./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2132488194
<...>
DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d
forked to background, child pid 3187
[ 23.389512][ T3188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 23.406706][ T3188] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.101' (ECDSA) to the list of known hosts.
execve("./syz-executor2132488194", ["./syz-executor2132488194"], 0x7fff614f6b80 /* 10 vars */) = 0
brk(NULL) = 0x555556e04000
brk(0x555556e04c40) = 0x555556e04c40
arch_prctl(ARCH_SET_FS, 0x555556e04300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2132488194", 4096) = 28
brk(0x555556e25c40) = 0x555556e25c40
brk(0x555556e26000) = 0x555556e26000
mprotect(0x7f042c905000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_XDP, insn_cnt=4, insns=0x200008c0, license="GPL", log_level=4, log_size=4096, log_buf="", kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=8, func_info=NULL, func_info_cnt=0, line_info_rec_size=16, line_info=NULL, line_info_cnt=0, attach_btf_id=0}, 112) = 3
syzkaller login: [ 42.669690][ T3616] ------------[ cut here ]------------
[ 42.675199][ T3616] CPA refuse W^X violation: 8000000000000163 -> 0000000000000163 range: 0xffffffffa0401000 - 0xffffffffa0401fff PFN 200fb
[ 42.688037][ T3616] WARNING: CPU: 1 PID: 3616 at arch/x86/mm/pat/set_memory.c:601 __change_page_attr_set_clr+0x1faa/0x2080
[ 42.699294][ T3616] Modules linked in:
[ 42.703174][ T3616] CPU: 1 PID: 3616 Comm: syz-executor213 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0
[ 42.713088][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 42.723173][ T3616] RIP: 0010:__change_page_attr_set_clr+0x1faa/0x2080
[ 42.729875][ T3616] Code: 8b 44 24 50 4d 89 f1 4c 89 e2 4c 89 ee 48 c7 c7 80 0c ea 89 c6 05 68 26 94 0c 01 4c 8d 80 ff 0f 00 00 48 89 c1 e8 56 a4 10 08 <0f> 0b e9 68 fc ff ff e8 6a b3 91 00 e9 be f7 ff ff 48 8b 7c 24 08
[ 42.749535][ T3616] RSP: 0018:ffffc90003c7f6c0 EFLAGS: 00010286
[ 42.755644][ T3616] RAX: 0000000000000000 RBX: 80000000200fb163 RCX: 0000000000000000
[ 42.763621][ T3616] RDX: ffff88807ab50000 RSI: ffffffff81620008 RDI: fffff5200078feca
[ 42.771619][ T3616] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 42.779637][ T3616] R10: 0000000000000001 R11: 7566657220415043 R12: 0000000000000163
[ 42.787636][ T3616] R13: 8000000000000163 R14: 00000000000200fb R15: 0000000000000000
[ 42.795647][ T3616] FS: 0000555556e04300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 42.804581][ T3616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 42.811195][ T3616] CR2: 000000002062b000 CR3: 0000000075510000 CR4: 00000000003506e0
[ 42.819192][ T3616] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 42.827185][ T3616] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 42.835156][ T3616] Call Trace:
[ 42.838448][ T3616]
[ 42.841390][ T3616] ? flush_tlb_one_kernel+0x60/0x60
[ 42.846625][ T3616] ? on_each_cpu_cond_mask+0x70/0xa0
[ 42.851935][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 42.857436][ T3616] ? static_protections+0x670/0x670
[ 42.862644][ T3616] ? __mutex_unlock_slowpath+0x157/0x5e0
[ 42.868333][ T3616] ? __pte_alloc_kernel+0xbb/0x110
[ 42.873455][ T3616] ? wait_for_completion_io_timeout+0x20/0x20
[ 42.879560][ T3616] ? _vm_unmap_aliases.part.0+0x481/0x570
[ 42.885297][ T3616] change_page_attr_set_clr+0x333/0x500
[ 42.890882][ T3616] ? __change_page_attr_set_clr+0x2080/0x2080
[ 42.896974][ T3616] ? __vmalloc_node_range+0x1046/0x13a0
[ 42.902518][ T3616] ? lock_release+0x5cb/0x810
[ 42.907213][ T3616] ? find_vm_area+0x117/0x190
[ 42.911906][ T3616] ? lock_downgrade+0x6e0/0x6e0
[ 42.916804][ T3616] set_memory_x+0xb2/0x110
[ 42.921243][ T3616] ? set_mce_nospec+0xe0/0xe0
[ 42.925960][ T3616] ? _raw_spin_unlock+0x24/0x40
[ 42.930830][ T3616] ? find_vm_area+0x145/0x190
[ 42.935554][ T3616] bpf_jit_alloc_exec_page+0x69/0x80
[ 42.940852][ T3616] bpf_dispatcher_change_prog+0x303/0x8f0
[ 42.946604][ T3616] ? bpf_test_init.isra.0+0x122/0x150
[ 42.951994][ T3616] bpf_prog_test_run_xdp+0x95e/0x1440
[ 42.957397][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 42.962877][ T3616] ? lock_release+0x5cb/0x810
[ 42.967577][ T3616] ? trace_hardirqs_on+0x2d/0x160
[ 42.972611][ T3616] ? __might_fault+0xd1/0x170
[ 42.977309][ T3616] ? bpf_prog_test_run_skb+0x1e60/0x1e60
[ 42.982960][ T3616] ? __switch_to+0x5cc/0x10e0
[ 42.987660][ T3616] ? __fget_light+0x20a/0x270
[ 42.992352][ T3616] ? bpf_prog_test_run_skb+0x1e60/0x1e60
[ 42.998016][ T3616] __sys_bpf+0x10a0/0x4cf0
[ 43.002467][ T3616] ? lock_release+0x810/0x810
[ 43.007296][ T3616] ? bpf_perf_link_attach+0x520/0x520
[ 43.012708][ T3616] ? do_raw_spin_lock+0x120/0x2a0
[ 43.017768][ T3616] ? rwlock_bug.part.0+0x90/0x90
[ 43.022721][ T3616] ? recalc_sigpending_tsk+0x18f/0x1d0
[ 43.028226][ T3616] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.033436][ T3616] ? trace_hardirqs_on+0x2d/0x160
[ 43.038501][ T3616] __x64_sys_bpf+0x75/0xb0
[ 43.042931][ T3616] do_syscall_64+0x35/0xb0
[ 43.047382][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.053298][ T3616] RIP: 0033:0x7f042c898d39
[ 43.057764][ T3616] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.077413][ T3616] RSP: 002b:00007ffe73d9be08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 43.085850][ T3616] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f042c898d39
[ 43.093824][ T3616] RDX: 0000000000000048 RSI: 0000000020000740 RDI: 000000000000000a
[ 43.101815][ T3616] RBP: 00007f042c85cee0 R08: 0000000000000000 R09: 0000000000000000
[ 43.109816][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f042c85cf70
[ 43.117800][ T3616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.125803][ T3616]
[ 43.128812][ T3616] Kernel panic - not syncing: panic_on_warn set ...
[ 43.135376][ T3616] CPU: 1 PID: 3616 Comm: syz-executor213 Not tainted 6.0.0-rc6-next-20220923-syzkaller #0
[ 43.145249][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 43.155286][ T3616] Call Trace:
[ 43.158550][ T3616]
[ 43.161469][ T3616] dump_stack_lvl+0xcd/0x134
[ 43.166053][ T3616] panic+0x2c8/0x622
[ 43.169934][ T3616] ? panic_print_sys_info.part.0+0x110/0x110
[ 43.175901][ T3616] ? __warn.cold+0x24b/0x350
[ 43.180476][ T3616] ? __change_page_attr_set_clr+0x1faa/0x2080
[ 43.186538][ T3616] __warn.cold+0x25c/0x350
[ 43.190960][ T3616] ? __wake_up_klogd.part.0+0x99/0xf0
[ 43.196338][ T3616] ? __change_page_attr_set_clr+0x1faa/0x2080
[ 43.202413][ T3616] report_bug+0x1bc/0x210
[ 43.206756][ T3616] handle_bug+0x3c/0x60
[ 43.210916][ T3616] exc_invalid_op+0x14/0x40
[ 43.215422][ T3616] asm_exc_invalid_op+0x16/0x20
[ 43.220290][ T3616] RIP: 0010:__change_page_attr_set_clr+0x1faa/0x2080
[ 43.226975][ T3616] Code: 8b 44 24 50 4d 89 f1 4c 89 e2 4c 89 ee 48 c7 c7 80 0c ea 89 c6 05 68 26 94 0c 01 4c 8d 80 ff 0f 00 00 48 89 c1 e8 56 a4 10 08 <0f> 0b e9 68 fc ff ff e8 6a b3 91 00 e9 be f7 ff ff 48 8b 7c 24 08
[ 43.246582][ T3616] RSP: 0018:ffffc90003c7f6c0 EFLAGS: 00010286
[ 43.252652][ T3616] RAX: 0000000000000000 RBX: 80000000200fb163 RCX: 0000000000000000
[ 43.260624][ T3616] RDX: ffff88807ab50000 RSI: ffffffff81620008 RDI: fffff5200078feca
[ 43.268593][ T3616] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
[ 43.276565][ T3616] R10: 0000000000000001 R11: 7566657220415043 R12: 0000000000000163
[ 43.284535][ T3616] R13: 8000000000000163 R14: 00000000000200fb R15: 0000000000000000
[ 43.292511][ T3616] ? vprintk+0x88/0x90
[ 43.296595][ T3616] ? flush_tlb_one_kernel+0x60/0x60
[ 43.301796][ T3616] ? on_each_cpu_cond_mask+0x70/0xa0
[ 43.307091][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 43.312573][ T3616] ? static_protections+0x670/0x670
[ 43.317777][ T3616] ? __mutex_unlock_slowpath+0x157/0x5e0
[ 43.323415][ T3616] ? __pte_alloc_kernel+0xbb/0x110
[ 43.328533][ T3616] ? wait_for_completion_io_timeout+0x20/0x20
[ 43.334608][ T3616] ? _vm_unmap_aliases.part.0+0x481/0x570
[ 43.340344][ T3616] change_page_attr_set_clr+0x333/0x500
[ 43.345897][ T3616] ? __change_page_attr_set_clr+0x2080/0x2080
[ 43.351968][ T3616] ? __vmalloc_node_range+0x1046/0x13a0
[ 43.357535][ T3616] ? lock_release+0x5cb/0x810
[ 43.362215][ T3616] ? find_vm_area+0x117/0x190
[ 43.366902][ T3616] ? lock_downgrade+0x6e0/0x6e0
[ 43.371757][ T3616] set_memory_x+0xb2/0x110
[ 43.376180][ T3616] ? set_mce_nospec+0xe0/0xe0
[ 43.380866][ T3616] ? _raw_spin_unlock+0x24/0x40
[ 43.385732][ T3616] ? find_vm_area+0x145/0x190
[ 43.390423][ T3616] bpf_jit_alloc_exec_page+0x69/0x80
[ 43.395722][ T3616] bpf_dispatcher_change_prog+0x303/0x8f0
[ 43.401450][ T3616] ? bpf_test_init.isra.0+0x122/0x150
[ 43.406836][ T3616] bpf_prog_test_run_xdp+0x95e/0x1440
[ 43.412229][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 43.417705][ T3616] ? lock_release+0x5cb/0x810
[ 43.422384][ T3616] ? trace_hardirqs_on+0x2d/0x160
[ 43.427410][ T3616] ? __might_fault+0xd1/0x170
[ 43.432092][ T3616] ? bpf_prog_test_run_skb+0x1e60/0x1e60
[ 43.437744][ T3616] ? __switch_to+0x5cc/0x10e0
[ 43.442430][ T3616] ? __fget_light+0x20a/0x270
[ 43.447119][ T3616] ? bpf_prog_test_run_skb+0x1e60/0x1e60
[ 43.452775][ T3616] __sys_bpf+0x10a0/0x4cf0
[ 43.457196][ T3616] ? lock_release+0x810/0x810
[ 43.461880][ T3616] ? bpf_perf_link_attach+0x520/0x520
[ 43.467257][ T3616] ? do_raw_spin_lock+0x120/0x2a0
[ 43.472288][ T3616] ? rwlock_bug.part.0+0x90/0x90
[ 43.477236][ T3616] ? recalc_sigpending_tsk+0x18f/0x1d0
[ 43.482720][ T3616] ? _raw_spin_unlock_irq+0x1f/0x40
[ 43.487931][ T3616] ? trace_hardirqs_on+0x2d/0x160
[ 43.492959][ T3616] __x64_sys_bpf+0x75/0xb0
[ 43.497388][ T3616] do_syscall_64+0x35/0xb0
[ 43.501815][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 43.507722][ T3616] RIP: 0033:0x7f042c898d39
[ 43.512139][ T3616] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 43.531755][ T3616] RSP: 002b:00007ffe73d9be08 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 43.540172][ T3616] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f042c898d39
[ 43.548150][ T3616] RDX: 0000000000000048 RSI: 0000000020000740 RDI: 000000000000000a
[ 43.556122][ T3616] RBP: 00007f042c85cee0 R08: 0000000000000000 R09: 0000000000000000
[ 43.564098][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f042c85cf70
[ 43.572072][ T3616] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 43.580047][ T3616]
[ 43.583225][ T3616] Kernel Offset: disabled
[ 43.587544][ T3616] Rebooting in 86400 seconds..