./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2264338723 <...> Warning: Permanently added '10.128.1.76' (ECDSA) to the list of known hosts. execve("./syz-executor2264338723", ["./syz-executor2264338723"], 0x7ffca446c0c0 /* 10 vars */) = 0 brk(NULL) = 0x555555d80000 brk(0x555555d80c40) = 0x555555d80c40 arch_prctl(ARCH_SET_FS, 0x555555d80300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2264338723", 4096) = 28 brk(0x555555da1c40) = 0x555555da1c40 brk(0x555555da2000) = 0x555555da2000 mprotect(0x7ffaa6ae5000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20000000, 40960, PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS|MAP_32BIT|MAP_GROWSDOWN|MAP_LOCKED, -1, 0) = 0x20000000 munmap(0x20001000, 12288) = 0 clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 5001 attached ) = 5001 [ 57.110800][ T5000] ------------[ cut here ]------------ [ 57.116588][ T5000] WARNING: CPU: 0 PID: 5000 at mm/gup.c:1173 __get_user_pages+0xd49/0x1080 [ 57.125340][ T5000] Modules linked in: [ 57.129223][ T5000] CPU: 0 PID: 5000 Comm: syz-executor226 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0 [ 57.139356][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 57.149452][ T5000] RIP: 0010:__get_user_pages+0xd49/0x1080 [ 57.155237][ T5000] Code: 89 f8 48 c1 e8 03 80 3c 08 00 0f 85 bc 02 00 00 48 8b 44 24 20 48 8b 80 c0 00 00 00 48 8d 1c e8 e9 ad f7 ff ff e8 37 19 c3 ff <0f> 0b e9 32 f6 ff ff e8 2b 19 c3 ff 0f 0b e8 24 19 c3 ff 44 89 ed [ 57.175001][ T5000] RSP: 0018:ffffc90003b7f768 EFLAGS: 00010293 [ 57.181088][ T5000] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000000 [ 57.189104][ T5000] RDX: ffff888013b13b80 RSI: ffffffff81c1b599 RDI: 0000000000000007 [ 57.197178][ T5000] RBP: 0000000020001000 R08: 0000000000000007 R09: 0000000000000000 [ 57.206042][ T5000] R10: 0000000000000100 R11: 0000000000000001 R12: ffff8880282f0100 [ 57.214317][ T5000] R13: 00000000002d0001 R14: 0000000020001000 R15: 0000000000000001 [ 57.222302][ T5000] FS: 0000555555d80300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 57.231368][ T5000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.238006][ T5000] CR2: 0000000020003008 CR3: 0000000075a6a000 CR4: 00000000003506f0 [ 57.246048][ T5000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 5000] process_vm_writev(5001, 0x20000340, 1, 0x20000540, 727, 0 [pid 5001] exit(0) = ? [pid 5001] +++ exited with 0 +++ [ 57.254185][ T5000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 57.262158][ T5000] Call Trace: [ 57.265477][ T5000] [ 57.268422][ T5000] ? __warn+0xe6/0x390 [ 57.272488][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.277687][ T5000] ? report_bug+0x2da/0x500 [ 57.282217][ T5000] ? handle_bug+0x3c/0x70 [ 57.286599][ T5000] ? exc_invalid_op+0x18/0x50 [ 57.291296][ T5000] ? asm_exc_invalid_op+0x1a/0x20 [ 57.296405][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.301556][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.306751][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.311893][ T5000] ? follow_page_mask+0xdc0/0xdc0 [ 57.317014][ T5000] __gup_longterm_locked+0x6f9/0x23e0 [ 57.322416][ T5000] ? aa_restore_previous_label+0x970/0x970 [ 57.328385][ T5000] ? get_user_pages_unlocked+0x810/0x810 [ 57.334153][ T5000] ? lock_sync+0x190/0x190 [ 57.338603][ T5000] pin_user_pages_remote+0xee/0x140 [ 57.343870][ T5000] ? __gup_longterm_locked+0x23e0/0x23e0 [ 57.349562][ T5000] process_vm_rw_core.constprop.0+0x437/0x980 [ 57.355736][ T5000] ? exc_page_fault+0xc0/0x170 [ 57.360621][ T5000] ? vmalloc_dump_obj+0x270/0x270 [ 57.365703][ T5000] ? copy_iovec_from_user.part.0+0x26/0x100 [ 57.371623][ T5000] ? copy_iovec_from_user.part.0+0x29/0x100 [ 57.377604][ T5000] ? copy_iovec_from_user.part.0+0xc7/0x100 [ 57.383522][ T5000] ? iovec_from_user.part.0+0x7a/0x170 [ 57.389045][ T5000] process_vm_rw+0x29c/0x300 [ 57.393708][ T5000] ? process_vm_rw_core.constprop.0+0x980/0x980 [ 57.399953][ T5000] ? lock_sync+0x190/0x190 [ 57.404408][ T5000] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 57.409638][ T5000] ? spin_bug+0x1c0/0x1c0 [ 57.414055][ T5000] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 57.419539][ T5000] ? ptrace_stop.part.0+0x60f/0x8e0 [ 57.424787][ T5000] ? find_held_lock+0x2d/0x110 [ 57.429570][ T5000] ? ptrace_notify+0xfe/0x140 [ 57.434313][ T5000] ? lock_downgrade+0x690/0x690 [ 57.439191][ T5000] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.444443][ T5000] __x64_sys_process_vm_writev+0xe3/0x1b0 [ 57.450187][ T5000] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 57.456508][ T5000] do_syscall_64+0x39/0xb0 [ 57.460940][ T5000] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.466914][ T5000] RIP: 0033:0x7ffaa6a78be9 [ 57.471371][ T5000] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.491401][ T5000] RSP: 002b:00007ffe07345da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 57.499903][ T5000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffaa6a78be9 [ 57.507992][ T5000] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000001389 [ 57.516112][ T5000] RBP: 00007ffaa6a3cd30 R08: 00000000000002d7 R09: 0000000000000000 [ 57.524226][ T5000] R10: 0000000020000540 R11: 0000000000000246 R12: 00007ffaa6a3cdc0 [ 57.532300][ T5000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.540353][ T5000] [ 57.543393][ T5000] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.550770][ T5000] CPU: 0 PID: 5000 Comm: syz-executor226 Not tainted 6.4.0-syzkaller-10062-gf8566aa4f176 #0 [ 57.560924][ T5000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 57.570969][ T5000] Call Trace: [ 57.574300][ T5000] [ 57.577281][ T5000] dump_stack_lvl+0xd9/0x150 [ 57.582129][ T5000] panic+0x686/0x730 [ 57.586026][ T5000] ? panic_smp_self_stop+0xa0/0xa0 [ 57.591131][ T5000] ? show_trace_log_lvl+0x284/0x390 [ 57.596340][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.601464][ T5000] check_panic_on_warn+0xb1/0xc0 [ 57.606413][ T5000] __warn+0xf2/0x390 [ 57.610403][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.615527][ T5000] report_bug+0x2da/0x500 [ 57.619868][ T5000] handle_bug+0x3c/0x70 [ 57.624031][ T5000] exc_invalid_op+0x18/0x50 [ 57.628544][ T5000] asm_exc_invalid_op+0x1a/0x20 [ 57.633426][ T5000] RIP: 0010:__get_user_pages+0xd49/0x1080 [ 57.639164][ T5000] Code: 89 f8 48 c1 e8 03 80 3c 08 00 0f 85 bc 02 00 00 48 8b 44 24 20 48 8b 80 c0 00 00 00 48 8d 1c e8 e9 ad f7 ff ff e8 37 19 c3 ff <0f> 0b e9 32 f6 ff ff e8 2b 19 c3 ff 0f 0b e8 24 19 c3 ff 44 89 ed [ 57.658781][ T5000] RSP: 0018:ffffc90003b7f768 EFLAGS: 00010293 [ 57.665028][ T5000] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000000 [ 57.673000][ T5000] RDX: ffff888013b13b80 RSI: ffffffff81c1b599 RDI: 0000000000000007 [ 57.680977][ T5000] RBP: 0000000020001000 R08: 0000000000000007 R09: 0000000000000000 [ 57.688950][ T5000] R10: 0000000000000100 R11: 0000000000000001 R12: ffff8880282f0100 [ 57.696942][ T5000] R13: 00000000002d0001 R14: 0000000020001000 R15: 0000000000000001 [ 57.704924][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.710048][ T5000] ? __get_user_pages+0xd49/0x1080 [ 57.715173][ T5000] ? follow_page_mask+0xdc0/0xdc0 [ 57.720221][ T5000] __gup_longterm_locked+0x6f9/0x23e0 [ 57.725606][ T5000] ? aa_restore_previous_label+0x970/0x970 [ 57.731435][ T5000] ? get_user_pages_unlocked+0x810/0x810 [ 57.737088][ T5000] ? lock_sync+0x190/0x190 [ 57.741532][ T5000] pin_user_pages_remote+0xee/0x140 [ 57.746745][ T5000] ? __gup_longterm_locked+0x23e0/0x23e0 [ 57.752398][ T5000] process_vm_rw_core.constprop.0+0x437/0x980 [ 57.758478][ T5000] ? exc_page_fault+0xc0/0x170 [ 57.763280][ T5000] ? vmalloc_dump_obj+0x270/0x270 [ 57.768320][ T5000] ? copy_iovec_from_user.part.0+0x26/0x100 [ 57.774225][ T5000] ? copy_iovec_from_user.part.0+0x29/0x100 [ 57.780130][ T5000] ? copy_iovec_from_user.part.0+0xc7/0x100 [ 57.786127][ T5000] ? iovec_from_user.part.0+0x7a/0x170 [ 57.791878][ T5000] process_vm_rw+0x29c/0x300 [ 57.796566][ T5000] ? process_vm_rw_core.constprop.0+0x980/0x980 [ 57.802911][ T5000] ? lock_sync+0x190/0x190 [ 57.807341][ T5000] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 57.812557][ T5000] ? spin_bug+0x1c0/0x1c0 [ 57.816921][ T5000] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 57.822475][ T5000] ? ptrace_stop.part.0+0x60f/0x8e0 [ 57.827691][ T5000] ? find_held_lock+0x2d/0x110 [ 57.832482][ T5000] ? ptrace_notify+0xfe/0x140 [ 57.837176][ T5000] ? lock_downgrade+0x690/0x690 [ 57.842037][ T5000] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.847259][ T5000] __x64_sys_process_vm_writev+0xe3/0x1b0 [ 57.852985][ T5000] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 57.859330][ T5000] do_syscall_64+0x39/0xb0 [ 57.863754][ T5000] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.870006][ T5000] RIP: 0033:0x7ffaa6a78be9 [ 57.874440][ T5000] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.894063][ T5000] RSP: 002b:00007ffe07345da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 57.902509][ T5000] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ffaa6a78be9 [ 57.910584][ T5000] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000001389 [ 57.918559][ T5000] RBP: 00007ffaa6a3cd30 R08: 00000000000002d7 R09: 0000000000000000 [ 57.926533][ T5000] R10: 0000000020000540 R11: 0000000000000246 R12: 00007ffaa6a3cdc0 [ 57.934517][ T5000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.942512][ T5000] [ 57.945727][ T5000] Kernel Offset: disabled [ 57.950133][ T5000] Rebooting in 86400 seconds..