./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor107399736
<...>
Warning: Permanently added '10.128.0.51' (ECDSA) to the list of known hosts.
execve("./syz-executor107399736", ["./syz-executor107399736"], 0x7fff14ee9cc0 /* 10 vars */) = 0
brk(NULL) = 0x555556340000
brk(0x555556340c40) = 0x555556340c40
arch_prctl(ARCH_SET_FS, 0x555556340300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor107399736", 4096) = 27
brk(0x555556361c40) = 0x555556361c40
brk(0x555556362000) = 0x555556362000
mprotect(0x7ff41666e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
mmap(0x20000000, 11755520, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_POPULATE|MAP_DENYWRITE|MAP_STACK|MAP_HUGETLB, -1, 0) = 0x20000000
madvise(0x20000000, 6291459, MADV_REMOVE) = 0
gettid() = 3608
openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3
write(3, "6", 1) = 1
syzkaller login: [ 39.544197][ T3608] ==================================================================
[ 39.552298][ T3608] BUG: KASAN: null-ptr-deref in alloc_buddy_huge_page.isra.0+0x103/0x230
[ 39.560795][ T3608] Write of size 4 at addr 0000000000000034 by task syz-executor107/3608
[ 39.569134][ T3608]
[ 39.571445][ T3608] CPU: 0 PID: 3608 Comm: syz-executor107 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0
[ 39.581317][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 39.591356][ T3608] Call Trace:
[ 39.594620][ T3608]
[ 39.597541][ T3608] dump_stack_lvl+0xcd/0x134
[ 39.602128][ T3608] ? alloc_buddy_huge_page.isra.0+0x103/0x230
[ 39.608186][ T3608] kasan_report+0xbb/0x1f0
[ 39.612598][ T3608] ? alloc_buddy_huge_page.isra.0+0x103/0x230
[ 39.618654][ T3608] kasan_check_range+0x13d/0x180
[ 39.623578][ T3608] alloc_buddy_huge_page.isra.0+0x103/0x230
[ 39.629460][ T3608] alloc_fresh_huge_page+0x395/0x530
[ 39.634749][ T3608] alloc_surplus_huge_page+0x139/0x2f0
[ 39.640199][ T3608] alloc_huge_page+0xbf6/0x1180
[ 39.645042][ T3608] ? restore_reserve_on_error+0x1e0/0x1e0
[ 39.650764][ T3608] ? lock_acquire+0x4fc/0x630
[ 39.655452][ T3608] ? hugetlb_total_pages+0x140/0x140
[ 39.660757][ T3608] hugetlb_fault+0x1056/0x1e60
[ 39.665543][ T3608] ? hugetlb_wp+0x1af0/0x1af0
[ 39.670254][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 39.675731][ T3608] ? lock_release+0x5cb/0x810
[ 39.680421][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 39.685277][ T3608] ? follow_hugetlb_page+0x36e/0x1850
[ 39.690665][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 39.695521][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 39.700559][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 39.705508][ T3608] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 39.711333][ T3608] follow_hugetlb_page+0x3f3/0x1850
[ 39.716553][ T3608] ? vma_is_secretmem+0x9/0x40
[ 39.721332][ T3608] __get_user_pages+0x2cb/0xf10
[ 39.726207][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 39.731684][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 39.737160][ T3608] ? follow_page_mask+0x12d0/0x12d0
[ 39.742364][ T3608] ? lock_release+0x810/0x810
[ 39.747048][ T3608] ? lock_acquire+0x4fc/0x630
[ 39.751731][ T3608] ? lock_release+0x5cb/0x810
[ 39.756414][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 39.761894][ T3608] __get_user_pages_remote+0x18f/0x830
[ 39.767362][ T3608] ? down_read+0x170/0x450
[ 39.771793][ T3608] pin_user_pages_remote+0x6c/0xb0
[ 39.776912][ T3608] process_vm_rw_core.constprop.0+0x43b/0x980
[ 39.783001][ T3608] ? lock_acquire+0x4fc/0x630
[ 39.787690][ T3608] ? vmalloc_dump_obj+0x1a0/0x1a0
[ 39.792747][ T3608] ? _copy_from_user+0xf9/0x170
[ 39.797616][ T3608] ? iovec_from_user+0x110/0x3a0
[ 39.802566][ T3608] ? import_iovec+0x10c/0x150
[ 39.807257][ T3608] process_vm_rw+0x29c/0x300
[ 39.811862][ T3608] ? process_vm_rw_core.constprop.0+0x980/0x980
[ 39.818122][ T3608] ? lock_release+0x810/0x810
[ 39.822803][ T3608] ? ptrace_stop.part.0+0x49a/0x8c0
[ 39.828012][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 39.832965][ T3608] ? recalc_sigpending_tsk+0x18f/0x1d0
[ 39.838443][ T3608] ? ptrace_stop.part.0+0x5f4/0x8c0
[ 39.843651][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 39.849133][ T3608] ? lock_release+0x5cb/0x810
[ 39.853992][ T3608] ? ptrace_notify+0xfa/0x140
[ 39.858678][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 39.863558][ T3608] ? _raw_spin_unlock_irq+0x1f/0x40
[ 39.868770][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 39.873800][ T3608] __x64_sys_process_vm_writev+0xdf/0x1b0
[ 39.879547][ T3608] ? syscall_trace_enter.constprop.0+0xb0/0x250
[ 39.885820][ T3608] do_syscall_64+0x35/0xb0
[ 39.890245][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 39.896174][ T3608] RIP: 0033:0x7ff4166016c9
[ 39.900592][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 39.920202][ T3608] RSP: 002b:00007fff99de70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[ 39.928617][ T3608] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff4166016c9
[ 39.936594][ T3608] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000e18
[ 39.944568][ T3608] RBP: 00007fff99de70e0 R08: 000000000000023a R09: 0000000000000000
[ 39.952550][ T3608] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000003
[ 39.960527][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 39.968508][ T3608]
[ 39.971530][ T3608] ==================================================================
[ 39.982439][ T3608] Kernel panic - not syncing: panic_on_warn set ...
[ 39.989043][ T3608] CPU: 1 PID: 3608 Comm: syz-executor107 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0
[ 39.998934][ T3608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022
[ 40.008973][ T3608] Call Trace:
[ 40.012236][ T3608]
[ 40.015154][ T3608] dump_stack_lvl+0xcd/0x134
[ 40.019741][ T3608] panic+0x2c8/0x622
[ 40.023625][ T3608] ? panic_print_sys_info.part.0+0x110/0x110
[ 40.029592][ T3608] ? preempt_schedule_common+0x59/0xc0
[ 40.035041][ T3608] ? preempt_schedule_thunk+0x16/0x18
[ 40.040407][ T3608] end_report.part.0+0x3f/0x7c
[ 40.045205][ T3608] ? alloc_buddy_huge_page.isra.0+0x103/0x230
[ 40.051265][ T3608] kasan_report.cold+0xa/0xf
[ 40.055846][ T3608] ? alloc_buddy_huge_page.isra.0+0x103/0x230
[ 40.061903][ T3608] kasan_check_range+0x13d/0x180
[ 40.066830][ T3608] alloc_buddy_huge_page.isra.0+0x103/0x230
[ 40.072714][ T3608] alloc_fresh_huge_page+0x395/0x530
[ 40.077990][ T3608] alloc_surplus_huge_page+0x139/0x2f0
[ 40.083441][ T3608] alloc_huge_page+0xbf6/0x1180
[ 40.088284][ T3608] ? restore_reserve_on_error+0x1e0/0x1e0
[ 40.094001][ T3608] ? lock_acquire+0x4fc/0x630
[ 40.098664][ T3608] ? hugetlb_total_pages+0x140/0x140
[ 40.103945][ T3608] hugetlb_fault+0x1056/0x1e60
[ 40.108722][ T3608] ? hugetlb_wp+0x1af0/0x1af0
[ 40.113390][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 40.118845][ T3608] ? lock_release+0x5cb/0x810
[ 40.123513][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 40.128349][ T3608] ? follow_hugetlb_page+0x36e/0x1850
[ 40.133730][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 40.138656][ T3608] ? do_raw_spin_lock+0x120/0x2a0
[ 40.143667][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 40.148607][ T3608] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 40.154422][ T3608] follow_hugetlb_page+0x3f3/0x1850
[ 40.159617][ T3608] ? vma_is_secretmem+0x9/0x40
[ 40.164375][ T3608] __get_user_pages+0x2cb/0xf10
[ 40.169231][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 40.174682][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 40.180135][ T3608] ? follow_page_mask+0x12d0/0x12d0
[ 40.185320][ T3608] ? lock_release+0x810/0x810
[ 40.189982][ T3608] ? lock_acquire+0x4fc/0x630
[ 40.194648][ T3608] ? lock_release+0x5cb/0x810
[ 40.199311][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 40.205302][ T3608] __get_user_pages_remote+0x18f/0x830
[ 40.210766][ T3608] ? down_read+0x170/0x450
[ 40.215204][ T3608] pin_user_pages_remote+0x6c/0xb0
[ 40.220309][ T3608] process_vm_rw_core.constprop.0+0x43b/0x980
[ 40.228471][ T3608] ? lock_acquire+0x4fc/0x630
[ 40.233154][ T3608] ? vmalloc_dump_obj+0x1a0/0x1a0
[ 40.238197][ T3608] ? _copy_from_user+0xf9/0x170
[ 40.243043][ T3608] ? iovec_from_user+0x110/0x3a0
[ 40.247969][ T3608] ? import_iovec+0x10c/0x150
[ 40.252635][ T3608] process_vm_rw+0x29c/0x300
[ 40.257233][ T3608] ? process_vm_rw_core.constprop.0+0x980/0x980
[ 40.263496][ T3608] ? lock_release+0x810/0x810
[ 40.268294][ T3608] ? ptrace_stop.part.0+0x49a/0x8c0
[ 40.273514][ T3608] ? rwlock_bug.part.0+0x90/0x90
[ 40.278447][ T3608] ? recalc_sigpending_tsk+0x18f/0x1d0
[ 40.283906][ T3608] ? ptrace_stop.part.0+0x5f4/0x8c0
[ 40.289094][ T3608] ? rcu_read_lock_sched_held+0xd/0x70
[ 40.294556][ T3608] ? lock_release+0x5cb/0x810
[ 40.299229][ T3608] ? ptrace_notify+0xfa/0x140
[ 40.303897][ T3608] ? lock_downgrade+0x6e0/0x6e0
[ 40.308753][ T3608] ? _raw_spin_unlock_irq+0x1f/0x40
[ 40.313944][ T3608] ? trace_hardirqs_on+0x2d/0x160
[ 40.318960][ T3608] __x64_sys_process_vm_writev+0xdf/0x1b0
[ 40.324677][ T3608] ? syscall_trace_enter.constprop.0+0xb0/0x250
[ 40.330906][ T3608] do_syscall_64+0x35/0xb0
[ 40.335311][ T3608] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.341201][ T3608] RIP: 0033:0x7ff4166016c9
[ 40.345629][ T3608] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.365222][ T3608] RSP: 002b:00007fff99de70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137
[ 40.373637][ T3608] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff4166016c9
[ 40.381599][ T3608] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000e18
[ 40.389561][ T3608] RBP: 00007fff99de70e0 R08: 000000000000023a R09: 0000000000000000
[ 40.397529][ T3608] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000003
[ 40.405509][ T3608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 40.413480][ T3608]
[ 40.416660][ T3608] Kernel Offset: disabled
[ 40.420974][ T3608] Rebooting in 86400 seconds..