DUID 00:04:ac:03:58:10:d0:76:5c:28:30:a7:8a:8b:4a:a3:06:e2 forked to background, child pid 3190 [ 27.503619][ T3191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.510408][ T3191] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.126' (ECDSA) to the list of known hosts. syzkaller login: [ 50.420333][ T3609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.421361][ T3609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.422164][ T3609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.422893][ T3609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.423385][ T3609] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.423647][ T3609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 executing program [ 50.498889][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.498901][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.500155][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.525069][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.525085][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.526276][ T1136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.553415][ T3607] ------------[ cut here ]------------ [ 50.553421][ T3607] WARNING: CPU: 1 PID: 3607 at arch/x86/mm/pat/memtype.c:1099 untrack_pfn+0x247/0x290 [ 50.568678][ T3607] Modules linked in: [ 50.572776][ T3607] CPU: 0 PID: 3607 Comm: syz-executor244 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0 [ 50.583115][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.593532][ T3607] RIP: 0010:untrack_pfn+0x247/0x290 [ 50.598767][ T3607] Code: 84 6c ff ff ff e8 d9 66 43 00 4c 89 ee 4c 89 e7 e8 de dd ff ff e8 c9 66 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 b9 66 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 ba 45 90 00 e9 98 fe ff ff e8 f0 [ 50.618482][ T3607] RSP: 0018:ffffc90002e3f710 EFLAGS: 00010293 [ 50.624628][ T3607] RAX: 0000000000000000 RBX: ffff88801bb42d80 RCX: 0000000000000000 [ 50.632725][ T3607] RDX: ffff88801babba80 RSI: ffffffff81378797 RDI: 0000000000000005 [ 50.640699][ T3607] RBP: 1ffff920005c7ee2 R08: 0000000000000005 R09: 0000000000000000 [ 50.648729][ T3607] R10: 00000000ffffffea R11: 0000000000000001 R12: 00000000ffffffea [ 50.656873][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801bb42da0 [ 50.664963][ T3607] FS: 00005555566ea400(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 50.673996][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.680628][ T3607] CR2: 00007f0c6955e6c8 CR3: 000000007f92a000 CR4: 00000000003506e0 [ 50.688752][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.696897][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.704956][ T3607] Call Trace: [ 50.708263][ T3607] [ 50.711282][ T3607] ? track_pfn_insert+0x140/0x140 [ 50.716327][ T3607] ? mas_find+0x20d/0xce0 [ 50.720666][ T3607] ? uprobe_munmap+0x1c/0x550 [ 50.725440][ T3607] unmap_single_vma+0x1b4/0x350 [ 50.730314][ T3607] unmap_vmas+0x21e/0x370 [ 50.734759][ T3607] ? unmap_mapping_range+0x270/0x270 [ 50.740075][ T3607] ? find_held_lock+0x2d/0x110 [ 50.744952][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 50.749849][ T3607] exit_mmap+0x193/0x750 [ 50.754193][ T3607] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 50.760207][ T3607] ? lockdep_init_map_type+0x21a/0x7f0 [ 50.766103][ T3607] __mmput+0x128/0x4c0 [ 50.770184][ T3607] mmput+0x5c/0x70 [ 50.773979][ T3607] dup_mm+0x2e2/0x370 [ 50.777977][ T3607] copy_process+0x3c95/0x7080 [ 50.782722][ T3607] ? lock_chain_count+0x20/0x20 [ 50.787617][ T3607] ? __cleanup_sighand+0xb0/0xb0 [ 50.792682][ T3607] ? __lock_acquire+0x163e/0x5660 [ 50.797750][ T3607] kernel_clone+0xe7/0xab0 [ 50.802273][ T3607] ? create_io_thread+0xe0/0xe0 [ 50.807167][ T3607] ? find_held_lock+0x2d/0x110 [ 50.812154][ T3607] __do_sys_clone+0xba/0x100 [ 50.816767][ T3607] ? kernel_clone+0xab0/0xab0 [ 50.821535][ T3607] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.827523][ T3607] ? syscall_enter_from_user_mode+0x21/0x70 [ 50.833584][ T3607] do_syscall_64+0x35/0xb0 [ 50.838042][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.844028][ T3607] RIP: 0033:0x7f0c694fab69 [ 50.848462][ T3607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.868175][ T3607] RSP: 002b:00007fff69176078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 50.876674][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c694fab69 [ 50.884741][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 50.892798][ T3607] RBP: 00007fff69176080 R08: 0000000000000000 R09: 00007fff69003832 [ 50.900876][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 50.908857][ T3607] R13: 00007fff691760fa R14: 00007f0c6957c460 R15: 00007fff69176130 [ 50.916942][ T3607] [ 50.919964][ T3607] Kernel panic - not syncing: panic_on_warn set ... [ 50.926539][ T3607] CPU: 1 PID: 3607 Comm: syz-executor244 Not tainted 5.19.0-rc1-next-20220610-syzkaller #0 [ 50.936513][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.946563][ T3607] Call Trace: [ 50.949839][ T3607] [ 50.952767][ T3607] dump_stack_lvl+0xcd/0x134 [ 50.957363][ T3607] panic+0x2d7/0x636 [ 50.961267][ T3607] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.967261][ T3607] ? __warn.cold+0x1d9/0x2cd [ 50.971862][ T3607] ? untrack_pfn+0x247/0x290 [ 50.976455][ T3607] __warn.cold+0x1ea/0x2cd [ 50.980880][ T3607] ? untrack_pfn+0x247/0x290 [ 50.985472][ T3607] report_bug+0x1bc/0x210 [ 50.989804][ T3607] handle_bug+0x3c/0x60 [ 50.993964][ T3607] exc_invalid_op+0x14/0x40 [ 50.998487][ T3607] asm_exc_invalid_op+0x1b/0x20 [ 51.003426][ T3607] RIP: 0010:untrack_pfn+0x247/0x290 [ 51.008632][ T3607] Code: 84 6c ff ff ff e8 d9 66 43 00 4c 89 ee 4c 89 e7 e8 de dd ff ff e8 c9 66 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 b9 66 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 ba 45 90 00 e9 98 fe ff ff e8 f0 [ 51.028247][ T3607] RSP: 0018:ffffc90002e3f710 EFLAGS: 00010293 [ 51.034314][ T3607] RAX: 0000000000000000 RBX: ffff88801bb42d80 RCX: 0000000000000000 [ 51.042281][ T3607] RDX: ffff88801babba80 RSI: ffffffff81378797 RDI: 0000000000000005 [ 51.050248][ T3607] RBP: 1ffff920005c7ee2 R08: 0000000000000005 R09: 0000000000000000 [ 51.058216][ T3607] R10: 00000000ffffffea R11: 0000000000000001 R12: 00000000ffffffea [ 51.066534][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801bb42da0 [ 51.074513][ T3607] ? untrack_pfn+0x247/0x290 [ 51.079125][ T3607] ? track_pfn_insert+0x140/0x140 [ 51.084170][ T3607] ? mas_find+0x20d/0xce0 [ 51.088520][ T3607] ? uprobe_munmap+0x1c/0x550 [ 51.093208][ T3607] unmap_single_vma+0x1b4/0x350 [ 51.098070][ T3607] unmap_vmas+0x21e/0x370 [ 51.102409][ T3607] ? unmap_mapping_range+0x270/0x270 [ 51.107700][ T3607] ? find_held_lock+0x2d/0x110 [ 51.112480][ T3607] ? lock_downgrade+0x6e0/0x6e0 [ 51.117341][ T3607] exit_mmap+0x193/0x750 [ 51.121590][ T3607] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 51.127586][ T3607] ? lockdep_init_map_type+0x21a/0x7f0 [ 51.133050][ T3607] __mmput+0x128/0x4c0 [ 51.137135][ T3607] mmput+0x5c/0x70 [ 51.140861][ T3607] dup_mm+0x2e2/0x370 [ 51.144844][ T3607] copy_process+0x3c95/0x7080 [ 51.149523][ T3607] ? lock_chain_count+0x20/0x20 [ 51.154406][ T3607] ? __cleanup_sighand+0xb0/0xb0 [ 51.159345][ T3607] ? __lock_acquire+0x163e/0x5660 [ 51.164378][ T3607] kernel_clone+0xe7/0xab0 [ 51.168799][ T3607] ? create_io_thread+0xe0/0xe0 [ 51.173658][ T3607] ? find_held_lock+0x2d/0x110 [ 51.178434][ T3607] __do_sys_clone+0xba/0x100 [ 51.183025][ T3607] ? kernel_clone+0xab0/0xab0 [ 51.187729][ T3607] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.193632][ T3607] ? syscall_enter_from_user_mode+0x21/0x70 [ 51.199538][ T3607] do_syscall_64+0x35/0xb0 [ 51.203960][ T3607] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 51.209853][ T3607] RIP: 0033:0x7f0c694fab69 [ 51.214267][ T3607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.233872][ T3607] RSP: 002b:00007fff69176078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 51.242294][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c694fab69 [ 51.250263][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 51.258227][ T3607] RBP: 00007fff69176080 R08: 0000000000000000 R09: 00007fff69003832 [ 51.266194][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 51.274159][ T3607] R13: 00007fff691760fa R14: 00007f0c6957c460 R15: 00007fff69176130 [ 51.282143][ T3607] [ 51.285463][ T3607] Kernel Offset: disabled [ 51.289833][ T3607] Rebooting in 86400 seconds..