./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4228257288 <...> Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts. execve("./syz-executor4228257288", ["./syz-executor4228257288"], 0x7ffe983f84b0 /* 10 vars */) = 0 brk(NULL) = 0x5555693ab000 brk(0x5555693abd00) = 0x5555693abd00 arch_prctl(ARCH_SET_FS, 0x5555693ab380) = 0 set_tid_address(0x5555693ab650) = 5845 set_robust_list(0x5555693ab660, 24) = 0 rseq(0x5555693abca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4228257288", 4096) = 28 getrandom("\x02\xaf\xfb\xc6\x08\x7d\x1c\xb3", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555693abd00 brk(0x5555693ccd00) = 0x5555693ccd00 brk(0x5555693cd000) = 0x5555693cd000 mprotect(0x7f7f67844000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 write(1, "executing program\n", 18executing program ) = 18 io_uring_setup(10726, {flags=IORING_SETUP_SQPOLL|IORING_SETUP_SUBMIT_ALL, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=16384, cq_entries=32768, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE|0xe000, sq_off={head=0, tail=4, ring_mask=16, ring_entries=24, flags=36, dropped=32, array=524352}, cq_off={head=8, tail=12, ring_mask=20, ring_entries=28, overflow=44, cqes=64, flags=40}}) = 3 io_uring_register(3, IORING_REGISTER_BUFFERS2, {nr=3, flags=0, data=[{iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=0x20005380, iov_len=255}], tags=NULL}, 32) = 0 openat(AT_FDCWD, "/proc/thread-self/fdinfo/3", O_RDWR) = 4 [ 58.279825][ T5845] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 58.292424][ T5845] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 58.300827][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor422 Not tainted 6.12.0-rc5-next-20241031-syzkaller #0 [ 58.311392][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.321435][ T5845] RIP: 0010:io_uring_show_fdinfo+0xeed/0x1810 [ 58.327502][ T5845] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 cb 68 3c f6 48 8b 1b 48 83 c3 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 a5 68 3c f6 4d 89 fe 48 8b 1b 48 89 [ 58.347083][ T5845] RSP: 0018:ffffc9000352f700 EFLAGS: 00010206 [ 58.353126][ T5845] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 58.361073][ T5845] RDX: ffff888030040000 RSI: 0000000000000003 RDI: 0000000000000000 [ 58.369020][ T5845] RBP: ffffc9000352f940 R08: ffffffff8bc2f00d R09: 1ffff1100690201f [ 58.376968][ T5845] R10: dffffc0000000000 R11: ffffed1006902020 R12: 0000000000000000 [ 58.384917][ T5845] R13: dffffc0000000000 R14: ffff888034e26128 R15: ffff888034e26120 [ 58.392865][ T5845] FS: 00005555693ab380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 58.401768][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.408324][ T5845] CR2: 0000564acb56e0d8 CR3: 000000007f2d0000 CR4: 00000000003526f0 [ 58.416272][ T5845] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.424219][ T5845] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.432185][ T5845] Call Trace: [ 58.435631][ T5845] [ 58.438550][ T5845] ? __die_body+0x5f/0xb0 [ 58.442865][ T5845] ? die_addr+0xb0/0xe0 [ 58.447002][ T5845] ? exc_general_protection+0x3dd/0x5d0 [ 58.452544][ T5845] ? asm_exc_general_protection+0x26/0x30 [ 58.458257][ T5845] ? io_uring_show_fdinfo+0xe5d/0x1810 [ 58.463707][ T5845] ? io_uring_show_fdinfo+0xeed/0x1810 [ 58.469152][ T5845] ? __pfx_io_uring_show_fdinfo+0x10/0x10 [ 58.474859][ T5845] ? __pfx_seq_printf+0x10/0x10 [ 58.479697][ T5845] ? do_raw_spin_unlock+0x13c/0x8b0 [ 58.484873][ T5845] ? show_fd_locks+0x193/0x3e0 [ 58.489614][ T5845] ? __pfx_io_uring_show_fdinfo+0x10/0x10 [ 58.495308][ T5845] seq_show+0x608/0x770 [ 58.499445][ T5845] seq_read_iter+0x43f/0xd70 [ 58.504014][ T5845] seq_read+0x3a9/0x4f0 [ 58.508148][ T5845] ? __pfx_seq_read+0x10/0x10 [ 58.512803][ T5845] ? rw_verify_area+0x55e/0x6f0 [ 58.517631][ T5845] vfs_readv+0x6bc/0xa80 [ 58.521853][ T5845] ? __pfx_seq_read+0x10/0x10 [ 58.526505][ T5845] ? __pfx_vfs_readv+0x10/0x10 [ 58.531248][ T5845] ? __fget_files+0x2a/0x410 [ 58.535815][ T5845] ? __fget_files+0x395/0x410 [ 58.540472][ T5845] ? __fget_files+0x2a/0x410 [ 58.545039][ T5845] __x64_sys_preadv+0x1c7/0x2d0 [ 58.549870][ T5845] ? __pfx___x64_sys_preadv+0x10/0x10 [ 58.555222][ T5845] ? do_syscall_64+0x100/0x230 [ 58.559967][ T5845] do_syscall_64+0xf3/0x230 [ 58.564471][ T5845] ? clear_bhb_loop+0x35/0x90 [ 58.569141][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.575031][ T5845] RIP: 0033:0x7f7f677d1669 [ 58.579441][ T5845] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.599029][ T5845] RSP: 002b:00007ffecebd7a78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 58.607422][ T5845] RAX: ffffffffffffffda RBX: 00007ffecebd7a80 RCX: 00007f7f677d1669 [ 58.615387][ T5845] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000004 [ 58.623340][ T5845] RBP: 00007f7f67844610 R08: 0000000000000000 R09: 68742f636f72702f [ 58.631295][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.639244][ T5845] R13: 00007ffecebd7cb8 R14: 0000000000000001 R15: 0000000000000001 [ 58.647198][ T5845] [ 58.650198][ T5845] Modules linked in: [ 58.654249][ T5845] ---[ end trace 0000000000000000 ]--- [ 58.659784][ T5845] RIP: 0010:io_uring_show_fdinfo+0xeed/0x1810 [ 58.666167][ T5845] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 cb 68 3c f6 48 8b 1b 48 83 c3 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 a5 68 3c f6 4d 89 fe 48 8b 1b 48 89 [ 58.685851][ T5845] RSP: 0018:ffffc9000352f700 EFLAGS: 00010206 [ 58.691909][ T5845] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 58.699897][ T5845] RDX: ffff888030040000 RSI: 0000000000000003 RDI: 0000000000000000 [ 58.707900][ T5845] RBP: ffffc9000352f940 R08: ffffffff8bc2f00d R09: 1ffff1100690201f [ 58.715920][ T5845] R10: dffffc0000000000 R11: ffffed1006902020 R12: 0000000000000000 [ 58.723917][ T5845] R13: dffffc0000000000 R14: ffff888034e26128 R15: ffff888034e26120 [ 58.731882][ T5845] FS: 00005555693ab380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 58.740825][ T5845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.747438][ T5845] CR2: 0000000020000008 CR3: 000000007f2d0000 CR4: 00000000003526f0 [ 58.755424][ T5845] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.763425][ T5845] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.771386][ T5845] Kernel panic - not syncing: Fatal exception [ 58.777715][ T5845] Kernel Offset: disabled [ 58.782035][ T5845] Rebooting in 86400 seconds..