./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3153254371 <...> Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. execve("./syz-executor3153254371", ["./syz-executor3153254371"], 0x7ffd3f6e0d70 /* 10 vars */) = 0 brk(NULL) = 0x555555f37000 brk(0x555555f37d00) = 0x555555f37d00 arch_prctl(ARCH_SET_FS, 0x555555f37380) = 0 set_tid_address(0x555555f37650) = 5019 set_robust_list(0x555555f37660, 24) = 0 rseq(0x555555f37ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3153254371", 4096) = 28 getrandom("\x79\x8f\x49\x9a\x1a\xa6\x26\x85", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555f37d00 brk(0x555555f58d00) = 0x555555f58d00 brk(0x555555f59000) = 0x555555f59000 mprotect(0x7f6dfa05c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5020 attached , child_tidptr=0x555555f37650) = 5020 [pid 5020] set_robust_list(0x555555f37660, 24) = 0 [pid 5020] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5020] setsid() = 1 [pid 5020] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5020] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5020] unshare(CLONE_NEWNS) = 0 [pid 5020] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5020] unshare(CLONE_NEWIPC) = 0 [pid 5020] unshare(CLONE_NEWCGROUP) = 0 [pid 5020] unshare(CLONE_NEWUTS) = 0 [pid 5020] unshare(CLONE_SYSVSEM) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "16777216", 8) = 8 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "536870912", 9) = 9 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "8192", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024", 4) = 4 [pid 5020] close(3) = 0 [pid 5020] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5020] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5020] close(3) = 0 [pid 5020] getpid() = 1 [pid 5020] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [ 68.801332][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 68.806014][ T5020] ? irq_work_queue+0xca/0x150 [ 68.810808][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 68.816278][ T5020] ? panic+0x770/0x770 [ 68.820353][ T5020] ? _printk+0xd5/0x120 [ 68.824512][ T5020] print_report+0x163/0x540 [ 68.829029][ T5020] ? hook_sb_delete+0x72c/0xb30 [ 68.833876][ T5020] ? __virt_addr_valid+0x22f/0x2e0 [ 68.838996][ T5020] ? __phys_addr+0xba/0x170 [ 68.843506][ T5020] ? udf_close_lvid+0x6a8/0x9a0 [ 68.848377][ T5020] kasan_report+0x175/0x1b0 [ 68.852896][ T5020] ? udf_close_lvid+0x6a8/0x9a0 [ 68.857750][ T5020] udf_close_lvid+0x6a8/0x9a0 [ 68.862430][ T5020] ? udf_open_lvid+0x5b0/0x5b0 [ 68.867277][ T5020] ? iput+0x37e/0x8f0 [ 68.871259][ T5020] ? clear_inode+0x150/0x150 [ 68.875856][ T5020] ? module_put+0x136/0x2a0 [ 68.880474][ T5020] udf_put_super+0xcd/0x160 [ 68.884973][ T5020] ? udf_free_in_core_inode+0x30/0x30 [ 68.890344][ T5020] generic_shutdown_super+0x134/0x340 [ 68.895710][ T5020] kill_block_super+0x68/0xa0 [ 68.900560][ T5020] deactivate_locked_super+0xa4/0x110 [ 68.905932][ T5020] cleanup_mnt+0x426/0x4c0 [ 68.910355][ T5020] ? _raw_spin_unlock_irq+0x23/0x50 [ 68.915556][ T5020] task_work_run+0x24a/0x300 [ 68.920152][ T5020] ? kasan_quarantine_put+0xd8/0x230 [ 68.925440][ T5020] ? task_work_cancel+0x2b0/0x2b0 [ 68.930468][ T5020] ? kmem_cache_free+0x292/0x500 [ 68.935410][ T5020] ? do_exit+0x68a/0x2290 [ 68.939740][ T5020] do_exit+0x68f/0x2290 [ 68.943926][ T5020] ? put_task_struct+0x80/0x80 [ 68.948688][ T5020] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 68.954664][ T5020] ? print_irqtrace_events+0x220/0x220 [ 68.960121][ T5020] ? _raw_spin_unlock_irq+0x23/0x50 [ 68.965316][ T5020] ? lockdep_hardirqs_on+0x98/0x140 [ 68.970577][ T5020] do_group_exit+0x206/0x2c0 [ 68.975176][ T5020] __x64_sys_exit_group+0x3f/0x40 [ 68.980199][ T5020] do_syscall_64+0x41/0xc0 [ 68.984609][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 68.990598][ T5020] RIP: 0033:0x7f6df9fe5c09 [ 68.995026][ T5020] Code: Unable to access opcode bytes at 0x7f6df9fe5bdf. [ 69.002049][ T5020] RSP: 002b:00007ffdb96f4d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 69.010508][ T5020] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f6df9fe5c09 [ 69.018476][ T5020] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 69.026440][ T5020] RBP: 00007f6dfa062390 R08: ffffffffffffffb8 R09: 00007ffdb96f4e30 [ 69.034424][ T5020] R10: 0000000000010001 R11: 0000000000000246 R12: 00007f6dfa062390 [ 69.042405][ T5020] R13: 0000000000000000 R14: 00007f6dfa063100 R15: 00007f6df9fb3ee0 [ 69.050393][ T5020] [ 69.053422][ T5020] [ 69.055736][ T5020] The buggy address belongs to the physical page: [ 69.062136][ T5020] page:ffffea00023f19c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8fc67 [ 69.072279][ T5020] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 69.079391][ T5020] page_type: 0xffffffff() [ 69.083719][ T5020] raw: 00fff00000000000 ffffea00023f19c8 ffffea00023f19c8 0000000000000000 [ 69.092299][ T5020] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 69.100873][ T5020] page dumped because: kasan: bad access detected [ 69.107285][ T5020] page_owner info is not present (never set?) [ 69.113335][ T5020] [ 69.115675][ T5020] Memory state around the buggy address: [ 69.121384][ T5020] ffff88808fc67680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.129439][ T5020] ffff88808fc67700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.137494][ T5020] >ffff88808fc67780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.145549][ T5020] ^ [ 69.150129][ T5020] ffff88808fc67800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.158182][ T5020] ffff88808fc67880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 69.166235][ T5020] ================================================================== [ 69.174772][ T5020] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 69.182000][ T5020] CPU: 1 PID: 5020 Comm: syz-executor315 Not tainted 6.5.0-rc4-syzkaller-00174-gc1a515d3c027 #0 [ 69.192412][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 69.202467][ T5020] Call Trace: [ 69.205755][ T5020] [ 69.208696][ T5020] dump_stack_lvl+0x1e7/0x2d0 [ 69.213389][ T5020] ? nf_tcp_handle_invalid+0x650/0x650 [ 69.218855][ T5020] ? panic+0x770/0x770 [ 69.222932][ T5020] ? preempt_schedule_common+0x83/0xc0 [ 69.228395][ T5020] ? vscnprintf+0x5d/0x80 [ 69.232733][ T5020] panic+0x30f/0x770 [ 69.236636][ T5020] ? check_panic_on_warn+0x21/0xa0 [ 69.241767][ T5020] ? __memcpy_flushcache+0x2b0/0x2b0 [ 69.247056][ T5020] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 69.253045][ T5020] ? _raw_spin_unlock+0x40/0x40 [ 69.257900][ T5020] ? print_report+0x4fb/0x540 [ 69.262581][ T5020] check_panic_on_warn+0x82/0xa0 [ 69.267525][ T5020] ? udf_close_lvid+0x6a8/0x9a0 [ 69.272382][ T5020] end_report+0x6e/0x130 [ 69.276629][ T5020] kasan_report+0x186/0x1b0 [ 69.281135][ T5020] ? udf_close_lvid+0x6a8/0x9a0 [ 69.285994][ T5020] udf_close_lvid+0x6a8/0x9a0 [ 69.290679][ T5020] ? udf_open_lvid+0x5b0/0x5b0 [ 69.295447][ T5020] ? iput+0x37e/0x8f0 [ 69.299433][ T5020] ? clear_inode+0x150/0x150 [ 69.304022][ T5020] ? module_put+0x136/0x2a0 [ 69.308529][ T5020] udf_put_super+0xcd/0x160 [ 69.313045][ T5020] ? udf_free_in_core_inode+0x30/0x30 [ 69.318421][ T5020] generic_shutdown_super+0x134/0x340 [ 69.323794][ T5020] kill_block_super+0x68/0xa0 [ 69.328476][ T5020] deactivate_locked_super+0xa4/0x110 [ 69.333855][ T5020] cleanup_mnt+0x426/0x4c0 [ 69.338279][ T5020] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.343485][ T5020] task_work_run+0x24a/0x300 [ 69.348083][ T5020] ? kasan_quarantine_put+0xd8/0x230 [ 69.353385][ T5020] ? task_work_cancel+0x2b0/0x2b0 [ 69.358422][ T5020] ? kmem_cache_free+0x292/0x500 [ 69.363367][ T5020] ? do_exit+0x68a/0x2290 [ 69.367730][ T5020] do_exit+0x68f/0x2290 [ 69.371898][ T5020] ? put_task_struct+0x80/0x80 [ 69.376669][ T5020] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 69.382657][ T5020] ? print_irqtrace_events+0x220/0x220 [ 69.388123][ T5020] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.393341][ T5020] ? lockdep_hardirqs_on+0x98/0x140 [ 69.398549][ T5020] do_group_exit+0x206/0x2c0 [ 69.403146][ T5020] __x64_sys_exit_group+0x3f/0x40 [ 69.408175][ T5020] do_syscall_64+0x41/0xc0 [ 69.412592][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 69.418494][ T5020] RIP: 0033:0x7f6df9fe5c09 [ 69.422905][ T5020] Code: Unable to access opcode bytes at 0x7f6df9fe5bdf. [ 69.429954][ T5020] RSP: 002b:00007ffdb96f4d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 69.438371][ T5020] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f6df9fe5c09 [ 69.446345][ T5020] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 69.454312][ T5020] RBP: 00007f6dfa062390 R08: ffffffffffffffb8 R09: 00007ffdb96f4e30 [ 69.462287][ T5020] R10: 0000000000010001 R11: 0000000000000246 R12: 00007f6dfa062390 [ 69.470259][ T5020] R13: 0000000000000000 R14: 00007f6dfa063100 R15: 00007f6df9fb3ee0 [ 69.478237][ T5020] [ 69.481538][ T5020] Kernel Offset: disabled [ 69.485893][ T5020] Rebooting in 86400 seconds..