./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1392631856 <...> Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. execve("./syz-executor1392631856", ["./syz-executor1392631856"], 0x7ffd274bb850 /* 10 vars */) = 0 brk(NULL) = 0x55556b35f000 brk(0x55556b35fd00) = 0x55556b35fd00 arch_prctl(ARCH_SET_FS, 0x55556b35f380) = 0 set_tid_address(0x55556b35f650) = 5115 set_robust_list(0x55556b35f660, 24) = 0 rseq(0x55556b35fca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1392631856", 4096) = 28 getrandom("\xc9\x9f\x98\x2d\x42\x09\xf6\xa3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556b35fd00 brk(0x55556b380d00) = 0x55556b380d00 brk(0x55556b381000) = 0x55556b381000 mprotect(0x7f4ac8722000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556b35f650) = 5116 ./strace-static-x86_64: Process 5116 attached [pid 5116] set_robust_list(0x55556b35f660, 24) = 0 [pid 5116] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5116] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5116] setsid() = 1 [pid 5116] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5116] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5116] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5116] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5116] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5116] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5116] unshare(CLONE_NEWNS) = 0 [pid 5116] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5116] unshare(CLONE_NEWIPC) = 0 [pid 5116] unshare(CLONE_NEWCGROUP) = 0 [pid 5116] unshare(CLONE_NEWUTS) = 0 [pid 5116] unshare(CLONE_SYSVSEM) = 0 [pid 5116] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "16777216", 8) = 8 [pid 5116] close(3) = 0 [pid 5116] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "536870912", 9) = 9 [pid 5116] close(3) = 0 [pid 5116] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "1024", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "8192", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "1024", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "1024", 4) = 4 [pid 5116] close(3) = 0 [pid 5116] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5116] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5116] close(3) = 0 [pid 5116] getpid() = 1 [pid 5116] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< 0b e8 68 70 68 f9 e9 15 fb ff ff 4c 89 e7 e8 3b 6f 68 f9 e9 32 [ 145.365382][ T5119] RSP: 0018:ffffc90004977920 EFLAGS: 00010293 [ 145.371463][ T5119] RAX: 0000000000000000 RBX: ffff888022a57410 RCX: ffffffff8880240f [ 145.379453][ T5119] RDX: ffff8880187e0000 RSI: ffffffff88802c90 RDI: 0000000000000004 [ 145.387435][ T5119] RBP: ffffc900049779b0 R08: 0000000000000004 R09: 0000000000000000 [ 145.395426][ T5119] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888015548200 [ 145.403851][ T5119] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 145.411844][ T5119] FS: 000055556b35f380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 145.420797][ T5119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.427395][ T5119] CR2: 00007f4ac87260e0 CR3: 000000007a9c0000 CR4: 0000000000350ef0 [ 145.435385][ T5119] Call Trace: [ 145.438673][ T5119] [ 145.441611][ T5119] ? show_regs+0x8c/0xa0 [ 145.445899][ T5119] ? die+0x36/0xa0 [ 145.449637][ T5119] ? do_trap+0x232/0x430 [ 145.453910][ T5119] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 145.459761][ T5119] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 145.465699][ T5119] ? do_error_trap+0xf4/0x230 [ 145.470410][ T5119] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 145.476241][ T5119] ? handle_invalid_op+0x34/0x40 [ 145.481226][ T5119] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 145.487052][ T5119] ? exc_invalid_op+0x2e/0x50 [ 145.491756][ T5119] ? asm_exc_invalid_op+0x1a/0x20 [ 145.496810][ T5119] ? binder_inc_ref_for_node+0x7cf/0x11f0 [ 145.502548][ T5119] ? binder_inc_ref_for_node+0x1050/0x11f0 [ 145.508379][ T5119] ? binder_inc_ref_for_node+0x1051/0x11f0 [ 145.514218][ T5119] ? __pfx___might_resched+0x10/0x10 [ 145.519525][ T5119] binder_thread_write+0x248d/0x3ac0 [ 145.524853][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.530523][ T5119] ? __pfx_binder_thread_write+0x10/0x10 [ 145.536192][ T5119] ? find_held_lock+0x2d/0x110 [ 145.540986][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.546661][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.552325][ T5119] ? binder_debug+0xdf/0x1b0 [ 145.556934][ T5119] ? __pfx_binder_debug+0x10/0x10 [ 145.561975][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.567649][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.573322][ T5119] ? __might_fault+0xe3/0x190 [ 145.578021][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.583706][ T5119] binder_ioctl+0x2250/0x6b10 [ 145.588421][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.594080][ T5119] ? tomoyo_path_number_perm+0x190/0x590 [ 145.599789][ T5119] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 145.605804][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.611545][ T5119] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 145.617501][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.623151][ T5119] ? do_vfs_ioctl+0x515/0x1ad0 [ 145.627970][ T5119] ? __pfx_binder_ioctl+0x10/0x10 [ 145.633021][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.638689][ T5119] ? find_held_lock+0x2d/0x110 [ 145.643482][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.649143][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.654799][ T5119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.660451][ T5119] ? __pfx_binder_ioctl+0x10/0x10 [ 145.665490][ T5119] __x64_sys_ioctl+0x196/0x220 [ 145.670276][ T5119] do_syscall_64+0xcd/0x250 [ 145.674817][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.680742][ T5119] RIP: 0033:0x7f4ac86af1e9 [ 145.685170][ T5119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 145.704801][ T5119] RSP: 002b:00007ffdf8fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.713256][ T5119] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4ac86af1e9 [ 145.721261][ T5119] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 145.729247][ T5119] RBP: 0000000000000000 R08: 000055556b360610 R09: 000055556b360610 [ 145.737243][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ac86fd0dc [ 145.745319][ T5119] R13: 00007f4ac86f80a3 R14: 00007ffdf8fb0050 R15: 00007ffdf8fb0040 [ 145.753304][ T5119] [ 145.756322][ T5119] Modules linked in: [ 145.760945][ T5119] ---[ end trace 0000000000000000 ]--- [ 145.766450][ T5119] RIP: 0010:binder_inc_ref_for_node+0x1051/0x11f0 [ 145.773000][ T5119] Code: f9 e9 2c f3 ff ff 48 8b 7c 24 10 e8 99 6f 68 f9 e9 30 fe ff ff 48 8b 7c 24 60 e8 ba 6f 68 f9 e9 ae fc ff ff e8 30 6d 0b f9 90 <0f> 0b e8 68 70 68 f9 e9 15 fb ff ff 4c 89 e7 e8 3b 6f 68 f9 e9 32 [ 145.793195][ T5119] RSP: 0018:ffffc90004977920 EFLAGS: 00010293 [ 145.799320][ T5119] RAX: 0000000000000000 RBX: ffff888022a57410 RCX: ffffffff8880240f [ 145.807355][ T5119] RDX: ffff8880187e0000 RSI: ffffffff88802c90 RDI: 0000000000000004 [ 145.815368][ T5119] RBP: ffffc900049779b0 R08: 0000000000000004 R09: 0000000000000000 [ 145.823421][ T5119] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888015548200 [ 145.831451][ T5119] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 145.839491][ T5119] FS: 000055556b35f380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 145.848477][ T5119] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.855074][ T5119] CR2: 00007f4ac87260e0 CR3: 000000007a9c0000 CR4: 0000000000350ef0 [ 145.863099][ T5119] Kernel panic - not syncing: Fatal exception [ 145.869292][ T5119] Kernel Offset: disabled [ 145.873618][ T5119] Rebooting in 86400 seconds..