./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2444303192 <...> Warning: Permanently added '10.128.1.157' (ED25519) to the list of known hosts. execve("./syz-executor2444303192", ["./syz-executor2444303192"], 0x7ffc27cde360 /* 10 vars */) = 0 brk(NULL) = 0x555556554000 brk(0x555556554d00) = 0x555556554d00 arch_prctl(ARCH_SET_FS, 0x555556554380) = 0 set_tid_address(0x555556554650) = 5034 set_robust_list(0x555556554660, 24) = 0 rseq(0x555556554ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2444303192", 4096) = 28 getrandom("\x2d\x00\x27\xb0\xb1\xed\x56\xd6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556554d00 brk(0x555556575d00) = 0x555556575d00 brk(0x555556576000) = 0x555556576000 mprotect(0x7fbc6b4a3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3 mmap(0x20000000, 4194304, PROT_WRITE|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE, 3, 0) = 0x20000000 [ 54.314512][ T5034] [ 54.317052][ T5034] ============================= [ 54.322024][ T5034] WARNING: suspicious RCU usage [ 54.326855][ T5034] 6.5.0-rc3-next-20230725-syzkaller #0 Not tainted [ 54.333482][ T5034] ----------------------------- [ 54.338325][ T5034] lib/maple_tree.c:839 suspicious rcu_dereference_check() usage! [ 54.346229][ T5034] [ 54.346229][ T5034] other info that might help us debug this: [ 54.346229][ T5034] [ 54.356633][ T5034] [ 54.356633][ T5034] rcu_scheduler_active = 2, debug_locks = 1 [ 54.364942][ T5034] 1 lock held by syz-executor244/5034: [ 54.370523][ T5034] #0: ffff88802b3f0148 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x201/0x950 [ 54.381009][ T5034] [ 54.381009][ T5034] stack backtrace: [ 54.386921][ T5034] CPU: 0 PID: 5034 Comm: syz-executor244 Not tainted 6.5.0-rc3-next-20230725-syzkaller #0 [ 54.396803][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 54.406853][ T5034] Call Trace: [ 54.410122][ T5034] [ 54.413041][ T5034] dump_stack_lvl+0x125/0x1b0 [ 54.417731][ T5034] lockdep_rcu_suspicious+0x20c/0x3b0 [ 54.423103][ T5034] mas_walk+0x55e/0x7d0 [ 54.427297][ T5034] find_mergeable_anon_vma+0x102/0x890 [ 54.432755][ T5034] ? vma_merge+0x2bd0/0x2bd0 [ 54.437342][ T5034] ? kmem_cache_alloc+0x34e/0x3b0 [ 54.442361][ T5034] ? reacquire_held_locks+0x4b0/0x4b0 [ 54.447749][ T5034] __anon_vma_prepare+0x7d/0x550 [ 54.452682][ T5034] do_wp_page+0x1bbf/0x2e10 [ 54.457185][ T5034] ? lock_sync+0x190/0x190 [ 54.461596][ T5034] ? finish_mkwrite_fault+0x300/0x300 [ 54.466968][ T5034] ? spin_bug+0x1d0/0x1d0 [ 54.471312][ T5034] __handle_mm_fault+0x1704/0x4030 [ 54.476443][ T5034] ? vm_iomap_memory+0x170/0x170 [ 54.481392][ T5034] ? mas_walk+0x423/0x7d0 [ 54.485755][ T5034] ? lock_mm_and_find_vma+0x780/0x780 [ 54.491189][ T5034] ? xfd_validate_state+0x5d/0x180 [ 54.496342][ T5034] handle_mm_fault+0x47a/0xa00 [ 54.501127][ T5034] do_user_addr_fault+0x2e7/0xfe0 [ 54.506168][ T5034] ? rcu_is_watching+0x12/0xb0 [ 54.510946][ T5034] exc_page_fault+0x5c/0xd0 [ 54.515466][ T5034] asm_exc_page_fault+0x26/0x30 [ 54.520356][ T5034] RIP: 0033:0x7fbc6b3fd6e5 [ 54.524796][ T5034] Code: 6a 00 41 b8 12 10 01 00 be 00 00 00 20 4c 8b 0d 21 9a 0a 00 bf 09 00 00 00 e8 37 2a 03 00 b9 00 04 00 20 ba 46 ae 20 40 31 c0 04 25 00 04 00 20 00 00 00 00 be ff ff ff ff bf 10 00 00 00 c7 [ 54.544426][ T5034] RSP: 002b:00007ffd68c881f0 EFLAGS: 00010246 [ 54.550509][ T5034] RAX: 0000000000000000 RBX: 00007ffd68c883c8 RCX: 0000000020000400 [ 54.558486][ T5034] RDX: 000000004020ae46 RSI: 0000000000400000 RDI: 0000000020000000 [ 54.566466][ T5034] RBP: 00007fbc6b4a3610 R08: 0000000000000003 R09: 0000000000000000 [ 54.574446][ T5034] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001 [ 54.582425][ T5034] R13: 00007ffd68c883b8 R14: 0000000000000001 R15: 0000000000000001 [ 54.590425][ T5034] [ 54.594625][ T5034] [ 54.597003][ T5034] ============================= [ 54.601895][ T5034] WARNING: suspicious RCU usage [ 54.606737][ T5034] 6.5.0-rc3-next-20230725-syzkaller #0 Not tainted [ 54.613296][ T5034] ----------------------------- [ 54.618144][ T5034] lib/maple_tree.c:795 suspicious rcu_dereference_check() usage! [ 54.625993][ T5034] [ 54.625993][ T5034] other info that might help us debug this: [ 54.625993][ T5034] [ 54.636269][ T5034] [ 54.636269][ T5034] rcu_scheduler_active = 2, debug_locks = 1 [ 54.644376][ T5034] 1 lock held by syz-executor244/5034: [ 54.649880][ T5034] #0: ffff88802b3f0148 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x201/0x950 [ 54.660236][ T5034] [ 54.660236][ T5034] stack backtrace: [ 54.666146][ T5034] CPU: 0 PID: 5034 Comm: syz-executor244 Not tainted 6.5.0-rc3-next-20230725-syzkaller #0 [ 54.676060][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 54.686143][ T5034] Call Trace: [ 54.689445][ T5034] [ 54.692371][ T5034] dump_stack_lvl+0x125/0x1b0 [ 54.697079][ T5034] lockdep_rcu_suspicious+0x20c/0x3b0 [ 54.702458][ T5034] mtree_range_walk+0x6c5/0x9b0 [ 54.707313][ T5034] mas_walk+0x389/0x7d0 [ 54.711465][ T5034] find_mergeable_anon_vma+0x102/0x890 [ 54.716921][ T5034] ? vma_merge+0x2bd0/0x2bd0 [ 54.721521][ T5034] ? kmem_cache_alloc+0x34e/0x3b0 [ 54.726546][ T5034] ? reacquire_held_locks+0x4b0/0x4b0 [ 54.732041][ T5034] __anon_vma_prepare+0x7d/0x550 [ 54.736987][ T5034] do_wp_page+0x1bbf/0x2e10 [ 54.741501][ T5034] ? lock_sync+0x190/0x190 [ 54.745917][ T5034] ? finish_mkwrite_fault+0x300/0x300 [ 54.751292][ T5034] ? spin_bug+0x1d0/0x1d0 [ 54.760658][ T5034] __handle_mm_fault+0x1704/0x4030 [ 54.765764][ T5034] ? vm_iomap_memory+0x170/0x170 [ 54.770692][ T5034] ? mas_walk+0x423/0x7d0 [ 54.775020][ T5034] ? lock_mm_and_find_vma+0x780/0x780 [ 54.780424][ T5034] ? xfd_validate_state+0x5d/0x180 [ 54.785580][ T5034] handle_mm_fault+0x47a/0xa00 [ 54.790368][ T5034] do_user_addr_fault+0x2e7/0xfe0 [ 54.795392][ T5034] ? rcu_is_watching+0x12/0xb0 [ 54.800156][ T5034] exc_page_fault+0x5c/0xd0 [ 54.804677][ T5034] asm_exc_page_fault+0x26/0x30 [ 54.809526][ T5034] RIP: 0033:0x7fbc6b3fd6e5 [ 54.813933][ T5034] Code: 6a 00 41 b8 12 10 01 00 be 00 00 00 20 4c 8b 0d 21 9a 0a 00 bf 09 00 00 00 e8 37 2a 03 00 b9 00 04 00 20 ba 46 ae 20 40 31 c0 04 25 00 04 00 20 00 00 00 00 be ff ff ff ff bf 10 00 00 00 c7 [ 54.833534][ T5034] RSP: 002b:00007ffd68c881f0 EFLAGS: 00010246 [ 54.839594][ T5034] RAX: 0000000000000000 RBX: 00007ffd68c883c8 RCX: 0000000020000400 [ 54.847557][ T5034] RDX: 000000004020ae46 RSI: 0000000000400000 RDI: 0000000020000000 [ 54.855533][ T5034] RBP: 00007fbc6b4a3610 R08: 0000000000000003 R09: 0000000000000000 ioctl(-1, KVM_SET_USER_MEMORY_REGION, 0x20000400) = -1 EBADF (Bad file descriptor) exit_group(0) = ? +++ exited with 0 +++ [ 54.863512][ T5034] R10: 000000000001101