./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2535074135 <...> Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. execve("./syz-executor2535074135", ["./syz-executor2535074135"], 0x7ffded76dd00 /* 10 vars */) = 0 brk(NULL) = 0x555578677000 brk(0x555578677d00) = 0x555578677d00 arch_prctl(ARCH_SET_FS, 0x555578677380) = 0 set_tid_address(0x555578677650) = 5070 set_robust_list(0x555578677660, 24) = 0 rseq(0x555578677ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2535074135", 4096) = 28 getrandom("\xe4\x5a\xa3\xbe\xb3\xa7\x16\x3f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555578677d00 brk(0x555578698d00) = 0x555578698d00 brk(0x555578699000) = 0x555578699000 mprotect(0x7f5c0350e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./file1", 000) = 0 mount(NULL, "./file1", "tmpfs", 0, "usrquota") = 0 chdir("./file1") = 0 openat(AT_FDCWD, "net_prio.prioidx", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [ 72.287154][ T5070] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 72.299480][ T5070] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 72.307898][ T5070] CPU: 0 PID: 5070 Comm: syz-executor253 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 72.318080][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 72.328156][ T5070] RIP: 0010:shmem_get_next_id+0x92/0x5c0 [ 72.333813][ T5070] Code: 04 db 49 8d 9c c6 90 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 f8 66 1b 00 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 df 66 1b 00 4c 8b 23 48 8d 5d 07 [ 72.353508][ T5070] RSP: 0018:ffffc900043a7be0 EFLAGS: 00010256 [ 72.359578][ T5070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880266c8000 [ 72.367634][ T5070] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 72.375610][ T5070] RBP: ffffc900043a7d00 R08: ffffffff81dcdd47 R09: ffffffff822e7d5a [ 72.383855][ T5070] R10: 0000000000000003 R11: ffffffff81dcdcf0 R12: 1ffff92000874fa0 [ 72.391831][ T5070] R13: ffff888022110000 R14: ffff888022110000 R15: dffffc0000000000 [ 72.399812][ T5070] FS: 0000555578677380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 72.408837][ T5070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.415426][ T5070] CR2: 0000000020001000 CR3: 000000007a384000 CR4: 0000000000350ef0 [ 72.423419][ T5070] Call Trace: [ 72.426702][ T5070] [ 72.429637][ T5070] ? __die_body+0x88/0xe0 [ 72.433982][ T5070] ? die_addr+0x108/0x140 [ 72.438319][ T5070] ? exc_general_protection+0x3dd/0x5d0 [ 72.443901][ T5070] ? asm_exc_general_protection+0x26/0x30 [ 72.449633][ T5070] ? __pfx_shmem_get_next_id+0x10/0x10 [ 72.455131][ T5070] ? from_kqid+0x2a/0x80 [ 72.459395][ T5070] ? shmem_get_next_id+0x57/0x5c0 [ 72.464438][ T5070] ? shmem_get_next_id+0x92/0x5c0 [ 72.469529][ T5070] ? __pfx_from_kgid+0x10/0x10 [ 72.474340][ T5070] dquot_get_next_dqblk+0x75/0x3a0 [ 72.479474][ T5070] quota_getnextquota+0x2c7/0x6c0 [ 72.484524][ T5070] ? __pfx_quota_getnextquota+0x10/0x10 [ 72.490091][ T5070] ? __pfx_aa_get_newest_label+0x10/0x10 [ 72.495750][ T5070] ? srso_return_thunk+0x5/0x5f [ 72.500620][ T5070] ? srso_return_thunk+0x5/0x5f [ 72.505513][ T5070] ? security_capable+0x90/0xb0 [ 72.510376][ T5070] ? srso_return_thunk+0x5/0x5f [ 72.515238][ T5070] ? srso_return_thunk+0x5/0x5f [ 72.520122][ T5070] ? security_quotactl+0x90/0xb0 [ 72.525088][ T5070] ? srso_return_thunk+0x5/0x5f [ 72.529972][ T5070] ? do_quotactl+0x478/0x870 [ 72.534592][ T5070] __se_sys_quotactl_fd+0x2a1/0x440 [ 72.539816][ T5070] do_syscall_64+0xfd/0x240 [ 72.544333][ T5070] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 72.550239][ T5070] RIP: 0033:0x7f5c0349b329 [ 72.554665][ T5070] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.574276][ T5070] RSP: 002b:00007ffc39d71138 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 72.582700][ T5070] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f5c0349b329 [ 72.590679][ T5070] RDX: 0000000000000000 RSI: ffffffff80000901 RDI: 0000000000000003 [ 72.598653][ T5070] RBP: 00007f5c0350e610 R08: 0000000000000000 R09: 00007ffc39d71308 [ 72.606806][ T5070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.614795][ T5070] R13: 00007ffc39d712f8 R14: 0000000000000001 R15: 0000000000000001 [ 72.622782][ T5070] [ 72.625821][ T5070] Modules linked in: [ 72.632723][ T5070] ---[ end trace 0000000000000000 ]--- [ 72.638446][ T5070] RIP: 0010:shmem_get_next_id+0x92/0x5c0 [ 72.644093][ T5070] Code: 04 db 49 8d 9c c6 90 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 f8 66 1b 00 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 df 66 1b 00 4c 8b 23 48 8d 5d 07 [ 72.663835][ T5070] RSP: 0018:ffffc900043a7be0 EFLAGS: 00010256 [ 72.669977][ T5070] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8880266c8000 [ 72.678003][ T5070] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 72.686057][ T5070] RBP: ffffc900043a7d00 R08: ffffffff81dcdd47 R09: ffffffff822e7d5a [ 72.694029][ T5070] R10: 0000000000000003 R11: ffffffff81dcdcf0 R12: 1ffff92000874fa0 [ 72.702045][ T5070] R13: ffff888022110000 R14: ffff888022110000 R15: dffffc0000000000 [ 72.710086][ T5070] FS: 0000555578677380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 72.719072][ T5070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.725768][ T5070] CR2: 0000000020001000 CR3: 000000007a384000 CR4: 0000000000350ef0 [ 72.733762][ T5070] Kernel panic - not syncing: Fatal exception [ 72.740071][ T5070] Kernel Offset: disabled [ 72.744389][ T5070] Rebooting in 86400 seconds..