./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4088241773
<...>
Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts.
execve("./syz-executor4088241773", ["./syz-executor4088241773"], 0x7ffc035c21b0 /* 10 vars */) = 0
brk(NULL) = 0x5555716e3000
brk(0x5555716e3d00) = 0x5555716e3d00
arch_prctl(ARCH_SET_FS, 0x5555716e3380) = 0
set_tid_address(0x5555716e3650) = 289
set_robust_list(0x5555716e3660, 24) = 0
rseq(0x5555716e3ca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented)
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor4088241773", 4096) = 28
getrandom("\x8b\x76\x4a\x65\x0e\xe2\xe4\x8e", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555716e3d00
brk(0x555571704d00) = 0x555571704d00
brk(0x555571705000) = 0x555571705000
mprotect(0x7f7e5d300000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3
close(3) = 0
openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
write(1, "executing program\n", 18executing program
) = 18
openat(AT_FDCWD, "pids.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3
mmap(0x200000b15000, 16384, PROT_NONE, MAP_SHARED|MAP_FIXED, 3, 0) = 0x200000b15000
openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
write(4, "4", 1) = 1
[ 21.458581][ T28] audit: type=1400 audit(1747121615.872:64): avc: denied { execmem } for pid=289 comm="syz-executor408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 21.471401][ T289] FAULT_INJECTION: forcing a failure.
[ 21.471401][ T289] name failslab, interval 1, probability 0, space 0, times 1
[ 21.490770][ T289] CPU: 0 PID: 289 Comm: syz-executor408 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 21.500900][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 21.511019][ T289] Call Trace:
[ 21.514282][ T289]
[ 21.517191][ T289] __dump_stack+0x21/0x24
[ 21.521509][ T289] dump_stack_lvl+0xee/0x150
[ 21.526074][ T289] ? __cfi_dump_stack_lvl+0x8/0x8
[ 21.531073][ T289] ? __kasan_check_read+0x11/0x20
[ 21.536266][ T289] dump_stack+0x15/0x24
[ 21.540517][ T289] should_fail_ex+0x3d4/0x520
[ 21.545191][ T289] ? mas_alloc_nodes+0x2d8/0x850
[ 21.550116][ T289] __should_failslab+0xac/0xf0
[ 21.554859][ T289] should_failslab+0x9/0x20
[ 21.559379][ T289] kmem_cache_alloc+0x3b/0x330
[ 21.564225][ T289] mas_alloc_nodes+0x2d8/0x850
[ 21.568971][ T289] mas_preallocate+0xdcf/0x1390
[ 21.573796][ T289] ? __cfi_mas_preallocate+0x10/0x10
[ 21.579068][ T289] ? mas_prev_slot+0x8a8/0x8e0
[ 21.583831][ T289] ? rwsem_write_trylock+0x130/0x300
[ 21.589107][ T289] vma_expand+0x3b7/0xa10
[ 21.593414][ T289] ? can_vma_merge_after+0x99/0x330
[ 21.598628][ T289] mmap_region+0xed0/0x2140
[ 21.603115][ T289] ? __cfi_mmap_region+0x10/0x10
[ 21.608024][ T289] ? avc_has_perm+0x158/0x240
[ 21.612678][ T289] ? cap_mmap_addr+0x165/0x2e0
[ 21.617417][ T289] ? thp_get_unmapped_area+0x265/0x2b0
[ 21.622851][ T289] ? get_unmapped_area+0x313/0x380
[ 21.627941][ T289] ? file_mmap_ok+0x127/0x180
[ 21.632592][ T289] do_mmap+0x7ae/0xcf0
[ 21.636635][ T289] ? __cfi_do_mmap+0x10/0x10
[ 21.641208][ T289] ? _raw_spin_unlock_irq+0x4d/0x70
[ 21.646393][ T289] vm_mmap_pgoff+0x1f5/0x3f0
[ 21.650966][ T289] ? __cfi_vm_mmap_pgoff+0x10/0x10
[ 21.656060][ T289] ? __fget_files+0x2d5/0x330
[ 21.660734][ T289] ksys_mmap_pgoff+0x161/0x1d0
[ 21.665485][ T289] __x64_sys_mmap+0xfa/0x110
[ 21.670055][ T289] x64_sys_call+0x8fd/0x9a0
[ 21.674619][ T289] do_syscall_64+0x4c/0xa0
[ 21.679199][ T289] ? clear_bhb_loop+0x15/0x70
[ 21.683871][ T289] ? clear_bhb_loop+0x15/0x70
[ 21.688551][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 21.694420][ T289] RIP: 0033:0x7f7e5d295329
[ 21.698824][ T289] Code: 48 83 c4 28 c3 e8 17 1a 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 21.718405][ T289] RSP: 002b:00007fffe88b3568 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 21.726879][ T289] RAX: ffffffffffffffda RBX: 00007fffe88b3580 RCX: 00007f7e5d295329
[ 21.735030][ T289] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000b15000
[ 21.742988][ T289] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000
[ 21.751026][ T289] R10: 0000000000000011 R11: 0000000000000246 R12: 0000200000b15000
[ 21.758972][ T289] R13: 00007fffe88b3758 R14: 0000000000000001 R15: 0000000000000001
[ 21.766935][ T289]
[ 21.770189][ T289] ------------[ cut here ]------------
[ 21.775680][ T289] kernel BUG at mm/mmap.c:2829!
[ 21.780674][ T289] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 21.786718][ T289] CPU: 0 PID: 289 Comm: syz-executor408 Not tainted 6.1.134-syzkaller-00012-g646380b087a5 #0
[ 21.796837][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 21.806876][ T289] RIP: 0010:mmap_region+0x1ffd/0x2140
[ 21.812240][ T289] Code: 80 c1 03 38 c1 0f 8c f8 f9 ff ff 4c 89 f7 49 89 d5 e8 67 11 09 00 4c 89 ea e9 e5 f9 ff ff e8 5a be c4 ff 0f 0b e8 53 be c4 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6a fb ff ff 48 89 df e8
[ 21.831934][ T289] RSP: 0018:ffffc90000eb7a60 EFLAGS: 00010293
[ 21.838109][ T289] RAX: ffffffff81ab287d RBX: 0000200000b18000 RCX: ffff88810e110000
[ 21.846085][ T289] RDX: 0000000000000000 RSI: 0000200000b17fff RDI: 0000200000b18000
[ 21.854051][ T289] RBP: ffffc90000eb7c50 R08: ffff88810e110000 R09: 0000000000000003
[ 21.862194][ T289] R10: 0000000000000003 R11: 0000000000000000 R12: 0000200000b18000
[ 21.870155][ T289] R13: 0000200000b17fff R14: dffffc0000000000 R15: ffff888121d7b700
[ 21.878202][ T289] FS: 00005555716e3380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 21.887128][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 21.893706][ T289] CR2: 0000200000000000 CR3: 0000000126628000 CR4: 00000000003506b0
[ 21.901848][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 21.909825][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 21.917791][ T289] Call Trace:
[ 21.921067][ T289]
[ 21.923993][ T289] ? __cfi_mmap_region+0x10/0x10
[ 21.928930][ T289] ? avc_has_perm+0x158/0x240
[ 21.933601][ T289] ? cap_mmap_addr+0x165/0x2e0
[ 21.938361][ T289] ? thp_get_unmapped_area+0x265/0x2b0
[ 21.943822][ T289] ? get_unmapped_area+0x313/0x380
[ 21.948927][ T289] ? file_mmap_ok+0x127/0x180
[ 21.953601][ T289] do_mmap+0x7ae/0xcf0
[ 21.957667][ T289] ? __cfi_do_mmap+0x10/0x10
[ 21.962249][ T289] ? _raw_spin_unlock_irq+0x4d/0x70
[ 21.967461][ T289] vm_mmap_pgoff+0x1f5/0x3f0
[ 21.972046][ T289] ? __cfi_vm_mmap_pgoff+0x10/0x10
[ 21.977164][ T289] ? __fget_files+0x2d5/0x330
[ 21.981903][ T289] ksys_mmap_pgoff+0x161/0x1d0
[ 21.986735][ T289] __x64_sys_mmap+0xfa/0x110
[ 21.991331][ T289] x64_sys_call+0x8fd/0x9a0
[ 21.995845][ T289] do_syscall_64+0x4c/0xa0
[ 22.000257][ T289] ? clear_bhb_loop+0x15/0x70
[ 22.004938][ T289] ? clear_bhb_loop+0x15/0x70
[ 22.009630][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 22.015532][ T289] RIP: 0033:0x7f7e5d295329
[ 22.019946][ T289] Code: 48 83 c4 28 c3 e8 17 1a 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 22.039558][ T289] RSP: 002b:00007fffe88b3568 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 22.047971][ T289] RAX: ffffffffffffffda RBX: 00007fffe88b3580 RCX: 00007f7e5d295329
[ 22.055948][ T289] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000b15000
[ 22.063943][ T289] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000000
[ 22.071906][ T289] R10: 0000000000000011 R11: 0000000000000246 R12: 0000200000b15000
[ 22.079881][ T289] R13: 00007fffe88b3758 R14: 0000000000000001 R15: 0000000000000001
[ 22.087848][ T289]
[ 22.090862][ T289] Modules linked in:
[ 22.094854][ T289] ---[ end trace 0000000000000000 ]---
[ 22.100319][ T289] RIP: 0010:mmap_region+0x1ffd/0x2140
[ 22.105736][ T289] Code: 80 c1 03 38 c1 0f 8c f8 f9 ff ff 4c 89 f7 49 89 d5 e8 67 11 09 00 4c 89 ea e9 e5 f9 ff ff e8 5a be c4 ff 0f 0b e8 53 be c4 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6a fb ff ff 48 89 df e8
[ 22.125466][ T289] RSP: 0018:ffffc90000eb7a60 EFLAGS: 00010293
[ 22.131542][ T289] RAX: ffffffff81ab287d RBX: 0000200000b18000 RCX: ffff88810e110000
[ 22.139513][ T289] RDX: 0000000000000000 RSI: 0000200000b17fff RDI: 0000200000b18000
[ 22.147492][ T289] RBP: ffffc90000eb7c50 R08: ffff88810e110000 R09: 0000000000000003
[ 22.155678][ T289] R10: 0000000000000003 R11: 0000000000000000 R12: 0000200000b18000
[ 22.163697][ T289] R13: 0000200000b17fff R14: dffffc0000000000 R15: ffff888121d7b700
[ 22.171649][ T289] FS: 00005555716e3380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 22.180576][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 22.187175][ T289] CR2: 0000200000000000 CR3: 0000000126628000 CR4: 00000000003506b0
[ 22.195171][ T289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 22.203163][ T289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 22.211138][ T289] Kernel panic - not syncing: Fatal exception
[ 22.217417][ T289] Kernel Offset: disabled
[ 22.221723][ T289] Rebooting in 86400 seconds..