./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2645492712 <...> Warning: Permanently added '10.128.0.118' (ECDSA) to the list of known hosts. execve("./syz-executor2645492712", ["./syz-executor2645492712"], 0x7fff981494f0 /* 10 vars */) = 0 brk(NULL) = 0x555556cf0000 brk(0x555556cf0c40) = 0x555556cf0c40 arch_prctl(ARCH_SET_FS, 0x555556cf0300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2645492712", 4096) = 28 brk(0x555556d11c40) = 0x555556d11c40 brk(0x555556d12000) = 0x555556d12000 mprotect(0x7f66c040b000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 write(4, "13", 2) = 2 [ 52.798949][ T4998] FAULT_INJECTION: forcing a failure. [ 52.798949][ T4998] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.812340][ T4998] CPU: 1 PID: 4998 Comm: syz-executor264 Not tainted 6.4.0-rc7-syzkaller-00194-g8a28a0b6f1a1 #0 [ 52.822762][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 52.832842][ T4998] Call Trace: [ 52.836145][ T4998] [ 52.839065][ T4998] dump_stack_lvl+0x136/0x150 [ 52.843754][ T4998] should_fail_ex+0x4a3/0x5b0 [ 52.848432][ T4998] prepare_alloc_pages+0x178/0x570 [ 52.853539][ T4998] __alloc_pages+0x149/0x4a0 [ 52.858119][ T4998] ? lock_sync+0x190/0x190 [ 52.862525][ T4998] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 52.869287][ T4998] ? find_held_lock+0x2d/0x110 [ 52.874038][ T4998] ? lock_downgrade+0x690/0x690 [ 52.878881][ T4998] alloc_pages+0x1aa/0x270 [ 52.883286][ T4998] pte_alloc_one+0x1a/0x230 [ 52.887818][ T4998] __pte_alloc+0x6d/0x260 [ 52.892144][ T4998] ? pmd_install+0x160/0x160 [ 52.896725][ T4998] ? do_raw_spin_unlock+0x175/0x230 [ 52.902031][ T4998] remap_pfn_range_notrack+0x9fb/0xea0 [ 52.907483][ T4998] ? apply_to_existing_page_range+0x40/0x40 [ 52.913365][ T4998] remap_pfn_range+0xca/0x140 [ 52.918029][ T4998] ? remap_pfn_range_notrack+0xea0/0xea0 [ 52.923648][ T4998] usbdev_mmap+0x7df/0xb20 [ 52.928056][ T4998] ? usbdev_vm_close+0x50/0x50 [ 52.932834][ T4998] ? __raw_spin_lock_init+0x3a/0x110 [ 52.938122][ T4998] mmap_region+0x694/0x28d0 [ 52.942620][ T4998] ? do_munmap+0xf0/0xf0 [ 52.946858][ T4998] ? security_mmap_addr+0x77/0xa0 [ 52.951974][ T4998] ? get_unmapped_area+0x1e8/0x3c0 [ 52.957189][ T4998] do_mmap+0x831/0xf60 [ 52.961249][ T4998] vm_mmap_pgoff+0x1a2/0x3b0 [ 52.965845][ T4998] ? randomize_page+0xb0/0xb0 [ 52.970522][ T4998] ksys_mmap_pgoff+0x41f/0x5a0 [ 52.975465][ T4998] do_syscall_64+0x39/0xb0 [ 52.979864][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.985756][ T4998] RIP: 0033:0x7f66c039ec89 [ 52.990160][ T4998] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.009758][ T4998] RSP: 002b:00007ffe1b52cd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 53.018164][ T4998] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f66c039ec89 [ 53.026116][ T4998] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 53.034068][ T4998] RBP: 00007ffe1b52cd50 R08: 0000000000000003 R09: 0000000000000000 [ 53.042056][ T4998] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000004 [ 53.050011][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.058863][ T4998] [ 53.063221][ T4998] ------------[ cut here ]------------ [ 53.068817][ T4998] kernel BUG at mm/page_table_check.c:148! [ 53.074609][ T4998] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.080655][ T4998] CPU: 1 PID: 4998 Comm: syz-executor264 Not tainted 6.4.0-rc7-syzkaller-00194-g8a28a0b6f1a1 #0 [ 53.091134][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 53.101172][ T4998] RIP: 0010:__page_table_check_zero+0x40a/0x5d0 [ 53.107431][ T4998] Code: 0f 84 f0 fc ff ff e8 95 40 a2 ff 48 83 eb 01 48 89 dd e9 ea fc ff ff e8 84 40 a2 ff 0f 0b e8 7d 40 a2 ff 0f 0b e8 76 40 a2 ff <0f> 0b e8 6f 40 a2 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89 [ 53.127120][ T4998] RSP: 0018:ffffc90003a6fa50 EFLAGS: 00010293 [ 53.133168][ T4998] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 53.141142][ T4998] RDX: ffff888026dd3b80 RSI: ffffffff81e208ea RDI: 0000000000000005 [ 53.149095][ T4998] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 53.157074][ T4998] R10: 0000000000000001 R11: ffffffff8a20008b R12: ffff888016090000 [ 53.165024][ T4998] R13: 000000000000000a R14: 0000000000000400 R15: dffffc0000000000 [ 53.172980][ T4998] FS: 0000555556cf0300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 53.181895][ T4998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.188459][ T4998] CR2: 0000000001993388 CR3: 0000000022d35000 CR4: 0000000000350ee0 [ 53.196411][ T4998] Call Trace: [ 53.199677][ T4998] [ 53.202592][ T4998] ? die+0x32/0x90 [ 53.206305][ T4998] ? do_trap+0x1b2/0x3f0 [ 53.210528][ T4998] ? __page_table_check_zero+0x40a/0x5d0 [ 53.216156][ T4998] ? __page_table_check_zero+0x40a/0x5d0 [ 53.221786][ T4998] ? do_error_trap+0xb1/0x170 [ 53.228533][ T4998] ? __page_table_check_zero+0x40a/0x5d0 [ 53.234157][ T4998] ? handle_invalid_op+0x2c/0x30 [ 53.240381][ T4998] ? __page_table_check_zero+0x40a/0x5d0 [ 53.246000][ T4998] ? exc_invalid_op+0x2f/0x50 [ 53.250655][ T4998] ? asm_exc_invalid_op+0x1a/0x20 [ 53.255671][ T4998] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.261723][ T4998] ? __page_table_check_zero+0x40a/0x5d0 [ 53.267343][ T4998] ? __page_table_check_zero+0x40a/0x5d0 [ 53.272960][ T4998] __free_pages_ok+0x9c8/0x1060 [ 53.277801][ T4998] hcd_buffer_free_pages+0xe8/0x180 [ 53.282992][ T4998] dec_usb_memory_use_count+0x27a/0x400 [ 53.288522][ T4998] usbdev_mmap+0x80c/0xb20 [ 53.293006][ T4998] ? usbdev_vm_close+0x50/0x50 [ 53.297843][ T4998] ? __raw_spin_lock_init+0x3a/0x110 [ 53.303114][ T4998] mmap_region+0x694/0x28d0 [ 53.307601][ T4998] ? do_munmap+0xf0/0xf0 [ 53.311826][ T4998] ? security_mmap_addr+0x77/0xa0 [ 53.316925][ T4998] ? get_unmapped_area+0x1e8/0x3c0 [ 53.322027][ T4998] do_mmap+0x831/0xf60 [ 53.326084][ T4998] vm_mmap_pgoff+0x1a2/0x3b0 [ 53.330664][ T4998] ? randomize_page+0xb0/0xb0 [ 53.335331][ T4998] ksys_mmap_pgoff+0x41f/0x5a0 [ 53.340075][ T4998] do_syscall_64+0x39/0xb0 [ 53.344473][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.350355][ T4998] RIP: 0033:0x7f66c039ec89 [ 53.355357][ T4998] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.375047][ T4998] RSP: 002b:00007ffe1b52cd38 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 53.383435][ T4998] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f66c039ec89 [ 53.391381][ T4998] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 53.399336][ T4998] RBP: 00007ffe1b52cd50 R08: 0000000000000003 R09: 0000000000000000 [ 53.407300][ T4998] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000004 [ 53.415255][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.423214][ T4998] [ 53.426213][ T4998] Modules linked in: [ 53.431288][ T4998] ---[ end trace 0000000000000000 ]--- [ 53.436864][ T4998] RIP: 0010:__page_table_check_zero+0x40a/0x5d0 [ 53.443109][ T4998] Code: 0f 84 f0 fc ff ff e8 95 40 a2 ff 48 83 eb 01 48 89 dd e9 ea fc ff ff e8 84 40 a2 ff 0f 0b e8 7d 40 a2 ff 0f 0b e8 76 40 a2 ff <0f> 0b e8 6f 40 a2 ff 49 8b 6c 24 08 31 ff 48 89 eb 83 e3 01 48 89 [ 53.462788][ T4998] RSP: 0018:ffffc90003a6fa50 EFLAGS: 00010293 [ 53.469077][ T4998] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 53.477146][ T4998] RDX: ffff888026dd3b80 RSI: ffffffff81e208ea RDI: 0000000000000005 [ 53.485124][ T4998] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 53.493218][ T4998] R10: 0000000000000001 R11: ffffffff8a20008b R12: ffff888016090000 [ 53.501222][ T4998] R13: 000000000000000a R14: 0000000000000400 R15: dffffc0000000000 [ 53.510001][ T4998] FS: 0000555556cf0300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 53.518965][ T4998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.525536][ T4998] CR2: 0000000001993388 CR3: 0000000022d35000 CR4: 0000000000350ee0 [ 53.533548][ T4998] Kernel panic - not syncing: Fatal exception [ 53.540392][ T4998] Kernel Offset: disabled [ 53.544742][ T4998] Rebooting in 86400 seconds..