./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4056836441 <...> forked to background, child pid 3185 no interfaces have a carrier [ 27.394299][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.405335][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.48' (ECDSA) to the list of known hosts. execve("./syz-executor4056836441", ["./syz-executor4056836441"], 0x7fff03ba17d0 /* 10 vars */) = 0 brk(NULL) = 0x555557290000 brk(0x555557290c40) = 0x555557290c40 arch_prctl(ARCH_SET_FS, 0x555557290300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor4056836441", 4096) = 28 brk(0x5555572b1c40) = 0x5555572b1c40 brk(0x5555572b2000) = 0x5555572b2000 mprotect(0x7fcb44ae1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/proc/self/smaps", O_RDWR) = 3 syzkaller login: [ 50.419665][ T3606] ================================================================== [ 50.419677][ T3606] BUG: KASAN: null-ptr-deref in hugepage_vma_check+0x8e/0x750 [ 50.419706][ T3606] Read of size 8 at addr 00000000000005a8 by task syz-executor405/3606 [ 50.419722][ T3606] [ 50.419726][ T3606] CPU: 0 PID: 3606 Comm: syz-executor405 Not tainted 5.19.0-rc3-next-20220621-syzkaller #0 [ 50.419748][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.419759][ T3606] Call Trace: [ 50.419763][ T3606] [ 50.419770][ T3606] dump_stack_lvl+0xcd/0x134 [ 50.419800][ T3606] kasan_report+0xbe/0x1f0 [ 50.419815][ T3606] ? seq_puts+0x50/0x130 [ 50.419830][ T3606] ? hugepage_vma_check+0x8e/0x750 [ 50.419843][ T3606] kasan_check_range+0x13d/0x180 [ 50.419857][ T3606] hugepage_vma_check+0x8e/0x750 [ 50.419870][ T3606] ? seq_puts+0xb4/0x130 [ 50.419885][ T3606] show_smap+0x1c6/0x470 [ 50.419903][ T3606] ? smap_gather_stats.part.0+0x250/0x250 [ 50.419927][ T3606] traverse.part.0+0xcf/0x5f0 [ 50.419945][ T3606] seq_read_iter+0x90f/0x1280 [ 50.419965][ T3606] seq_read+0x337/0x4b0 [ 50.419981][ T3606] ? seq_read_iter+0x1280/0x1280 [ 50.420001][ T3606] ? security_file_permission+0xab/0xd0 [ 50.420017][ T3606] do_iter_read+0x4f8/0x750 [ 50.420032][ T3606] vfs_readv+0xe5/0x150 [ 50.420042][ T3606] ? vfs_iter_read+0xa0/0xa0 [ 50.420053][ T3606] ? do_raw_spin_lock+0x120/0x2a0 [ 50.420066][ T3606] ? rwlock_bug.part.0+0x90/0x90 [ 50.420079][ T3606] ? _raw_spin_lock_irq+0x41/0x50 [ 50.420100][ T3606] ? find_held_lock+0x2d/0x110 [ 50.420119][ T3606] ? ptrace_notify+0xfa/0x140 [ 50.420132][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 50.420151][ T3606] __x64_sys_preadv+0x22b/0x310 [ 50.420164][ T3606] ? __ia32_sys_writev+0xb0/0xb0 [ 50.420176][ T3606] ? lockdep_hardirqs_on+0x79/0x100 [ 50.420194][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.420205][ T3606] ? ptrace_notify+0xfa/0x140 [ 50.420218][ T3606] do_syscall_64+0x35/0xb0 [ 50.420232][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.420246][ T3606] RIP: 0033:0x7fcb44a75239 [ 50.420256][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.420268][ T3606] RSP: 002b:00007ffedce269f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 50.420281][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb44a75239 [ 50.420289][ T3606] RDX: 0000000000000001 RSI: 00000000200006c0 RDI: 0000000000000003 [ 50.420297][ T3606] RBP: 00007ffedce26a00 R08: 0000000000000000 R09: 65732f636f72702f [ 50.420305][ T3606] R10: 00000000fffffffe R11: 0000000000000246 R12: 00007fcb44a39120 [ 50.420312][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.420323][ T3606] [ 50.420327][ T3606] ================================================================== [ 50.420333][ T3606] Kernel panic - not syncing: panic_on_warn set ... [ 50.705641][ T3606] CPU: 0 PID: 3606 Comm: syz-executor405 Not tainted 5.19.0-rc3-next-20220621-syzkaller #0 [ 50.715618][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.725900][ T3606] Call Trace: [ 50.729174][ T3606] [ 50.732099][ T3606] dump_stack_lvl+0xcd/0x134 [ 50.736709][ T3606] panic+0x2d7/0x64a [ 50.740610][ T3606] ? panic_print_sys_info.part.0+0x10b/0x10b [ 50.746596][ T3606] ? mark_held_locks+0x9f/0xe0 [ 50.751362][ T3606] ? hugepage_vma_check+0x8e/0x750 [ 50.756473][ T3606] end_report.part.0+0x3f/0x7c [ 50.761244][ T3606] kasan_report.cold+0x8/0x12 [ 50.765925][ T3606] ? seq_puts+0x50/0x130 [ 50.770174][ T3606] ? hugepage_vma_check+0x8e/0x750 [ 50.775283][ T3606] kasan_check_range+0x13d/0x180 [ 50.780225][ T3606] hugepage_vma_check+0x8e/0x750 [ 50.785158][ T3606] ? seq_puts+0xb4/0x130 [ 50.789400][ T3606] show_smap+0x1c6/0x470 [ 50.793646][ T3606] ? smap_gather_stats.part.0+0x250/0x250 [ 50.799377][ T3606] traverse.part.0+0xcf/0x5f0 [ 50.804068][ T3606] seq_read_iter+0x90f/0x1280 [ 50.808756][ T3606] seq_read+0x337/0x4b0 [ 50.812917][ T3606] ? seq_read_iter+0x1280/0x1280 [ 50.817860][ T3606] ? security_file_permission+0xab/0xd0 [ 50.823417][ T3606] do_iter_read+0x4f8/0x750 [ 50.827919][ T3606] vfs_readv+0xe5/0x150 [ 50.832071][ T3606] ? vfs_iter_read+0xa0/0xa0 [ 50.836659][ T3606] ? do_raw_spin_lock+0x120/0x2a0 [ 50.841686][ T3606] ? rwlock_bug.part.0+0x90/0x90 [ 50.846620][ T3606] ? _raw_spin_lock_irq+0x41/0x50 [ 50.851658][ T3606] ? find_held_lock+0x2d/0x110 [ 50.856437][ T3606] ? ptrace_notify+0xfa/0x140 [ 50.861197][ T3606] ? lock_downgrade+0x6e0/0x6e0 [ 50.866046][ T3606] __x64_sys_preadv+0x22b/0x310 [ 50.870894][ T3606] ? __ia32_sys_writev+0xb0/0xb0 [ 50.875826][ T3606] ? lockdep_hardirqs_on+0x79/0x100 [ 50.881027][ T3606] ? _raw_spin_unlock_irq+0x2a/0x40 [ 50.886241][ T3606] ? ptrace_notify+0xfa/0x140 [ 50.890919][ T3606] do_syscall_64+0x35/0xb0 [ 50.895341][ T3606] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 50.901231][ T3606] RIP: 0033:0x7fcb44a75239 [ 50.905646][ T3606] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 50.925249][ T3606] RSP: 002b:00007ffedce269f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 50.933656][ T3606] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb44a75239 [ 50.941623][ T3606] RDX: 0000000000000001 RSI: 00000000200006c0 RDI: 0000000000000003 [ 50.949589][ T3606] RBP: 00007ffedce26a00 R08: 0000000000000000 R09: 65732f636f72702f [ 50.957555][ T3606] R10: 00000000fffffffe R11: 0000000000000246 R12: 00007fcb44a39120 [ 50.965519][ T3606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 50.973498][ T3606] [ 50.976707][ T3606] Kernel Offset: disabled [ 50.981025][ T3606] Rebooting in 86400 seconds..