./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3785686694 <...> forked to background, child pid 3186 no interfaces have a carrier [ 22.890631][ T3187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.901549][ T3187] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. execve("./syz-executor3785686694", ["./syz-executor3785686694"], 0x7ffc4a209480 /* 10 vars */) = 0 brk(NULL) = 0x5555556b7000 brk(0x5555556b7d00) = 0x5555556b7d00 arch_prctl(ARCH_SET_FS, 0x5555556b73c0) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3785686694", 4096) = 28 brk(0x5555556d8d00) = 0x5555556d8d00 brk(0x5555556d9000) = 0x5555556d9000 mprotect(0x7f5420eda000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {sa_handler=0x7f5420e31020, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f5420e31090}, NULL, 8) = 0 rt_sigaction(SIGBUS, {sa_handler=0x7f5420e31020, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f5420e31090}, NULL, 8) = 0 openat(AT_FDCWD, "/dev/fb0", O_RDONLY|O_TRUNC|O_NONBLOCK) = 3 mmap(0x20000000, 8388608, PROT_EXEC|PROT_SEM|0x800000, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0x20000000 --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20000240} --- syzkaller login: [ 41.371042][ T3607] ------------[ cut here ]------------ [ 41.376674][ T3607] kernel BUG at mm/memory.c:2210! [ 41.381729][ T3607] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 41.387783][ T3607] CPU: 1 PID: 3607 Comm: syz-executor378 Not tainted 5.19.0-rc6-syzkaller-00378-gc658cabbfd32 #0 [ 41.398272][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 41.408330][ T3607] RIP: 0010:vmf_insert_pfn_prot+0x248/0x460 [ 41.414215][ T3607] Code: 0f 0b e8 4b f2 c6 ff 4d 89 f7 bf 20 00 00 00 41 83 e7 28 4c 89 fe e8 97 ee c6 ff 49 83 ff 20 0f 85 a5 fe ff ff e8 28 f2 c6 ff <0f> 0b 49 be ff ff ff ff ff ff 0f 00 e8 17 f2 c6 ff 4d 21 ee 4c 89 [ 41.433832][ T3607] RSP: 0018:ffffc9000323f8d0 EFLAGS: 00010293 [ 41.439891][ T3607] RAX: 0000000000000000 RBX: 1ffff92000647f1c RCX: 0000000000000000 [ 41.447855][ T3607] RDX: ffff888074999d80 RSI: ffffffff81b379f8 RDI: 0000000000000007 [ 41.455819][ T3607] RBP: ffff8880253b3420 R08: 0000000000000007 R09: 0000000000000020 [ 41.463956][ T3607] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000020000000 [ 41.471916][ T3607] R13: 000000000001c6f1 R14: 000000000c040474 R15: 0000000000000020 [ 41.479882][ T3607] FS: 00005555556b73c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 41.488807][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.495385][ T3607] CR2: 0000000020000240 CR3: 0000000071f78000 CR4: 0000000000350ee0 [ 41.503373][ T3607] Call Trace: [ 41.506640][ T3607] [ 41.509565][ T3607] ? insert_pfn+0x6d0/0x6d0 [ 41.514153][ T3607] ? mark_held_locks+0x9f/0xe0 [ 41.518911][ T3607] drm_gem_shmem_fault+0x1e3/0x290 [ 41.524042][ T3607] __do_fault+0x10d/0x650 [ 41.528366][ T3607] __handle_mm_fault+0x273d/0x3f60 [ 41.533476][ T3607] ? vm_iomap_memory+0x190/0x190 [ 41.538414][ T3607] handle_mm_fault+0x1c8/0x790 [ 41.543173][ T3607] do_user_addr_fault+0x489/0x11c0 [ 41.548281][ T3607] exc_page_fault+0x9e/0x180 [ 41.552866][ T3607] asm_exc_page_fault+0x22/0x30 [ 41.557799][ T3607] RIP: 0010:strncpy_from_user+0x1bd/0x3c0 [ 41.563512][ T3607] Code: ed 08 4d 89 74 1d 00 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 45 ef 5b fd 48 83 fd 07 0f 86 c0 01 00 00 e8 d6 f2 5b fd 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 02 ef 5b fd 45 85 ff 0f 84 [ 41.583118][ T3607] RSP: 0018:ffffc9000323fd08 EFLAGS: 00050246 [ 41.589285][ T3607] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 41.597250][ T3607] RDX: ffff888074999d80 RSI: ffffffff841e794a RDI: 0000000000000007 [ 41.605216][ T3607] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 41.613180][ T3607] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000020000240 [ 41.621143][ T3607] R13: ffff88801f064420 R14: ffff88801f064420 R15: 0000000000000000 [ 41.629114][ T3607] ? strncpy_from_user+0x1ba/0x3c0 [ 41.634230][ T3607] ? strncpy_from_user+0x1ba/0x3c0 [ 41.639339][ T3607] getname_flags.part.0+0x95/0x4f0 [ 41.644454][ T3607] ? _raw_spin_lock_irq+0x41/0x50 [ 41.649650][ T3607] getname+0x8e/0xd0 [ 41.653545][ T3607] do_sys_openat2+0xf5/0x4c0 [ 41.658139][ T3607] ? build_open_flags+0x6f0/0x6f0 [ 41.663159][ T3607] ? ptrace_notify+0xfa/0x140 [ 41.667825][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 41.672679][ T3607] __x64_sys_openat+0x13f/0x1f0 [ 41.677544][ T3607] ? __ia32_sys_open+0x1c0/0x1c0 [ 41.682478][ T3607] ? _raw_spin_unlock_irq+0x1f/0x40 [ 41.687671][ T3607] ? lockdep_hardirqs_on+0x79/0x100 [ 41.692865][ T3607] ? _raw_spin_unlock_irq+0x2a/0x40 [ 41.698055][ T3607] ? ptrace_notify+0xfa/0x140 [ 41.702727][ T3607] do_syscall_64+0x35/0xb0 [ 41.707136][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.713046][ T3607] RIP: 0033:0x7f5420e6e159 [ 41.717472][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.737074][ T3607] RSP: 002b:00007ffe9940e818 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.745567][ T3607] RAX: ffffffffffffffda RBX: 00007ffe9940e828 RCX: 00007f5420e6e159 [ 41.753530][ T3607] RDX: 000000000000275a RSI: 0000000020000240 RDI: 00000000ffffff9c [ 41.761490][ T3607] RBP: 00007ffe9940e820 R08: 00007ffe9940e820 R09: 00007f5420e31020 [ 41.769453][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.777412][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.785380][ T3607] [ 41.788387][ T3607] Modules linked in: [ 41.792412][ T3607] ---[ end trace 0000000000000000 ]--- [ 41.797968][ T3607] RIP: 0010:vmf_insert_pfn_prot+0x248/0x460 [ 41.803917][ T3607] Code: 0f 0b e8 4b f2 c6 ff 4d 89 f7 bf 20 00 00 00 41 83 e7 28 4c 89 fe e8 97 ee c6 ff 49 83 ff 20 0f 85 a5 fe ff ff e8 28 f2 c6 ff <0f> 0b 49 be ff ff ff ff ff ff 0f 00 e8 17 f2 c6 ff 4d 21 ee 4c 89 [ 41.823556][ T3607] RSP: 0018:ffffc9000323f8d0 EFLAGS: 00010293 [ 41.829631][ T3607] RAX: 0000000000000000 RBX: 1ffff92000647f1c RCX: 0000000000000000 [ 41.837634][ T3607] RDX: ffff888074999d80 RSI: ffffffff81b379f8 RDI: 0000000000000007 [ 41.845640][ T3607] RBP: ffff8880253b3420 R08: 0000000000000007 R09: 0000000000000020 [ 41.853638][ T3607] R10: 0000000000000020 R11: 0000000000000000 R12: 0000000020000000 [ 41.861621][ T3607] R13: 000000000001c6f1 R14: 000000000c040474 R15: 0000000000000020 [ 41.869626][ T3607] FS: 00005555556b73c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 41.878583][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.885197][ T3607] CR2: 0000000020000240 CR3: 0000000071f78000 CR4: 0000000000350ee0 [ 41.893193][ T3607] Kernel panic - not syncing: Fatal exception [ 41.899727][ T3607] Kernel Offset: disabled [ 41.904039][ T3607] Rebooting in 86400 seconds..