./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3493103856 <...> DUID 00:04:ae:1e:d5:49:b7:3c:3f:84:b3:e9:d7:e4:a5:00:02:90 forked to background, child pid 3185 [ 27.286162][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.303823][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.74' (ECDSA) to the list of known hosts. execve("./syz-executor3493103856", ["./syz-executor3493103856"], 0x7ffcc4d55b50 /* 10 vars */) = 0 brk(NULL) = 0x555557187000 brk(0x555557187c40) = 0x555557187c40 arch_prctl(ARCH_SET_FS, 0x555557187300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3493103856", 4096) = 28 brk(0x5555571a8c40) = 0x5555571a8c40 brk(0x5555571a9000) = 0x5555571a9000 mprotect(0x7fbb240e6000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20000000, 16506880, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 userfaultfd(UFFD_USER_MODE_ONLY|O_CLOEXEC) = 3 ioctl(3, UFFDIO_API, 0x20000000) = 0 ioctl(3, UFFDIO_REGISTER, 0x20000080) = 0 syzkaller login: [ 49.784772][ T3613] ------------[ cut here ]------------ [ 49.790475][ T3613] WARNING: CPU: 1 PID: 3613 at include/linux/swapops.h:323 change_protection+0x16e9/0x4280 [ 49.800807][ T3613] Modules linked in: [ 49.804775][ T3613] CPU: 1 PID: 3613 Comm: syz-executor349 Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 49.815247][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 49.825353][ T3613] RIP: 0010:change_protection+0x16e9/0x4280 [ 49.831272][ T3613] Code: ff 48 8b 84 24 90 00 00 00 80 38 00 0f 85 25 29 00 00 48 8b 44 24 10 48 83 b8 90 00 00 00 00 0f 84 8f f9 ff ff e8 47 66 c3 ff <0f> 0b 48 ba 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 49.850934][ T3613] RSP: 0018:ffffc900037af968 EFLAGS: 00010293 [ 49.857047][ T3613] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 49.865085][ T3613] RDX: ffff88801fe15880 RSI: ffffffff81b8a1d9 RDI: 0000000000000007 [ 49.873116][ T3613] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 49.881116][ T3613] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 49.889156][ T3613] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 49.897202][ T3613] FS: 0000555557187300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 49.906188][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.912809][ T3613] CR2: 00000000005d84c8 CR3: 000000001cc95000 CR4: 00000000003506e0 [ 49.920774][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.928784][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.936796][ T3613] Call Trace: [ 49.940074][ T3613] [ 49.943080][ T3613] ? prot_none_hugetlb_entry+0x100/0x100 [ 49.948742][ T3613] ? lock_release+0x780/0x780 [ 49.953477][ T3613] uffd_wp_range+0xf0/0x180 [ 49.958090][ T3613] ? mcopy_continue+0x16d0/0x16d0 [ 49.963181][ T3613] ? vmacache_find+0x62/0x330 [ 49.967879][ T3613] mwriteprotect_range+0x2ea/0x420 [ 49.973046][ T3613] userfaultfd_ioctl+0x438/0x43a0 [ 49.978126][ T3613] ? do_vfs_ioctl+0x132/0x15c0 [ 49.982943][ T3613] ? vfs_fileattr_set+0xbe0/0xbe0 [ 49.987983][ T3613] ? userfaultfd_release+0x660/0x660 [ 49.993350][ T3613] ? find_held_lock+0x2d/0x110 [ 49.998144][ T3613] ? calibrate_delay+0x270/0x1120 [ 50.003277][ T3613] ? lock_downgrade+0x6e0/0x6e0 [ 50.008163][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.013435][ T3613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.018397][ T3613] ? userfaultfd_release+0x660/0x660 [ 50.023734][ T3613] __x64_sys_ioctl+0x193/0x200 [ 50.028519][ T3613] do_syscall_64+0x35/0xb0 [ 50.032995][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.038913][ T3613] RIP: 0033:0x7fbb24079bb9 [ 50.043369][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.063202][ T3613] RSP: 002b:00007ffcf2adea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.071664][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb24079bb9 [ 50.079648][ T3613] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 50.087665][ T3613] RBP: 00007fbb2403dd60 R08: 0000000000000000 R09: 0000000000000000 [ 50.095676][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb2403ddf0 [ 50.103680][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.111700][ T3613] [ 50.114713][ T3613] Kernel panic - not syncing: panic_on_warn set ... [ 50.121286][ T3613] CPU: 1 PID: 3613 Comm: syz-executor349 Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 50.131688][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 50.141747][ T3613] Call Trace: [ 50.145037][ T3613] [ 50.147971][ T3613] dump_stack_lvl+0xcd/0x134 [ 50.152581][ T3613] panic+0x2c8/0x627 [ 50.156497][ T3613] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.162500][ T3613] ? __warn.cold+0x248/0x2c4 [ 50.167103][ T3613] ? change_protection+0x16e9/0x4280 [ 50.172408][ T3613] __warn.cold+0x259/0x2c4 [ 50.176838][ T3613] ? change_protection+0x16e9/0x4280 [ 50.182144][ T3613] report_bug+0x1bc/0x210 [ 50.186493][ T3613] handle_bug+0x3c/0x60 [ 50.190660][ T3613] exc_invalid_op+0x14/0x40 [ 50.195174][ T3613] asm_exc_invalid_op+0x16/0x20 [ 50.200032][ T3613] RIP: 0010:change_protection+0x16e9/0x4280 [ 50.205933][ T3613] Code: ff 48 8b 84 24 90 00 00 00 80 38 00 0f 85 25 29 00 00 48 8b 44 24 10 48 83 b8 90 00 00 00 00 0f 84 8f f9 ff ff e8 47 66 c3 ff <0f> 0b 48 ba 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 50.225549][ T3613] RSP: 0018:ffffc900037af968 EFLAGS: 00010293 [ 50.231619][ T3613] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 50.239594][ T3613] RDX: ffff88801fe15880 RSI: ffffffff81b8a1d9 RDI: 0000000000000007 [ 50.247574][ T3613] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 50.255555][ T3613] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 50.263527][ T3613] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 50.271515][ T3613] ? change_protection+0x16e9/0x4280 [ 50.276825][ T3613] ? change_protection+0x16e9/0x4280 [ 50.282146][ T3613] ? prot_none_hugetlb_entry+0x100/0x100 [ 50.287819][ T3613] ? lock_release+0x780/0x780 [ 50.292507][ T3613] uffd_wp_range+0xf0/0x180 [ 50.297020][ T3613] ? mcopy_continue+0x16d0/0x16d0 [ 50.302063][ T3613] ? vmacache_find+0x62/0x330 [ 50.306780][ T3613] mwriteprotect_range+0x2ea/0x420 [ 50.311903][ T3613] userfaultfd_ioctl+0x438/0x43a0 [ 50.316943][ T3613] ? do_vfs_ioctl+0x132/0x15c0 [ 50.321716][ T3613] ? vfs_fileattr_set+0xbe0/0xbe0 [ 50.326749][ T3613] ? userfaultfd_release+0x660/0x660 [ 50.332051][ T3613] ? find_held_lock+0x2d/0x110 [ 50.336826][ T3613] ? calibrate_delay+0x270/0x1120 [ 50.341897][ T3613] ? lock_downgrade+0x6e0/0x6e0 [ 50.346758][ T3613] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.351964][ T3613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.356911][ T3613] ? userfaultfd_release+0x660/0x660 [ 50.362213][ T3613] __x64_sys_ioctl+0x193/0x200 [ 50.366994][ T3613] do_syscall_64+0x35/0xb0 [ 50.371420][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.377323][ T3613] RIP: 0033:0x7fbb24079bb9 [ 50.381742][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.401361][ T3613] RSP: 002b:00007ffcf2adea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.409782][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb24079bb9 [ 50.417759][ T3613] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 50.425758][ T3613] RBP: 00007fbb2403dd60 R08: 0000000000000000 R09: 0000000000000000 [ 50.433733][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbb2403ddf0 [ 50.441708][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.449703][ T3613] [ 50.453031][ T3613] Kernel Offset: disabled [ 50.457442][ T3613] Rebooting in 86400 seconds..