./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3594622368 <...> DUID 00:04:83:15:3d:b3:f9:44:11:d6:e6:e1:d9:1f:49:4d:f4:66 forked to background, child pid 3188 [ 26.698418][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.711423][ T3189] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.123' (ECDSA) to the list of known hosts. execve("./syz-executor3594622368", ["./syz-executor3594622368"], 0x7ffec3fda450 /* 10 vars */) = 0 brk(NULL) = 0x555555723000 brk(0x555555723c40) = 0x555555723c40 arch_prctl(ARCH_SET_FS, 0x555555723300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3594622368", 4096) = 28 brk(0x555555744c40) = 0x555555744c40 brk(0x555555745000) = 0x555555745000 mprotect(0x7f7c0e1c7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20000000, 16506880, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 userfaultfd(UFFD_USER_MODE_ONLY|O_CLOEXEC) = 3 ioctl(3, UFFDIO_API, 0x20000000) = 0 ioctl(3, UFFDIO_REGISTER, 0x20000080) = 0 syzkaller login: [ 49.723257][ T3609] ------------[ cut here ]------------ [ 49.729082][ T3609] WARNING: CPU: 0 PID: 3609 at include/linux/swapops.h:323 change_protection+0x16e9/0x4280 [ 49.739139][ T3609] Modules linked in: [ 49.743026][ T3609] CPU: 0 PID: 3609 Comm: syz-executor359 Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 49.753472][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 49.763596][ T3609] RIP: 0010:change_protection+0x16e9/0x4280 [ 49.769544][ T3609] Code: ff 48 8b 84 24 90 00 00 00 80 38 00 0f 85 25 29 00 00 48 8b 44 24 10 48 83 b8 90 00 00 00 00 0f 84 8f f9 ff ff e8 47 66 c3 ff <0f> 0b 48 ba 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 49.789228][ T3609] RSP: 0018:ffffc900038ef968 EFLAGS: 00010293 [ 49.795329][ T3609] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 49.803441][ T3609] RDX: ffff888025598000 RSI: ffffffff81b8a1d9 RDI: 0000000000000007 [ 49.811470][ T3609] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 49.819501][ T3609] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 49.827573][ T3609] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 49.835552][ T3609] FS: 0000555555723300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 49.844523][ T3609] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.851168][ T3609] CR2: 00000000005d84c8 CR3: 0000000072e1b000 CR4: 00000000003506f0 [ 49.859179][ T3609] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.867289][ T3609] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.875342][ T3609] Call Trace: [ 49.878708][ T3609] [ 49.881665][ T3609] ? prot_none_hugetlb_entry+0x100/0x100 [ 49.887382][ T3609] ? lock_release+0x780/0x780 [ 49.892075][ T3609] uffd_wp_range+0xf0/0x180 [ 49.896574][ T3609] ? mcopy_continue+0x16d0/0x16d0 [ 49.901671][ T3609] ? vmacache_find+0x62/0x330 [ 49.906365][ T3609] mwriteprotect_range+0x2ea/0x420 [ 49.911607][ T3609] userfaultfd_ioctl+0x438/0x43a0 [ 49.916706][ T3609] ? do_vfs_ioctl+0x132/0x15c0 [ 49.921483][ T3609] ? vfs_fileattr_set+0xbe0/0xbe0 [ 49.926520][ T3609] ? userfaultfd_release+0x660/0x660 [ 49.931933][ T3609] ? find_held_lock+0x2d/0x110 [ 49.936753][ T3609] ? calibrate_delay+0x270/0x1120 [ 49.941788][ T3609] ? lock_downgrade+0x6e0/0x6e0 [ 49.946741][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 49.952073][ T3609] ? bpf_lsm_file_ioctl+0x5/0x10 [ 49.957087][ T3609] ? userfaultfd_release+0x660/0x660 [ 49.962402][ T3609] __x64_sys_ioctl+0x193/0x200 [ 49.967268][ T3609] do_syscall_64+0x35/0xb0 [ 49.971719][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 49.977662][ T3609] RIP: 0033:0x7f7c0e15abb9 [ 49.982101][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.001775][ T3609] RSP: 002b:00007ffe016fef98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.010236][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7c0e15abb9 [ 50.018261][ T3609] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 50.026330][ T3609] RBP: 00007f7c0e11ed60 R08: 0000000000000000 R09: 0000000000000000 [ 50.034531][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c0e11edf0 [ 50.042560][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.050624][ T3609] [ 50.053656][ T3609] Kernel panic - not syncing: panic_on_warn set ... [ 50.060231][ T3609] CPU: 0 PID: 3609 Comm: syz-executor359 Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 50.070639][ T3609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 50.080685][ T3609] Call Trace: [ 50.083958][ T3609] [ 50.086883][ T3609] dump_stack_lvl+0xcd/0x134 [ 50.091477][ T3609] panic+0x2c8/0x627 [ 50.095367][ T3609] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.101344][ T3609] ? __warn.cold+0x248/0x2c4 [ 50.105933][ T3609] ? change_protection+0x16e9/0x4280 [ 50.111222][ T3609] __warn.cold+0x259/0x2c4 [ 50.116173][ T3609] ? change_protection+0x16e9/0x4280 [ 50.121478][ T3609] report_bug+0x1bc/0x210 [ 50.125823][ T3609] handle_bug+0x3c/0x60 [ 50.129988][ T3609] exc_invalid_op+0x14/0x40 [ 50.134501][ T3609] asm_exc_invalid_op+0x16/0x20 [ 50.139358][ T3609] RIP: 0010:change_protection+0x16e9/0x4280 [ 50.145262][ T3609] Code: ff 48 8b 84 24 90 00 00 00 80 38 00 0f 85 25 29 00 00 48 8b 44 24 10 48 83 b8 90 00 00 00 00 0f 84 8f f9 ff ff e8 47 66 c3 ff <0f> 0b 48 ba 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 50.164877][ T3609] RSP: 0018:ffffc900038ef968 EFLAGS: 00010293 [ 50.170954][ T3609] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 50.179029][ T3609] RDX: ffff888025598000 RSI: ffffffff81b8a1d9 RDI: 0000000000000007 [ 50.187020][ T3609] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 50.195004][ T3609] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 50.202984][ T3609] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 50.211094][ T3609] ? change_protection+0x16e9/0x4280 [ 50.216406][ T3609] ? change_protection+0x16e9/0x4280 [ 50.221724][ T3609] ? prot_none_hugetlb_entry+0x100/0x100 [ 50.227382][ T3609] ? lock_release+0x780/0x780 [ 50.232075][ T3609] uffd_wp_range+0xf0/0x180 [ 50.236648][ T3609] ? mcopy_continue+0x16d0/0x16d0 [ 50.241692][ T3609] ? vmacache_find+0x62/0x330 [ 50.246390][ T3609] mwriteprotect_range+0x2ea/0x420 [ 50.251514][ T3609] userfaultfd_ioctl+0x438/0x43a0 [ 50.256642][ T3609] ? do_vfs_ioctl+0x132/0x15c0 [ 50.261415][ T3609] ? vfs_fileattr_set+0xbe0/0xbe0 [ 50.266622][ T3609] ? userfaultfd_release+0x660/0x660 [ 50.271924][ T3609] ? find_held_lock+0x2d/0x110 [ 50.276699][ T3609] ? calibrate_delay+0x270/0x1120 [ 50.281740][ T3609] ? lock_downgrade+0x6e0/0x6e0 [ 50.286602][ T3609] ? _raw_spin_unlock_irq+0x1f/0x40 [ 50.291812][ T3609] ? bpf_lsm_file_ioctl+0x5/0x10 [ 50.296765][ T3609] ? userfaultfd_release+0x660/0x660 [ 50.302408][ T3609] __x64_sys_ioctl+0x193/0x200 [ 50.307182][ T3609] do_syscall_64+0x35/0xb0 [ 50.311608][ T3609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.317511][ T3609] RIP: 0033:0x7f7c0e15abb9 [ 50.321932][ T3609] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.341719][ T3609] RSP: 002b:00007ffe016fef98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.350138][ T3609] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7c0e15abb9 [ 50.358123][ T3609] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 50.366099][ T3609] RBP: 00007f7c0e11ed60 R08: 0000000000000000 R09: 0000000000000000 [ 50.374081][ T3609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7c0e11edf0 [ 50.383703][ T3609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.391693][ T3609] [ 50.395103][ T3609] Kernel Offset: disabled [ 50.399509][ T3609] Rebooting in 86400 seconds..