./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3055771851
<...>
Warning: Permanently added '10.128.10.17' (ECDSA) to the list of known hosts.
execve("./syz-executor3055771851", ["./syz-executor3055771851"], 0x7ffd60a19f60 /* 10 vars */) = 0
brk(NULL) = 0x555555b24000
brk(0x555555b24d00) = 0x555555b24d00
arch_prctl(ARCH_SET_FS, 0x555555b243c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3055771851", 4096) = 28
brk(0x555555b45d00) = 0x555555b45d00
brk(0x555555b46000) = 0x555555b46000
mprotect(0x7f1b218d1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f1b21826180, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1b218268c0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f1b21826180, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1b218268c0}, NULL, 8) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b24690) = 3607
./strace-static-x86_64: Process 3607 attached
[pid 3607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3607] setpgid(0, 0) = 0
[pid 3607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3607] write(3, "1000", 4) = 4
[pid 3607] close(3) = 0
[pid 3607] io_uring_setup(243, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=256, cq_entries=512, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=8512}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3607] mmap(0x20000000, 9536, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 3607] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 3607] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3607] write(4, "17", 2) = 2
[pid 3607] clone(child_stack=NULL, flags=0) = -1 ENOMEM (Cannot allocate memory)
[pid 3607] exit_group(0) = ?
[ 53.732862][ T27] audit: type=1400 audit(1663943716.332:75): avc: denied { execmem } for pid=3606 comm="syz-executor305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid 3607] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3607, si_uid=0, si_status=0, si_utime=0, si_stime=2} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555b24690) = 3608
./strace-static-x86_64: Process 3608 attached
[pid 3608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3608] setpgid(0, 0) = 0
[pid 3608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3608] write(3, "1000", 4) = 4
[pid 3608] close(3) = 0
[pid 3608] io_uring_setup(243, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=256, cq_entries=512, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=8512}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3608] mmap(0x20000000, 9536, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 3608] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 3608] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3608] write(4, "17", 2) = 2
[ 53.763929][ T27] audit: type=1400 audit(1663943716.362:76): avc: denied { create } for pid=3607 comm="syz-executor305" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 53.785670][ T27] audit: type=1400 audit(1663943716.362:77): avc: denied { map } for pid=3607 comm="syz-executor305" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 53.811100][ T27] audit: type=1400 audit(1663943716.362:78): avc: denied { read write } for pid=3607 comm="syz-executor305" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 53.813232][ T3608] ------------[ cut here ]------------
[ 53.843203][ T3608] WARNING: CPU: 1 PID: 3608 at arch/x86/mm/pat/memtype.c:1107 untrack_pfn+0x247/0x290
[ 53.853371][ T3608] Modules linked in:
[ 53.857558][ T3608] CPU: 1 PID: 3608 Comm: syz-executor305 Not tainted 6.0.0-rc6-syzkaller-00210-gbf682942cd26 #0
[ 53.869369][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 53.879792][ T3608] RIP: 0010:untrack_pfn+0x247/0x290
[ 53.885149][ T3608] Code: 84 6c ff ff ff e8 49 76 43 00 4c 89 ee 4c 89 e7 e8 be de ff ff e8 39 76 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 29 76 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 7a 14 8f 00 e9 98 fe ff ff e8 70
[ 53.905043][ T3608] RSP: 0018:ffffc90002f676f8 EFLAGS: 00010293
[ 53.911274][ T3608] RAX: 0000000000000000 RBX: ffff88802097ce70 RCX: 0000000000000000
[ 53.919371][ T3608] RDX: ffff88807249e040 RSI: ffffffff8137c1c7 RDI: 0000000000000005
[ 53.927431][ T3608] RBP: 1ffff920005ecedf R08: 0000000000000005 R09: 0000000000000000
[ 53.935455][ T3608] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea
[ 53.943496][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802097cec0
[ 53.951606][ T3608] FS: 0000555555b243c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 53.960845][ T3608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.967554][ T3608] CR2: 00007f1b21893cf0 CR3: 0000000026f7e000 CR4: 00000000003506f0
[ 53.975579][ T3608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.983626][ T3608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.991863][ T3608] Call Trace:
[ 53.995173][ T3608]
[ 53.998127][ T3608] ? track_pfn_insert+0x140/0x140
[ 54.003244][ T3608] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 54.008489][ T3608] ? unmap_vmas+0x148/0x310
[ 54.013082][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 54.018108][ T3608] ? uprobe_munmap+0x1c/0x560
[ 54.023099][ T3608] unmap_single_vma+0x1ba/0x360
[ 54.028004][ T3608] unmap_vmas+0x18c/0x310
[ 54.032428][ T3608] ? unmap_mapping_range+0x280/0x280
[ 54.039241][ T3608] ? lockdep_hardirqs_on+0x79/0x100
[ 54.044597][ T3608] exit_mmap+0x1b8/0x490
[ 54.048888][ T3608] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 54.055012][ T3608] ? dup_mm+0xb7e/0x13a0
[ 54.059574][ T3608] __mmput+0x122/0x4b0
[ 54.063731][ T3608] mmput+0x56/0x60
[ 54.067493][ T3608] dup_mm+0xdb4/0x13a0
[ 54.071629][ T3608] ? replace_mm_exe_file+0x480/0x480
[ 54.076966][ T3608] ? __raw_spin_lock_init+0x36/0x110
[ 54.082508][ T3608] copy_process+0x3ca6/0x7090
[ 54.087218][ T3608] ? __cleanup_sighand+0xb0/0xb0
[ 54.092220][ T3608] kernel_clone+0xe7/0xab0
[ 54.097121][ T3608] ? create_io_thread+0xe0/0xe0
[ 54.102082][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 54.107045][ T3608] ? _raw_spin_lock_irq+0x41/0x50
[ 54.112142][ T3608] ? find_held_lock+0x2d/0x110
[ 54.116937][ T3608] __do_sys_clone+0xba/0x100
[ 54.121698][ T3608] ? kernel_clone+0xab0/0xab0
[ 54.126420][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 54.131848][ T3608] ? ptrace_notify+0xfa/0x140
[ 54.136857][ T3608] do_syscall_64+0x35/0xb0
[ 54.141491][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.147450][ T3608] RIP: 0033:0x7f1b218645e9
[ 54.151943][ T3608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.171650][ T3608] RSP: 002b:00007fff9c4f6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 54.180096][ T3608] RAX: ffffffffffffffda RBX: 000000000000d1d5 RCX: 00007f1b218645e9
[ 54.188976][ T3608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 54.197090][ T3608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003731
[ 54.205125][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 54.213247][ T3608] R13: 431bde82d7b634db R14: 00007fff9c4f6fa0 R15: 0000000000000000
[ 54.221284][ T3608]
[ 54.224327][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 54.230917][ T3608] CPU: 0 PID: 3608 Comm: syz-executor305 Not tainted 6.0.0-rc6-syzkaller-00210-gbf682942cd26 #0
[ 54.241535][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 54.251700][ T3608] Call Trace:
[ 54.254995][ T3608]
[ 54.257928][ T3608] dump_stack_lvl+0xcd/0x134
[ 54.262547][ T3608] panic+0x2c8/0x627
[ 54.266663][ T3608] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 54.272688][ T3608] ? __warn.cold+0x248/0x2c4
[ 54.277294][ T3608] ? untrack_pfn+0x247/0x290
[ 54.281898][ T3608] __warn.cold+0x259/0x2c4
[ 54.286332][ T3608] ? untrack_pfn+0x247/0x290
[ 54.291035][ T3608] report_bug+0x1bc/0x210
[ 54.295417][ T3608] handle_bug+0x3c/0x60
[ 54.299625][ T3608] exc_invalid_op+0x14/0x40
[ 54.304152][ T3608] asm_exc_invalid_op+0x16/0x20
[ 54.309011][ T3608] RIP: 0010:untrack_pfn+0x247/0x290
[ 54.314224][ T3608] Code: 84 6c ff ff ff e8 49 76 43 00 4c 89 ee 4c 89 e7 e8 be de ff ff e8 39 76 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 29 76 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 7a 14 8f 00 e9 98 fe ff ff e8 70
[ 54.333843][ T3608] RSP: 0018:ffffc90002f676f8 EFLAGS: 00010293
[ 54.339921][ T3608] RAX: 0000000000000000 RBX: ffff88802097ce70 RCX: 0000000000000000
[ 54.347925][ T3608] RDX: ffff88807249e040 RSI: ffffffff8137c1c7 RDI: 0000000000000005
[ 54.355907][ T3608] RBP: 1ffff920005ecedf R08: 0000000000000005 R09: 0000000000000000
[ 54.363898][ T3608] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea
[ 54.371875][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802097cec0
[ 54.379855][ T3608] ? untrack_pfn+0x247/0x290
[ 54.384462][ T3608] ? untrack_pfn+0x247/0x290
[ 54.389062][ T3608] ? track_pfn_insert+0x140/0x140
[ 54.394095][ T3608] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 54.399307][ T3608] ? unmap_vmas+0x148/0x310
[ 54.403907][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 54.408762][ T3608] ? uprobe_munmap+0x1c/0x560
[ 54.413459][ T3608] unmap_single_vma+0x1ba/0x360
[ 54.418325][ T3608] unmap_vmas+0x18c/0x310
[ 54.422695][ T3608] ? unmap_mapping_range+0x280/0x280
[ 54.428013][ T3608] ? lockdep_hardirqs_on+0x79/0x100
[ 54.433224][ T3608] exit_mmap+0x1b8/0x490
[ 54.437478][ T3608] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 54.443468][ T3608] ? dup_mm+0xb7e/0x13a0
[ 54.447724][ T3608] __mmput+0x122/0x4b0
[ 54.451816][ T3608] mmput+0x56/0x60
[ 54.455574][ T3608] dup_mm+0xdb4/0x13a0
[ 54.459653][ T3608] ? replace_mm_exe_file+0x480/0x480
[ 54.464952][ T3608] ? __raw_spin_lock_init+0x36/0x110
[ 54.470246][ T3608] copy_process+0x3ca6/0x7090
[ 54.474933][ T3608] ? __cleanup_sighand+0xb0/0xb0
[ 54.479882][ T3608] kernel_clone+0xe7/0xab0
[ 54.484312][ T3608] ? create_io_thread+0xe0/0xe0
[ 54.489168][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 54.494199][ T3608] ? _raw_spin_lock_irq+0x41/0x50
[ 54.499234][ T3608] ? find_held_lock+0x2d/0x110
[ 54.504098][ T3608] __do_sys_clone+0xba/0x100
[ 54.508721][ T3608] ? kernel_clone+0xab0/0xab0
[ 54.513408][ T3608] ? _raw_spin_unlock_irq+0x2a/0x40
[ 54.518616][ T3608] ? ptrace_notify+0xfa/0x140
[ 54.523315][ T3608] do_syscall_64+0x35/0xb0
[ 54.527761][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.533670][ T3608] RIP: 0033:0x7f1b218645e9
[ 54.538180][ T3608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.557886][ T3608] RSP: 002b:00007fff9c4f6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 54.566309][ T3608] RAX: ffffffffffffffda RBX: 000000000000d1d5 RCX: 00007f1b218645e9
[ 54.574286][ T3608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 54.582262][ T3608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003731
[ 54.590241][ T3608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 54.598224][ T3608] R13: 431bde82d7b634db R14: 00007fff9c4f6fa0 R15: 0000000000000000
[ 54.606205][ T3608]
[ 54.609529][ T3608] Kernel Offset: disabled
[ 54.613936][ T3608] Rebooting in 86400 seconds..