./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2087024718 <...> Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. execve("./syz-executor2087024718", ["./syz-executor2087024718"], 0x7fff973074f0 /* 10 vars */) = 0 brk(NULL) = 0x5555567fa000 brk(0x5555567fac40) = 0x5555567fac40 arch_prctl(ARCH_SET_FS, 0x5555567fa300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2087024718", 4096) = 28 brk(0x55555681bc40) = 0x55555681bc40 brk(0x55555681c000) = 0x55555681c000 mprotect(0x7fbd68cd5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3605 attached , child_tidptr=0x5555567fa5d0) = 3605 [pid 3605] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 3605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3605] setsid() = 1 [pid 3605] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_CORE, {rlim_cur=0, rlim_max=0}, NULL) = 0 [pid 3605] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 3605] unshare(CLONE_NEWNS) = 0 [pid 3605] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 3605] unshare(CLONE_NEWIPC) = 0 [pid 3605] unshare(CLONE_NEWCGROUP) = 0 [pid 3605] unshare(CLONE_NEWUTS) = 0 [pid 3605] unshare(CLONE_SYSVSEM) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "16777216", 8) = 8 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "536870912", 9) = 9 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "8192", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024", 4) = 4 [pid 3605] close(3) = 0 [pid 3605] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 3605] write(3, "1024 1048576 500 1024", 21) = 21 [pid 3605] close(3) = 0 [pid 3605] getpid() = 1 [pid 3605] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b eb 8f e8 33 39 80 fd 0f b6 1d 22 b1 ac 09 31 ff 89 de e8 03 [ 52.283895][ T3605] RSP: 0018:ffffc90002fcf9d0 EFLAGS: 00010282 [ 52.290011][ T3605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 52.298422][ T3605] RDX: ffff888022543b00 RSI: ffffffff81606db8 RDI: fffff520005f9f2c [ 52.307099][ T3605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.315297][ T3605] R10: ffffffff816000f9 R11: 0000000000000000 R12: 1ffff920005f9f3d [ 52.323383][ T3605] R13: 0000000090965601 R14: ffff88807e9a0000 R15: ffffc90002fcfa08 [ 52.331362][ T3605] FS: 00005555567fa300(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 52.340514][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.347395][ T3605] CR2: 00007fd252aa4300 CR3: 000000001994e000 CR4: 00000000003506f0 [ 52.355742][ T3605] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.364035][ T3605] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.372567][ T3605] Call Trace: [ 52.375854][ T3605] [ 52.378780][ T3605] sk_psock_get+0x3bc/0x410 [ 52.383515][ T3605] ? process_rx_list+0x690/0x690 [ 52.388498][ T3605] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 52.394816][ T3605] tls_data_ready+0x6d/0x1b0 [ 52.399434][ T3605] tcp_data_ready+0x106/0x520 [ 52.404671][ T3605] tcp_data_queue+0x25f2/0x4c90 [ 52.409577][ T3605] ? tcp_urg+0x108/0xb40 [ 52.413923][ T3605] ? tcp_data_ready+0x520/0x520 [ 52.418797][ T3605] ? inet_reqsk_alloc+0x6a0/0x780 [ 52.424040][ T3605] tcp_rcv_state_process+0x1774/0x4e80 [ 52.429527][ T3605] ? tcp_finish_connect+0x610/0x610 [ 52.435148][ T3605] ? find_held_lock+0x2d/0x110 [ 52.439984][ T3605] ? __release_sock+0xd0/0x3b0 [ 52.446402][ T3605] ? mark_held_locks+0x9f/0xe0 [ 52.451185][ T3605] tcp_v4_do_rcv+0x339/0x980 [ 52.456229][ T3605] __release_sock+0x134/0x3b0 [ 52.460946][ T3605] release_sock+0x54/0x1b0 [ 52.465828][ T3605] ? tcp_done+0x340/0x340 [ 52.470165][ T3605] inet_shutdown+0x1e0/0x430 [ 52.475185][ T3605] __sys_shutdown+0xf1/0x1b0 [ 52.479816][ T3605] ? __sys_shutdown_sock+0xa0/0xa0 [ 52.485100][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.490328][ T3605] ? lockdep_hardirqs_on+0x79/0x100 [ 52.495844][ T3605] ? _raw_spin_unlock_irq+0x2a/0x40 [ 52.501070][ T3605] ? ptrace_notify+0xfa/0x140 [ 52.506027][ T3605] __x64_sys_shutdown+0x50/0x70 [ 52.510908][ T3605] do_syscall_64+0x35/0xb0 [ 52.516784][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 52.523086][ T3605] RIP: 0033:0x7fbd68c61969 [ 52.527535][ T3605] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.547389][ T3605] RSP: 002b:00007ffdfd5f2358 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 52.555923][ T3605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd68c61969 [ 52.564311][ T3605] RDX: 00007fbd68c61969 RSI: 0000000000000001 RDI: 0000000000000003 [ 52.572666][ T3605] RBP: 0000000000000003 R08: bb1414ac00000000 R09: bb1414ac00000000 [ 52.580669][ T3605] R10: 0000000000000028 R11: 0000000000000246 R12: 00007ffdfd5f2370 [ 52.588813][ T3605] R13: 00007ffdfd5f2364 R14: 0000000000000003 R15: 0000000000000000 [ 52.597259][ T3605] [ 52.600304][ T3605] Kernel panic - not syncing: panic_on_warn set ... [ 52.606881][ T3605] CPU: 0 PID: 3605 Comm: syz-executor208 Not tainted 5.18.0-syzkaller-03023-g7e062cda7d90 #0 [ 52.617023][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.627068][ T3605] Call Trace: [ 52.630342][ T3605] [ 52.633267][ T3605] dump_stack_lvl+0xcd/0x134 [ 52.637994][ T3605] panic+0x2d7/0x636 [ 52.641884][ T3605] ? panic_print_sys_info.part.0+0x10b/0x10b [ 52.648130][ T3605] ? __warn.cold+0x1d9/0x2cd [ 52.652732][ T3605] ? refcount_warn_saturate+0xf4/0x1e0 [ 52.658380][ T3605] __warn.cold+0x1ea/0x2cd [ 52.662825][ T3605] ? __wake_up_klogd.part.0+0x99/0xf0 [ 52.668240][ T3605] ? refcount_warn_saturate+0xf4/0x1e0 [ 52.673737][ T3605] report_bug+0x1bc/0x210 [ 52.678112][ T3605] handle_bug+0x3c/0x60 [ 52.682295][ T3605] exc_invalid_op+0x14/0x40 [ 52.686822][ T3605] asm_exc_invalid_op+0x1b/0x20 [ 52.691704][ T3605] RIP: 0010:refcount_warn_saturate+0xf4/0x1e0 [ 52.697817][ T3605] Code: 1d 58 b1 ac 09 31 ff 89 de e8 38 3d 80 fd 84 db 75 ab e8 4f 39 80 fd 48 c7 c7 e0 a3 27 8a c6 05 38 b1 ac 09 01 e8 62 c6 34 05 <0f> 0b eb 8f e8 33 39 80 fd 0f b6 1d 22 b1 ac 09 31 ff 89 de e8 03 [ 52.717444][ T3605] RSP: 0018:ffffc90002fcf9d0 EFLAGS: 00010282 [ 52.723525][ T3605] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 52.731515][ T3605] RDX: ffff888022543b00 RSI: ffffffff81606db8 RDI: fffff520005f9f2c [ 52.739511][ T3605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.747503][ T3605] R10: ffffffff816000f9 R11: 0000000000000000 R12: 1ffff920005f9f3d [ 52.755592][ T3605] R13: 0000000090965601 R14: ffff88807e9a0000 R15: ffffc90002fcfa08 [ 52.763760][ T3605] ? __wake_up_klogd.part.0+0x99/0xf0 [ 52.769159][ T3605] ? vprintk+0x88/0x90 [ 52.773815][ T3605] sk_psock_get+0x3bc/0x410 [ 52.778340][ T3605] ? process_rx_list+0x690/0x690 [ 52.783303][ T3605] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 52.789571][ T3605] tls_data_ready+0x6d/0x1b0 [ 52.794184][ T3605] tcp_data_ready+0x106/0x520 [ 52.798882][ T3605] tcp_data_queue+0x25f2/0x4c90 [ 52.803763][ T3605] ? tcp_urg+0x108/0xb40 [ 52.808020][ T3605] ? tcp_data_ready+0x520/0x520 [ 52.812904][ T3605] ? inet_reqsk_alloc+0x6a0/0x780 [ 52.817960][ T3605] tcp_rcv_state_process+0x1774/0x4e80 [ 52.823454][ T3605] ? tcp_finish_connect+0x610/0x610 [ 52.828691][ T3605] ? find_held_lock+0x2d/0x110 [ 52.833482][ T3605] ? __release_sock+0xd0/0x3b0 [ 52.838266][ T3605] ? mark_held_locks+0x9f/0xe0 [ 52.843082][ T3605] tcp_v4_do_rcv+0x339/0x980 [ 52.847707][ T3605] __release_sock+0x134/0x3b0 [ 52.852415][ T3605] release_sock+0x54/0x1b0 [ 52.856849][ T3605] ? tcp_done+0x340/0x340 [ 52.861189][ T3605] inet_shutdown+0x1e0/0x430 [ 52.865794][ T3605] __sys_shutdown+0xf1/0x1b0 [ 52.870963][ T3605] ? __sys_shutdown_sock+0xa0/0xa0 [ 52.876141][ T3605] ? _raw_spin_unlock_irq+0x1f/0x40 [ 52.881382][ T3605] ? lockdep_hardirqs_on+0x79/0x100 [ 52.886630][ T3605] ? _raw_spin_unlock_irq+0x2a/0x40 [ 52.891854][ T3605] ? ptrace_notify+0xfa/0x140 [ 52.896571][ T3605] __x64_sys_shutdown+0x50/0x70 [ 52.901465][ T3605] do_syscall_64+0x35/0xb0 [ 52.905926][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 52.911842][ T3605] RIP: 0033:0x7fbd68c61969 [ 52.916272][ T3605] Code: 28 c3 e8 4a 15 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.935911][ T3605] RSP: 002b:00007ffdfd5f2358 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 52.944667][ T3605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd68c61969 [ 52.952656][ T3605] RDX: 00007fbd68c61969 RSI: 0000000000000001 RDI: 0000000000000003 [ 52.960635][ T3605] RBP: 0000000000000003 R08: bb1414ac00000000 R09: bb1414ac00000000 [ 52.968618][ T3605] R10: 0000000000000028 R11: 0000000000000246 R12: 00007ffdfd5f2370 [ 52.976598][ T3605] R13: 00007ffdfd5f2364 R14: 0000000000000003 R15: 0000000000000000 [ 52.984597][ T3605] [ 52.987972][ T3605] Kernel Offset: disabled [ 52.992358][ T3605] Rebooting in 86400 seconds..