./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1401477323 <...> Warning: Permanently added '10.128.1.108' (ECDSA) to the list of known hosts. execve("./syz-executor1401477323", ["./syz-executor1401477323"], 0x7ffec71e6f10 /* 10 vars */) = 0 brk(NULL) = 0x555556712000 brk(0x555556712c40) = 0x555556712c40 arch_prctl(ARCH_SET_FS, 0x555556712300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1401477323", 4096) = 28 brk(0x555556733c40) = 0x555556733c40 brk(0x555556734000) = 0x555556734000 mprotect(0x7f60886df000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 getpid() = 3607 mkdir("./syzkaller.hnAfiW", 0700) = 0 chmod("./syzkaller.hnAfiW", 0777) = 0 chdir("./syzkaller.hnAfiW") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3608 attached , child_tidptr=0x5555567125d0) = 3608 [pid 3608] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3608] setsid() = 1 [pid 3608] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3608] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3608] unshare(CLONE_NEWNS) = 0 [pid 3608] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3608] unshare(CLONE_NEWIPC) = 0 [pid 3608] unshare(CLONE_NEWCGROUP) = 0 [pid 3608] unshare(CLONE_NEWUTS) = 0 [pid 3608] unshare(CLONE_SYSVSEM) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "16777216", 8) = 8 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "536870912", 9) = 9 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "8192", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024", 4) = 4 [pid 3608] close(3) = 0 [pid 3608] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3608] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3608] close(3) = 0 [pid 3608] getpid() = 1 [pid 3608] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 41 0a 44 7e 48 c7 c0 60 82 [ 41.421701][ T3608] RSP: 0018:ffffc90003c9f960 EFLAGS: 00010246 [ 41.427783][ T3608] RAX: 0000000000000000 RBX: 1ffff92000793f2d RCX: 0000000000000000 [ 41.436062][ T3608] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000000 [ 41.444425][ T3608] RBP: 0000000000060820 R08: 0000000000000001 R09: 0000000000000000 [ 41.452520][ T3608] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000012 [ 41.460511][ T3608] R13: 0000000000000000 R14: 0000000000000012 R15: 0000000000000000 [ 41.468546][ T3608] FS: 0000555556712300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 41.477679][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.484341][ T3608] CR2: 00007fb6c3d5f238 CR3: 0000000027ecc000 CR4: 00000000003506e0 [ 41.492335][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.500294][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.508306][ T3608] Call Trace: [ 41.511662][ T3608] [ 41.514590][ T3608] ? __alloc_pages_slowpath.constprop.0+0x22d0/0x22d0 [ 41.521344][ T3608] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.526849][ T3608] __kmalloc_large_node+0x6a/0x130 [ 41.532016][ T3608] __kmalloc_node_track_caller+0x86/0xc0 [ 41.537644][ T3608] pskb_expand_head+0xfeb/0x1110 [ 41.542826][ T3608] ? __napi_alloc_skb+0x14f/0x340 [ 41.547867][ T3608] ? tun_get_user+0x1c1c/0x3a00 [ 41.553620][ T3608] ? trace_hardirqs_on+0x2d/0x120 [ 41.558647][ T3608] tun_get_user+0x18b7/0x3a00 [ 41.564021][ T3608] ? ref_tracker_alloc+0x2c3/0x550 [ 41.569133][ T3608] ? trace_hardirqs_on+0x2d/0x120 [ 41.574251][ T3608] ? tun_build_skb+0x1160/0x1160 [ 41.579196][ T3608] ? lock_acquire+0x480/0x570 [ 41.583956][ T3608] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.589419][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 41.594292][ T3608] tun_chr_write_iter+0xdb/0x200 [ 41.599229][ T3608] vfs_write+0x9e9/0xdd0 [ 41.603548][ T3608] ? vfs_read+0x930/0x930 [ 41.607890][ T3608] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 41.613387][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 41.618244][ T3608] ? __fget_light+0x20a/0x270 [ 41.622952][ T3608] ksys_write+0x127/0x250 [ 41.627291][ T3608] ? __ia32_sys_read+0xb0/0xb0 [ 41.632184][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40 [ 41.637402][ T3608] ? ptrace_notify+0xfa/0x140 [ 41.642117][ T3608] do_syscall_64+0x35/0xb0 [ 41.646542][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.652592][ T3608] RIP: 0033:0x7f608866b5a9 [ 41.657017][ T3608] Code: 46 01 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.677072][ T3608] RSP: 002b:00007ffca9628f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.685541][ T3608] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f608866b5a9 [ 41.693648][ T3608] RDX: 000000002000032a RSI: 0000000020000300 RDI: 0000000000000003 [ 41.701671][ T3608] RBP: 00007ffca9628f30 R08: 0000000000000001 R09: 00007f60886dfdc0 [ 41.709653][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 41.717801][ T3608] R13: 00007ffca9628f60 R14: 0000000000000003 R15: 0000000000000000 [ 41.725965][ T3608] [ 41.729003][ T3608] Kernel panic - not syncing: panic_on_warn set ... [ 41.735569][ T3608] CPU: 1 PID: 3608 Comm: syz-executor140 Not tainted 6.0.0-rc3-next-20220829-syzkaller #0 [ 41.745437][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 41.755474][ T3608] Call Trace: [ 41.758749][ T3608] [ 41.761665][ T3608] dump_stack_lvl+0xcd/0x134 [ 41.766246][ T3608] panic+0x2c8/0x627 [ 41.770128][ T3608] ? panic_print_sys_info.part.0+0x110/0x110 [ 41.776100][ T3608] ? __warn.cold+0x248/0x2c4 [ 41.780681][ T3608] ? __alloc_pages+0x39e/0x510 [ 41.785441][ T3608] __warn.cold+0x259/0x2c4 [ 41.789862][ T3608] ? __alloc_pages+0x39e/0x510 [ 41.794606][ T3608] report_bug+0x1bc/0x210 [ 41.798918][ T3608] handle_bug+0x3c/0x60 [ 41.803062][ T3608] exc_invalid_op+0x14/0x40 [ 41.807550][ T3608] asm_exc_invalid_op+0x16/0x20 [ 41.812386][ T3608] RIP: 0010:__alloc_pages+0x39e/0x510 [ 41.817741][ T3608] Code: ff ff 00 0f 84 33 fe ff ff 80 ce 01 e9 2b fe ff ff 83 fe 0a 0f 86 3e fd ff ff 80 3d 92 90 0c 0c 00 75 09 c6 05 89 90 0c 0c 01 <0f> 0b 45 31 f6 e9 8d fe ff ff 65 ff 05 41 0a 44 7e 48 c7 c0 60 82 [ 41.837345][ T3608] RSP: 0018:ffffc90003c9f960 EFLAGS: 00010246 [ 41.843412][ T3608] RAX: 0000000000000000 RBX: 1ffff92000793f2d RCX: 0000000000000000 [ 41.851386][ T3608] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000000 [ 41.859358][ T3608] RBP: 0000000000060820 R08: 0000000000000001 R09: 0000000000000000 [ 41.867326][ T3608] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000012 [ 41.875291][ T3608] R13: 0000000000000000 R14: 0000000000000012 R15: 0000000000000000 [ 41.883267][ T3608] ? __alloc_pages_slowpath.constprop.0+0x22d0/0x22d0 [ 41.890029][ T3608] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.895492][ T3608] __kmalloc_large_node+0x6a/0x130 [ 41.900619][ T3608] __kmalloc_node_track_caller+0x86/0xc0 [ 41.906269][ T3608] pskb_expand_head+0xfeb/0x1110 [ 41.911229][ T3608] ? __napi_alloc_skb+0x14f/0x340 [ 41.916266][ T3608] ? tun_get_user+0x1c1c/0x3a00 [ 41.921116][ T3608] ? trace_hardirqs_on+0x2d/0x120 [ 41.926138][ T3608] tun_get_user+0x18b7/0x3a00 [ 41.930828][ T3608] ? ref_tracker_alloc+0x2c3/0x550 [ 41.935944][ T3608] ? trace_hardirqs_on+0x2d/0x120 [ 41.940972][ T3608] ? tun_build_skb+0x1160/0x1160 [ 41.945906][ T3608] ? lock_acquire+0x480/0x570 [ 41.950583][ T3608] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.956039][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 41.960896][ T3608] tun_chr_write_iter+0xdb/0x200 [ 41.965834][ T3608] vfs_write+0x9e9/0xdd0 [ 41.970080][ T3608] ? vfs_read+0x930/0x930 [ 41.974409][ T3608] ? recalc_sigpending_tsk+0x18f/0x1d0 [ 41.979870][ T3608] ? lock_downgrade+0x6e0/0x6e0 [ 41.984718][ T3608] ? __fget_light+0x20a/0x270 [ 41.989403][ T3608] ksys_write+0x127/0x250 [ 41.993736][ T3608] ? __ia32_sys_read+0xb0/0xb0 [ 41.998500][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40 [ 42.003694][ T3608] ? ptrace_notify+0xfa/0x140 [ 42.008380][ T3608] do_syscall_64+0x35/0xb0 [ 42.012794][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.018701][ T3608] RIP: 0033:0x7f608866b5a9 [ 42.023116][ T3608] Code: 46 01 00 85 c0 b8 00 00 00 00 48 0f 44 c3 5b c3 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.042721][ T3608] RSP: 002b:00007ffca9628f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.051129][ T3608] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f608866b5a9 [ 42.059095][ T3608] RDX: 000000002000032a RSI: 0000000020000300 RDI: 0000000000000003 [ 42.067057][ T3608] RBP: 00007ffca9628f30 R08: 0000000000000001 R09: 00007f60886dfdc0 [ 42.075021][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 42.082985][ T3608] R13: 00007ffca9628f60 R14: 0000000000000003 R15: 0000000000000000 [ 42.090952][ T3608] [ 42.094180][ T3608] Kernel Offset: disabled [ 42.098507][ T3608] Rebooting in 86400 seconds..