./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2543210772
<...>
Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts.
execve("./syz-executor2543210772", ["./syz-executor2543210772"], 0x7fff849563a0 /* 10 vars */) = 0
brk(NULL) = 0x555555d27000
brk(0x555555d27d00) = 0x555555d27d00
arch_prctl(ARCH_SET_FS, 0x555555d273c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2543210772", 4096) = 28
brk(0x555555d48d00) = 0x555555d48d00
brk(0x555555d49000) = 0x555555d49000
mprotect(0x7f1a8183b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7f1a81791390, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1a81791660}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7f1a81791390, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7f1a81791660}, NULL, 8) = 0
io_uring_setup(1259, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=2048, cq_entries=4096, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=65856}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
mmap(0x20002000, 74048, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20002000
mmap(0x20000000, 131072, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0x10000000) = 0x20000000
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
write(4, "17", 2) = 2
syzkaller login: [ 40.540710][ T3606] ------------[ cut here ]------------
[ 40.546688][ T3606] WARNING: CPU: 0 PID: 3606 at arch/x86/mm/pat/memtype.c:1099 untrack_pfn+0x247/0x290
[ 40.556791][ T3606] Modules linked in:
[ 40.560817][ T3606] CPU: 0 PID: 3606 Comm: syz-executor254 Not tainted 5.19.0-rc5-syzkaller-00105-g9f09069cde34 #0
[ 40.571594][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 40.582006][ T3606] RIP: 0010:untrack_pfn+0x247/0x290
[ 40.587317][ T3606] Code: 84 6c ff ff ff e8 d9 3f 43 00 4c 89 ee 4c 89 e7 e8 de dd ff ff e8 c9 3f 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 b9 3f 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 0a 04 90 00 e9 98 fe ff ff e8 70
[ 40.607007][ T3606] RSP: 0018:ffffc9000329f6f8 EFLAGS: 00010293
[ 40.613063][ T3606] RAX: 0000000000000000 RBX: ffff88807f5b1420 RCX: 0000000000000000
[ 40.621169][ T3606] RDX: ffff88807f293b00 RSI: ffffffff813726f7 RDI: 0000000000000005
[ 40.629237][ T3606] RBP: 1ffff92000653edf R08: 0000000000000005 R09: 0000000000000000
[ 40.637286][ T3606] R10: 00000000ffffffea R11: 0000000000000001 R12: 00000000ffffffea
[ 40.645706][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807f5b1470
[ 40.653949][ T3606] FS: 0000555555d273c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 40.662933][ T3606] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 40.669608][ T3606] CR2: 0000000000000000 CR3: 000000002536a000 CR4: 0000000000350ef0
[ 40.677742][ T3606] Call Trace:
[ 40.681044][ T3606]
[ 40.683990][ T3606] ? track_pfn_insert+0x140/0x140
[ 40.689240][ T3606] ? vm_normal_page_pmd+0x550/0x550
[ 40.694556][ T3606] ? unmap_vmas+0x148/0x310
[ 40.699143][ T3606] ? lock_downgrade+0x6e0/0x6e0
[ 40.704029][ T3606] ? uprobe_munmap+0x1c/0x560
[ 40.708836][ T3606] unmap_single_vma+0x1ba/0x360
[ 40.713700][ T3606] unmap_vmas+0x18c/0x310
[ 40.718080][ T3606] ? unmap_mapping_range+0x280/0x280
[ 40.723398][ T3606] ? lock_downgrade+0x6e0/0x6e0
[ 40.728351][ T3606] ? lru_add_drain_cpu+0x4e2/0x900
[ 40.733479][ T3606] exit_mmap+0x1c4/0x4a0
[ 40.737793][ T3606] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 40.743794][ T3606] ? dup_mm+0xb3d/0x1390
[ 40.748212][ T3606] __mmput+0x122/0x4b0
[ 40.752442][ T3606] mmput+0x56/0x60
[ 40.756303][ T3606] dup_mm+0xd73/0x1390
[ 40.760391][ T3606] ? replace_mm_exe_file+0x490/0x490
[ 40.765750][ T3606] ? __raw_spin_lock_init+0x36/0x110
[ 40.771053][ T3606] copy_process+0x3bba/0x7020
[ 40.775808][ T3606] ? __cleanup_sighand+0xb0/0xb0
[ 40.780767][ T3606] kernel_clone+0xe7/0xab0
[ 40.785604][ T3606] ? create_io_thread+0xe0/0xe0
[ 40.790463][ T3606] ? rwlock_bug.part.0+0x90/0x90
[ 40.795460][ T3606] ? _raw_spin_lock_irq+0x41/0x50
[ 40.800584][ T3606] ? find_held_lock+0x2d/0x110
[ 40.805440][ T3606] __do_sys_clone+0xba/0x100
[ 40.810048][ T3606] ? kernel_clone+0xab0/0xab0
[ 40.814841][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40
[ 40.820094][ T3606] ? ptrace_notify+0xfa/0x140
[ 40.824792][ T3606] do_syscall_64+0x35/0xb0
[ 40.829296][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 40.835205][ T3606] RIP: 0033:0x7f1a817cec39
[ 40.839669][ T3606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.859393][ T3606] RSP: 002b:00007ffe14b68638 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 40.867849][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1a817cec39
[ 40.876361][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 40.884369][ T3606] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1a81003731
[ 40.892397][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 40.900407][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 40.908452][ T3606]
[ 40.911478][ T3606] Kernel panic - not syncing: panic_on_warn set ...
[ 40.918047][ T3606] CPU: 0 PID: 3606 Comm: syz-executor254 Not tainted 5.19.0-rc5-syzkaller-00105-g9f09069cde34 #0
[ 40.928526][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 40.938658][ T3606] Call Trace:
[ 40.941948][ T3606]
[ 40.944954][ T3606] dump_stack_lvl+0xcd/0x134
[ 40.949797][ T3606] panic+0x2d7/0x636
[ 40.953678][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 40.959736][ T3606] ? __warn.cold+0x1d1/0x2c5
[ 40.964310][ T3606] ? untrack_pfn+0x247/0x290
[ 40.968897][ T3606] __warn.cold+0x1e2/0x2c5
[ 40.973313][ T3606] ? untrack_pfn+0x247/0x290
[ 40.977900][ T3606] report_bug+0x1bc/0x210
[ 40.982236][ T3606] handle_bug+0x3c/0x60
[ 40.986395][ T3606] exc_invalid_op+0x14/0x40
[ 40.990900][ T3606] asm_exc_invalid_op+0x1b/0x20
[ 40.995754][ T3606] RIP: 0010:untrack_pfn+0x247/0x290
[ 41.000949][ T3606] Code: 84 6c ff ff ff e8 d9 3f 43 00 4c 89 ee 4c 89 e7 e8 de dd ff ff e8 c9 3f 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 b9 3f 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 0a 04 90 00 e9 98 fe ff ff e8 70
[ 41.020559][ T3606] RSP: 0018:ffffc9000329f6f8 EFLAGS: 00010293
[ 41.026623][ T3606] RAX: 0000000000000000 RBX: ffff88807f5b1420 RCX: 0000000000000000
[ 41.034588][ T3606] RDX: ffff88807f293b00 RSI: ffffffff813726f7 RDI: 0000000000000005
[ 41.042556][ T3606] RBP: 1ffff92000653edf R08: 0000000000000005 R09: 0000000000000000
[ 41.050524][ T3606] R10: 00000000ffffffea R11: 0000000000000001 R12: 00000000ffffffea
[ 41.058498][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807f5b1470
[ 41.066486][ T3606] ? untrack_pfn+0x247/0x290
[ 41.071177][ T3606] ? untrack_pfn+0x247/0x290
[ 41.075770][ T3606] ? track_pfn_insert+0x140/0x140
[ 41.080793][ T3606] ? vm_normal_page_pmd+0x550/0x550
[ 41.085991][ T3606] ? unmap_vmas+0x148/0x310
[ 41.090497][ T3606] ? lock_downgrade+0x6e0/0x6e0
[ 41.095351][ T3606] ? uprobe_munmap+0x1c/0x560
[ 41.100041][ T3606] unmap_single_vma+0x1ba/0x360
[ 41.104897][ T3606] unmap_vmas+0x18c/0x310
[ 41.109226][ T3606] ? unmap_mapping_range+0x280/0x280
[ 41.114517][ T3606] ? lock_downgrade+0x6e0/0x6e0
[ 41.119378][ T3606] ? lru_add_drain_cpu+0x4e2/0x900
[ 41.124492][ T3606] exit_mmap+0x1c4/0x4a0
[ 41.128735][ T3606] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 41.134719][ T3606] ? dup_mm+0xb3d/0x1390
[ 41.138970][ T3606] __mmput+0x122/0x4b0
[ 41.143079][ T3606] mmput+0x56/0x60
[ 41.146813][ T3606] dup_mm+0xd73/0x1390
[ 41.150895][ T3606] ? replace_mm_exe_file+0x490/0x490
[ 41.156186][ T3606] ? __raw_spin_lock_init+0x36/0x110
[ 41.161476][ T3606] copy_process+0x3bba/0x7020
[ 41.166348][ T3606] ? __cleanup_sighand+0xb0/0xb0
[ 41.171308][ T3606] kernel_clone+0xe7/0xab0
[ 41.175737][ T3606] ? create_io_thread+0xe0/0xe0
[ 41.180594][ T3606] ? rwlock_bug.part.0+0x90/0x90
[ 41.185535][ T3606] ? _raw_spin_lock_irq+0x41/0x50
[ 41.190579][ T3606] ? find_held_lock+0x2d/0x110
[ 41.195373][ T3606] __do_sys_clone+0xba/0x100
[ 41.199980][ T3606] ? kernel_clone+0xab0/0xab0
[ 41.204679][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40
[ 41.209889][ T3606] ? ptrace_notify+0xfa/0x140
[ 41.214574][ T3606] do_syscall_64+0x35/0xb0
[ 41.219003][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 41.224910][ T3606] RIP: 0033:0x7f1a817cec39
[ 41.229330][ T3606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.248961][ T3606] RSP: 002b:00007ffe14b68638 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 41.257384][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1a817cec39
[ 41.265708][ T3606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 41.273679][ T3606] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f1a81003731
[ 41.281656][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 41.289626][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 41.297616][ T3606]
[ 41.301202][ T3606] Kernel Offset: disabled
[ 41.305668][ T3606] Rebooting in 86400 seconds..