./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1892100699 <...> Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. execve("./syz-executor1892100699", ["./syz-executor1892100699"], 0x7fffb10701d0 /* 10 vars */) = 0 brk(NULL) = 0x555557370000 brk(0x555557370d00) = 0x555557370d00 arch_prctl(ARCH_SET_FS, 0x555557370380) = 0 set_tid_address(0x555557370650) = 5068 set_robust_list(0x555557370660, 24) = 0 rseq(0x555557370ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1892100699", 4096) = 28 getrandom("\x30\x00\x22\xc4\x35\x77\x82\xa7", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557370d00 brk(0x555557391d00) = 0x555557391d00 brk(0x555557392000) = 0x555557392000 mprotect(0x7f0481ac2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557370650) = 5069 ./strace-static-x86_64: Process 5069 attached [pid 5069] set_robust_list(0x555557370660, 24) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] openat(AT_FDCWD, "/dev/vhost-net", O_RDWR) = 3 [pid 5069] ioctl(3, VHOST_SET_OWNER, 0) = 0 [pid 5069] memfd_create("\xa3\x9f\x6e\xb4\x64\x52\x04\x69\x35\x02\xac\xce\xe1\x88\x9d\x5b\x40\x38\xd7\xce\x1f\x20\x39\x49\x7f\x15\x1d\x93\x3d\xb5\xe7\x5c\x27\x4c\xe6\xd2\x8e\xbc\x29\x4a\x74\x54\x44\x71\x81\xcf\x81\xba\xe5\x31\xf5\x20\xc8\x10\x3e\xc9\x5c\x85\x17\x4c\xbf\xcf\x91\xdf\x4d\xf3\x02\x5e\x54\x2a", 0) = 4 [pid 5069] write(4, "\x7f\x45\x4c\x46\x60\x00\x00\x2e\xd8\xe4\xf9\x77\x65\xce\x27\xb9\x03\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\xb7\x38\x00\x00\x00\x00\x00\x35\xf4\xc3\x84\x22\xa3\xbc\x82\x20\x00\x05\x00\x00\x00\x04\x02\x03\x00\xb3\x00\x00\x00\x00\x00\x2a\x00\x24\x00\xb3\xd7\xc5\x2e\xbf\x31\xa8\xd5\xc8\xc3\xc6\xcb\x00\x00\x00\x09\xe5\x00\xd5\xff\xff\xff\x05\xff\xff\xff\x03\x00\x4f\x9e\xf4\x00\x00\x00\x00\x00\x00\x00"..., 216) = 216 [pid 5069] execveat(4, "", NULL, NULL, AT_EMPTY_PATH) = 0 [pid 5069] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0xb7000000} --- [ 74.064147][ T5069] process 'syz-executor189' launched '/dev/fd/4' with NULL argv: empty string added [ 74.079352][ T5069] process 'memfd:ndRi5ም[@8 9I=\'LҎ)JtTDqρ1 >\LϑM^T*' started with executable stack [ 74.100491][ T5069] ------------[ cut here ]------------ [ 74.107001][ T5069] WARNING: CPU: 1 PID: 5069 at kernel/signal.c:771 signal_wake_up_state+0xfa/0x120 [ 74.118163][ T5069] Modules linked in: [ 74.122284][ T5069] CPU: 1 PID: 5069 Comm: 4 Not tainted 6.7.0-rc8-syzkaller #0 [ 74.130110][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 74.142041][ T5069] RIP: 0010:signal_wake_up_state+0xfa/0x120 [ 74.148585][ T5069] Code: 00 be ff ff ff ff 48 8d 78 18 e8 31 6c 2e 09 31 ff 41 89 c4 89 c6 e8 55 e8 35 00 45 85 e4 0f 85 62 ff ff ff e8 d7 ec 35 00 90 <0f> 0b 90 e9 54 ff ff ff 48 c7 c7 38 71 19 8f e8 12 96 8c 00 e9 2d [ 74.171715][ T5069] RSP: 0018:ffffc900039979f0 EFLAGS: 00010093 [ 74.178656][ T5069] RAX: 0000000000000000 RBX: ffff888020380000 RCX: ffffffff8151856b [ 74.187097][ T5069] RDX: ffff888023c40000 RSI: ffffffff81518579 RDI: 0000000000000005 [ 74.196164][ T5069] RBP: 0000000000000108 R08: 0000000000000005 R09: 0000000000000000 [ 74.204458][ T5069] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 74.214224][ T5069] R13: dffffc0000000000 R14: ffff888020380000 R15: ffff888023c40000 [ 74.223948][ T5069] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 74.233184][ T5069] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 74.241376][ T5069] CR2: 00000000b7000000 CR3: 00000000288f3000 CR4: 00000000003506f0 [ 74.250701][ T5069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.262336][ T5069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.271465][ T5069] Call Trace: [ 74.275108][ T5069] [ 74.278063][ T5069] ? show_regs+0x8f/0xa0 [ 74.282355][ T5069] ? __warn+0xe6/0x390 [ 74.286718][ T5069] ? signal_wake_up_state+0xfa/0x120 [ 74.292124][ T5069] ? report_bug+0x3bc/0x580 [ 74.297644][ T5069] ? handle_bug+0x3d/0x70 [ 74.303657][ T5069] ? exc_invalid_op+0x17/0x40 [ 74.310104][ T5069] ? asm_exc_invalid_op+0x1a/0x20 [ 74.316122][ T5069] ? signal_wake_up_state+0xeb/0x120 [ 74.322233][ T5069] ? signal_wake_up_state+0xf9/0x120 [ 74.328170][ T5069] ? signal_wake_up_state+0xfa/0x120 [ 74.334932][ T5069] do_coredump+0x784/0x3f70 [ 74.342650][ T5069] ? reacquire_held_locks+0x4c0/0x4c0 [ 74.349124][ T5069] ? find_held_lock+0x2d/0x110 [ 74.354903][ T5069] ? dump_emit+0x330/0x330 [ 74.359506][ T5069] ? __schedule+0xee3/0x5af0 [ 74.364309][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.370599][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.377924][ T5069] ? mark_held_locks+0x9f/0xe0 [ 74.383149][ T5069] ? find_held_lock+0x2d/0x110 [ 74.388753][ T5069] get_signal+0x242f/0x2790 [ 74.394557][ T5069] ? exit_signals+0x960/0x960 [ 74.400482][ T5069] ? force_sig+0xf0/0xf0 [ 74.406278][ T5069] arch_do_signal_or_restart+0x90/0x7f0 [ 74.413060][ T5069] ? __bad_area_nosemaphore+0x325/0x6a0 [ 74.419567][ T5069] ? get_sigframe_size+0x20/0x20 [ 74.424968][ T5069] ? __bad_area_nosemaphore+0x325/0x6a0 [ 74.430854][ T5069] exit_to_user_mode_prepare+0x121/0x240 [ 74.437700][ T5069] irqentry_exit_to_user_mode+0xa/0x40 [ 74.443927][ T5069] asm_exc_page_fault+0x26/0x30 [ 74.449144][ T5069] RIP: 0023:0xb7000000 [ 74.453630][ T5069] Code: Unable to access opcode bytes at 0xb6ffffd6. [ 74.460917][ T5069] RSP: 002b:00000000ff8cdad0 EFLAGS: 00010202 [ 74.468374][ T5069] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.478076][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.486516][ T5069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.495327][ T5069] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 74.504382][ T5069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.513336][ T5069] [ 74.516727][ T5069] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 74.524655][ T5069] CPU: 1 PID: 5069 Comm: 4 Not tainted 6.7.0-rc8-syzkaller #0 [ 74.534069][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 74.545304][ T5069] Call Trace: [ 74.548970][ T5069] [ 74.553307][ T5069] dump_stack_lvl+0xd9/0x1b0 [ 74.558709][ T5069] panic+0x6dc/0x790 [ 74.563645][ T5069] ? panic_smp_self_stop+0xa0/0xa0 [ 74.568856][ T5069] ? show_trace_log_lvl+0x363/0x4f0 [ 74.574362][ T5069] ? check_panic_on_warn+0x1f/0xb0 [ 74.580468][ T5069] ? signal_wake_up_state+0xfa/0x120 [ 74.585810][ T5069] check_panic_on_warn+0xab/0xb0 [ 74.590782][ T5069] __warn+0xf2/0x390 [ 74.594886][ T5069] ? signal_wake_up_state+0xfa/0x120 [ 74.600631][ T5069] report_bug+0x3bc/0x580 [ 74.605791][ T5069] handle_bug+0x3d/0x70 [ 74.610106][ T5069] exc_invalid_op+0x17/0x40 [ 74.614988][ T5069] asm_exc_invalid_op+0x1a/0x20 [ 74.621625][ T5069] RIP: 0010:signal_wake_up_state+0xfa/0x120 [ 74.627717][ T5069] Code: 00 be ff ff ff ff 48 8d 78 18 e8 31 6c 2e 09 31 ff 41 89 c4 89 c6 e8 55 e8 35 00 45 85 e4 0f 85 62 ff ff ff e8 d7 ec 35 00 90 <0f> 0b 90 e9 54 ff ff ff 48 c7 c7 38 71 19 8f e8 12 96 8c 00 e9 2d [ 74.651526][ T5069] RSP: 0018:ffffc900039979f0 EFLAGS: 00010093 [ 74.658646][ T5069] RAX: 0000000000000000 RBX: ffff888020380000 RCX: ffffffff8151856b [ 74.670125][ T5069] RDX: ffff888023c40000 RSI: ffffffff81518579 RDI: 0000000000000005 [ 74.680244][ T5069] RBP: 0000000000000108 R08: 0000000000000005 R09: 0000000000000000 [ 74.689874][ T5069] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 74.698971][ T5069] R13: dffffc0000000000 R14: ffff888020380000 R15: ffff888023c40000 [ 74.707231][ T5069] ? signal_wake_up_state+0xeb/0x120 [ 74.712720][ T5069] ? signal_wake_up_state+0xf9/0x120 [ 74.718667][ T5069] do_coredump+0x784/0x3f70 [ 74.724020][ T5069] ? reacquire_held_locks+0x4c0/0x4c0 [ 74.730581][ T5069] ? find_held_lock+0x2d/0x110 [ 74.736158][ T5069] ? dump_emit+0x330/0x330 [ 74.740885][ T5069] ? __schedule+0xee3/0x5af0 [ 74.745587][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.752054][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 74.758679][ T5069] ? mark_held_locks+0x9f/0xe0 [ 74.764023][ T5069] ? find_held_lock+0x2d/0x110 [ 74.770366][ T5069] get_signal+0x242f/0x2790 [ 74.775558][ T5069] ? exit_signals+0x960/0x960 [ 74.782237][ T5069] ? force_sig+0xf0/0xf0 [ 74.787053][ T5069] arch_do_signal_or_restart+0x90/0x7f0 [ 74.793133][ T5069] ? __bad_area_nosemaphore+0x325/0x6a0 [ 74.799176][ T5069] ? get_sigframe_size+0x20/0x20 [ 74.804326][ T5069] ? __bad_area_nosemaphore+0x325/0x6a0 [ 74.810510][ T5069] exit_to_user_mode_prepare+0x121/0x240 [ 74.816725][ T5069] irqentry_exit_to_user_mode+0xa/0x40 [ 74.822555][ T5069] asm_exc_page_fault+0x26/0x30 [ 74.827511][ T5069] RIP: 0023:0xb7000000 [ 74.831892][ T5069] Code: Unable to access opcode bytes at 0xb6ffffd6. [ 74.838834][ T5069] RSP: 002b:00000000ff8cdad0 EFLAGS: 00010202 [ 74.846147][ T5069] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 74.854457][ T5069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.864153][ T5069] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.873758][ T5069] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 74.883726][ T5069] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.895710][ T5069] [ 74.900270][ T5069] Kernel Offset: disabled [ 74.904904][ T5069] Rebooting in 86400 seconds..