161][ T5828] RBP: 0000000000000003 R08: 00000000000ac5f8 R09: 00000000000ac5f8
[ 64.013151][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 64.021133][ T5828] R13: 00007ffe8fac7648 R14: 0000000000000001 R15: 0000000000000001
[ 64.029108][ T5828] </TASK>
[ 64.032122][ T5828] ==================================================================
[ 64.041267][ T5828] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 64.048488][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor274 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0
[ 64.059094][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 64.069169][ T5828] Call Trace:
[ 64.072439][ T5828] <TASK>
[ 64.075381][ T5828] dump_stack_lvl+0x241/0x360
[ 64.080065][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10
[ 64.085296][ T5828] ? __pfx__printk+0x10/0x10
[ 64.089963][ T5828] ? preempt_schedule+0xe1/0xf0
[ 64.094806][ T5828] ? vscnprintf+0x5d/0x90
[ 64.099229][ T5828] panic+0x349/0x880
[ 64.103376][ T5828] ? check_panic_on_warn+0x21/0xb0
[ 64.108484][ T5828] ? __pfx_panic+0x10/0x10
[ 64.112897][ T5828] ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 64.118866][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 64.125339][ T5828] ? print_report+0xe8/0x550
[ 64.129928][ T5828] check_panic_on_warn+0x86/0xb0
[ 64.134883][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60
[ 64.140959][ T5828] end_report+0x77/0x160
[ 64.145211][ T5828] kasan_report+0x154/0x180
[ 64.149719][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60
[ 64.155792][ T5828] kasan_check_range+0x282/0x290
[ 64.160741][ T5828] __se_sys_io_uring_register+0x1227/0x3b60
[ 64.166628][ T5828] ? __lock_acquire+0x1397/0x2100
[ 64.171817][ T5828] ? __pfx___se_sys_io_uring_register+0x10/0x10
[ 64.178263][ T5828] ? do_raw_spin_lock+0x14f/0x370
[ 64.183301][ T5828] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 64.189306][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 64.195742][ T5828] ? _raw_spin_unlock_irq+0x23/0x50
[ 64.200933][ T5828] ? lockdep_hardirqs_on+0x99/0x150
[ 64.206149][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50
[ 64.211452][ T5828] ? ptrace_notify+0x279/0x380
[ 64.216218][ T5828] ? __pfx_ptrace_notify+0x10/0x10
[ 64.221325][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 64.227739][ T5828] ? do_syscall_64+0x100/0x230
[ 64.232503][ T5828] do_syscall_64+0xf3/0x230
[ 64.237023][ T5828] ? clear_bhb_loop+0x35/0x90
[ 64.241716][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 64.247608][ T5828] RIP: 0033:0x7f65bbcb03a9
[ 64.252030][ T5828] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 64.271821][ T5828] RSP: 002b:00007ffe8fac7478 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 64.280425][ T5828] RAX: ffffffffffffffda RBX: 000000000000371d RCX: 00007f65bbcb03a9
[ 64.288413][ T5828] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003
[ 64.296582][ T5828] RBP: 0000000000000003 R08: 00000000000ac5f8 R09: 00000000000ac5f8
[ 64.304565][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 64.312549][ T5828] R13: 00007ffe8fac7648 R14: 0000000000000001 R15: 0000000000000001
[ 64.320518][ T5828] </TASK>
[ 64.323977][ T5828] Kernel Offset: disabled
[ 64.328324][ T5828] Rebooting in 86400 seconds..