./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor448607768 <...> Warning: Permanently added '10.128.1.191' (ECDSA) to the list of known hosts. execve("./syz-executor448607768", ["./syz-executor448607768"], 0x7fff03e35220 /* 10 vars */) = 0 brk(NULL) = 0x555556c1d000 brk(0x555556c1dc40) = 0x555556c1dc40 arch_prctl(ARCH_SET_FS, 0x555556c1d300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor448607768", 4096) = 27 brk(0x555556c3ec40) = 0x555556c3ec40 brk(0x555556c3f000) = 0x555556c3f000 mprotect(0x7f7ed9c78000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 mlock2(0x20d52000, 4096, 0) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 write(3, "3", 1) = 1 [ 23.847998][ T28] audit: type=1400 audit(1684085370.586:66): avc: denied { execmem } for pid=294 comm="syz-executor448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.855998][ T294] ------------[ cut here ]------------ [ 23.872746][ T294] kernel BUG at lib/maple_tree.c:5793! [ 23.878055][ T294] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 23.883920][ T294] CPU: 1 PID: 294 Comm: syz-executor448 Not tainted 6.1.25-syzkaller-00149-g6f4553626dbd #0 [ 23.893813][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 23.904147][ T294] RIP: 0010:mas_store_prealloc+0x3c0/0x420 [ 23.909783][ T294] Code: 48 89 df e8 82 f3 bd fc 48 8b 3b 48 c7 c6 73 0a 45 86 48 8b 54 24 10 31 c9 4c 8b 44 24 18 e8 97 8b ff ff eb 18 e8 30 91 78 fc <0f> 0b e8 c9 e4 08 00 e8 24 91 78 fc eb 34 e8 1d 91 78 fc 31 db 65 [ 23.929297][ T294] RSP: 0018:ffffc90000d17780 EFLAGS: 00010293 [ 23.935129][ T294] RAX: ffffffff84fb07a0 RBX: 0000000000000002 RCX: ffff88810e0e3900 [ 23.942945][ T294] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 23.950749][ T294] RBP: ffffc90000d17890 R08: ffffffff84fb0643 R09: fffffbfff0d0d40b [ 23.958648][ T294] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 23.966457][ T294] R13: 1ffff920001a2f43 R14: ffffffffffffffd2 R15: 1ffff920001a2ef4 [ 23.974272][ T294] FS: 0000555556c1d300(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 23.983037][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.989456][ T294] CR2: 00000000005f6b40 CR3: 0000000120a00000 CR4: 00000000003506a0 [ 23.997282][ T294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.005089][ T294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.012892][ T294] Call Trace: [ 24.016022][ T294] [ 24.018797][ T294] ? mas_nomem+0x1e0/0x1e0 [ 24.023046][ T294] ? mas_store_prealloc+0x284/0x420 [ 24.028086][ T294] ? anon_vma_interval_tree_remove+0xb73/0xb90 [ 24.034070][ T294] vma_mas_store+0xe0/0x1e0 [ 24.038421][ T294] __vma_adjust+0xf81/0x1870 [ 24.042844][ T294] ? vma_expand+0x7b0/0x7b0 [ 24.047176][ T294] ? mtree_destroy+0x150/0x150 [ 24.051777][ T294] ? __kasan_check_write+0x14/0x20 [ 24.056746][ T294] ? __switch_to+0x62c/0x1190 [ 24.061242][ T294] vma_merge+0x8ce/0x8f0 [ 24.065322][ T294] ? find_vma+0xd0/0xd0 [ 24.069314][ T294] ? __update_idle_core+0x310/0x310 [ 24.074345][ T294] ? mas_state_walk+0x732/0x980 [ 24.079031][ T294] mlock_fixup+0x210/0x530 [ 24.083286][ T294] apply_vma_lock_flags+0x327/0x480 [ 24.088332][ T294] ? do_mlock+0x650/0x650 [ 24.092500][ T294] ? rwsem_write_trylock+0x15b/0x290 [ 24.097705][ T294] do_mlock+0x4fc/0x650 [ 24.101687][ T294] ? lru_gen_update_size+0x580/0x580 [ 24.106820][ T294] ? __kasan_check_write+0x14/0x20 [ 24.111752][ T294] ? fpregs_restore_userregs+0x130/0x290 [ 24.117336][ T294] __x64_sys_mlock2+0xb8/0xe0 [ 24.121840][ T294] do_syscall_64+0x3d/0xb0 [ 24.126096][ T294] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 24.131823][ T294] RIP: 0033:0x7f7ed9c0b629 [ 24.136077][ T294] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 24.155689][ T294] RSP: 002b:00007ffdad0afec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 24.164023][ T294] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f7ed9c0b629 [ 24.171842][ T294] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020bfd000 [ 24.179647][ T294] RBP: 00007ffdad0afed0 R08: 0000000000000001 R09: 00007f7ed9bc0033 [ 24.187455][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 24.195278][ T294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 24.203172][ T294] [ 24.206032][ T294] Modules linked in: [ 24.210333][ T294] ---[ end trace 0000000000000000 ]--- [ 24.215630][ T294] RIP: 0010:mas_store_prealloc+0x3c0/0x420 [ 24.221274][ T294] Code: 48 89 df e8 82 f3 bd fc 48 8b 3b 48 c7 c6 73 0a 45 86 48 8b 54 24 10 31 c9 4c 8b 44 24 18 e8 97 8b ff ff eb 18 e8 30 91 78 fc <0f> 0b e8 c9 e4 08 00 e8 24 91 78 fc eb 34 e8 1d 91 78 fc 31 db 65 [ 24.240742][ T294] RSP: 0018:ffffc90000d17780 EFLAGS: 00010293 [ 24.246614][ T294] RAX: ffffffff84fb07a0 RBX: 0000000000000002 RCX: ffff88810e0e3900 [ 24.254525][ T294] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 24.262297][ T294] RBP: ffffc90000d17890 R08: ffffffff84fb0643 R09: fffffbfff0d0d40b [ 24.270197][ T294] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 24.277963][ T294] R13: 1ffff920001a2f43 R14: ffffffffffffffd2 R15: 1ffff920001a2ef4 [ 24.285760][ T294] FS: 0000555556c1d300(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 24.294584][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 24.301064][ T294] CR2: 00000000005f6b40 CR3: 0000000120a00000 CR4: 00000000003506a0 [ 24.309153][ T294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 24.317030][ T294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 24.324947][ T294] Kernel panic - not syncing: Fatal exception [ 24.331310][ T294] Kernel Offset: disabled [ 24.335439][ T294] Rebooting in 86400 seconds..