./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1713388691 <...> DUID 00:04:d9:3a:76:1c:b4:63:be:bc:0b:c2:08:9c:83:36:98:31 forked to background, child pid 3185 [ 25.813058][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.824944][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.96' (ECDSA) to the list of known hosts. execve("./syz-executor1713388691", ["./syz-executor1713388691"], 0x7ffc562e2420 /* 10 vars */) = 0 brk(NULL) = 0x55555742e000 brk(0x55555742ec40) = 0x55555742ec40 arch_prctl(ARCH_SET_FS, 0x55555742e300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1713388691", 4096) = 28 brk(0x55555744fc40) = 0x55555744fc40 brk(0x555557450000) = 0x555557450000 mprotect(0x7fbc639ae000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20000000, 16506880, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 userfaultfd(UFFD_USER_MODE_ONLY|O_CLOEXEC) = 3 ioctl(3, UFFDIO_API, 0x20000000) = 0 ioctl(3, UFFDIO_REGISTER, 0x20000080) = 0 syzkaller login: [ 43.577177][ T3607] ------------[ cut here ]------------ [ 43.582781][ T3607] WARNING: CPU: 0 PID: 3607 at include/linux/swapops.h:323 change_pte_range+0x11f4/0x1ab0 [ 43.593004][ T3607] Modules linked in: [ 43.596905][ T3607] CPU: 0 PID: 3607 Comm: syz-executor171 Not tainted 6.0.0-rc7-syzkaller-00130-g511cce163b75 #0 [ 43.607449][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 43.617558][ T3607] RIP: 0010:change_pte_range+0x11f4/0x1ab0 [ 43.623366][ T3607] Code: e8 c1 02 bd ff 4c 8b 74 24 18 49 bd 00 00 00 00 00 fc ff df e9 8d fc ff ff e8 a8 02 bd ff 0f 0b e9 72 f4 ff ff e8 9c 02 bd ff <0f> 0b 48 8d 9c 24 00 01 00 00 48 c1 eb 03 42 80 3c 2b 00 74 0d 48 [ 43.643194][ T3607] RSP: 0018:ffffc9000399f580 EFLAGS: 00010293 [ 43.649327][ T3607] RAX: ffffffff81cc93c4 RBX: 0000000000000000 RCX: ffff88801fdfbb00 [ 43.657360][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.665347][ T3607] RBP: ffffc9000399f728 R08: ffffffff81cc8706 R09: ffffed10045001a1 [ 43.673377][ T3607] R10: ffffed10045001a1 R11: 1ffff110045001a0 R12: 000000002063d000 [ 43.681386][ T3607] R13: dffffc0000000000 R14: ffff888027d251e8 R15: ffff888027d251e8 [ 43.689396][ T3607] FS: 000055555742e300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 43.698385][ T3607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.704957][ T3607] CR2: 00000000005d84c8 CR3: 000000007a01e000 CR4: 00000000003506f0 [ 43.712987][ T3607] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.720990][ T3607] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.728995][ T3607] Call Trace: [ 43.732280][ T3607] [ 43.735212][ T3607] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 43.741763][ T3607] ? __pte_alloc+0x1a4/0x210 [ 43.746369][ T3607] change_protection+0xc1f/0x16d0 [ 43.751463][ T3607] ? tlb_remove_table_rcu+0xf0/0xf0 [ 43.756664][ T3607] ? rcu_read_lock_sched_held+0x89/0x130 [ 43.762347][ T3607] ? vmacache_find+0x33d/0x590 [ 43.767173][ T3607] ? tlb_gather_mmu+0x23b/0x300 [ 43.772020][ T3607] mwriteprotect_range+0x50c/0x5a0 [ 43.777178][ T3607] ? uffd_wp_range+0x160/0x160 [ 43.781955][ T3607] ? __might_fault+0xb2/0x110 [ 43.786622][ T3607] userfaultfd_ioctl+0x2733/0x3230 [ 43.791824][ T3607] ? __x64_compat_sys_ioctl+0x80/0x80 [ 43.797257][ T3607] ? userfaultfd_poll+0x1b0/0x1b0 [ 43.802304][ T3607] ? __lock_acquire+0x1f60/0x1f60 [ 43.807385][ T3607] ? slab_free_freelist_hook+0x12e/0x1a0 [ 43.813025][ T3607] ? tomoyo_path_number_perm+0x5ee/0x7b0 [ 43.818700][ T3607] ? kfree+0xda/0x210 [ 43.822690][ T3607] ? tomoyo_path_number_perm+0x657/0x7b0 [ 43.828371][ T3607] ? smack_log+0x11f/0x530 [ 43.832804][ T3607] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 43.838307][ T3607] ? smk_access+0x490/0x490 [ 43.842820][ T3607] ? smk_tskacc+0x304/0x370 [ 43.847369][ T3607] ? smack_file_ioctl+0x2f7/0x3a0 [ 43.852401][ T3607] ? smack_file_alloc_security+0xd0/0xd0 [ 43.858088][ T3607] ? print_irqtrace_events+0x220/0x220 [ 43.863551][ T3607] ? vtime_user_exit+0x2b2/0x3e0 [ 43.868528][ T3607] ? __ct_user_exit+0x81/0xe0 [ 43.873227][ T3607] ? bpf_lsm_file_ioctl+0x5/0x10 [ 43.878291][ T3607] ? security_file_ioctl+0x9d/0xb0 [ 43.883407][ T3607] ? userfaultfd_poll+0x1b0/0x1b0 [ 43.888464][ T3607] __se_sys_ioctl+0xfb/0x170 [ 43.893060][ T3607] do_syscall_64+0x2b/0x70 [ 43.897507][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 43.903404][ T3607] RIP: 0033:0x7fbc63941bb9 [ 43.907855][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 43.927587][ T3607] RSP: 002b:00007fff43ddba98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 43.936067][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc63941bb9 [ 43.944079][ T3607] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 43.952109][ T3607] RBP: 00007fbc63905d60 R08: 0000000000000000 R09: 0000000000000000 [ 43.960130][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbc63905df0 [ 43.968127][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 43.976095][ T3607] [ 43.979144][ T3607] Kernel panic - not syncing: panic_on_warn set ... [ 43.985723][ T3607] CPU: 0 PID: 3607 Comm: syz-executor171 Not tainted 6.0.0-rc7-syzkaller-00130-g511cce163b75 #0 [ 43.996114][ T3607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 44.006154][ T3607] Call Trace: [ 44.009420][ T3607] [ 44.012341][ T3607] dump_stack_lvl+0x1e3/0x2cb [ 44.017013][ T3607] ? io_alloc_page_table+0x110/0x110 [ 44.022286][ T3607] ? panic+0x76b/0x76b [ 44.026345][ T3607] ? vscnprintf+0x59/0x80 [ 44.030747][ T3607] ? change_pte_range+0x1130/0x1ab0 [ 44.035937][ T3607] panic+0x316/0x76b [ 44.039819][ T3607] ? __warn+0x131/0x220 [ 44.043971][ T3607] ? fb_is_primary_device+0xcc/0xcc [ 44.049164][ T3607] ? change_pte_range+0x11f4/0x1ab0 [ 44.054351][ T3607] __warn+0x1fa/0x220 [ 44.058319][ T3607] ? change_pte_range+0x11f4/0x1ab0 [ 44.063501][ T3607] report_bug+0x1b3/0x2d0 [ 44.067818][ T3607] handle_bug+0x3d/0x70 [ 44.071957][ T3607] exc_invalid_op+0x16/0x40 [ 44.076444][ T3607] asm_exc_invalid_op+0x16/0x20 [ 44.081282][ T3607] RIP: 0010:change_pte_range+0x11f4/0x1ab0 [ 44.087080][ T3607] Code: e8 c1 02 bd ff 4c 8b 74 24 18 49 bd 00 00 00 00 00 fc ff df e9 8d fc ff ff e8 a8 02 bd ff 0f 0b e9 72 f4 ff ff e8 9c 02 bd ff <0f> 0b 48 8d 9c 24 00 01 00 00 48 c1 eb 03 42 80 3c 2b 00 74 0d 48 [ 44.106682][ T3607] RSP: 0018:ffffc9000399f580 EFLAGS: 00010293 [ 44.112742][ T3607] RAX: ffffffff81cc93c4 RBX: 0000000000000000 RCX: ffff88801fdfbb00 [ 44.120728][ T3607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.128710][ T3607] RBP: ffffc9000399f728 R08: ffffffff81cc8706 R09: ffffed10045001a1 [ 44.136691][ T3607] R10: ffffed10045001a1 R11: 1ffff110045001a0 R12: 000000002063d000 [ 44.144692][ T3607] R13: dffffc0000000000 R14: ffff888027d251e8 R15: ffff888027d251e8 [ 44.152675][ T3607] ? change_pte_range+0x536/0x1ab0 [ 44.157787][ T3607] ? change_pte_range+0x11f4/0x1ab0 [ 44.163014][ T3607] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 44.169514][ T3607] ? __pte_alloc+0x1a4/0x210 [ 44.174109][ T3607] change_protection+0xc1f/0x16d0 [ 44.179161][ T3607] ? tlb_remove_table_rcu+0xf0/0xf0 [ 44.184351][ T3607] ? rcu_read_lock_sched_held+0x89/0x130 [ 44.189989][ T3607] ? vmacache_find+0x33d/0x590 [ 44.194747][ T3607] ? tlb_gather_mmu+0x23b/0x300 [ 44.199592][ T3607] mwriteprotect_range+0x50c/0x5a0 [ 44.204704][ T3607] ? uffd_wp_range+0x160/0x160 [ 44.209472][ T3607] ? __might_fault+0xb2/0x110 [ 44.214152][ T3607] userfaultfd_ioctl+0x2733/0x3230 [ 44.219264][ T3607] ? __x64_compat_sys_ioctl+0x80/0x80 [ 44.224628][ T3607] ? userfaultfd_poll+0x1b0/0x1b0 [ 44.229645][ T3607] ? __lock_acquire+0x1f60/0x1f60 [ 44.234664][ T3607] ? slab_free_freelist_hook+0x12e/0x1a0 [ 44.240293][ T3607] ? tomoyo_path_number_perm+0x5ee/0x7b0 [ 44.245919][ T3607] ? kfree+0xda/0x210 [ 44.250077][ T3607] ? tomoyo_path_number_perm+0x657/0x7b0 [ 44.255707][ T3607] ? smack_log+0x11f/0x530 [ 44.260116][ T3607] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 44.265577][ T3607] ? smk_access+0x490/0x490 [ 44.270101][ T3607] ? smk_tskacc+0x304/0x370 [ 44.274866][ T3607] ? smack_file_ioctl+0x2f7/0x3a0 [ 44.279889][ T3607] ? smack_file_alloc_security+0xd0/0xd0 [ 44.285523][ T3607] ? print_irqtrace_events+0x220/0x220 [ 44.290972][ T3607] ? vtime_user_exit+0x2b2/0x3e0 [ 44.295904][ T3607] ? __ct_user_exit+0x81/0xe0 [ 44.300576][ T3607] ? bpf_lsm_file_ioctl+0x5/0x10 [ 44.305531][ T3607] ? security_file_ioctl+0x9d/0xb0 [ 44.310656][ T3607] ? userfaultfd_poll+0x1b0/0x1b0 [ 44.315693][ T3607] __se_sys_ioctl+0xfb/0x170 [ 44.320291][ T3607] do_syscall_64+0x2b/0x70 [ 44.324724][ T3607] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.330624][ T3607] RIP: 0033:0x7fbc63941bb9 [ 44.335036][ T3607] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.354655][ T3607] RSP: 002b:00007fff43ddba98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.363073][ T3607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbc63941bb9 [ 44.371043][ T3607] RDX: 00000000200000c0 RSI: 00000000c018aa06 RDI: 0000000000000003 [ 44.379009][ T3607] RBP: 00007fbc63905d60 R08: 0000000000000000 R09: 0000000000000000 [ 44.386979][ T3607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbc63905df0 [ 44.394957][ T3607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.402935][ T3607] [ 44.406219][ T3607] Kernel Offset: disabled [ 44.410619][ T3607] Rebooting in 86400 seconds..