./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2334776867
<...>
Warning: Permanently added '10.128.0.102' (ECDSA) to the list of known hosts.
execve("./syz-executor2334776867", ["./syz-executor2334776867"], 0x7ffe1b166ea0 /* 10 vars */) = 0
brk(NULL) = 0x555556d63000
brk(0x555556d63c40) = 0x555556d63c40
arch_prctl(ARCH_SET_FS, 0x555556d63300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2334776867", 4096) = 28
brk(0x555556d84c40) = 0x555556d84c40
brk(0x555556d85000) = 0x555556d85000
mprotect(0x7f2cf9dc4000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d635d0) = 5071
./strace-static-x86_64: Process 5071 attached
[pid 5071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5071] setpgid(0, 0) = 0
[pid 5071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5071] write(3, "1000", 4) = 4
[pid 5071] close(3) = 0
[pid 5071] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3
[pid 5071] connect(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "ff02::1", &sin6_addr), sin6_scope_id=0}}}, 36) = 0
[pid 5071] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5071] write(4, "10", 2) = 2
[pid 5071] sendmsg(3, {msg_name=NULL, msg_namelen=-661, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=24, cmsg_level=SOL_RXRPC, cmsg_type=0x1}], msg_controllen=24, msg_flags=MSG_SYN|MSG_CONFIRM|MSG_NOSIGNAL}, 0) = -1 EINVAL (Invalid argument)
[pid 5071] exit_group(0) = ?
[pid 5071] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5071, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d635d0) = 5073
./strace-static-x86_64: Process 5073 attached
[pid 5073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5073] setpgid(0, 0) = 0
[pid 5073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5073] write(3, "1000", 4) = 4
[pid 5073] close(3) = 0
[pid 5073] socket(AF_RXRPC, SOCK_DGRAM, AF_INET6) = 3
[pid 5073] connect(3, {sa_family=AF_RXRPC, srx_service=0 /* ???_SERVICE */, transport_type=SOCK_DGRAM, transport_len=28, transport={sin6={sin6_family=AF_INET6, sin6_port=htons(0), sin6_flowinfo=htonl(0), inet_pton(AF_INET6, "ff02::1", &sin6_addr), sin6_scope_id=0}}}, 36) = 0
[pid 5073] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5073] write(4, "10", 2) = 2
syzkaller login: [ 59.972445][ T5073] FAULT_INJECTION: forcing a failure.
[ 59.972445][ T5073] name failslab, interval 1, probability 0, space 0, times 1
[ 59.985471][ T5073] CPU: 0 PID: 5073 Comm: syz-executor233 Not tainted 6.2.0-rc2-syzkaller-00227-g60ea6f00c57d #0
[ 59.995997][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 60.006060][ T5073] Call Trace:
[ 60.009344][ T5073]
[ 60.012309][ T5073] dump_stack_lvl+0xd1/0x138
[ 60.016954][ T5073] should_fail_ex.cold+0x5/0xa
[ 60.021773][ T5073] should_failslab+0x9/0x20
[ 60.026302][ T5073] __kmem_cache_alloc_node+0x5b/0x430
[ 60.031687][ T5073] ? rxrpc_alloc_peer+0x95/0x410
[ 60.036650][ T5073] kmalloc_trace+0x26/0x60
[ 60.041092][ T5073] rxrpc_alloc_peer+0x95/0x410
[ 60.045890][ T5073] rxrpc_lookup_peer+0x17b/0x650
[ 60.050864][ T5073] rxrpc_new_client_call+0xbff/0x1610
[ 60.056273][ T5073] rxrpc_do_sendmsg+0xe78/0x13b0
[ 60.061262][ T5073] ? rxrpc_propose_abort+0x1e0/0x1e0
[ 60.066575][ T5073] ? rxrpc_lookup_local+0x4b4/0x1690
[ 60.071891][ T5073] ? __local_bh_enable_ip+0xa4/0x130
[ 60.077198][ T5073] rxrpc_sendmsg+0x1c8/0x650
[ 60.081815][ T5073] ? rxrpc_sock_set_min_security_level+0xe0/0xe0
[ 60.088170][ T5073] sock_sendmsg+0xd3/0x120
[ 60.092609][ T5073] ____sys_sendmsg+0x712/0x8c0
[ 60.097395][ T5073] ? kernel_sendmsg+0x50/0x50
[ 60.102193][ T5073] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 60.108210][ T5073] ___sys_sendmsg+0x110/0x1b0
[ 60.113525][ T5073] ? do_recvmmsg+0x6e0/0x6e0
[ 60.118157][ T5073] ? lock_release+0x810/0x810
[ 60.122848][ T5073] ? ptrace_stop.part.0+0x4a3/0x8e0
[ 60.128062][ T5073] ? do_raw_spin_lock+0x124/0x2b0
[ 60.133102][ T5073] ? rwlock_bug.part.0+0x90/0x90
[ 60.138052][ T5073] ? _raw_spin_lock_irq+0x45/0x50
[ 60.143102][ T5073] ? __fget_light+0x20a/0x270
[ 60.147802][ T5073] __sys_sendmsg+0xf7/0x1c0
[ 60.152331][ T5073] ? __sys_sendmsg_sock+0x40/0x40
[ 60.157382][ T5073] ? lock_downgrade+0x6e0/0x6e0
[ 60.162259][ T5073] ? lockdep_hardirqs_on+0x7d/0x100
[ 60.168169][ T5073] ? _raw_spin_unlock_irq+0x2e/0x50
[ 60.173514][ T5073] ? ptrace_notify+0xfe/0x140
[ 60.178233][ T5073] do_syscall_64+0x39/0xb0
[ 60.182691][ T5073] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 60.188603][ T5073] RIP: 0033:0x7f2cf9d57149
[ 60.193032][ T5073] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 60.212653][ T5073] RSP: 002b:00007ffc2b195818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 60.221177][ T5073] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2cf9d57149
[ 60.229248][ T5073] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 60.237229][ T5073] RBP: 00007ffc2b195830 R08: 0000000000000002 R09: 0000000000000001
[ 60.245213][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 60.253195][ T5073] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 60.261195][ T5073]
[pid 5073] sendmsg(3, {msg_name=NULL, msg_namelen=-661, msg_iov=NULL, msg_iovlen=0, msg_control=[{cmsg_len=24, cmsg_level=SOL_RXRPC, cmsg_type=0x1}], msg_controllen=24, msg_flags=MSG_SYN|MSG_CONFIRM|MSG_NOSIGNAL}, 0
[pid 5070] kill(-5073, SIGKILL) = 0
[pid 5073] <... sendmsg resumed>) = ?
[pid 5070] kill(5073, SIGKILL) = 0
[ 64.963618][ T5073] rxrpc: Assertion failed - 1(0x1) == 11(0xb) is false
[ 64.971288][ T5073] ------------[ cut here ]------------
[ 64.976841][ T5073] kernel BUG at net/rxrpc/call_object.c:645!
[ 64.983380][ T5073] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 64.989462][ T5073] CPU: 0 PID: 5073 Comm: syz-executor233 Not tainted 6.2.0-rc2-syzkaller-00227-g60ea6f00c57d #0
[ 64.999970][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 65.010021][ T5073] RIP: 0010:rxrpc_put_call.cold+0x3c/0x3e
[ 65.015752][ T5073] Code: 0b e8 82 51 7e f7 89 de 41 b9 0b 00 00 00 41 b8 0b 00 00 00 48 c7 c1 20 45 76 8b 48 89 f2 48 c7 c7 60 45 76 8b e8 35 06 bd ff <0f> 0b e8 57 51 7e f7 48 c7 c7 80 4f 76 8b e8 22 06 bd ff 0f 0b e8
[ 65.035406][ T5073] RSP: 0018:ffffc90003c4f9e8 EFLAGS: 00010282
[ 65.042251][ T5073] RAX: 0000000000000034 RBX: 0000000000000001 RCX: 0000000000000000
[ 65.050212][ T5073] RDX: ffff8880209657c0 RSI: ffffffff8166721c RDI: fffff52000789f2f
[ 65.058188][ T5073] RBP: ffff8880760576c0 R08: 0000000000000034 R09: 0000000000000000
[ 65.066149][ T5073] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000012
[ 65.074125][ T5073] R13: 0000000000000026 R14: ffff888076057a10 R15: ffff888027b18000
[ 65.082086][ T5073] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 65.091014][ T5073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 65.097608][ T5073] CR2: 00007f2cf9db1840 CR3: 000000002b803000 CR4: 00000000003506f0
[ 65.105586][ T5073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 65.113645][ T5073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 65.121617][ T5073] Call Trace:
[ 65.124895][ T5073]
[ 65.127833][ T5073] rxrpc_release_calls_on_socket+0x217/0x2f0
[ 65.133845][ T5073] rxrpc_release+0x1ca/0x560
[ 65.138458][ T5073] __sock_release+0xcd/0x280
[ 65.143062][ T5073] sock_close+0x1c/0x20
[ 65.147232][ T5073] __fput+0x27c/0xa90
[ 65.151235][ T5073] ? __sock_release+0x280/0x280
[ 65.156103][ T5073] task_work_run+0x16f/0x270
[ 65.160712][ T5073] ? task_work_cancel+0x30/0x30
[ 65.165578][ T5073] ? do_raw_spin_unlock+0x175/0x230
[ 65.170788][ T5073] do_exit+0xaa8/0x2950
[ 65.174958][ T5073] ? find_held_lock+0x2d/0x110
[ 65.179739][ T5073] ? get_signal+0x8a0/0x2450
[ 65.184341][ T5073] ? mm_update_next_owner+0x7b0/0x7b0
[ 65.189739][ T5073] do_group_exit+0xd4/0x2a0
[ 65.194264][ T5073] get_signal+0x21c3/0x2450
[ 65.198788][ T5073] ? __task_pid_nr_ns+0x16c/0x4b0
[ 65.203832][ T5073] ? exit_signals+0x8b0/0x8b0
[ 65.208518][ T5073] ? find_held_lock+0x2d/0x110
[ 65.213300][ T5073] arch_do_signal_or_restart+0x79/0x5c0
[ 65.218855][ T5073] ? get_sigframe_size+0x10/0x10
[ 65.223801][ T5073] ? lock_downgrade+0x6e0/0x6e0
[ 65.228661][ T5073] ? _raw_spin_unlock_irq+0x23/0x50
[ 65.233877][ T5073] exit_to_user_mode_prepare+0x15f/0x250
[ 65.239524][ T5073] syscall_exit_to_user_mode+0x1d/0x50
[ 65.245019][ T5073] do_syscall_64+0x46/0xb0
[ 65.249458][ T5073] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 65.255361][ T5073] RIP: 0033:0x7f2cf9d57149
[ 65.259782][ T5073] Code: Unable to access opcode bytes at 0x7f2cf9d5711f.
[ 65.266792][ T5073] RSP: 002b:00007ffc2b195818 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 65.275209][ T5073] RAX: fffffffffffffe00 RBX: 0000000000000002 RCX: 00007f2cf9d57149
[ 65.283185][ T5073] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 65.291164][ T5073] RBP: 00007ffc2b195830 R08: 0000000000000002 R09: 0000000000000001
[ 65.299143][ T5073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 65.307120][ T5073] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[pid 5070] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid 5070] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
[pid 5070] getdents64(3, 0x555556d64620 /* 2 entries */, 32768) = 48
[pid 5070] getdents64(3, 0x555556d64620 /* 0 entries */, 32768) = 0
[pid 5070] close(3) = 0
[ 65.315100][ T5073]
[ 65.318117][ T5073] Modules linked in:
[ 65.322224][ T5073] ---[ end trace 0000000000000000 ]---
[ 65.330002][ T5073] RIP: 0010:rxrpc_put_call.cold+0x3c/0x3e
[ 65.335780][ T5073] Code: 0b e8 82 51 7e f7 89 de 41 b9 0b 00 00 00 41 b8 0b 00 00 00 48 c7 c1 20 45 76 8b 48 89 f2 48 c7 c7 60 45 76 8b e8 35 06 bd ff <0f> 0b e8 57 51 7e f7 48 c7 c7 80 4f 76 8b e8 22 06 bd ff 0f 0b e8
[ 65.355698][ T5073] RSP: 0018:ffffc90003c4f9e8 EFLAGS: 00010282
[ 65.362034][ T5073] RAX: 0000000000000034 RBX: 0000000000000001 RCX: 0000000000000000
[ 65.370212][ T5073] RDX: ffff8880209657c0 RSI: ffffffff8166721c RDI: fffff52000789f2f
[ 65.378338][ T5073] RBP: ffff8880760576c0 R08: 0000000000000034 R09: 0000000000000000
[ 65.386310][ T5073] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000012
[ 65.394480][ T5073] R13: 0000000000000026 R14: ffff888076057a10 R15: ffff888027b18000
[ 65.402587][ T5073] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 65.411667][ T5073] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 65.418417][ T5073] CR2: 00007f2cf9db1840 CR3: 000000002b803000 CR4: 00000000003506f0
[ 65.426389][ T5073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 65.434554][ T5073] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 65.442676][ T5073] Kernel panic - not syncing: Fatal exception
[ 65.448882][ T5073] Kernel Offset: disabled
[ 65.453200][ T5073] Rebooting in 86400 seconds..