./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1798644969 <...> Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. execve("./syz-executor1798644969", ["./syz-executor1798644969"], 0x7ffe781dfcc0 /* 10 vars */) = 0 brk(NULL) = 0x5555950a7000 brk(0x5555950a7d00) = 0x5555950a7d00 arch_prctl(ARCH_SET_FS, 0x5555950a7380) = 0 set_tid_address(0x5555950a7650) = 5088 set_robust_list(0x5555950a7660, 24) = 0 rseq(0x5555950a7ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1798644969", 4096) = 28 getrandom("\x77\x40\x99\x47\x66\x71\x65\x14", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555950a7d00 brk(0x5555950c8d00) = 0x5555950c8d00 brk(0x5555950c9000) = 0x5555950c9000 mprotect(0x7f64830da000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached [pid 5089] set_robust_list(0x5555950a7660, 24 [pid 5088] <... clone resumed>, child_tidptr=0x5555950a7650) = 5089 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5089] setpgid(0, 0) = 0 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1000", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] write(1, "executing program\n", 18executing program ) = 18 [pid 5089] mmap(0x20000000, 4194304, PROT_READ|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS|MAP_32BIT|MAP_EXECUTABLE|MAP_LOCKED|MAP_HUGETLB|MAP_SYNC, -1, 0) = 0x20000000 [pid 5089] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 3 [pid 5089] write(3, "5", 1) = 1 [ 57.658014][ T5089] FAULT_INJECTION: forcing a failure. [ 57.658014][ T5089] name failslab, interval 1, probability 0, space 0, times 1 [ 57.671010][ T5089] CPU: 1 PID: 5089 Comm: syz-executor179 Not tainted 6.9.0-syzkaller-12071-g66ad4829ddd0 #0 [ 57.681093][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 57.691254][ T5089] Call Trace: [ 57.694547][ T5089] [ 57.697484][ T5089] dump_stack_lvl+0x241/0x360 [ 57.702203][ T5089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.707422][ T5089] ? __pfx__printk+0x10/0x10 [ 57.712049][ T5089] should_fail_ex+0x3b0/0x4e0 [ 57.716728][ T5089] ? allocate_file_region_entries+0x204/0x670 [ 57.722797][ T5089] should_failslab+0x9/0x20 [ 57.727649][ T5089] kmalloc_trace_noprof+0x6c/0x2c0 [ 57.732772][ T5089] allocate_file_region_entries+0x204/0x670 [ 57.738671][ T5089] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 57.745144][ T5089] region_chg+0x2b4/0x390 [ 57.749511][ T5089] __vma_reservation_common+0x3bc/0x7d0 [ 57.755083][ T5089] ? __pfx___vma_reservation_common+0x10/0x10 [ 57.761247][ T5089] ? do_raw_spin_unlock+0x13c/0x8b0 [ 57.766470][ T5089] __unmap_hugepage_range+0x1233/0x2350 [ 57.772057][ T5089] ? __pfx___unmap_hugepage_range+0x10/0x10 [ 57.777968][ T5089] ? uprobe_munmap+0x183/0x410 [ 57.782749][ T5089] ? unmap_single_vma+0x22f/0x2b0 [ 57.787781][ T5089] unmap_vmas+0x3cc/0x5f0 [ 57.792122][ T5089] ? __pfx_unmap_vmas+0x10/0x10 [ 57.796986][ T5089] ? tlb_gather_mmu+0x24e/0x310 [ 57.801838][ T5089] unmap_region+0x1ec/0x350 [ 57.806355][ T5089] ? __pfx_unmap_region+0x10/0x10 [ 57.811406][ T5089] ? __pfx_mas_prev_range+0x10/0x10 [ 57.816607][ T5089] ? __mas_set_range+0x133/0x3c0 [ 57.821543][ T5089] do_vmi_align_munmap+0x1122/0x18c0 [ 57.826844][ T5089] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 57.832497][ T5089] ? mtree_range_walk+0x6fd/0x8e0 [ 57.837533][ T5089] ? mas_find+0x8c0/0xbb0 [ 57.841895][ T5089] do_vmi_munmap+0x24e/0x2d0 [ 57.846503][ T5089] mmap_region+0x72f/0x2070 [ 57.851020][ T5089] ? __lock_acquire+0x1346/0x1fd0 [ 57.856041][ T5089] ? __pfx_mmap_region+0x10/0x10 [ 57.860979][ T5089] ? mm_get_unmapped_area+0xa5/0xd0 [ 57.866179][ T5089] ? cap_mmap_addr+0x163/0x2c0 [ 57.870980][ T5089] ? __get_unmapped_area+0x2f0/0x360 [ 57.876284][ T5089] do_mmap+0x8ad/0xfa0 [ 57.880367][ T5089] ? __pfx_do_mmap+0x10/0x10 [ 57.884980][ T5089] ? __pfx_ima_file_mmap+0x10/0x10 [ 57.890149][ T5089] vm_mmap_pgoff+0x1dd/0x3d0 [ 57.894759][ T5089] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 57.899874][ T5089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 57.906203][ T5089] ? do_syscall_64+0x100/0x230 [ 57.910964][ T5089] ? ksys_mmap_pgoff+0xdf/0x720 [ 57.915819][ T5089] ? __x64_sys_mmap+0x7f/0x140 [ 57.920610][ T5089] do_syscall_64+0xf3/0x230 [ 57.925136][ T5089] ? clear_bhb_loop+0x35/0x90 [ 57.929818][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.935762][ T5089] RIP: 0033:0x7f6483066d39 [ 57.940184][ T5089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.959886][ T5089] RSP: 002b:00007fff7dc97c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 57.968306][ T5089] RAX: ffffffffffffffda RBX: 00007fff7dc97c80 RCX: 00007f6483066d39 [ 57.976270][ T5089] RDX: 0000000000000000 RSI: 00000000001fffff RDI: 0000000020000000 [ 57.984234][ T5089] RBP: 0000000000000001 R08: 00000000ffffffff R09: 0000000000000000 [ 57.992201][ T5089] R10: 0000000000028031 R11: 0000000000000246 R12: 0000000000000001 [ 58.000167][ T5089] R13: 431bde82d7b634db R14: 00007f64830b0035 R15: 0000000000000001 [ 58.008146][ T5089] [ 58.011936][ T5089] ------------[ cut here ]------------ [ 58.017649][ T5089] kernel BUG at mm/hugetlb.c:813! [ 58.022713][ T5089] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 58.029652][ T5089] CPU: 0 PID: 5089 Comm: syz-executor179 Not tainted 6.9.0-syzkaller-12071-g66ad4829ddd0 #0 [ 58.039702][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 58.049746][ T5089] RIP: 0010:__vma_reservation_common+0x795/0x7d0 [ 58.056165][ T5089] Code: 21 65 8e 09 e8 8c a3 9e ff 90 0f 0b e8 84 a3 9e ff 90 0f 0b e8 7c a3 9e ff 90 0f 0b e8 74 a3 9e ff 90 0f 0b e8 6c a3 9e ff 90 <0f> 0b e8 64 a3 9e ff 90 0f 0b e8 5c a3 9e ff 90 0f 0b e8 54 a3 9e [ 58.075762][ T5089] RSP: 0018:ffffc900035ff1c0 EFLAGS: 00010293 [ 58.081820][ T5089] RAX: ffffffff81f77114 RBX: 0000000000000000 RCX: ffff88801ff90000 [ 58.089782][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.097751][ T5089] RBP: ffffc900035ff290 R08: ffffffff81f76c26 R09: fffff520006bfe28 [ 58.105711][ T5089] R10: dffffc0000000000 R11: fffff520006bfe28 R12: 0000000000000000 [ 58.113673][ T5089] R13: dffffc0000000000 R14: ffff88802ce84c08 R15: ffff88802ce84c00 [ 58.121632][ T5089] FS: 00005555950a7380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 58.130548][ T5089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.137121][ T5089] CR2: 00007f6483099c40 CR3: 00000000746f4000 CR4: 00000000003506f0 [ 58.145087][ T5089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.153046][ T5089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.161007][ T5089] Call Trace: [ 58.164416][ T5089] [ 58.167338][ T5089] ? __die_body+0x88/0xe0 [ 58.171665][ T5089] ? die+0xcf/0x110 [ 58.175464][ T5089] ? do_trap+0x15a/0x3a0 [ 58.179696][ T5089] ? __vma_reservation_common+0x795/0x7d0 [ 58.185405][ T5089] ? do_error_trap+0x1dc/0x2c0 [ 58.190161][ T5089] ? __vma_reservation_common+0x795/0x7d0 [ 58.195877][ T5089] ? __pfx_do_error_trap+0x10/0x10 [ 58.200986][ T5089] ? handle_invalid_op+0x34/0x40 [ 58.205917][ T5089] ? __vma_reservation_common+0x795/0x7d0 [ 58.211625][ T5089] ? exc_invalid_op+0x38/0x50 [ 58.216293][ T5089] ? asm_exc_invalid_op+0x1a/0x20 [ 58.221308][ T5089] ? __vma_reservation_common+0x2a6/0x7d0 [ 58.227018][ T5089] ? __vma_reservation_common+0x794/0x7d0 [ 58.232751][ T5089] ? __vma_reservation_common+0x795/0x7d0 [ 58.238487][ T5089] ? __pfx___vma_reservation_common+0x10/0x10 [ 58.244556][ T5089] ? do_raw_spin_unlock+0x13c/0x8b0 [ 58.249759][ T5089] __unmap_hugepage_range+0x125d/0x2350 [ 58.255321][ T5089] ? __pfx___unmap_hugepage_range+0x10/0x10 [ 58.261212][ T5089] ? uprobe_munmap+0x183/0x410 [ 58.265971][ T5089] ? unmap_single_vma+0x22f/0x2b0 [ 58.270989][ T5089] unmap_vmas+0x3cc/0x5f0 [ 58.275320][ T5089] ? __pfx_unmap_vmas+0x10/0x10 [ 58.280168][ T5089] ? tlb_gather_mmu+0x24e/0x310 [ 58.285012][ T5089] unmap_region+0x1ec/0x350 [ 58.289510][ T5089] ? __pfx_unmap_region+0x10/0x10 [ 58.294527][ T5089] ? __pfx_mas_prev_range+0x10/0x10 [ 58.299721][ T5089] ? __mas_set_range+0x133/0x3c0 [ 58.304649][ T5089] do_vmi_align_munmap+0x1122/0x18c0 [ 58.309948][ T5089] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 58.315589][ T5089] ? mtree_range_walk+0x6fd/0x8e0 [ 58.320642][ T5089] ? mas_find+0x8c0/0xbb0 [ 58.324981][ T5089] do_vmi_munmap+0x24e/0x2d0 [ 58.329573][ T5089] mmap_region+0x72f/0x2070 [ 58.334090][ T5089] ? __lock_acquire+0x1346/0x1fd0 [ 58.339123][ T5089] ? __pfx_mmap_region+0x10/0x10 [ 58.344081][ T5089] ? mm_get_unmapped_area+0xa5/0xd0 [ 58.349306][ T5089] ? cap_mmap_addr+0x163/0x2c0 [ 58.354080][ T5089] ? __get_unmapped_area+0x2f0/0x360 [ 58.359394][ T5089] do_mmap+0x8ad/0xfa0 [ 58.363477][ T5089] ? __pfx_do_mmap+0x10/0x10 [ 58.368062][ T5089] ? __pfx_ima_file_mmap+0x10/0x10 [ 58.373951][ T5089] vm_mmap_pgoff+0x1dd/0x3d0 [ 58.378556][ T5089] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 58.383656][ T5089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.389981][ T5089] ? do_syscall_64+0x100/0x230 [ 58.394734][ T5089] ? ksys_mmap_pgoff+0xdf/0x720 [ 58.399583][ T5089] ? __x64_sys_mmap+0x7f/0x140 [ 58.404342][ T5089] do_syscall_64+0xf3/0x230 [ 58.408843][ T5089] ? clear_bhb_loop+0x35/0x90 [ 58.413510][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.419394][ T5089] RIP: 0033:0x7f6483066d39 [ 58.423800][ T5089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.443484][ T5089] RSP: 002b:00007fff7dc97c58 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 58.451890][ T5089] RAX: ffffffffffffffda RBX: 00007fff7dc97c80 RCX: 00007f6483066d39 [ 58.459854][ T5089] RDX: 0000000000000000 RSI: 00000000001fffff RDI: 0000000020000000 [ 58.467834][ T5089] RBP: 0000000000000001 R08: 00000000ffffffff R09: 0000000000000000 [ 58.475792][ T5089] R10: 0000000000028031 R11: 0000000000000246 R12: 0000000000000001 [ 58.483754][ T5089] R13: 431bde82d7b634db R14: 00007f64830b0035 R15: 0000000000000001 [ 58.491742][ T5089] [ 58.494759][ T5089] Modules linked in: [ 58.498772][ T5089] ---[ end trace 0000000000000000 ]--- [ 58.504266][ T5089] RIP: 0010:__vma_reservation_common+0x795/0x7d0 [ 58.510650][ T5089] Code: 21 65 8e 09 e8 8c a3 9e ff 90 0f 0b e8 84 a3 9e ff 90 0f 0b e8 7c a3 9e ff 90 0f 0b e8 74 a3 9e ff 90 0f 0b e8 6c a3 9e ff 90 <0f> 0b e8 64 a3 9e ff 90 0f 0b e8 5c a3 9e ff 90 0f 0b e8 54 a3 9e [ 58.530320][ T5089] RSP: 0018:ffffc900035ff1c0 EFLAGS: 00010293 [ 58.536403][ T5089] RAX: ffffffff81f77114 RBX: 0000000000000000 RCX: ffff88801ff90000 [ 58.544407][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.552418][ T5089] RBP: ffffc900035ff290 R08: ffffffff81f76c26 R09: fffff520006bfe28 [ 58.560420][ T5089] R10: dffffc0000000000 R11: fffff520006bfe28 R12: 0000000000000000 [ 58.568432][ T5089] R13: dffffc0000000000 R14: ffff88802ce84c08 R15: ffff88802ce84c00 [ 58.576398][ T5089] FS: 00005555950a7380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 58.585448][ T5089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.592065][ T5089] CR2: 00007f6483099c40 CR3: 00000000746f4000 CR4: 00000000003506f0 [ 58.600065][ T5089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.608065][ T5089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.616035][ T5089] Kernel panic - not syncing: Fatal exception [ 58.622305][ T5089] Kernel Offset: disabled [ 58.626616][ T5089] Rebooting in 86400 seconds..