./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3002354031
<...>
Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts.
execve("./syz-executor3002354031", ["./syz-executor3002354031"], 0x7fffecb83ad0 /* 10 vars */) = 0
brk(NULL) = 0x55555706b000
brk(0x55555706bd00) = 0x55555706bd00
arch_prctl(ARCH_SET_FS, 0x55555706b380) = 0
set_tid_address(0x55555706b650) = 5020
set_robust_list(0x55555706b660, 24) = 0
rseq(0x55555706bca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3002354031", 4096) = 28
getrandom("\x39\x53\xa4\x1a\x32\x36\x91\xea", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555706bd00
brk(0x55555708cd00) = 0x55555708cd00
brk(0x55555708d000) = 0x55555708d000
mprotect(0x7fee7ecb9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fee767ea000
write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
munmap(0x7fee767ea000, 2097152) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file1", 0777) = 0
[ 45.800227][ T5020] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5020 'syz-executor300'
[ 45.830567][ T5020] loop0: detected capacity change from 0 to 4096
mount("/dev/loop0", "./file1", "ntfs", MS_NODIRATIME|MS_SILENT|MS_POSIXACL|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "show_sys_files=no,show_sys_files=no,show_sys_files=yes,mft_zone_multiplier=0x0000000000000003,case_s"...) = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
chdir("./file1") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
[ 45.847016][ T5020] ntfs: volume version 3.1.
[ 45.863308][ T5020] process 'syz-executor300' launched './file1' with NULL argv: empty string added
[ 45.876866][ T5020] ------------[ cut here ]------------
[ 45.882481][ T5020] WARNING: CPU: 0 PID: 5020 at fs/exec.c:933 do_open_execat+0x18f/0x3f0
[ 45.890999][ T5020] Modules linked in:
[ 45.894884][ T5020] CPU: 0 PID: 5020 Comm: syz-executor300 Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0
[ 45.905320][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 45.915414][ T5020] RIP: 0010:do_open_execat+0x18f/0x3f0
[ 45.920989][ T5020] Code: 8e 46 02 00 00 41 0f b7 1e bf 00 80 ff ff 66 81 e3 00 f0 89 de e8 b1 67 9b ff 66 81 fb 00 80 0f 84 8b 00 00 00 e8 51 6c 9b ff <0f> 0b 48 c7 c3 f3 ff ff ff e8 43 6c 9b ff 4c 89 e7 e8 4b c9 fe ff
[ 45.940663][ T5020] RSP: 0018:ffffc90003b0fd10 EFLAGS: 00010293
[ 45.946738][ T5020] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 45.954731][ T5020] RDX: ffff888028401dc0 RSI: ffffffff81ea9c4f RDI: 0000000000000003
[ 45.962763][ T5020] RBP: 1ffff92000761fa2 R08: 0000000000000003 R09: 0000000000008000
[ 45.970778][ T5020] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802bf18780
[ 45.978790][ T5020] R13: ffff888075d70000 R14: ffff8880742776a0 R15: 0000000000000001
[ 45.986764][ T5020] FS: 000055555706b380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 45.995725][ T5020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 46.002330][ T5020] CR2: 00007ffe0f1d3ff8 CR3: 0000000015f97000 CR4: 0000000000350ef0
[ 46.010336][ T5020] Call Trace:
[ 46.013615][ T5020]
[ 46.016527][ T5020] ? __warn+0xe6/0x380
[ 46.020637][ T5020] ? do_open_execat+0x18f/0x3f0
[ 46.025502][ T5020] ? report_bug+0x3bc/0x580
[ 46.030034][ T5020] ? handle_bug+0x3c/0x70
[ 46.034374][ T5020] ? exc_invalid_op+0x17/0x40
[ 46.039081][ T5020] ? asm_exc_invalid_op+0x1a/0x20
[ 46.044122][ T5020] ? do_open_execat+0x18f/0x3f0
[ 46.048997][ T5020] ? do_open_execat+0x18f/0x3f0
[ 46.053870][ T5020] ? count.constprop.0.isra.0+0x170/0x170
[ 46.059638][ T5020] bprm_execve+0x49d/0x1a50
[ 46.064156][ T5020] ? syslog_print_all+0x3f0/0x3f0
[ 46.069208][ T5020] ? free_bprm+0x3f0/0x3f0
[ 46.073642][ T5020] ? put_page+0xdb/0x280
[ 46.077937][ T5020] ? copy_string_kernel+0x210/0x240
[ 46.083158][ T5020] do_execveat_common.isra.0+0x5d3/0x740
[ 46.088842][ T5020] __x64_sys_execve+0x8c/0xb0
[ 46.093552][ T5020] do_syscall_64+0x38/0xb0
[ 46.098019][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 46.103930][ T5020] RIP: 0033:0x7fee7ec27b39
[ 46.108373][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 46.128050][ T5020] RSP: 002b:00007ffe6c369d28 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 46.136460][ T5020] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fee7ec27b39
[ 46.144466][ T5020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000480
[ 46.152467][ T5020] RBP: 00007fee7ec7004b R08: 000000000001ee3b R09: 0000000000000000
[ 46.160472][ T5020] R10: 00007ffe6c369bf0 R11: 0000000000000246 R12: 00007fee7ec70055
[ 46.168476][ T5020] R13: 00007ffe6c369f08 R14: 0000000000000001 R15: 0000000000000001
[ 46.176442][ T5020]
[ 46.179492][ T5020] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 46.186769][ T5020] CPU: 0 PID: 5020 Comm: syz-executor300 Not tainted 6.5.0-rc6-syzkaller-00038-g16931859a650 #0
[ 46.197176][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 46.207221][ T5020] Call Trace:
[ 46.210494][ T5020]
[ 46.213418][ T5020] dump_stack_lvl+0xd9/0x1b0
[ 46.218006][ T5020] panic+0x6a4/0x750
[ 46.221897][ T5020] ? panic_smp_self_stop+0xa0/0xa0
[ 46.226999][ T5020] ? show_trace_log_lvl+0x29d/0x3c0
[ 46.232201][ T5020] ? do_open_execat+0x18f/0x3f0
[ 46.237052][ T5020] check_panic_on_warn+0xab/0xb0
[ 46.241986][ T5020] __warn+0xf2/0x380
[ 46.245874][ T5020] ? do_open_execat+0x18f/0x3f0
[ 46.250727][ T5020] report_bug+0x3bc/0x580
[ 46.255054][ T5020] handle_bug+0x3c/0x70
[ 46.259201][ T5020] exc_invalid_op+0x17/0x40
[ 46.263695][ T5020] asm_exc_invalid_op+0x1a/0x20
[ 46.268539][ T5020] RIP: 0010:do_open_execat+0x18f/0x3f0
[ 46.273999][ T5020] Code: 8e 46 02 00 00 41 0f b7 1e bf 00 80 ff ff 66 81 e3 00 f0 89 de e8 b1 67 9b ff 66 81 fb 00 80 0f 84 8b 00 00 00 e8 51 6c 9b ff <0f> 0b 48 c7 c3 f3 ff ff ff e8 43 6c 9b ff 4c 89 e7 e8 4b c9 fe ff
[ 46.293600][ T5020] RSP: 0018:ffffc90003b0fd10 EFLAGS: 00010293
[ 46.299659][ T5020] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[ 46.307617][ T5020] RDX: ffff888028401dc0 RSI: ffffffff81ea9c4f RDI: 0000000000000003
[ 46.315576][ T5020] RBP: 1ffff92000761fa2 R08: 0000000000000003 R09: 0000000000008000
[ 46.323558][ T5020] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802bf18780
[ 46.331519][ T5020] R13: ffff888075d70000 R14: ffff8880742776a0 R15: 0000000000000001
[ 46.339489][ T5020] ? do_open_execat+0x18f/0x3f0
[ 46.344343][ T5020] ? count.constprop.0.isra.0+0x170/0x170
[ 46.350069][ T5020] bprm_execve+0x49d/0x1a50
[ 46.354571][ T5020] ? syslog_print_all+0x3f0/0x3f0
[ 46.359592][ T5020] ? free_bprm+0x3f0/0x3f0
[ 46.364007][ T5020] ? put_page+0xdb/0x280
[ 46.368240][ T5020] ? copy_string_kernel+0x210/0x240
[ 46.373434][ T5020] do_execveat_common.isra.0+0x5d3/0x740
[ 46.379066][ T5020] __x64_sys_execve+0x8c/0xb0
[ 46.383738][ T5020] do_syscall_64+0x38/0xb0
[ 46.388144][ T5020] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 46.394028][ T5020] RIP: 0033:0x7fee7ec27b39
[ 46.398428][ T5020] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 46.418023][ T5020] RSP: 002b:00007ffe6c369d28 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 46.426421][ T5020] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fee7ec27b39
[ 46.434446][ T5020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000480
[ 46.442457][ T5020] RBP: 00007fee7ec7004b R08: 000000000001ee3b R09: 0000000000000000
[ 46.450460][ T5020] R10: 00007ffe6c369bf0 R11: 0000000000000246 R12: 00007fee7ec70055
[ 46.458439][ T5020] R13: 00007ffe6c369f08 R14: 0000000000000001 R15: 0000000000000001
[ 46.466417][ T5020]
[ 46.470237][ T5020] Kernel Offset: disabled
[ 46.474640][ T5020] Rebooting in 86400 seconds..