./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2000203448 <...> forked to background, child pid 3183 no interfaces have a carrier [ 22.565078][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 22.575765][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.91' (ECDSA) to the list of known hosts. execve("./syz-executor2000203448", ["./syz-executor2000203448"], 0x7ffe72f51120 /* 10 vars */) = 0 brk(NULL) = 0x555556d5e000 brk(0x555556d5ec40) = 0x555556d5ec40 arch_prctl(ARCH_SET_FS, 0x555556d5e300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2000203448", 4096) = 28 brk(0x555556d7fc40) = 0x555556d7fc40 brk(0x555556d80000) = 0x555556d80000 mprotect(0x7f547ce3b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20000000, 16506880, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 userfaultfd(UFFD_USER_MODE_ONLY|O_CLOEXEC) = 3 ioctl(3, UFFDIO_API, 0x20000000) = 0 ioctl(3, UFFDIO_REGISTER, 0x20000080) = 0 syzkaller login: [ 42.576895][ T3604] ------------[ cut here ]------------ [ 42.582808][ T3604] WARNING: CPU: 0 PID: 3604 at include/linux/swapops.h:323 change_protection+0x16e9/0x4280 [ 42.593327][ T3604] Modules linked in: [ 42.597235][ T3604] CPU: 0 PID: 3604 Comm: syz-executor200 Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 42.607689][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 42.617785][ T3604] RIP: 0010:change_protection+0x16e9/0x4280 [ 42.623727][ T3604] Code: ff 48 8b 84 24 90 00 00 00 80 38 00 0f 85 25 29 00 00 48 8b 44 24 10 48 83 b8 90 00 00 00 00 0f 84 8f f9 ff ff e8 47 66 c3 ff <0f> 0b 48 ba 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 42.643432][ T3604] RSP: 0018:ffffc9000385f968 EFLAGS: 00010293 [ 42.649492][ T3604] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 42.657500][ T3604] RDX: ffff888026cc9d80 RSI: ffffffff81b8a1d9 RDI: 0000000000000007 [ 42.665512][ T3604] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 42.673526][ T3604] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 42.681585][ T3604] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 42.689555][ T3604] FS: 0000555556d5e300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 42.698525][ T3604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.705210][ T3604] CR2: 00007fff3df6c020 CR3: 000000001e859000 CR4: 0000000000350ef0 [ 42.713309][ T3604] Call Trace: [ 42.716596][ T3604] [ 42.719704][ T3604] ? prot_none_hugetlb_entry+0x100/0x100 [ 42.725439][ T3604] ? lock_release+0x780/0x780 [ 42.730176][ T3604] uffd_wp_range+0xf0/0x180 [ 42.734678][ T3604] ? mcopy_continue+0x16d0/0x16d0 [ 42.739692][ T3604] ? vmacache_find+0x62/0x330 [ 42.744450][ T3604] mwriteprotect_range+0x2ea/0x420 [ 42.749579][ T3604] userfaultfd_ioctl+0x438/0x43a0 [ 42.754663][ T3604] ? do_vfs_ioctl+0x132/0x15c0 [ 42.759446][ T3604] ? vfs_fileattr_set+0xbe0/0xbe0 [ 42.764544][ T3604] ? userfaultfd_release+0x660/0x660 [ 42.769901][ T3604] ? find_held_lock+0x2d/0x110 [ 42.774675][ T3604] ? calibrate_delay+0x270/0x1120 [ 42.779690][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 42.785154][ T3604] ? _raw_spin_unlock_irq+0x1f/0x40 [ 42.790438][ T3604] ? bpf_lsm_file_ioctl+0x5/0x10 [ 42.795367][ T3604] ? userfaultfd_release+0x660/0x660 [ 42.800741][ T3604] __x64_sys_ioctl+0x193/0x200 [ 42.805525][ T3604] do_syscall_64+0x35/0xb0 [ 42.809992][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.815994][ T3604] RIP: 0033:0x7f547cdcebb9 [ 42.820518][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.840227][ T3604] RSP: 002b:00007fff3defeab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.848689][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f547cdcebb9 [ 42.856771][ T3604] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 42.864820][ T3604] RBP: 00007f547cd92d60 R08: 0000000000000000 R09: 0000000000000000 [ 42.872859][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f547cd92df0 [ 42.880907][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 42.888884][ T3604] [ 42.891967][ T3604] Kernel panic - not syncing: panic_on_warn set ... [ 42.898566][ T3604] CPU: 0 PID: 3604 Comm: syz-executor200 Not tainted 6.0.0-rc7-syzkaller-00132-g987a926c1d8a #0 [ 42.908973][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 42.919035][ T3604] Call Trace: [ 42.922315][ T3604] [ 42.925234][ T3604] dump_stack_lvl+0xcd/0x134 [ 42.929819][ T3604] panic+0x2c8/0x627 [ 42.933718][ T3604] ? panic_print_sys_info.part.0+0x10b/0x10b [ 42.939786][ T3604] ? __warn.cold+0x248/0x2c4 [ 42.944370][ T3604] ? change_protection+0x16e9/0x4280 [ 42.949643][ T3604] __warn.cold+0x259/0x2c4 [ 42.954060][ T3604] ? change_protection+0x16e9/0x4280 [ 42.959346][ T3604] report_bug+0x1bc/0x210 [ 42.963776][ T3604] handle_bug+0x3c/0x60 [ 42.967928][ T3604] exc_invalid_op+0x14/0x40 [ 42.972429][ T3604] asm_exc_invalid_op+0x16/0x20 [ 42.977447][ T3604] RIP: 0010:change_protection+0x16e9/0x4280 [ 42.983343][ T3604] Code: ff 48 8b 84 24 90 00 00 00 80 38 00 0f 85 25 29 00 00 48 8b 44 24 10 48 83 b8 90 00 00 00 00 0f 84 8f f9 ff ff e8 47 66 c3 ff <0f> 0b 48 ba 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 43.002960][ T3604] RSP: 0018:ffffc9000385f968 EFLAGS: 00010293 [ 43.009025][ T3604] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 43.017104][ T3604] RDX: ffff888026cc9d80 RSI: ffffffff81b8a1d9 RDI: 0000000000000007 [ 43.025087][ T3604] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 43.033051][ T3604] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 43.041115][ T3604] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 43.049097][ T3604] ? change_protection+0x16e9/0x4280 [ 43.054394][ T3604] ? change_protection+0x16e9/0x4280 [ 43.059703][ T3604] ? prot_none_hugetlb_entry+0x100/0x100 [ 43.065386][ T3604] ? lock_release+0x780/0x780 [ 43.070070][ T3604] uffd_wp_range+0xf0/0x180 [ 43.074570][ T3604] ? mcopy_continue+0x16d0/0x16d0 [ 43.079687][ T3604] ? vmacache_find+0x62/0x330 [ 43.084365][ T3604] mwriteprotect_range+0x2ea/0x420 [ 43.089501][ T3604] userfaultfd_ioctl+0x438/0x43a0 [ 43.094526][ T3604] ? do_vfs_ioctl+0x132/0x15c0 [ 43.099295][ T3604] ? vfs_fileattr_set+0xbe0/0xbe0 [ 43.104316][ T3604] ? userfaultfd_release+0x660/0x660 [ 43.109603][ T3604] ? find_held_lock+0x2d/0x110 [ 43.114372][ T3604] ? calibrate_delay+0x270/0x1120 [ 43.119399][ T3604] ? lock_downgrade+0x6e0/0x6e0 [ 43.124427][ T3604] ? _raw_spin_unlock_irq+0x1f/0x40 [ 43.129636][ T3604] ? bpf_lsm_file_ioctl+0x5/0x10 [ 43.134575][ T3604] ? userfaultfd_release+0x660/0x660 [ 43.139858][ T3604] __x64_sys_ioctl+0x193/0x200 [ 43.144708][ T3604] do_syscall_64+0x35/0xb0 [ 43.149125][ T3604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.155018][ T3604] RIP: 0033:0x7f547cdcebb9 [ 43.159428][ T3604] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.179042][ T3604] RSP: 002b:00007fff3defeab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.187458][ T3604] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f547cdcebb9 [ 43.195424][ T3604] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 43.203392][ T3604] RBP: 00007f547cd92d60 R08: 0000000000000000 R09: 0000000000000000 [ 43.211361][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f547cd92df0 [ 43.219322][ T3604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.227303][ T3604] [ 43.231028][ T3604] Kernel Offset: disabled [ 43.235425][ T3604] Rebooting in 86400 seconds..