./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2950266103
<...>
forked to background, child pid 4643
no interfaces have a carrier
[ 22.614458][ T4644] 8021q: adding VLAN 0 to HW filter on device bond0
[ 22.623144][ T4644] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts.
execve("./syz-executor2950266103", ["./syz-executor2950266103"], 0x7ffc161253f0 /* 10 vars */) = 0
brk(NULL) = 0x5555558df000
brk(0x5555558dfd00) = 0x5555558dfd00
arch_prctl(ARCH_SET_FS, 0x5555558df3c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2950266103", 4096) = 28
brk(0x555555900d00) = 0x555555900d00
brk(0x555555901000) = 0x555555901000
mprotect(0x7fdbdf89d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fdbdf7f2180, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fdbdf7f28c0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fdbdf7f2180, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fdbdf7f28c0}, NULL, 8) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558df690) = 5065
./strace-static-x86_64: Process 5065 attached
[pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5065] setpgid(0, 0) = 0
[pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5065] write(3, "1000", 4) = 4
[pid 5065] close(3) = 0
[pid 5065] io_uring_setup(7763, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=8192, cq_entries=16384, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=262464}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 5065] mmap(0x20000000, 295232, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 5065] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5065] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5065] write(4, "21", 2) = 2
syzkaller login: [ 40.524004][ T5065] FAULT_INJECTION: forcing a failure.
[ 40.524004][ T5065] name failslab, interval 1, probability 0, space 0, times 1
[ 40.536696][ T5065] CPU: 0 PID: 5065 Comm: syz-executor295 Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
[ 40.547102][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 40.557141][ T5065] Call Trace:
[ 40.560413][ T5065]
[ 40.563343][ T5065] dump_stack_lvl+0xd1/0x138
[ 40.567940][ T5065] should_fail_ex.cold+0x5/0xa
[ 40.572707][ T5065] ? copy_process+0x2661/0x7530
[ 40.577542][ T5065] should_failslab+0x9/0x20
[ 40.582066][ T5065] kmem_cache_alloc+0x5a/0x430
[ 40.586832][ T5065] ? _raw_spin_unlock+0x28/0x40
[ 40.591669][ T5065] copy_process+0x2661/0x7530
[ 40.596359][ T5065] ? __cleanup_sighand+0xb0/0xb0
[ 40.601312][ T5065] kernel_clone+0xeb/0x9f0
[ 40.605736][ T5065] ? create_io_thread+0xf0/0xf0
[ 40.610602][ T5065] ? rwlock_bug.part.0+0x90/0x90
[ 40.615541][ T5065] ? _raw_spin_lock_irq+0x45/0x50
[ 40.620572][ T5065] ? find_held_lock+0x2d/0x110
[ 40.625353][ T5065] __do_sys_clone+0xba/0x100
[ 40.629942][ T5065] ? kernel_clone+0x9f0/0x9f0
[ 40.634637][ T5065] ? _raw_spin_unlock_irq+0x2e/0x50
[ 40.639847][ T5065] ? ptrace_notify+0xfe/0x140
[ 40.644522][ T5065] do_syscall_64+0x39/0xb0
[ 40.648980][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.654875][ T5065] RIP: 0033:0x7fdbdf8305e9
[ 40.659284][ T5065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.678904][ T5065] RSP: 002b:00007ffc9fb19238 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 40.687314][ T5065] RAX: ffffffffffffffda RBX: 00007ffc9fb19298 RCX: 00007fdbdf8305e9
[ 40.695299][ T5065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000
[ 40.703261][ T5065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003132
[ 40.711221][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[pid 5065] clone(child_stack=NULL, flags=CLONE_PIDFD, parent_tid=NULL) = -1 ENOMEM (Cannot allocate memory)
[pid 5065] exit_group(0) = ?
[pid 5065] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5065, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558df690) = 5066
./strace-static-x86_64: Process 5066 attached
[pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5066] setpgid(0, 0) = 0
[pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5066] write(3, "1000", 4) = 4
[pid 5066] close(3) = 0
[pid 5066] io_uring_setup(7763, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=8192, cq_entries=16384, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=262464}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 5066] mmap(0x20000000, 295232, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 5066] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5066] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5066] write(4, "21", 2) = 2
[pid 5066] clone(child_stack=NULL, flags=CLONE_PIDFD, parent_tid=NULL) = -1 EFAULT (Bad address)
[pid 5066] exit_group(0) = ?
[pid 5066] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558df690) = 5068
./strace-static-x86_64: Process 5068 attached
[pid 5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5068] setpgid(0, 0) = 0
[pid 5068] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5068] write(3, "1000", 4) = 4
[pid 5068] close(3) = 0
[pid 5068] io_uring_setup(7763, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=8192, cq_entries=16384, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=262464}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 5068] mmap(0x20000000, 295232, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 5068] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5068] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5068] write(4, "21", 2) = 2
[pid 5068] clone(child_stack=NULL, flags=CLONE_PIDFD, parent_tid=NULL) = -1 EFAULT (Bad address)
[pid 5068] exit_group(0) = ?
[pid 5068] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5068, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558df690) = 5070
./strace-static-x86_64: Process 5070 attached
[pid 5070] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5070] setpgid(0, 0) = 0
[pid 5070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5070] write(3, "1000", 4) = 4
[pid 5070] close(3) = 0
[pid 5070] io_uring_setup(7763, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=8192, cq_entries=16384, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=262464}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 5070] mmap(0x20000000, 295232, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 5070] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5070] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[ 40.719181][ T5065] R13: 431bde82d7b634db R14: 00007ffc9fb19290 R15: 0000000000000000
[ 40.727146][ T5065]
[pid 5070] write(4, "21", 2) = 2
[pid 5070] clone(child_stack=NULL, flags=CLONE_PIDFD, parent_tid=NULL) = -1 EFAULT (Bad address)
[pid 5070] exit_group(0) = ?
[pid 5070] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5070, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558df690) = 5072
./strace-static-x86_64: Process 5072 attached
[pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5072] setpgid(0, 0) = 0
[pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5072] write(3, "1000", 4) = 4
[pid 5072] close(3) = 0
[pid 5072] io_uring_setup(7763, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=8192, cq_entries=16384, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|IORING_FEAT_LINKED_FILE, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=262464}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 5072] mmap(0x20000000, 295232, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 5072] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 5072] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 5072] write(4, "21", 2) = 2
[ 40.778435][ T5072] FAULT_INJECTION: forcing a failure.
[ 40.778435][ T5072] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 40.792370][ T5072] CPU: 0 PID: 5072 Comm: syz-executor295 Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
[ 40.802820][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 40.812866][ T5072] Call Trace:
[ 40.816132][ T5072]
[ 40.819049][ T5072] dump_stack_lvl+0xd1/0x138
[ 40.823632][ T5072] should_fail_ex.cold+0x5/0xa
[ 40.828392][ T5072] prepare_alloc_pages+0x178/0x570
[ 40.833493][ T5072] ? mark_lock.part.0+0xee/0x1910
[ 40.838520][ T5072] __alloc_pages+0x149/0x5b0
[ 40.843117][ T5072] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0
[ 40.849894][ T5072] ? find_held_lock+0x2d/0x110
[ 40.854670][ T5072] alloc_pages+0x1aa/0x270
[ 40.859091][ T5072] pte_alloc_one+0x1a/0x230
[ 40.863596][ T5072] __pte_alloc+0x6d/0x260
[ 40.867928][ T5072] ? pmd_install+0x160/0x160
[ 40.872521][ T5072] ? _raw_spin_unlock+0x28/0x40
[ 40.877367][ T5072] ? __pmd_alloc+0x30c/0x5d0
[ 40.881953][ T5072] copy_page_range+0x17fa/0x3b60
[ 40.886928][ T5072] ? handle_mm_fault+0x910/0x910
[ 40.891972][ T5072] ? up_write+0x1b0/0x520
[ 40.896313][ T5072] dup_mmap+0xc10/0x10b0
[ 40.900562][ T5072] ? replace_mm_exe_file+0x4b0/0x4b0
[ 40.905841][ T5072] ? lock_downgrade+0x6e0/0x6e0
[ 40.910700][ T5072] ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 40.916515][ T5072] ? mm_init+0x98c/0xce0
[ 40.920758][ T5072] copy_process+0x4423/0x7530
[ 40.925449][ T5072] ? __cleanup_sighand+0xb0/0xb0
[ 40.930402][ T5072] kernel_clone+0xeb/0x9f0
[ 40.934819][ T5072] ? create_io_thread+0xf0/0xf0
[ 40.939665][ T5072] ? rwlock_bug.part.0+0x90/0x90
[ 40.944597][ T5072] ? _raw_spin_lock_irq+0x45/0x50
[ 40.949718][ T5072] ? find_held_lock+0x2d/0x110
[ 40.954505][ T5072] __do_sys_clone+0xba/0x100
[ 40.959087][ T5072] ? kernel_clone+0x9f0/0x9f0
[ 40.963778][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50
[ 40.968998][ T5072] ? ptrace_notify+0xfe/0x140
[ 40.973677][ T5072] do_syscall_64+0x39/0xb0
[ 40.978099][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.983985][ T5072] RIP: 0033:0x7fdbdf8305e9
[ 40.988393][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.007996][ T5072] RSP: 002b:00007ffc9fb19238 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 41.016407][ T5072] RAX: ffffffffffffffda RBX: 0000000000009f1e RCX: 00007fdbdf8305e9
[ 41.024458][ T5072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000
[ 41.032426][ T5072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003132
[ 41.040392][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 41.048357][ T5072] R13: 431bde82d7b634db R14: 00007ffc9fb19290 R15: 0000000000000000
[ 41.056340][ T5072]
[ 41.065267][ T5072] ------------[ cut here ]------------
[ 41.071135][ T5072] WARNING: CPU: 0 PID: 5072 at arch/x86/mm/pat/memtype.c:1061 untrack_pfn+0x24b/0x290
[ 41.081266][ T5072] Modules linked in:
[ 41.085337][ T5072] CPU: 1 PID: 5072 Comm: syz-executor295 Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
[ 41.100010][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 41.110603][ T5072] RIP: 0010:untrack_pfn+0x24b/0x290
[ 41.115948][ T5072] Code: 85 6c ff ff ff e8 65 02 47 00 4c 89 ee 4c 89 e7 e8 fa e1 ff ff e8 55 02 47 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 45 02 47 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 c6 ff 96 00 e9 98 fe ff ff e8 ec
[ 41.135633][ T5072] RSP: 0018:ffffc90003c7f748 EFLAGS: 00010293
[ 41.141708][ T5072] RAX: 0000000000000000 RBX: ffff8880762240e0 RCX: 0000000000000000
[ 41.149751][ T5072] RDX: ffff8880217bd7c0 RSI: ffffffff813a06cb RDI: 0000000000000005
[ 41.157764][ T5072] RBP: 1ffff9200078fee9 R08: 0000000000000005 R09: 0000000000000000
[ 41.165773][ T5072] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea
[ 41.173753][ T5072] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888076224100
[ 41.181786][ T5072] FS: 00005555558df3c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 41.190768][ T5072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.197782][ T5072] CR2: 00007fdbdf888124 CR3: 0000000075af0000 CR4: 0000000000350ee0
[ 41.205830][ T5072] Call Trace:
[ 41.209284][ T5072]
[ 41.212202][ T5072] ? track_pfn_insert+0x150/0x150
[ 41.217288][ T5072] ? mas_walk+0x4bd/0x6c0
[ 41.221640][ T5072] ? mas_find+0x211/0xd10
[ 41.226065][ T5072] ? uprobe_munmap+0x20/0x550
[ 41.230767][ T5072] unmap_single_vma+0x1b4/0x2a0
[ 41.235686][ T5072] unmap_vmas+0x226/0x370
[ 41.240035][ T5072] ? unmap_single_vma+0x2a0/0x2a0
[ 41.245149][ T5072] ? find_held_lock+0x2d/0x110
[ 41.249938][ T5072] ? lock_downgrade+0x6e0/0x6e0
[ 41.254852][ T5072] exit_mmap+0x18d/0x7b0
[ 41.259108][ T5072] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 41.265158][ T5072] ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 41.270991][ T5072] __mmput+0x128/0x4c0
[ 41.275114][ T5072] mmput+0x60/0x70
[ 41.278856][ T5072] copy_process+0x4637/0x7530
[ 41.283525][ T5072] ? __cleanup_sighand+0xb0/0xb0
[ 41.288544][ T5072] kernel_clone+0xeb/0x9f0
[ 41.292982][ T5072] ? create_io_thread+0xf0/0xf0
[ 41.297908][ T5072] ? rwlock_bug.part.0+0x90/0x90
[ 41.302849][ T5072] ? _raw_spin_lock_irq+0x45/0x50
[ 41.308081][ T5072] ? find_held_lock+0x2d/0x110
[ 41.312855][ T5072] __do_sys_clone+0xba/0x100
[ 41.317497][ T5072] ? kernel_clone+0x9f0/0x9f0
[ 41.322219][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50
[ 41.327491][ T5072] ? ptrace_notify+0xfe/0x140
[ 41.332181][ T5072] do_syscall_64+0x39/0xb0
[ 41.336653][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.342567][ T5072] RIP: 0033:0x7fdbdf8305e9
[ 41.347014][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.366704][ T5072] RSP: 002b:00007ffc9fb19238 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 41.375194][ T5072] RAX: ffffffffffffffda RBX: 0000000000009f1e RCX: 00007fdbdf8305e9
[ 41.383182][ T5072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000
[ 41.391343][ T5072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003132
[ 41.399343][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 41.407373][ T5072] R13: 431bde82d7b634db R14: 00007ffc9fb19290 R15: 0000000000000000
[ 41.415387][ T5072]
[ 41.418410][ T5072] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 41.425675][ T5072] CPU: 1 PID: 5072 Comm: syz-executor295 Not tainted 6.2.0-rc8-syzkaller-00098-gec35307e18ba #0
[ 41.436075][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/21/2023
[ 41.446132][ T5072] Call Trace:
[ 41.449415][ T5072]
[ 41.452339][ T5072] dump_stack_lvl+0xd1/0x138
[ 41.456925][ T5072] panic+0x2cc/0x626
[ 41.460828][ T5072] ? panic_print_sys_info.part.0+0x110/0x110
[ 41.466821][ T5072] ? untrack_pfn+0x24b/0x290
[ 41.471399][ T5072] check_panic_on_warn.cold+0x19/0x35
[ 41.476769][ T5072] __warn+0xf2/0x1a0
[ 41.480659][ T5072] ? untrack_pfn+0x24b/0x290
[ 41.485244][ T5072] report_bug+0x1c0/0x210
[ 41.489575][ T5072] handle_bug+0x3c/0x70
[ 41.493728][ T5072] exc_invalid_op+0x18/0x50
[ 41.498231][ T5072] asm_exc_invalid_op+0x1a/0x20
[ 41.503183][ T5072] RIP: 0010:untrack_pfn+0x24b/0x290
[ 41.508373][ T5072] Code: 85 6c ff ff ff e8 65 02 47 00 4c 89 ee 4c 89 e7 e8 fa e1 ff ff e8 55 02 47 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 45 02 47 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 c6 ff 96 00 e9 98 fe ff ff e8 ec
[ 41.527979][ T5072] RSP: 0018:ffffc90003c7f748 EFLAGS: 00010293
[ 41.534039][ T5072] RAX: 0000000000000000 RBX: ffff8880762240e0 RCX: 0000000000000000
[ 41.542004][ T5072] RDX: ffff8880217bd7c0 RSI: ffffffff813a06cb RDI: 0000000000000005
[ 41.549971][ T5072] RBP: 1ffff9200078fee9 R08: 0000000000000005 R09: 0000000000000000
[ 41.557936][ T5072] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea
[ 41.565995][ T5072] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888076224100
[ 41.573974][ T5072] ? untrack_pfn+0x24b/0x290
[ 41.578573][ T5072] ? untrack_pfn+0x24b/0x290
[ 41.583162][ T5072] ? track_pfn_insert+0x150/0x150
[ 41.588181][ T5072] ? mas_walk+0x4bd/0x6c0
[ 41.592516][ T5072] ? mas_find+0x211/0xd10
[ 41.596842][ T5072] ? uprobe_munmap+0x20/0x550
[ 41.601520][ T5072] unmap_single_vma+0x1b4/0x2a0
[ 41.606371][ T5072] unmap_vmas+0x226/0x370
[ 41.610704][ T5072] ? unmap_single_vma+0x2a0/0x2a0
[ 41.615724][ T5072] ? find_held_lock+0x2d/0x110
[ 41.620497][ T5072] ? lock_downgrade+0x6e0/0x6e0
[ 41.625358][ T5072] exit_mmap+0x18d/0x7b0
[ 41.629600][ T5072] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 41.635589][ T5072] ? _raw_spin_unlock_irqrestore+0x54/0x70
[ 41.641394][ T5072] __mmput+0x128/0x4c0
[ 41.645457][ T5072] mmput+0x60/0x70
[ 41.649171][ T5072] copy_process+0x4637/0x7530
[ 41.653851][ T5072] ? __cleanup_sighand+0xb0/0xb0
[ 41.658793][ T5072] kernel_clone+0xeb/0x9f0
[ 41.663204][ T5072] ? create_io_thread+0xf0/0xf0
[ 41.668046][ T5072] ? rwlock_bug.part.0+0x90/0x90
[ 41.673063][ T5072] ? _raw_spin_lock_irq+0x45/0x50
[ 41.678086][ T5072] ? find_held_lock+0x2d/0x110
[ 41.682851][ T5072] __do_sys_clone+0xba/0x100
[ 41.687440][ T5072] ? kernel_clone+0x9f0/0x9f0
[ 41.692125][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50
[ 41.697320][ T5072] ? ptrace_notify+0xfe/0x140
[ 41.701998][ T5072] do_syscall_64+0x39/0xb0
[ 41.706426][ T5072] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.712308][ T5072] RIP: 0033:0x7fdbdf8305e9
[ 41.716729][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.736424][ T5072] RSP: 002b:00007ffc9fb19238 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 41.744838][ T5072] RAX: ffffffffffffffda RBX: 0000000000009f1e RCX: 00007fdbdf8305e9
[ 41.752803][ T5072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000
[ 41.760771][ T5072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003132
[ 41.768734][ T5072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 41.776701][ T5072] R13: 431bde82d7b634db R14: 00007ffc9fb19290 R15: 0000000000000000
[ 41.784676][ T5072]
[ 41.788376][ T5072] Kernel Offset: disabled
[ 41.792787][ T5072] Rebooting in 86400 seconds..