./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3233775062 <...> Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. execve("./syz-executor3233775062", ["./syz-executor3233775062"], 0x7ffd7c428910 /* 10 vars */) = 0 brk(NULL) = 0x5555619e6000 brk(0x5555619e6d00) = 0x5555619e6d00 arch_prctl(ARCH_SET_FS, 0x5555619e6380) = 0 set_tid_address(0x5555619e6650) = 5084 set_robust_list(0x5555619e6660, 24) = 0 rseq(0x5555619e6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3233775062", 4096) = 28 getrandom("\x6f\x0d\x54\xa3\x22\x1e\x36\xe6", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555619e6d00 brk(0x555561a07d00) = 0x555561a07d00 brk(0x555561a08000) = 0x555561a08000 mprotect(0x7f6e5ac79000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20400000, 12582912, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS|MAP_NORESERVE|MAP_POPULATE|MAP_NONBLOCK|MAP_EXECUTABLE|MAP_HUGETLB, -1, 0) = 0x20400000 userfaultfd(UFFD_USER_MODE_ONLY|O_NONBLOCK) = 3 ioctl(3, UFFDIO_API, {api=0xaa, features=0 => features=UFFD_FEATURE_PAGEFAULT_FLAG_WP|UFFD_FEATURE_EVENT_FORK|UFFD_FEATURE_EVENT_REMAP|UFFD_FEATURE_EVENT_REMOVE|UFFD_FEATURE_MISSING_HUGETLBFS|UFFD_FEATURE_MISSING_SHMEM|UFFD_FEATURE_EVENT_UNMAP|UFFD_FEATURE_SIGBUS|UFFD_FEATURE_THREAD_ID|UFFD_FEATURE_MINOR_HUGETLBFS|UFFD_FEATURE_MINOR_SHMEM|UFFD_FEATURE_EXACT_ADDRESS|0x14000, ioctls=1<<_UFFDIO_REGISTER|1<<_UFFDIO_UNREGISTER|1<<_UFFDIO_API}) = 0 ioctl(3, UFFDIO_REGISTER, {range={start=0x20400000, len=0xc00000}, mode=UFFDIO_REGISTER_MODE_MISSING|UFFDIO_REGISTER_MODE_MINOR, ioctls=1<<_UFFDIO_WAKE|1<<_UFFDIO_COPY|1<<_UFFDIO_CONTINUE|0x100}) = 0 ioctl(3, _IOC(_IOC_READ|_IOC_WRITE, 0xaa, 0x8, 0x20), 0x20000080) = 0 [ 76.774129][ T5084] ------------[ cut here ]------------ [ 76.780244][ T5084] WARNING: CPU: 1 PID: 5084 at mm/hugetlb.c:6963 hugetlb_change_protection+0x1195/0x1e20 [ 76.790576][ T5084] Modules linked in: [ 76.794777][ T5084] CPU: 1 PID: 5084 Comm: syz-executor323 Not tainted 6.9.0-rc2-next-20240403-syzkaller #0 [ 76.805064][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 76.815334][ T5084] RIP: 0010:hugetlb_change_protection+0x1195/0x1e20 [ 76.821983][ T5084] Code: e6 09 48 b8 00 fe ff ff ff ff ff 07 49 21 c6 49 09 de 48 b8 00 00 00 00 00 00 00 c0 49 09 c6 48 ff 44 24 78 e9 97 00 00 00 90 <0f> 0b 90 48 83 bc 24 90 00 00 00 00 4c 8b 6c 24 28 4c 8b 74 24 08 [ 76.842559][ T5084] RSP: 0018:ffffc900035df580 EFLAGS: 00010212 [ 76.849398][ T5084] RAX: 0000000000000000 RBX: f7ffffffffffffff RCX: ffff888022ca0000 [ 76.858266][ T5084] RDX: ffff888022ca0000 RSI: fffffffffffffa00 RDI: f7ffffffffffffff [ 76.866849][ T5084] RBP: ffffc900035df830 R08: ffffffff81f5654e R09: 1ffffd40003c0286 [ 76.875448][ T5084] R10: dffffc0000000000 R11: fffff940003c0287 R12: dffffc0000000000 [ 76.883767][ T5084] R13: fffffffffffffa00 R14: 000000000000001e R15: ffff888078050810 [ 76.892131][ T5084] FS: 00005555619e6380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 76.901199][ T5084] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.908112][ T5084] CR2: 00000000005fdeb8 CR3: 0000000063f90000 CR4: 00000000003506f0 [ 76.916658][ T5084] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.924819][ T5084] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.933168][ T5084] Call Trace: [ 76.936497][ T5084] [ 76.940242][ T5084] ? __warn+0x163/0x4e0 [ 76.944877][ T5084] ? hugetlb_change_protection+0x1195/0x1e20 [ 76.950990][ T5084] ? report_bug+0x2b3/0x500 [ 76.955664][ T5084] ? hugetlb_change_protection+0x1195/0x1e20 [ 76.961726][ T5084] ? handle_bug+0x3e/0x70 [ 76.966242][ T5084] ? exc_invalid_op+0x1a/0x50 [ 76.970990][ T5084] ? asm_exc_invalid_op+0x1a/0x20 [ 76.976496][ T5084] ? hugetlb_change_protection+0xc9e/0x1e20 [ 76.983082][ T5084] ? hugetlb_change_protection+0x1195/0x1e20 [ 76.989235][ T5084] ? __pfx_hugetlb_change_protection+0x10/0x10 [ 76.995815][ T5084] ? mas_next_slot+0xeb2/0xf90 [ 77.001047][ T5084] change_protection+0x327/0x3790 [ 77.006375][ T5084] ? validate_mm+0x480/0x530 [ 77.011042][ T5084] ? __pfx_validate_mm+0x10/0x10 [ 77.016132][ T5084] ? vma_complete+0xaef/0xb60 [ 77.020890][ T5084] ? __split_vma+0xad9/0xc40 [ 77.025722][ T5084] ? __pfx_change_protection+0x10/0x10 [ 77.031241][ T5084] ? __pfx___split_vma+0x10/0x10 [ 77.036497][ T5084] ? vma_set_page_prot+0x1d7/0x530 [ 77.041699][ T5084] ? __pfx_vma_set_page_prot+0x10/0x10 [ 77.047380][ T5084] mprotect_fixup+0x755/0xab0 [ 77.052127][ T5084] ? __pfx_mprotect_fixup+0x10/0x10 [ 77.057526][ T5084] do_mprotect_pkey+0x903/0xdd0 [ 77.062770][ T5084] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 77.068231][ T5084] ? __pfx_ptrace_notify+0x10/0x10 [ 77.073741][ T5084] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.080138][ T5084] ? do_syscall_64+0x10a/0x240 [ 77.085232][ T5084] __x64_sys_mprotect+0x80/0x90 [ 77.090378][ T5084] do_syscall_64+0xfb/0x240 [ 77.096444][ T5084] entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 77.102562][ T5084] RIP: 0033:0x7f6e5ac06369 [ 77.107128][ T5084] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.127303][ T5084] RSP: 002b:00007ffd12a39398 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 77.136356][ T5084] RAX: ffffffffffffffda RBX: 00007ffd12a39568 RCX: 00007f6e5ac06369 [ 77.144623][ T5084] RDX: 000000000000000c RSI: 0000000000800000 RDI: 0000000020000000 [ 77.152813][ T5084] RBP: 00007f6e5ac79610 R08: 00007ffd12a39568 R09: 00007ffd12a39568 [ 77.160944][ T5084] R10: 00007ffd12a39568 R11: 0000000000000246 R12: 0000000000000001 [ 77.169492][ T5084] R13: 00007ffd12a39558 R14: 0000000000000001 R15: 0000000000000001 [ 77.177594][ T5084] [ 77.180655][ T5084] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 77.188081][ T5084] CPU: 1 PID: 5084 Comm: syz-executor323 Not tainted 6.9.0-rc2-next-20240403-syzkaller #0 [ 77.198174][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 77.208531][ T5084] Call Trace: [ 77.211826][ T5084] [ 77.214769][ T5084] dump_stack_lvl+0x241/0x360 [ 77.219563][ T5084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.225223][ T5084] ? __pfx__printk+0x10/0x10 [ 77.229937][ T5084] ? vscnprintf+0x5d/0x90 [ 77.234286][ T5084] panic+0x349/0x860 [ 77.238208][ T5084] ? __warn+0x172/0x4e0 [ 77.242391][ T5084] ? __pfx_panic+0x10/0x10 [ 77.246853][ T5084] __warn+0x346/0x4e0 [ 77.250885][ T5084] ? hugetlb_change_protection+0x1195/0x1e20 [ 77.256893][ T5084] report_bug+0x2b3/0x500 [ 77.261336][ T5084] ? hugetlb_change_protection+0x1195/0x1e20 [ 77.267536][ T5084] handle_bug+0x3e/0x70 [ 77.271801][ T5084] exc_invalid_op+0x1a/0x50 [ 77.276416][ T5084] asm_exc_invalid_op+0x1a/0x20 [ 77.281610][ T5084] RIP: 0010:hugetlb_change_protection+0x1195/0x1e20 [ 77.288729][ T5084] Code: e6 09 48 b8 00 fe ff ff ff ff ff 07 49 21 c6 49 09 de 48 b8 00 00 00 00 00 00 00 c0 49 09 c6 48 ff 44 24 78 e9 97 00 00 00 90 <0f> 0b 90 48 83 bc 24 90 00 00 00 00 4c 8b 6c 24 28 4c 8b 74 24 08 [ 77.308812][ T5084] RSP: 0018:ffffc900035df580 EFLAGS: 00010212 [ 77.315000][ T5084] RAX: 0000000000000000 RBX: f7ffffffffffffff RCX: ffff888022ca0000 [ 77.323067][ T5084] RDX: ffff888022ca0000 RSI: fffffffffffffa00 RDI: f7ffffffffffffff [ 77.331224][ T5084] RBP: ffffc900035df830 R08: ffffffff81f5654e R09: 1ffffd40003c0286 [ 77.340511][ T5084] R10: dffffc0000000000 R11: fffff940003c0287 R12: dffffc0000000000 [ 77.348595][ T5084] R13: fffffffffffffa00 R14: 000000000000001e R15: ffff888078050810 [ 77.356681][ T5084] ? hugetlb_change_protection+0xc9e/0x1e20 [ 77.362646][ T5084] ? __pfx_hugetlb_change_protection+0x10/0x10 [ 77.368989][ T5084] ? mas_next_slot+0xeb2/0xf90 [ 77.374219][ T5084] change_protection+0x327/0x3790 [ 77.379273][ T5084] ? validate_mm+0x480/0x530 [ 77.383981][ T5084] ? __pfx_validate_mm+0x10/0x10 [ 77.389029][ T5084] ? vma_complete+0xaef/0xb60 [ 77.394450][ T5084] ? __split_vma+0xad9/0xc40 [ 77.399063][ T5084] ? __pfx_change_protection+0x10/0x10 [ 77.404562][ T5084] ? __pfx___split_vma+0x10/0x10 [ 77.409543][ T5084] ? vma_set_page_prot+0x1d7/0x530 [ 77.414682][ T5084] ? __pfx_vma_set_page_prot+0x10/0x10 [ 77.420164][ T5084] mprotect_fixup+0x755/0xab0 [ 77.424952][ T5084] ? __pfx_mprotect_fixup+0x10/0x10 [ 77.430169][ T5084] do_mprotect_pkey+0x903/0xdd0 [ 77.435050][ T5084] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 77.440455][ T5084] ? __pfx_ptrace_notify+0x10/0x10 [ 77.445754][ T5084] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.452186][ T5084] ? do_syscall_64+0x10a/0x240 [ 77.456981][ T5084] __x64_sys_mprotect+0x80/0x90 [ 77.461848][ T5084] do_syscall_64+0xfb/0x240 [ 77.466468][ T5084] entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 77.472470][ T5084] RIP: 0033:0x7f6e5ac06369 [ 77.476911][ T5084] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.497268][ T5084] RSP: 002b:00007ffd12a39398 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 77.505701][ T5084] RAX: ffffffffffffffda RBX: 00007ffd12a39568 RCX: 00007f6e5ac06369 [ 77.513973][ T5084] RDX: 000000000000000c RSI: 0000000000800000 RDI: 0000000020000000 [ 77.522041][ T5084] RBP: 00007f6e5ac79610 R08: 00007ffd12a39568 R09: 00007ffd12a39568 [ 77.530027][ T5084] R10: 00007ffd12a39568 R11: 0000000000000246 R12: 0000000000000001 [ 77.538281][ T5084] R13: 00007ffd12a39558 R14: 0000000000000001 R15: 0000000000000001 [ 77.546284][ T5084] [ 77.550050][ T5084] Kernel Offset: disabled [ 77.554592][ T5084] Rebooting in 86400 seconds..