./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2517104359 <...> Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. execve("./syz-executor2517104359", ["./syz-executor2517104359"], 0x7ffec7868650 /* 10 vars */) = 0 brk(NULL) = 0x555594e58000 brk(0x555594e58d00) = 0x555594e58d00 arch_prctl(ARCH_SET_FS, 0x555594e58380) = 0 set_tid_address(0x555594e58650) = 5828 set_robust_list(0x555594e58660, 24) = 0 rseq(0x555594e58ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2517104359", 4096) = 28 getrandom("\xc5\xf6\x0b\xb8\x83\x25\x3e\x4c", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555594e58d00 brk(0x555594e79d00) = 0x555594e79d00 brk(0x555594e7a000) = 0x555594e7a000 mprotect(0x7fdde2657000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0executing program ) = 0x21000000 write(1, "executing program\n", 18) = 18 io_uring_setup(14109, {flags=IORING_SETUP_SQPOLL, sq_thread_cpu=0x2, sq_thread_idle=233, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE|0xe000, sq_off={head=0, tail=4, ring_mask=16, ring_entries=24, flags=36, dropped=32, array=524352}, cq_off={head=8, tail=12, ring_mask=20, ring_entries=28, overflow=44, cqes=64, flags=40}}) = 3 mmap(NULL, 589888, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 3, 0) = 0x7fdde2514000 mmap(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_POPULATE, 3, 0x10000000) = 0x7fdde2414000 io_uring_register(3, IORING_REGISTER_PERSONALITY, NULL, 0) = 1 [ 61.560089][ T5828] ================================================================== [ 61.568174][ T5828] BUG: KASAN: null-ptr-deref in __se_sys_io_uring_register+0x1227/0x3b60 [ 61.576598][ T5828] Write of size 8 at addr 0000000000000406 by task syz-executor251/5828 [ 61.584986][ T5828] [ 61.587304][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor251 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0 [ 61.597866][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.607908][ T5828] Call Trace: [ 61.611178][ T5828] [ 61.614093][ T5828] dump_stack_lvl+0x241/0x360 [ 61.618757][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.623937][ T5828] ? __pfx__printk+0x10/0x10 [ 61.628526][ T5828] ? _printk+0xd5/0x120 [ 61.632769][ T5828] print_report+0xe8/0x550 [ 61.637181][ T5828] ? __virt_addr_valid+0x58/0x530 [ 61.642201][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60 [ 61.648255][ T5828] kasan_report+0x143/0x180 [ 61.652745][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60 [ 61.658802][ T5828] kasan_check_range+0x282/0x290 [ 61.663724][ T5828] __se_sys_io_uring_register+0x1227/0x3b60 [ 61.669624][ T5828] ? __lock_acquire+0x1397/0x2100 [ 61.674632][ T5828] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 61.680852][ T5828] ? do_raw_spin_lock+0x14f/0x370 [ 61.685861][ T5828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 61.691823][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.698130][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.703335][ T5828] ? lockdep_hardirqs_on+0x99/0x150 [ 61.708509][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50 [ 61.713688][ T5828] ? ptrace_notify+0x279/0x380 [ 61.718434][ T5828] ? __pfx_ptrace_notify+0x10/0x10 [ 61.723531][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.729837][ T5828] ? do_syscall_64+0x100/0x230 [ 61.734589][ T5828] do_syscall_64+0xf3/0x230 [ 61.739072][ T5828] ? clear_bhb_loop+0x35/0x90 [ 61.743731][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.749603][ T5828] RIP: 0033:0x7fdde25e43a9 [ 61.754032][ T5828] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 61.773788][ T5828] RSP: 002b:00007fff90b99ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 61.782191][ T5828] RAX: ffffffffffffffda RBX: 000000000000371d RCX: 00007fdde25e43a9 [ 61.790142][ T5828] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003 [ 61.798103][ T5828] RBP: 0000000000000003 R08: 00000000000ac5f8 R09: 00000000000ac5f8 [ 61.806061][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.814009][ T5828] R13: 00007fff90b9a0a8 R14: 0000000000000001 R15: 0000000000000001 [ 61.821983][ T5828] [ 61.824984][ T5828] ================================================================== [ 61.833780][ T5828] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 61.841003][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor251 Not tainted 6.13.0-rc1-next-20241203-syzkaller #0 [ 61.851576][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 61.861619][ T5828] Call Trace: [ 61.864889][ T5828] [ 61.867820][ T5828] dump_stack_lvl+0x241/0x360 [ 61.872494][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.877694][ T5828] ? __pfx__printk+0x10/0x10 [ 61.882279][ T5828] ? preempt_schedule+0xe1/0xf0 [ 61.887124][ T5828] ? vscnprintf+0x5d/0x90 [ 61.891458][ T5828] panic+0x349/0x880 [ 61.895432][ T5828] ? check_panic_on_warn+0x21/0xb0 [ 61.900532][ T5828] ? __pfx_panic+0x10/0x10 [ 61.904938][ T5828] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 61.910908][ T5828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 61.917229][ T5828] ? print_report+0xe8/0x550 [ 61.921810][ T5828] check_panic_on_warn+0x86/0xb0 [ 61.926734][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60 [ 61.932800][ T5828] end_report+0x77/0x160 [ 61.937040][ T5828] kasan_report+0x154/0x180 [ 61.941535][ T5828] ? __se_sys_io_uring_register+0x1227/0x3b60 [ 61.947592][ T5828] kasan_check_range+0x282/0x290 [ 61.952521][ T5828] __se_sys_io_uring_register+0x1227/0x3b60 [ 61.958401][ T5828] ? __lock_acquire+0x1397/0x2100 [ 61.963417][ T5828] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 61.969649][ T5828] ? do_raw_spin_lock+0x14f/0x370 [ 61.974672][ T5828] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 61.980637][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.986957][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 61.992149][ T5828] ? lockdep_hardirqs_on+0x99/0x150 [ 61.997332][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50 [ 62.002521][ T5828] ? ptrace_notify+0x279/0x380 [ 62.007278][ T5828] ? __pfx_ptrace_notify+0x10/0x10 [ 62.012378][ T5828] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.018702][ T5828] ? do_syscall_64+0x100/0x230 [ 62.023456][ T5828] do_syscall_64+0xf3/0x230 [ 62.027954][ T5828] ? clear_bhb_loop+0x35/0x90 [ 62.032620][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.038500][ T5828] RIP: 0033:0x7fdde25e43a9 [ 62.042902][ T5828] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.062492][ T5828] RSP: 002b:00007fff90b99ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 62.070894][ T5828] RAX: ffffffffffffffda RBX: 000000000000371d RCX: 00007fdde25e43a9 [ 62.078854][ T5828] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000003 [ 62.086829][ T5828] RBP: 0000000000000003 R08: 00000000000ac5f8 R09: 00000000000ac5f8 [ 62.094808][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.102790][ T5828] R13: 00007fff90b9a0a8 R14: 0000000000000001 R15: 0000000000000001 [ 62.110889][ T5828] [ 62.114160][ T5828] Kernel Offset: disabled [ 62.118480][ T5828] Rebooting in 86400 seconds..