Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program [ 56.135265][ T5050] syz-executor376[5050]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 56.344104][ T5065] general protection fault, probably for non-canonical address 0xdffffc000000001d: 0000 [#1] PREEMPT SMP KASAN [ 56.356315][ T5065] KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef] [ 56.364744][ T5065] CPU: 0 PID: 5065 Comm: syz-executor376 Not tainted 6.6.0-syzkaller-11227-g431f1051884e #0 [ 56.374839][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 56.378249][ T5077] ================================================================== [ 56.384924][ T5065] RIP: 0010:__lock_acquire+0x109/0x5de0 [ 56.393163][ T5077] BUG: KASAN: null-ptr-deref in down_write+0xb3/0x200 [ 56.398687][ T5065] Code: 45 85 c9 0f 84 cc 0e 00 00 44 8b 05 61 da 81 0b 45 85 c0 0f 84 be 0d 00 00 48 ba 00 00 00 00 00 fc ff df 4c 89 d1 48 c1 e9 03 <80> 3c 11 00 0f 85 e8 40 00 00 49 81 3a e0 29 b3 90 0f 84 96 0d 00 [ 56.405600][ T5077] Write of size 8 at addr 0000000000000078 by task syz-executor376/5077 [ 56.425899][ T5065] RSP: 0018:ffffc90004397798 EFLAGS: 00010016 [ 56.434199][ T5077] [ 56.434205][ T5077] CPU: 1 PID: 5077 Comm: syz-executor376 Not tainted 6.6.0-syzkaller-11227-g431f1051884e #0 [ 56.440261][ T5065] [ 56.440266][ T5065] RAX: ffff88807b358000 RBX: 1ffff92000872f23 RCX: 000000000000001d [ 56.442572][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 56.452607][ T5065] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 00000000000000e8 [ 56.454921][ T5077] Call Trace: [ 56.454933][ T5077] [ 56.462870][ T5065] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 56.473013][ T5077] dump_stack_lvl+0xd9/0x1b0 [ 56.480979][ T5065] R10: 00000000000000e8 R11: 0000000000000000 R12: 0000000000000000 [ 56.484247][ T5077] kasan_report+0xda/0x110 [ 56.487157][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.495110][ T5077] ? down_write+0xb3/0x200 [ 56.499673][ T5065] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.507620][ T5077] ? down_write+0xb3/0x200 [ 56.512012][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.519965][ T5077] kasan_check_range+0xef/0x190 [ 56.524356][ T5065] CR2: 000055555607a678 CR3: 0000000025bac000 CR4: 0000000000350ef0 [ 56.533266][ T5077] down_write+0xb3/0x200 [ 56.537656][ T5065] Call Trace: [ 56.544244][ T5077] ? hugetlb_vma_lock_write+0xae/0x100 [ 56.549071][ T5065] [ 56.557014][ T5077] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 56.561232][ T5065] ? show_regs+0x8f/0xa0 [ 56.564498][ T5077] hugetlb_vma_lock_write+0xae/0x100 [ 56.569935][ T5065] ? die_addr+0x4f/0xd0 [ 56.572853][ T5077] __hugetlb_zap_begin+0x1e9/0x2b0 [ 56.578805][ T5065] ? exc_general_protection+0x154/0x230 [ 56.583055][ T5077] unmap_vmas+0x2f4/0x470 [ 56.588493][ T5065] ? asm_exc_general_protection+0x26/0x30 [ 56.592628][ T5077] ? unmap_single_vma+0x2b0/0x2b0 [ 56.597718][ T5065] ? __lock_acquire+0x109/0x5de0 [ 56.603239][ T5077] ? rcu_is_watching+0x12/0xb0 [ 56.607543][ T5065] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 56.613232][ T5077] ? lock_release+0x4bf/0x680 [ 56.618235][ T5065] ? mark_lock+0x105/0x1950 [ 56.623150][ T5077] ? reacquire_held_locks+0x4b0/0x4b0 [ 56.627893][ T5065] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 56.633937][ T5077] ? lru_add_drain_cpu+0x455/0x850 [ 56.638597][ T5065] lock_acquire+0x1ae/0x510 [ 56.643075][ T5077] exit_mmap+0x1ad/0xa60 [ 56.648423][ T5065] ? hugetlb_vma_lock_write+0xae/0x100 [ 56.654740][ T5077] ? uprobe_clear_state+0x4b/0x420 [ 56.660335][ T5065] ? lock_sync+0x190/0x190 [ 56.664832][ T5077] ? do_vma_munmap+0x70/0x70 [ 56.669081][ T5065] ? preempt_count_sub+0x150/0x150 [ 56.674520][ T5077] ? rcu_is_watching+0x12/0xb0 [ 56.679609][ T5065] down_write+0x93/0x200 [ 56.684006][ T5077] __mmput+0x12a/0x4d0 [ 56.688565][ T5065] ? hugetlb_vma_lock_write+0xae/0x100 [ 56.693649][ T5077] mmput+0x62/0x70 [ 56.698383][ T5065] ? rwsem_down_write_slowpath+0x12a0/0x12a0 [ 56.702607][ T5077] do_exit+0x9ad/0x2a20 [ 56.706651][ T5065] hugetlb_vma_lock_write+0xae/0x100 [ 56.712080][ T5077] ? folio_memcg_unlock+0x280/0x280 [ 56.715777][ T5065] __hugetlb_zap_begin+0x1e9/0x2b0 [ 56.721729][ T5077] ? mm_update_next_owner+0x840/0x840 [ 56.725872][ T5065] unmap_vmas+0x2f4/0x470 [ 56.731133][ T5077] ? rcu_is_watching+0x12/0xb0 [ 56.736307][ T5065] ? unmap_single_vma+0x2b0/0x2b0 [ 56.741399][ T5077] __x64_sys_exit+0x42/0x50 [ 56.746747][ T5065] ? reacquire_held_locks+0x4b0/0x4b0 [ 56.751085][ T5077] do_syscall_64+0x3f/0x110 [ 56.755825][ T5065] ? lru_add_drain_cpu+0x455/0x850 [ 56.760827][ T5077] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 56.765308][ T5065] exit_mmap+0x1ad/0xa60 [ 56.770673][ T5077] RIP: 0033:0x7f072702daf9 [ 56.775276][ T5065] ? uprobe_clear_state+0x4b/0x420 [ 56.780380][ T5077] Code: Unable to access opcode bytes at 0x7f072702dacf. [ 56.786250][ T5065] ? do_vma_munmap+0x70/0x70 [ 56.790465][ T5077] RSP: 002b:00007ffca57ab218 EFLAGS: 00000246 [ 56.794876][ T5065] __mmput+0x12a/0x4d0 [ 56.799950][ T5077] ORIG_RAX: 000000000000003c [ 56.806951][ T5065] mmput+0x62/0x70 [ 56.811507][ T5077] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f072702daf9 [ 56.817552][ T5065] do_exit+0x9ad/0x2a20 [ 56.821593][ T5077] RDX: 00007f0727067433 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.826251][ T5065] ? folio_memcg_unlock+0x280/0x280 [ 56.829948][ T5077] RBP: 000000000000db83 R08: 0000000000000000 R09: 0000000000000006 [ 56.837900][ T5065] ? mm_update_next_owner+0x840/0x840 [ 56.842040][ T5077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca57ab22c [ 56.849994][ T5065] __x64_sys_exit+0x42/0x50 [ 56.855166][ T5077] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 56.863118][ T5065] do_syscall_64+0x3f/0x110 [ 56.868473][ T5077] [ 56.876441][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 56.880918][ T5077] ================================================================== [ 56.881339][ T5077] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 56.888883][ T5065] RIP: 0033:0x7f072702daf9 [ 56.888899][ T5065] Code: Unable to access opcode bytes at 0x7f072702dacf. [ 56.888905][ T5065] RSP: 002b:00007ffca57ab218 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 56.888919][ T5065] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f072702daf9 [ 56.888928][ T5065] RDX: 00007f0727067433 RSI: 0000000000000000 RDI: 0000000000000000 [ 56.888936][ T5065] RBP: 000000000000db60 R08: 0000000000000000 R09: 0000000000000006 [ 56.888944][ T5065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca57ab22c [ 56.888952][ T5065] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 56.888965][ T5065] [ 56.888969][ T5065] Modules linked in: [ 56.888979][ T5065] ---[ end trace 0000000000000000 ]--- [ 56.888984][ T5065] RIP: 0010:__lock_acquire+0x109/0x5de0 [ 56.889011][ T5065] Code: 45 85 c9 0f 84 cc 0e 00 00 44 8b 05 61 da 81 0b 45 85 c0 0f 84 be 0d 00 00 48 ba 00 00 00 00 00 fc ff df 4c 89 d1 48 c1 e9 03 <80> 3c 11 00 0f 85 e8 40 00 00 49 81 3a e0 29 b3 90 0f 84 96 0d 00 [ 56.889024][ T5065] RSP: 0018:ffffc90004397798 EFLAGS: 00010016 [ 56.889034][ T5065] RAX: ffff88807b358000 RBX: 1ffff92000872f23 RCX: 000000000000001d [ 56.889043][ T5065] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 00000000000000e8 [ 56.889051][ T5065] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 56.889059][ T5065] R10: 00000000000000e8 R11: 0000000000000000 R12: 0000000000000000 [ 56.889067][ T5065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.889078][ T5065] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.889091][ T5065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.889101][ T5065] CR2: 000055555607a678 CR3: 0000000025bac000 CR4: 0000000000350ef0 [ 57.983233][ T5077] Shutting down cpus with NMI [ 58.184596][ T5077] Kernel Offset: disabled [ 58.188917][ T5077] Rebooting in 86400 seconds..