./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3929766341
<...>
Warning: Permanently added '10.128.1.61' (ECDSA) to the list of known hosts.
execve("./syz-executor3929766341", ["./syz-executor3929766341"], 0x7ffefb40cb70 /* 10 vars */) = 0
brk(NULL) = 0x555555c9d000
brk(0x555555c9dd00) = 0x555555c9dd00
arch_prctl(ARCH_SET_FS, 0x555555c9d3c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3929766341", 4096) = 28
brk(0x555555cbed00) = 0x555555cbed00
brk(0x555555cbf000) = 0x555555cbf000
mprotect(0x7ff78fd7a000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7ff78fccf180, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7ff78fccf8c0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7ff78fccf180, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7ff78fccf8c0}, NULL, 8) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3604 attached
, child_tidptr=0x555555c9d690) = 3604
[pid 3604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3604] setpgid(0, 0) = 0
[pid 3604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3604] write(3, "1000", 4) = 4
[pid 3604] close(3) = 0
[pid 3604] io_uring_setup(243, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=256, cq_entries=512, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=8512}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3604] mmap(0x20000000, 9536, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 3604] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 3604] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3604] write(4, "17", 2) = 2
[pid 3604] clone(child_stack=NULL, flags=0) = -1 ENOMEM (Cannot allocate memory)
[pid 3604] exit_group(0) = ?
[pid 3604] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3604, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555c9d690) = 3605
./strace-static-x86_64: Process 3605 attached
[pid 3605] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3605] setpgid(0, 0) = 0
[pid 3605] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3605] write(3, "1000", 4) = 4
[pid 3605] close(3) = 0
[pid 3605] io_uring_setup(243, {flags=0, sq_thread_cpu=0, sq_thread_idle=0, sq_entries=256, cq_entries=512, features=IORING_FEAT_SINGLE_MMAP|IORING_FEAT_NODROP|IORING_FEAT_SUBMIT_STABLE|IORING_FEAT_RW_CUR_POS|IORING_FEAT_CUR_PERSONALITY|IORING_FEAT_FAST_POLL|IORING_FEAT_POLL_32BITS|IORING_FEAT_SQPOLL_NONFIXED|IORING_FEAT_EXT_ARG|IORING_FEAT_NATIVE_WORKERS|IORING_FEAT_RSRC_TAGS|IORING_FEAT_CQE_SKIP|0x1000, sq_off={head=0, tail=64, ring_mask=256, ring_entries=264, flags=276, dropped=272, array=8512}, cq_off={head=128, tail=192, ring_mask=260, ring_entries=268, overflow=284, cqes=320, flags=280}}) = 3
[pid 3605] mmap(0x20000000, 9536, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 3, 0) = 0x20000000
[pid 3605] --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
[pid 3605] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3605] write(4, "17", 2) = 2
syzkaller login: [ 36.086822][ T3605] ------------[ cut here ]------------
[ 36.092442][ T3605] WARNING: CPU: 1 PID: 3605 at arch/x86/mm/pat/memtype.c:1099 untrack_pfn+0x247/0x290
[ 36.102026][ T3605] Modules linked in:
[ 36.105916][ T3605] CPU: 1 PID: 3605 Comm: syz-executor392 Not tainted 5.19.0-rc5-syzkaller-00187-ge8a4e1c1bb69 #0
[ 36.116452][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 36.126584][ T3605] RIP: 0010:untrack_pfn+0x247/0x290
[ 36.131915][ T3605] Code: 84 6c ff ff ff e8 b9 3f 43 00 4c 89 ee 4c 89 e7 e8 de dd ff ff e8 a9 3f 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 99 3f 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 5a f7 8f 00 e9 98 fe ff ff e8 30
[ 36.152148][ T3605] RSP: 0018:ffffc9000334f6f8 EFLAGS: 00010293
[ 36.158283][ T3605] RAX: 0000000000000000 RBX: ffff888075b86a50 RCX: 0000000000000000
[ 36.167872][ T3605] RDX: ffff888078650000 RSI: ffffffff813726f7 RDI: 0000000000000005
[ 36.175930][ T3605] RBP: 1ffff92000669edf R08: 0000000000000005 R09: 0000000000000000
[ 36.183945][ T3605] R10: 00000000ffffffea R11: 0000000000000001 R12: 00000000ffffffea
[ 36.191997][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888075b86aa0
[ 36.199991][ T3605] FS: 0000555555c9d3c0(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 36.208908][ T3605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 36.215563][ T3605] CR2: 00007ffcfc8bb368 CR3: 000000001effd000 CR4: 0000000000350ef0
[ 36.223607][ T3605] Call Trace:
[ 36.226901][ T3605]
[ 36.229861][ T3605] ? track_pfn_insert+0x140/0x140
[ 36.234892][ T3605] ? vm_normal_page_pmd+0x550/0x550
[ 36.240116][ T3605] ? unmap_vmas+0x148/0x310
[ 36.244627][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 36.249506][ T3605] ? uprobe_munmap+0x1c/0x560
[ 36.254198][ T3605] unmap_single_vma+0x1ba/0x360
[ 36.259361][ T3605] unmap_vmas+0x18c/0x310
[ 36.263705][ T3605] ? unmap_mapping_range+0x280/0x280
[ 36.269075][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 36.274143][ T3605] ? lru_add_drain_cpu+0x4e2/0x900
[ 36.279306][ T3605] exit_mmap+0x1c4/0x4a0
[ 36.283556][ T3605] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 36.289586][ T3605] ? dup_mm+0xb3d/0x1390
[ 36.293870][ T3605] __mmput+0x122/0x4b0
[ 36.298037][ T3605] mmput+0x56/0x60
[ 36.301814][ T3605] dup_mm+0xd73/0x1390
[ 36.305892][ T3605] ? replace_mm_exe_file+0x490/0x490
[ 36.311225][ T3605] ? __raw_spin_lock_init+0x36/0x110
[ 36.316518][ T3605] copy_process+0x3bba/0x7020
[ 36.321242][ T3605] ? __cleanup_sighand+0xb0/0xb0
[ 36.326213][ T3605] kernel_clone+0xe7/0xab0
[ 36.330665][ T3605] ? create_io_thread+0xe0/0xe0
[ 36.335518][ T3605] ? rwlock_bug.part.0+0x90/0x90
[ 36.340487][ T3605] ? _raw_spin_lock_irq+0x41/0x50
[ 36.345565][ T3605] ? find_held_lock+0x2d/0x110
[ 36.350366][ T3605] __do_sys_clone+0xba/0x100
[ 36.354960][ T3605] ? kernel_clone+0xab0/0xab0
[ 36.359782][ T3605] ? _raw_spin_unlock_irq+0x2a/0x40
[ 36.364990][ T3605] ? ptrace_notify+0xfa/0x140
[ 36.369714][ T3605] do_syscall_64+0x35/0xb0
[ 36.374146][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 36.380277][ T3605] RIP: 0033:0x7ff78fd0d5e9
[ 36.384688][ T3605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 36.404339][ T3605] RSP: 002b:00007ffcfc8bb358 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 36.412803][ T3605] RAX: ffffffffffffffda RBX: 0000000000008cd3 RCX: 00007ff78fd0d5e9
[ 36.421121][ T3605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.429136][ T3605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003731
[ 36.437107][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 36.445244][ T3605] R13: 431bde82d7b634db R14: 00007ffcfc8bb3b0 R15: 0000000000000000
[ 36.453295][ T3605]
[ 36.456338][ T3605] Kernel panic - not syncing: panic_on_warn set ...
[ 36.462994][ T3605] CPU: 0 PID: 3605 Comm: syz-executor392 Not tainted 5.19.0-rc5-syzkaller-00187-ge8a4e1c1bb69 #0
[ 36.473475][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 36.483515][ T3605] Call Trace:
[ 36.486781][ T3605]
[ 36.489715][ T3605] dump_stack_lvl+0xcd/0x134
[ 36.494353][ T3605] panic+0x2d7/0x636
[ 36.498237][ T3605] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 36.504219][ T3605] ? __warn.cold+0x1d1/0x2c5
[ 36.508814][ T3605] ? untrack_pfn+0x247/0x290
[ 36.513406][ T3605] __warn.cold+0x1e2/0x2c5
[ 36.517844][ T3605] ? untrack_pfn+0x247/0x290
[ 36.522422][ T3605] report_bug+0x1bc/0x210
[ 36.526756][ T3605] handle_bug+0x3c/0x60
[ 36.530905][ T3605] exc_invalid_op+0x14/0x40
[ 36.535406][ T3605] asm_exc_invalid_op+0x1b/0x20
[ 36.540252][ T3605] RIP: 0010:untrack_pfn+0x247/0x290
[ 36.545456][ T3605] Code: 84 6c ff ff ff e8 b9 3f 43 00 4c 89 ee 4c 89 e7 e8 de dd ff ff e8 a9 3f 43 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 99 3f 43 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 5a f7 8f 00 e9 98 fe ff ff e8 30
[ 36.565061][ T3605] RSP: 0018:ffffc9000334f6f8 EFLAGS: 00010293
[ 36.571120][ T3605] RAX: 0000000000000000 RBX: ffff888075b86a50 RCX: 0000000000000000
[ 36.579086][ T3605] RDX: ffff888078650000 RSI: ffffffff813726f7 RDI: 0000000000000005
[ 36.587048][ T3605] RBP: 1ffff92000669edf R08: 0000000000000005 R09: 0000000000000000
[ 36.595011][ T3605] R10: 00000000ffffffea R11: 0000000000000001 R12: 00000000ffffffea
[ 36.602975][ T3605] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888075b86aa0
[ 36.610948][ T3605] ? untrack_pfn+0x247/0x290
[ 36.615537][ T3605] ? untrack_pfn+0x247/0x290
[ 36.620119][ T3605] ? track_pfn_insert+0x140/0x140
[ 36.625135][ T3605] ? vm_normal_page_pmd+0x550/0x550
[ 36.630330][ T3605] ? unmap_vmas+0x148/0x310
[ 36.634826][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 36.639673][ T3605] ? uprobe_munmap+0x1c/0x560
[ 36.644348][ T3605] unmap_single_vma+0x1ba/0x360
[ 36.649199][ T3605] unmap_vmas+0x18c/0x310
[ 36.653523][ T3605] ? unmap_mapping_range+0x280/0x280
[ 36.658804][ T3605] ? lock_downgrade+0x6e0/0x6e0
[ 36.663655][ T3605] ? lru_add_drain_cpu+0x4e2/0x900
[ 36.668769][ T3605] exit_mmap+0x1c4/0x4a0
[ 36.673006][ T3605] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 36.678996][ T3605] ? dup_mm+0xb3d/0x1390
[ 36.683252][ T3605] __mmput+0x122/0x4b0
[ 36.687318][ T3605] mmput+0x56/0x60
[ 36.691034][ T3605] dup_mm+0xd73/0x1390
[ 36.695107][ T3605] ? replace_mm_exe_file+0x490/0x490
[ 36.700393][ T3605] ? __raw_spin_lock_init+0x36/0x110
[ 36.705761][ T3605] copy_process+0x3bba/0x7020
[ 36.710447][ T3605] ? __cleanup_sighand+0xb0/0xb0
[ 36.715394][ T3605] kernel_clone+0xe7/0xab0
[ 36.719809][ T3605] ? create_io_thread+0xe0/0xe0
[ 36.724655][ T3605] ? rwlock_bug.part.0+0x90/0x90
[ 36.729584][ T3605] ? _raw_spin_lock_irq+0x41/0x50
[ 36.734696][ T3605] ? find_held_lock+0x2d/0x110
[ 36.739559][ T3605] __do_sys_clone+0xba/0x100
[ 36.744145][ T3605] ? kernel_clone+0xab0/0xab0
[ 36.748822][ T3605] ? _raw_spin_unlock_irq+0x2a/0x40
[ 36.754013][ T3605] ? ptrace_notify+0xfa/0x140
[ 36.758774][ T3605] do_syscall_64+0x35/0xb0
[ 36.763187][ T3605] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 36.769106][ T3605] RIP: 0033:0x7ff78fd0d5e9
[ 36.773516][ T3605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 36.793127][ T3605] RSP: 002b:00007ffcfc8bb358 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 36.801538][ T3605] RAX: ffffffffffffffda RBX: 0000000000008cd3 RCX: 00007ff78fd0d5e9
[ 36.809505][ T3605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 36.817468][ T3605] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000003731
[ 36.825428][ T3605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 36.833389][ T3605] R13: 431bde82d7b634db R14: 00007ffcfc8bb3b0 R15: 0000000000000000
[ 36.841650][ T3605]
[ 36.845520][ T3605] Kernel Offset: disabled
[ 36.849927][ T3605] Rebooting in 86400 seconds..