./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1473682644 <...> DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d forked to background, child pid 3188 [ 23.192173][ T3189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.200722][ T3189] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. execve("./syz-executor1473682644", ["./syz-executor1473682644"], 0x7fffb6a96f00 /* 10 vars */) = 0 brk(NULL) = 0x555555ee5000 brk(0x555555ee5c40) = 0x555555ee5c40 arch_prctl(ARCH_SET_FS, 0x555555ee5300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1473682644", 4096) = 28 brk(0x555555f06c40) = 0x555555f06c40 brk(0x555555f07000) = 0x555555f07000 mprotect(0x7f42a194c000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20000000, 16506880, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 userfaultfd(UFFD_USER_MODE_ONLY|O_CLOEXEC) = 3 ioctl(3, UFFDIO_API, 0x20000000) = 0 ioctl(3, UFFDIO_REGISTER, 0x20000080) = 0 syzkaller login: [ 40.550555][ T3610] ------------[ cut here ]------------ [ 40.556032][ T3610] WARNING: CPU: 0 PID: 3610 at include/linux/swapops.h:442 change_protection+0x17bf/0x4320 [ 40.566194][ T3610] Modules linked in: [ 40.570091][ T3610] CPU: 0 PID: 3610 Comm: syz-executor147 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0 [ 40.580002][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 40.590067][ T3610] RIP: 0010:change_protection+0x17bf/0x4320 [ 40.595949][ T3610] Code: 97 2d c3 ff 48 8b 84 24 88 00 00 00 80 38 00 0f 85 b5 2a 00 00 48 8b 44 24 10 48 83 78 60 00 0f 84 b4 f8 ff ff e8 71 2d c3 ff <0f> 0b 48 b9 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 40.615586][ T3610] RSP: 0018:ffffc90003daf910 EFLAGS: 00010293 [ 40.621680][ T3610] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 40.629661][ T3610] RDX: ffff8880207dd7c0 RSI: ffffffff81b9668f RDI: 0000000000000007 [ 40.637648][ T3610] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 40.645604][ T3610] R10: 0000000000000004 R11: 000000000008c07e R12: 0000000000000000 [ 40.653587][ T3610] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 40.661573][ T3610] FS: 0000555555ee5300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 40.670537][ T3610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.677145][ T3610] CR2: 00000000005d84c8 CR3: 0000000026d49000 CR4: 00000000003506f0 [ 40.685106][ T3610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.693097][ T3610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.701086][ T3610] Call Trace: [ 40.704365][ T3610] [ 40.707311][ T3610] ? security_file_ioctl+0x50/0xb0 [ 40.712437][ T3610] ? prot_none_hugetlb_entry+0x100/0x100 [ 40.718105][ T3610] ? mt_find+0x3bb/0xee0 [ 40.722354][ T3610] ? lock_release+0x810/0x810 [ 40.727044][ T3610] uffd_wp_range+0xf0/0x180 [ 40.731560][ T3610] ? mcopy_continue+0x14b0/0x14b0 [ 40.736604][ T3610] ? find_vma+0x108/0x1a0 [ 40.740946][ T3610] ? can_vma_merge_before+0x390/0x390 [ 40.746336][ T3610] ? tomoyo_path_number_perm+0x413/0x550 [ 40.751986][ T3610] mwriteprotect_range+0x2e4/0x420 [ 40.757122][ T3610] userfaultfd_ioctl+0x447/0x4200 [ 40.762162][ T3610] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.767642][ T3610] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 40.773550][ T3610] ? userfaultfd_release+0x680/0x680 [ 40.778855][ T3610] ? vfs_fileattr_set+0xbe0/0xbe0 [ 40.783910][ T3610] ? rcu_read_lock_sched_held+0xd/0x70 [ 40.789387][ T3610] ? lock_release+0x5cb/0x810 [ 40.794062][ T3610] ? calibrate_delay+0xe0/0x1120 [ 40.799017][ T3610] ? lock_downgrade+0x6e0/0x6e0 [ 40.803881][ T3610] ? bpf_lsm_file_ioctl+0x5/0x10 [ 40.808834][ T3610] ? userfaultfd_release+0x680/0x680 [ 40.814140][ T3610] __x64_sys_ioctl+0x193/0x200 [ 40.818926][ T3610] do_syscall_64+0x35/0xb0 [ 40.823346][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 40.829257][ T3610] RIP: 0033:0x7f42a18dfbb9 [ 40.833676][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 40.853298][ T3610] RSP: 002b:00007ffe629b4e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.861745][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f42a18dfbb9 [ 40.869724][ T3610] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 40.877704][ T3610] RBP: 00007f42a18a3d60 R08: 0000000000000000 R09: 0000000000000000 [ 40.885675][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f42a18a3df0 [ 40.893661][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.901654][ T3610] [ 40.904658][ T3610] Kernel panic - not syncing: panic_on_warn set ... [ 40.911242][ T3610] CPU: 0 PID: 3610 Comm: syz-executor147 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0 [ 40.921127][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 40.931164][ T3610] Call Trace: [ 40.934426][ T3610] [ 40.937342][ T3610] dump_stack_lvl+0xcd/0x134 [ 40.941931][ T3610] panic+0x2c8/0x622 [ 40.945812][ T3610] ? panic_print_sys_info.part.0+0x110/0x110 [ 40.951779][ T3610] ? __warn.cold+0x24b/0x350 [ 40.956350][ T3610] ? change_protection+0x17bf/0x4320 [ 40.961624][ T3610] __warn.cold+0x25c/0x350 [ 40.966053][ T3610] ? change_protection+0x17bf/0x4320 [ 40.971329][ T3610] report_bug+0x1bc/0x210 [ 40.975651][ T3610] handle_bug+0x3c/0x60 [ 40.979844][ T3610] exc_invalid_op+0x14/0x40 [ 40.984419][ T3610] asm_exc_invalid_op+0x16/0x20 [ 40.989260][ T3610] RIP: 0010:change_protection+0x17bf/0x4320 [ 40.995138][ T3610] Code: 97 2d c3 ff 48 8b 84 24 88 00 00 00 80 38 00 0f 85 b5 2a 00 00 48 8b 44 24 10 48 83 78 60 00 0f 84 b4 f8 ff ff e8 71 2d c3 ff <0f> 0b 48 b9 00 00 00 00 00 fc ff df 48 8b 04 24 48 c1 e8 03 80 3c [ 41.014729][ T3610] RSP: 0018:ffffc90003daf910 EFLAGS: 00010293 [ 41.020778][ T3610] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 41.028730][ T3610] RDX: ffff8880207dd7c0 RSI: ffffffff81b9668f RDI: 0000000000000007 [ 41.036681][ T3610] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 41.044634][ T3610] R10: 0000000000000004 R11: 000000000008c07e R12: 0000000000000000 [ 41.052591][ T3610] R13: ffff8880000001e8 R14: 0000000000000000 R15: 000000002063e000 [ 41.060553][ T3610] ? change_protection+0x17bf/0x4320 [ 41.065846][ T3610] ? security_file_ioctl+0x50/0xb0 [ 41.070956][ T3610] ? prot_none_hugetlb_entry+0x100/0x100 [ 41.076589][ T3610] ? mt_find+0x3bb/0xee0 [ 41.080819][ T3610] ? lock_release+0x810/0x810 [ 41.085654][ T3610] uffd_wp_range+0xf0/0x180 [ 41.090146][ T3610] ? mcopy_continue+0x14b0/0x14b0 [ 41.095160][ T3610] ? find_vma+0x108/0x1a0 [ 41.099478][ T3610] ? can_vma_merge_before+0x390/0x390 [ 41.104838][ T3610] ? tomoyo_path_number_perm+0x413/0x550 [ 41.110468][ T3610] mwriteprotect_range+0x2e4/0x420 [ 41.115571][ T3610] userfaultfd_ioctl+0x447/0x4200 [ 41.120586][ T3610] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.126035][ T3610] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 41.131925][ T3610] ? userfaultfd_release+0x680/0x680 [ 41.137197][ T3610] ? vfs_fileattr_set+0xbe0/0xbe0 [ 41.142212][ T3610] ? rcu_read_lock_sched_held+0xd/0x70 [ 41.147662][ T3610] ? lock_release+0x5cb/0x810 [ 41.152322][ T3610] ? calibrate_delay+0xe0/0x1120 [ 41.157250][ T3610] ? lock_downgrade+0x6e0/0x6e0 [ 41.162093][ T3610] ? bpf_lsm_file_ioctl+0x5/0x10 [ 41.167449][ T3610] ? userfaultfd_release+0x680/0x680 [ 41.172723][ T3610] __x64_sys_ioctl+0x193/0x200 [ 41.177475][ T3610] do_syscall_64+0x35/0xb0 [ 41.181874][ T3610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.187761][ T3610] RIP: 0033:0x7f42a18dfbb9 [ 41.192161][ T3610] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 41.211839][ T3610] RSP: 002b:00007ffe629b4e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.220238][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f42a18dfbb9 [ 41.228192][ T3610] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 41.236148][ T3610] RBP: 00007f42a18a3d60 R08: 0000000000000000 R09: 0000000000000000 [ 41.244102][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f42a18a3df0 [ 41.252063][ T3610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 41.260021][ T3610] [ 41.263194][ T3610] Kernel Offset: disabled [ 41.267509][ T3610] Rebooting in 86400 seconds..