Warning: Permanently added '[localhost]:33529' (ED25519) to the list of known hosts. 2025/11/13 13:42:23 parsed 1 programs syzkaller login: [ 84.703604][ T5311] cgroup: Unknown subsys name 'net' [ 84.772997][ T5311] cgroup: Unknown subsys name 'cpuset' [ 84.777849][ T5311] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.435608][ T5311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.076560][ T5324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.936738][ T45] cfg80211: failed to load regulatory.db [ 92.022312][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 92.112916][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.117235][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.129668][ T5355] bridge_slave_0: entered allmulticast mode [ 92.133805][ T5355] bridge_slave_0: entered promiscuous mode [ 92.140817][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.143858][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.146833][ T5355] bridge_slave_1: entered allmulticast mode [ 92.161022][ T5355] bridge_slave_1: entered promiscuous mode [ 92.206945][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.222059][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.271047][ T5355] team0: Port device team_slave_0 added [ 92.280478][ T5355] team0: Port device team_slave_1 added [ 92.325426][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.328285][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.357599][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.364265][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.367282][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.379033][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.413716][ T5355] hsr_slave_0: entered promiscuous mode [ 92.417061][ T5355] hsr_slave_1: entered promiscuous mode [ 92.673914][ T5355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.692624][ T5355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.702564][ T5355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.720448][ T5355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.833102][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.850854][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.859027][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.862105][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.874911][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.877973][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.173403][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.228669][ T5355] veth0_vlan: entered promiscuous mode [ 93.248081][ T5355] veth1_vlan: entered promiscuous mode [ 93.292435][ T5355] veth0_macvtap: entered promiscuous mode [ 93.303354][ T5355] veth1_macvtap: entered promiscuous mode [ 93.340612][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.351794][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.364181][ T1042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.373194][ T1042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.376731][ T1042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.385037][ T1042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.545459][ T1042] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.590630][ T1042] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.635921][ T1042] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.677994][ T1042] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.884326][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.887768][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.926555][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.936081][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.917512][ T1042] bridge_slave_1: left allmulticast mode [ 95.929821][ T1042] bridge_slave_1: left promiscuous mode [ 95.932770][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.960750][ T1042] bridge_slave_0: left allmulticast mode [ 95.963270][ T1042] bridge_slave_0: left promiscuous mode [ 95.966163][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.381509][ T1042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.387952][ T1042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.393514][ T1042] bond0 (unregistering): Released all slaves [ 96.507714][ T1042] hsr_slave_0: left promiscuous mode [ 96.550267][ T1042] hsr_slave_1: left promiscuous mode [ 96.553356][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.556702][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.592478][ T1042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.595537][ T1042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.632942][ T1042] veth1_macvtap: left promiscuous mode [ 96.635358][ T1042] veth0_macvtap: left promiscuous mode [ 96.637678][ T1042] veth1_vlan: left promiscuous mode [ 96.659489][ T1042] veth0_vlan: left promiscuous mode [ 97.175964][ T1042] team0 (unregistering): Port device team_slave_1 removed [ 97.195660][ T1042] team0 (unregistering): Port device team_slave_0 removed [ 97.905562][ T5429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.911484][ T5429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.914871][ T5429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.918761][ T5429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.922996][ T5429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/11/13 13:42:41 executed programs: 0 [ 99.693473][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.697289][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.700885][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.704430][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.707951][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.910911][ T5450] chnl_net:caif_netlink_parms(): no params data found [ 99.969802][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.972873][ T5450] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.975893][ T5450] bridge_slave_0: entered allmulticast mode [ 99.980231][ T5450] bridge_slave_0: entered promiscuous mode [ 99.984670][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.987502][ T5450] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.991040][ T5450] bridge_slave_1: entered allmulticast mode [ 99.994810][ T5450] bridge_slave_1: entered promiscuous mode [ 100.017186][ T5450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.023598][ T5450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.046297][ T5450] team0: Port device team_slave_0 added [ 100.051420][ T5450] team0: Port device team_slave_1 added [ 100.072138][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.074956][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.086563][ T5450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.093954][ T5450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.097554][ T5450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.110695][ T5450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.143327][ T5450] hsr_slave_0: entered promiscuous mode [ 100.146361][ T5450] hsr_slave_1: entered promiscuous mode [ 100.586777][ T5450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.611026][ T5450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.621996][ T5450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.632437][ T5450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.686117][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.689414][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.693342][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.696550][ T5450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.797575][ T5450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.811086][ T1042] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.814877][ T1042] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.843388][ T5450] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.852391][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.855521][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.874132][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.877099][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.192291][ T5450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.272156][ T5450] veth0_vlan: entered promiscuous mode [ 101.291279][ T5450] veth1_vlan: entered promiscuous mode [ 101.332229][ T5450] veth0_macvtap: entered promiscuous mode [ 101.353774][ T5450] veth1_macvtap: entered promiscuous mode [ 101.378698][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.395619][ T5450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.428454][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.433263][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.436899][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.455850][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.556433][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.569660][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.612275][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.617607][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.714235][ T5494] loop0: detected capacity change from 0 to 16 [ 101.773115][ T5429] Bluetooth: hci0: command tx timeout [ 102.044391][ T5494] erofs (device loop0): mounted with root inode @ nid 36. [ 102.072649][ T5494] ------------[ cut here ]------------ [ 102.075217][ T5494] WARNING: CPU: 0 PID: 5494 at fs/dax.c:224 get_next_unlocked_entry+0x329/0x340 [ 102.079057][ T5494] Modules linked in: [ 102.081153][ T5494] CPU: 0 UID: 0 PID: 5494 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.085923][ T5494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.090621][ T5494] RIP: 0010:get_next_unlocked_entry+0x329/0x340 [ 102.093260][ T5494] Code: 45 1d 10 48 3b 84 24 c0 00 00 00 75 22 4c 89 e8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 8a f9 08 cc e8 08 59 6e ff 90 <0f> 0b 90 eb a0 e8 6d a6 f6 08 66 66 66 66 2e 0f 1f 84 00 00 00 00 [ 102.101484][ T5494] RSP: 0018:ffffc90002afe8a0 EFLAGS: 00010093 [ 102.104115][ T5494] RAX: ffffffff8251ba68 RBX: 1ffff9200055fd9c RCX: ffff888000e22480 [ 102.107619][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.110476][ T5494] RBP: ffffc90002afe9b0 R08: ffffc90002afe937 R09: 0000000000000000 [ 102.113874][ T5494] R10: ffffc90002afe900 R11: fffff5200055fd27 R12: ffffc90002afe918 [ 102.117056][ T5494] R13: ffffea0000437ac0 R14: ffffc90002afe900 R15: dffffc0000000000 [ 102.120956][ T5494] FS: 000055558d07b500(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000 [ 102.124724][ T5494] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.127329][ T5494] CR2: 00007fe1ac985c38 CR3: 0000000058e42000 CR4: 0000000000352ef0 [ 102.130427][ T5494] Call Trace: [ 102.131804][ T5494] [ 102.133060][ T5494] ? __pfx_get_next_unlocked_entry+0x10/0x10 [ 102.135541][ T5494] ? __pfx_wake_exceptional_entry_func+0x10/0x10 [ 102.138343][ T5494] ? __lock_acquire+0xab9/0xd20 [ 102.140543][ T5494] grab_mapping_entry+0x176/0x660 [ 102.142857][ T5494] ? __pfx_grab_mapping_entry+0x10/0x10 [ 102.145247][ T5494] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 102.147886][ T5494] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.150235][ T5494] dax_iomap_fault+0x8ab/0x18d0 [ 102.152307][ T5494] ? stack_depot_save_flags+0x41b/0x860 [ 102.154670][ T5494] ? __pfx_dax_iomap_fault+0x10/0x10 [ 102.157005][ T5494] ? kasan_save_track+0x4f/0x80 [ 102.159131][ T5494] ? kasan_save_track+0x3e/0x80 [ 102.161272][ T5494] ? __kasan_slab_alloc+0x6c/0x80 [ 102.163482][ T5494] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 102.166062][ T5494] ? ptlock_alloc+0x20/0x70 [ 102.168140][ T5494] ? pte_alloc_one+0x7a/0x310 [ 102.170308][ T5494] ? __do_fault+0xd1/0x390 [ 102.172339][ T5494] ? __handle_mm_fault+0x1719/0x5400 [ 102.174679][ T5494] ? handle_mm_fault+0x40a/0x8e0 [ 102.176910][ T5494] ? __get_user_pages+0x165c/0x2a00 [ 102.179221][ T5494] ? get_user_pages_remote+0x2f1/0xac0 [ 102.181512][ T5494] ? uprobe_write+0x1b6/0x2160 [ 102.183584][ T5494] ? uprobe_write_opcode+0xa8/0xf0 [ 102.185794][ T5494] ? set_swbp+0x121/0x290 [ 102.187505][ T5494] ? install_breakpoint+0x451/0x5a0 [ 102.189770][ T5494] ? register_for_each_vma+0xabb/0xc30 [ 102.191992][ T5494] ? uprobe_apply+0xfb/0x270 [ 102.193919][ T5494] ? trace_uprobe_register+0x4df/0x560 [ 102.196111][ T5494] ? perf_trace_event_init+0x19a/0x9d0 [ 102.198491][ T5494] ? perf_uprobe_init+0x12e/0x1a0 [ 102.200844][ T5494] ? perf_uprobe_event_init+0xe6/0x180 [ 102.203306][ T5494] ? perf_try_init_event+0x17f/0x870 [ 102.205678][ T5494] ? perf_event_alloc+0x133e/0x2be0 [ 102.207841][ T5494] ? __se_sys_perf_event_open+0x772/0x1d70 [ 102.210441][ T5494] ? do_syscall_64+0xfa/0xfa0 [ 102.212694][ T5494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.215292][ T5494] ? mod_node_state+0xea/0x160 [ 102.217330][ T5494] ? pte_alloc_one+0x1f9/0x310 [ 102.219353][ T5494] __do_fault+0x138/0x390 [ 102.221241][ T5494] __handle_mm_fault+0x1719/0x5400 [ 102.223436][ T5494] ? __pfx___handle_mm_fault+0x10/0x10 [ 102.225899][ T5494] ? __pfx___might_resched+0x10/0x10 [ 102.228006][ T5494] handle_mm_fault+0x40a/0x8e0 [ 102.230155][ T5494] __get_user_pages+0x165c/0x2a00 [ 102.232433][ T5494] get_user_pages_remote+0x2f1/0xac0 [ 102.234707][ T5494] ? iomap_iter_advance+0x282/0x2f0 [ 102.236866][ T5494] ? __pfx_get_user_pages_remote+0x10/0x10 [ 102.239349][ T5494] ? insn_get_prefixes+0xe6e/0x1ca0 [ 102.241538][ T5494] uprobe_write+0x1b6/0x2160 [ 102.243587][ T5494] ? insn_get_opcode+0xb12/0x11b0 [ 102.245867][ T5494] ? __pfx_verify_opcode+0x10/0x10 [ 102.248237][ T5494] ? __pfx_uprobe_write+0x10/0x10 [ 102.250816][ T5494] ? insn_get_immediate+0x32a/0x1280 [ 102.253388][ T5494] ? insn_get_modrm+0x57/0x7d0 [ 102.255424][ T5494] uprobe_write_opcode+0xa8/0xf0 [ 102.257622][ T5494] ? insn_rip_relative+0xc6/0x130 [ 102.259885][ T5494] ? __pfx_uprobe_write_opcode+0x10/0x10 [ 102.262299][ T5494] ? arch_uprobe_analyze_insn+0xc77/0x1400 [ 102.264782][ T5494] set_swbp+0x121/0x290 [ 102.266604][ T5494] ? __pfx_set_swbp+0x10/0x10 [ 102.268781][ T5494] install_breakpoint+0x451/0x5a0 [ 102.270935][ T5494] register_for_each_vma+0xabb/0xc30 [ 102.273231][ T5494] ? uprobe_apply+0x75/0x270 [ 102.275170][ T5494] uprobe_apply+0xfb/0x270 [ 102.277133][ T5494] trace_uprobe_register+0x4df/0x560 [ 102.279394][ T5494] perf_trace_event_init+0x19a/0x9d0 [ 102.281762][ T5494] perf_uprobe_init+0x12e/0x1a0 [ 102.283953][ T5494] perf_uprobe_event_init+0xe6/0x180 [ 102.286327][ T5494] perf_try_init_event+0x17f/0x870 [ 102.288659][ T5494] ? perf_event_alloc+0xf61/0x2be0 [ 102.291017][ T5494] perf_event_alloc+0x133e/0x2be0 [ 102.293230][ T5494] ? perf_event_alloc+0xf61/0x2be0 [ 102.295568][ T5494] ? __pfx_perf_event_alloc+0x10/0x10 [ 102.297749][ T5494] ? find_lively_task_by_vpid+0x19/0x290 [ 102.300287][ T5494] ? find_lively_task_by_vpid+0x19/0x290 [ 102.302804][ T5494] ? find_lively_task_by_vpid+0x19/0x290 [ 102.305130][ T5494] __se_sys_perf_event_open+0x772/0x1d70 [ 102.307471][ T5494] ? up_write+0x1c4/0x420 [ 102.309343][ T5494] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 102.311974][ T5494] ? __pfx___se_sys_futex+0x10/0x10 [ 102.314246][ T5494] ? fput+0xa0/0xd0 [ 102.315778][ T5494] ? do_syscall_64+0xbe/0xfa0 [ 102.317807][ T5494] ? __x64_sys_perf_event_open+0x20/0xc0 [ 102.319819][ T5494] do_syscall_64+0xfa/0xfa0 [ 102.321577][ T5494] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.323574][ T5494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.326140][ T5494] ? clear_bhb_loop+0x60/0xb0 [ 102.328157][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.330392][ T5494] RIP: 0033:0x7fc5a378f6c9 [ 102.332207][ T5494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.340574][ T5494] RSP: 002b:00007fffd03cc078 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 102.344296][ T5494] RAX: ffffffffffffffda RBX: 00007fc5a39e5fa0 RCX: 00007fc5a378f6c9 [ 102.347576][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 102.350958][ T5494] RBP: 00007fc5a3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.354196][ T5494] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 102.357623][ T5494] R13: 00007fc5a39e5fa0 R14: 00007fc5a39e5fa0 R15: 0000000000000005 [ 102.360949][ T5494] [ 102.362332][ T5494] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 102.365632][ T5494] CPU: 0 UID: 0 PID: 5494 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 102.369521][ T5494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 102.374237][ T5494] Call Trace: [ 102.375700][ T5494] [ 102.376989][ T5494] dump_stack_lvl+0x99/0x250 [ 102.378953][ T5494] ? __asan_memcpy+0x40/0x70 [ 102.380933][ T5494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.383080][ T5494] ? __pfx__printk+0x10/0x10 [ 102.384979][ T5494] vpanic+0x237/0x6d0 [ 102.386626][ T5494] ? __pfx_vpanic+0x10/0x10 [ 102.388506][ T5494] panic+0xb9/0xc0 [ 102.390196][ T5494] ? __pfx_panic+0x10/0x10 [ 102.392153][ T5494] __warn+0x31b/0x4b0 [ 102.393997][ T5494] ? get_next_unlocked_entry+0x329/0x340 [ 102.396382][ T5494] ? get_next_unlocked_entry+0x329/0x340 [ 102.398908][ T5494] report_bug+0x2be/0x4f0 [ 102.400983][ T5494] ? get_next_unlocked_entry+0x329/0x340 [ 102.403351][ T5494] ? get_next_unlocked_entry+0x329/0x340 [ 102.405618][ T5494] ? get_next_unlocked_entry+0x32b/0x340 [ 102.407972][ T5494] handle_bug+0x84/0x160 [ 102.409839][ T5494] exc_invalid_op+0x1a/0x50 [ 102.411795][ T5494] asm_exc_invalid_op+0x1a/0x20 [ 102.413998][ T5494] RIP: 0010:get_next_unlocked_entry+0x329/0x340 [ 102.417356][ T5494] Code: 45 1d 10 48 3b 84 24 c0 00 00 00 75 22 4c 89 e8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 8a f9 08 cc e8 08 59 6e ff 90 <0f> 0b 90 eb a0 e8 6d a6 f6 08 66 66 66 66 2e 0f 1f 84 00 00 00 00 [ 102.425674][ T5494] RSP: 0018:ffffc90002afe8a0 EFLAGS: 00010093 [ 102.428123][ T5494] RAX: ffffffff8251ba68 RBX: 1ffff9200055fd9c RCX: ffff888000e22480 [ 102.431085][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.434172][ T5494] RBP: ffffc90002afe9b0 R08: ffffc90002afe937 R09: 0000000000000000 [ 102.437034][ T5494] R10: ffffc90002afe900 R11: fffff5200055fd27 R12: ffffc90002afe918 [ 102.440106][ T5494] R13: ffffea0000437ac0 R14: ffffc90002afe900 R15: dffffc0000000000 [ 102.443408][ T5494] ? get_next_unlocked_entry+0x328/0x340 [ 102.445897][ T5494] ? __pfx_get_next_unlocked_entry+0x10/0x10 [ 102.448579][ T5494] ? __pfx_wake_exceptional_entry_func+0x10/0x10 [ 102.451237][ T5494] ? __lock_acquire+0xab9/0xd20 [ 102.453330][ T5494] grab_mapping_entry+0x176/0x660 [ 102.455527][ T5494] ? __pfx_grab_mapping_entry+0x10/0x10 [ 102.457939][ T5494] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 102.460454][ T5494] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.462792][ T5494] dax_iomap_fault+0x8ab/0x18d0 [ 102.464948][ T5494] ? stack_depot_save_flags+0x41b/0x860 [ 102.467258][ T5494] ? __pfx_dax_iomap_fault+0x10/0x10 [ 102.469552][ T5494] ? kasan_save_track+0x4f/0x80 [ 102.471606][ T5494] ? kasan_save_track+0x3e/0x80 [ 102.473689][ T5494] ? __kasan_slab_alloc+0x6c/0x80 [ 102.475884][ T5494] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 102.478252][ T5494] ? ptlock_alloc+0x20/0x70 [ 102.480211][ T5494] ? pte_alloc_one+0x7a/0x310 [ 102.482399][ T5494] ? __do_fault+0xd1/0x390 [ 102.484380][ T5494] ? __handle_mm_fault+0x1719/0x5400 [ 102.486725][ T5494] ? handle_mm_fault+0x40a/0x8e0 [ 102.488815][ T5494] ? __get_user_pages+0x165c/0x2a00 [ 102.491094][ T5494] ? get_user_pages_remote+0x2f1/0xac0 [ 102.493304][ T5494] ? uprobe_write+0x1b6/0x2160 [ 102.495200][ T5494] ? uprobe_write_opcode+0xa8/0xf0 [ 102.497746][ T5494] ? set_swbp+0x121/0x290 [ 102.499780][ T5494] ? install_breakpoint+0x451/0x5a0 [ 102.502142][ T5494] ? register_for_each_vma+0xabb/0xc30 [ 102.504649][ T5494] ? uprobe_apply+0xfb/0x270 [ 102.506723][ T5494] ? trace_uprobe_register+0x4df/0x560 [ 102.509232][ T5494] ? perf_trace_event_init+0x19a/0x9d0 [ 102.511727][ T5494] ? perf_uprobe_init+0x12e/0x1a0 [ 102.513721][ T5494] ? perf_uprobe_event_init+0xe6/0x180 [ 102.515911][ T5494] ? perf_try_init_event+0x17f/0x870 [ 102.518024][ T5494] ? perf_event_alloc+0x133e/0x2be0 [ 102.520163][ T5494] ? __se_sys_perf_event_open+0x772/0x1d70 [ 102.522808][ T5494] ? do_syscall_64+0xfa/0xfa0 [ 102.525045][ T5494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.527757][ T5494] ? mod_node_state+0xea/0x160 [ 102.529859][ T5494] ? pte_alloc_one+0x1f9/0x310 [ 102.532093][ T5494] __do_fault+0x138/0x390 [ 102.534043][ T5494] __handle_mm_fault+0x1719/0x5400 [ 102.536662][ T5494] ? __pfx___handle_mm_fault+0x10/0x10 [ 102.539005][ T5494] ? __pfx___might_resched+0x10/0x10 [ 102.541227][ T5494] handle_mm_fault+0x40a/0x8e0 [ 102.543252][ T5494] __get_user_pages+0x165c/0x2a00 [ 102.545345][ T5494] get_user_pages_remote+0x2f1/0xac0 [ 102.547563][ T5494] ? iomap_iter_advance+0x282/0x2f0 [ 102.549797][ T5494] ? __pfx_get_user_pages_remote+0x10/0x10 [ 102.552332][ T5494] ? insn_get_prefixes+0xe6e/0x1ca0 [ 102.554720][ T5494] uprobe_write+0x1b6/0x2160 [ 102.556767][ T5494] ? insn_get_opcode+0xb12/0x11b0 [ 102.558853][ T5494] ? __pfx_verify_opcode+0x10/0x10 [ 102.560991][ T5494] ? __pfx_uprobe_write+0x10/0x10 [ 102.563186][ T5494] ? insn_get_immediate+0x32a/0x1280 [ 102.565449][ T5494] ? insn_get_modrm+0x57/0x7d0 [ 102.567709][ T5494] uprobe_write_opcode+0xa8/0xf0 [ 102.569923][ T5494] ? insn_rip_relative+0xc6/0x130 [ 102.572318][ T5494] ? __pfx_uprobe_write_opcode+0x10/0x10 [ 102.574545][ T5494] ? arch_uprobe_analyze_insn+0xc77/0x1400 [ 102.576969][ T5494] set_swbp+0x121/0x290 [ 102.578732][ T5494] ? __pfx_set_swbp+0x10/0x10 [ 102.580698][ T5494] install_breakpoint+0x451/0x5a0 [ 102.582693][ T5494] register_for_each_vma+0xabb/0xc30 [ 102.584666][ T5494] ? uprobe_apply+0x75/0x270 [ 102.586700][ T5494] uprobe_apply+0xfb/0x270 [ 102.588628][ T5494] trace_uprobe_register+0x4df/0x560 [ 102.591288][ T5494] perf_trace_event_init+0x19a/0x9d0 [ 102.593330][ T5494] perf_uprobe_init+0x12e/0x1a0 [ 102.595176][ T5494] perf_uprobe_event_init+0xe6/0x180 [ 102.597120][ T5494] perf_try_init_event+0x17f/0x870 [ 102.599212][ T5494] ? perf_event_alloc+0xf61/0x2be0 [ 102.601466][ T5494] perf_event_alloc+0x133e/0x2be0 [ 102.603654][ T5494] ? perf_event_alloc+0xf61/0x2be0 [ 102.605963][ T5494] ? __pfx_perf_event_alloc+0x10/0x10 [ 102.608788][ T5494] ? find_lively_task_by_vpid+0x19/0x290 [ 102.611350][ T5494] ? find_lively_task_by_vpid+0x19/0x290 [ 102.613894][ T5494] ? find_lively_task_by_vpid+0x19/0x290 [ 102.616620][ T5494] __se_sys_perf_event_open+0x772/0x1d70 [ 102.619273][ T5494] ? up_write+0x1c4/0x420 [ 102.621221][ T5494] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 102.623861][ T5494] ? __pfx___se_sys_futex+0x10/0x10 [ 102.626083][ T5494] ? fput+0xa0/0xd0 [ 102.627760][ T5494] ? do_syscall_64+0xbe/0xfa0 [ 102.630118][ T5494] ? __x64_sys_perf_event_open+0x20/0xc0 [ 102.632285][ T5494] do_syscall_64+0xfa/0xfa0 [ 102.634183][ T5494] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.636216][ T5494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.639139][ T5494] ? clear_bhb_loop+0x60/0xb0 [ 102.640887][ T5494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.643573][ T5494] RIP: 0033:0x7fc5a378f6c9 [ 102.645461][ T5494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.653268][ T5494] RSP: 002b:00007fffd03cc078 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 102.656783][ T5494] RAX: ffffffffffffffda RBX: 00007fc5a39e5fa0 RCX: 00007fc5a378f6c9 [ 102.660314][ T5494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 102.663861][ T5494] RBP: 00007fc5a3811f91 R08: 0000000000000000 R09: 0000000000000000 [ 102.667489][ T5494] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 102.671135][ T5494] R13: 00007fc5a39e5fa0 R14: 00007fc5a39e5fa0 R15: 0000000000000005 [ 102.674657][ T5494] [ 102.676377][ T5494] Kernel Offset: disabled [ 102.678276][ T5494] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:42:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002afe050 R8 =ffff8880335f8237 R9 =1ffff110066bf046 R10=dffffc0000000000 R11=ffffffff85166c10 R12=dffffc0000000000 R13=ffffffff997e4904 R14=ffffffff99af8320 R15=0000000000000000 RIP=ffffffff85166c8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558d07b500 ffffffff 00c00000 GS =0000 ffff88808d730000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe1ac985c38 CR3=0000000058e42000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fc000000 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd03cb5e0 00007fffd03cb5c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd03cb720 00007fffd03cb5a0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd03cb5e0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd03cb720 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd03cb720 00007fffd03cb5a0 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffd03cb5e0 00007fffd03cb5c0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5a38130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc5a38131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000073666f7265 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65723d7967657461 7274735f65686361 632c646165686164 6165000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002c73 7961776c613d7861 642c6c63616f6e2c 646e756f72616461 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a229fcd298673893 fae8873e3680980c 4424c6368c99fc41 8c48d4f91b127d1f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8175f9e4ffff0000 04bf641cb3821d05 7c1607f83bc41041 0410410410410410 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 410410413a406309 502c77ea673c26ed f4eb266b87fe2471 ff81e5c735f184ed ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67630ecd7efbc838 a2ca3727d6ffd5a9 fa7f023f7fe01c61 4460649de6b2ce6b ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 05a938e2b745ba2f 9ca96ce68deb25ef 2fd253f9a229fcd2 98673893fae8873e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000