./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3817052767 <...> Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. execve("./syz-executor3817052767", ["./syz-executor3817052767"], 0x7fff68fab170 /* 10 vars */) = 0 brk(NULL) = 0x555589cc0000 brk(0x555589cc0d00) = 0x555589cc0d00 arch_prctl(ARCH_SET_FS, 0x555589cc0380) = 0 set_tid_address(0x555589cc0650) = 5089 set_robust_list(0x555589cc0660, 24) = 0 rseq(0x555589cc0ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3817052767", 4096) = 28 getrandom("\x36\xa7\x89\x3e\x12\xe1\x59\x4e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555589cc0d00 brk(0x555589ce1d00) = 0x555589ce1d00 brk(0x555589ce2000) = 0x555589ce2000 mprotect(0x7f2ee1d55000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/vhost-vsock", O_RDWR) = 3 ioctl(3, VHOST_SET_OWNER, 0) = 0 write(-1, "\x0a\x00\x00\x00\xa2\xe3\xad\x21\xed\x0d\x52\xf9\x1b\x38\x09\x09\x87\xf7\x0e\x06\xd0\x38\xe7\xff\x7f\xc6\xe5\x53\x9b\x32\x44\x07\x8b\x08\x9b\x34\x07\x33\x6d\x09\x08\x90\xe0\x87\x8f\x0e\x1a\xc6\xe7\x04\x9b\x33\x6d\x95\x9b\x65\x9a\x24\x0d\x5b\x67\xf3\x98\x8f\x7e\xf3\x19\x52\x01\x00\xff\xe8\xd1\x78\x70\x8c\x52\x3c\x92\x1b\x1b\x5b\x31\x07\x0d\x07\x4a\x09\x36\xcd\x3b\x78\x13\x0d\xaa\x61\xd8\xe8\x09\xea"..., 4102) = -1 EBADF (Bad file descriptor) creat("./file0", 0156312) = 4 write(4, "\x7f\x45\x4c\x46\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x38\x00\x00\x00\x00\x00\x00\x00\x00\x19\x1b\xda\x00\x00\x20\x00\x01\x00\x00\x00\x00\x02\x80\x00\x00\x00\x00\x00\x03\x24\x0d\x5b\x67\xf3\x98\x8f\x7e\xf3\x19\x52\x01\x00\xff\xe8\xd1\x78\x70\x8c\x52\x3c\x92\x1b\x1b\x5b\x31\x07\x0d\x07\x4a\x09\x36\xcd\x3b\x78\x13\x0d\xaa\x61\xd8\xe8\x09\xea"..., 105) = 105 close(4) = 0 execve("./file0", NULL, NULL) = 0 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} --- [ 56.498930][ T5089] process 'syz-executor381' launched './file0' with NULL argv: empty string added [ 56.509327][ T5089] process '/root/file0' started with executable stack [ 56.527083][ T5089] ------------[ cut here ]------------ [ 56.532769][ T5089] WARNING: CPU: 0 PID: 5089 at kernel/signal.c:762 signal_wake_up_state+0xec/0x120 [ 56.542061][ T5089] Modules linked in: [ 56.545942][ T5089] CPU: 0 PID: 5089 Comm: file0 Not tainted 6.9.0-rc7-syzkaller-00008-gee5b455b0ada #0 [ 56.555467][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.565503][ T5089] RIP: 0010:signal_wake_up_state+0xec/0x120 [ 56.571389][ T5089] Code: 10 e8 68 cb 39 00 5b 41 5e 41 5f 5d c3 cc cc cc cc e8 58 cb 39 00 48 89 df 5b 41 5e 41 5f 5d e9 4a 09 0a 00 e8 45 cb 39 00 90 <0f> 0b 90 eb a3 48 c7 c1 7c 2a a9 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 56.590978][ T5089] RSP: 0018:ffffc9000344f918 EFLAGS: 00010093 [ 56.597028][ T5089] RAX: ffffffff815c3d3b RBX: ffff88801f755a00 RCX: ffff88801f753c00 [ 56.604980][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.612952][ T5089] RBP: 0000000000000000 R08: ffffffff815c3cd4 R09: fffff52000689f04 [ 56.620904][ T5089] R10: dffffc0000000000 R11: fffff52000689f04 R12: ffff88801f755a00 [ 56.628857][ T5089] R13: ffff88801f754508 R14: 0000000000000108 R15: dffffc0000000000 [ 56.636819][ T5089] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 56.645728][ T5089] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 56.652292][ T5089] CR2: 0000000000000000 CR3: 000000001f93a000 CR4: 00000000003506f0 [ 56.660248][ T5089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.668201][ T5089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.676155][ T5089] Call Trace: [ 56.679421][ T5089] [ 56.682336][ T5089] ? __warn+0x163/0x4e0 [ 56.686479][ T5089] ? signal_wake_up_state+0xec/0x120 [ 56.691758][ T5089] ? report_bug+0x2b3/0x500 [ 56.696277][ T5089] ? signal_wake_up_state+0xec/0x120 [ 56.701555][ T5089] ? handle_bug+0x3e/0x70 [ 56.705870][ T5089] ? exc_invalid_op+0x1a/0x50 [ 56.710530][ T5089] ? asm_exc_invalid_op+0x1a/0x20 [ 56.715541][ T5089] ? signal_wake_up_state+0x84/0x120 [ 56.720810][ T5089] ? signal_wake_up_state+0xeb/0x120 [ 56.726080][ T5089] ? signal_wake_up_state+0xec/0x120 [ 56.731351][ T5089] ? signal_wake_up_state+0xeb/0x120 [ 56.736621][ T5089] do_coredump+0x8ec/0x2b50 [ 56.741113][ T5089] ? do_raw_spin_lock+0x14f/0x370 [ 56.746128][ T5089] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.751485][ T5089] ? __pfx_do_coredump+0x10/0x10 [ 56.756423][ T5089] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.761621][ T5089] ? lockdep_hardirqs_on+0x99/0x150 [ 56.766803][ T5089] get_signal+0x13fa/0x1740 [ 56.771295][ T5089] ? __pfx_get_signal+0x10/0x10 [ 56.776126][ T5089] ? __pfx_force_sig_fault+0x10/0x10 [ 56.781400][ T5089] arch_do_signal_or_restart+0x96/0x860 [ 56.786932][ T5089] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 56.793096][ T5089] ? irqentry_exit_to_user_mode+0x53/0x280 [ 56.798893][ T5089] irqentry_exit_to_user_mode+0x79/0x280 [ 56.804515][ T5089] exc_page_fault+0x577/0x8a0 [ 56.809179][ T5089] asm_exc_page_fault+0x26/0x30 [ 56.814013][ T5089] RIP: 0023:0x0 [ 56.817453][ T5089] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 56.824818][ T5089] RSP: 002b:00000000ffac5b00 EFLAGS: 00010202 [ 56.830870][ T5089] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 56.838824][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.846792][ T5089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 56.854747][ T5089] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 56.862699][ T5089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.870659][ T5089] [ 56.873662][ T5089] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.880918][ T5089] CPU: 0 PID: 5089 Comm: file0 Not tainted 6.9.0-rc7-syzkaller-00008-gee5b455b0ada #0 [ 56.890440][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.900475][ T5089] Call Trace: [ 56.903741][ T5089] [ 56.906656][ T5089] dump_stack_lvl+0x241/0x360 [ 56.911326][ T5089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.916515][ T5089] ? __pfx__printk+0x10/0x10 [ 56.921107][ T5089] ? _printk+0xd5/0x120 [ 56.925362][ T5089] ? vscnprintf+0x5d/0x90 [ 56.929688][ T5089] panic+0x349/0x860 [ 56.933580][ T5089] ? __warn+0x172/0x4e0 [ 56.937724][ T5089] ? __pfx_panic+0x10/0x10 [ 56.942126][ T5089] ? show_trace_log_lvl+0x4e6/0x520 [ 56.947339][ T5089] __warn+0x346/0x4e0 [ 56.951320][ T5089] ? signal_wake_up_state+0xec/0x120 [ 56.956591][ T5089] report_bug+0x2b3/0x500 [ 56.960909][ T5089] ? signal_wake_up_state+0xec/0x120 [ 56.966189][ T5089] handle_bug+0x3e/0x70 [ 56.970339][ T5089] exc_invalid_op+0x1a/0x50 [ 56.974829][ T5089] asm_exc_invalid_op+0x1a/0x20 [ 56.979667][ T5089] RIP: 0010:signal_wake_up_state+0xec/0x120 [ 56.985549][ T5089] Code: 10 e8 68 cb 39 00 5b 41 5e 41 5f 5d c3 cc cc cc cc e8 58 cb 39 00 48 89 df 5b 41 5e 41 5f 5d e9 4a 09 0a 00 e8 45 cb 39 00 90 <0f> 0b 90 eb a3 48 c7 c1 7c 2a a9 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 57.005153][ T5089] RSP: 0018:ffffc9000344f918 EFLAGS: 00010093 [ 57.011202][ T5089] RAX: ffffffff815c3d3b RBX: ffff88801f755a00 RCX: ffff88801f753c00 [ 57.019268][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.027236][ T5089] RBP: 0000000000000000 R08: ffffffff815c3cd4 R09: fffff52000689f04 [ 57.035203][ T5089] R10: dffffc0000000000 R11: fffff52000689f04 R12: ffff88801f755a00 [ 57.043154][ T5089] R13: ffff88801f754508 R14: 0000000000000108 R15: dffffc0000000000 [ 57.051132][ T5089] ? signal_wake_up_state+0x84/0x120 [ 57.056402][ T5089] ? signal_wake_up_state+0xeb/0x120 [ 57.061697][ T5089] ? signal_wake_up_state+0xeb/0x120 [ 57.066966][ T5089] do_coredump+0x8ec/0x2b50 [ 57.071464][ T5089] ? do_raw_spin_lock+0x14f/0x370 [ 57.076480][ T5089] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.081842][ T5089] ? __pfx_do_coredump+0x10/0x10 [ 57.086798][ T5089] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.091993][ T5089] ? lockdep_hardirqs_on+0x99/0x150 [ 57.097184][ T5089] get_signal+0x13fa/0x1740 [ 57.101686][ T5089] ? __pfx_get_signal+0x10/0x10 [ 57.106560][ T5089] ? __pfx_force_sig_fault+0x10/0x10 [ 57.111859][ T5089] arch_do_signal_or_restart+0x96/0x860 [ 57.117426][ T5089] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 57.123586][ T5089] ? irqentry_exit_to_user_mode+0x53/0x280 [ 57.129385][ T5089] irqentry_exit_to_user_mode+0x79/0x280 [ 57.135008][ T5089] exc_page_fault+0x577/0x8a0 [ 57.139675][ T5089] asm_exc_page_fault+0x26/0x30 [ 57.144510][ T5089] RIP: 0023:0x0 [ 57.147951][ T5089] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 57.155326][ T5089] RSP: 002b:00000000ffac5b00 EFLAGS: 00010202 [ 57.161380][ T5089] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.169333][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.177286][ T5089] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 57.185235][ T5089] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 57.193186][ T5089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.201143][ T5089] [ 57.204294][ T5089] Kernel Offset: disabled [ 57.208652][ T5089] Rebooting in 86400 seconds..