Warning: Permanently added '[localhost]:8619' (ED25519) to the list of known hosts. executing program [ 86.104473][ T5110] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 86.109465][ T5110] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 86.113724][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz-executor360 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 86.117496][ T5110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.121340][ T5110] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 86.124767][ T5110] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 57 0c 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 3a 0c 1a 00 4c 8b 23 48 c7 c0 7c [ 86.131918][ T5110] RSP: 0018:ffffc90002ebf100 EFLAGS: 00010202 [ 86.134141][ T5110] RAX: 000000000000000b RBX: 0000000000000058 RCX: ffff88801e22c880 [ 86.136992][ T5110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002ebf1e0 [ 86.140010][ T5110] RBP: ffffc90002ebf290 R08: ffffc90002ebf311 R09: 0000000000000000 [ 86.142970][ T5110] R10: ffffc90002ebf2f0 R11: fffff520005d7e63 R12: dffffc0000000000 [ 86.145571][ T5110] R13: 1ffff110023ff021 R14: ffffc90002ebf2e0 R15: ffff888011ff80f8 [ 86.148214][ T5110] FS: 000055555a0b0380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 86.151135][ T5110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.153336][ T5110] CR2: 00007fcc4f54b0f0 CR3: 000000003a3a4000 CR4: 0000000000350ef0 [ 86.155933][ T5110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.158627][ T5110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.161321][ T5110] Call Trace: [ 86.162509][ T5110] [ 86.163684][ T5110] ? __die_body+0x5f/0xb0 [ 86.165287][ T5110] ? die_addr+0xb0/0xe0 [ 86.166811][ T5110] ? exc_general_protection+0x3dd/0x5d0 [ 86.168804][ T5110] ? asm_exc_general_protection+0x26/0x30 [ 86.170859][ T5110] ? follow_pfnmap_start+0x1a7/0xfd0 [ 86.172776][ T5110] ? __pfx_follow_pfnmap_start+0x10/0x10 [ 86.174788][ T5110] ? __pfx_validate_chain+0x10/0x10 [ 86.176388][ T5110] ? __pfx_validate_chain+0x10/0x10 [ 86.178251][ T5110] get_pat_info+0x182/0x3f0 [ 86.179923][ T5110] ? __pfx_get_pat_info+0x10/0x10 [ 86.181654][ T5110] untrack_pfn+0x327/0x640 [ 86.183351][ T5110] ? __pfx_untrack_pfn+0x10/0x10 [ 86.185275][ T5110] ? unmap_vmas+0x1f1/0x5f0 [ 86.187016][ T5110] ? __pfx_lock_release+0x10/0x10 [ 86.188892][ T5110] unmap_single_vma+0x1f6/0x2b0 [ 86.190617][ T5110] unmap_vmas+0x3cc/0x5f0 [ 86.192103][ T5110] ? __pfx_unmap_vmas+0x10/0x10 [ 86.193838][ T5110] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.196048][ T5110] ? tlb_gather_mmu+0x24e/0x310 [ 86.197780][ T5110] unmap_region+0x214/0x380 [ 86.199453][ T5110] ? __pfx_unmap_region+0x10/0x10 [ 86.201246][ T5110] ? __mas_set_range+0x133/0x3c0 [ 86.203013][ T5110] ? fput+0x1a8/0x230 [ 86.204459][ T5110] mmap_region+0x22f9/0x2990 [ 86.206168][ T5110] ? __pfx_mmap_region+0x10/0x10 [ 86.207966][ T5110] ? __asan_memset+0x23/0x50 [ 86.209608][ T5110] ? process_measurement+0x3ca/0x1fb0 [ 86.212424][ T5110] ? __pfx_lock_acquire+0x10/0x10 [ 86.214216][ T5110] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 86.216465][ T5110] ? bpf_lsm_mmap_addr+0x9/0x10 [ 86.218172][ T5110] ? security_mmap_addr+0x6f/0x250 [ 86.220050][ T5110] ? __get_unmapped_area+0x2ed/0x350 [ 86.222117][ T5110] do_mmap+0x8f0/0x1000 [ 86.223754][ T5110] ? __pfx_do_mmap+0x10/0x10 [ 86.225518][ T5110] ? __pfx_down_write_killable+0x10/0x10 [ 86.227878][ T5110] ? common_file_perm+0x1a6/0x210 [ 86.229880][ T5110] vm_mmap_pgoff+0x1dd/0x3d0 [ 86.231716][ T5110] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 86.233600][ T5110] ? __fget_files+0x29/0x470 [ 86.235347][ T5110] ? __fget_files+0x3f3/0x470 [ 86.237043][ T5110] ? __fget_files+0x29/0x470 [ 86.238775][ T5110] ksys_mmap_pgoff+0x4eb/0x720 [ 86.240577][ T5110] ? __x64_sys_mmap+0x7f/0x140 [ 86.242213][ T5110] do_syscall_64+0xf3/0x230 [ 86.244067][ T5110] ? clear_bhb_loop+0x35/0x90 [ 86.245943][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.248787][ T5110] RIP: 0033:0x7fcc4f4d4879 [ 86.250828][ T5110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.258244][ T5110] RSP: 002b:00007ffca3966e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 86.261303][ T5110] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc4f4d4879 [ 86.264130][ T5110] RDX: 0000000000000007 RSI: 0000000000005000 RDI: 0000000020371000 [ 86.266880][ T5110] RBP: 00007fcc4f5475f0 R08: 0000000000000003 R09: 0000000000000000 [ 86.269556][ T5110] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 86.272677][ T5110] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 86.275801][ T5110] [ 86.277068][ T5110] Modules linked in: [ 86.278732][ T5110] ---[ end trace 0000000000000000 ]--- [ 86.462266][ T5110] RIP: 0010:follow_pfnmap_start+0x1a7/0xfd0 [ 86.464313][ T5110] Code: 8d 9f 80 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 57 0c 1a 00 48 8b 1b 48 83 c3 58 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 3a 0c 1a 00 4c 8b 23 48 c7 c0 7c [ 86.481044][ T5110] RSP: 0018:ffffc90002ebf100 EFLAGS: 00010202 [ 86.491330][ T5110] RAX: 000000000000000b RBX: 0000000000000058 RCX: ffff88801e22c880 [ 86.495122][ T5110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002ebf1e0 [ 86.498060][ T5110] RBP: ffffc90002ebf290 R08: ffffc90002ebf311 R09: 0000000000000000 [ 86.506305][ T5110] R10: ffffc90002ebf2f0 R11: fffff520005d7e63 R12: dffffc0000000000 [ 86.509312][ T5110] R13: 1ffff110023ff021 R14: ffffc90002ebf2e0 R15: ffff888011ff80f8 [ 86.520328][ T5110] FS: 000055555a0b0380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 86.523641][ T5110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.526186][ T5110] CR2: 00007fcc4f54b0f0 CR3: 000000003a3a4000 CR4: 0000000000350ef0 [ 86.539980][ T5110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.543367][ T5110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.546173][ T5110] Kernel panic - not syncing: Fatal exception [ 86.548564][ T5110] Kernel Offset: disabled [ 86.550266][ T5110] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:59:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=ffffffff9a708e60 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002ebe830 R8 =ffffffff854934db R9 =1ffff11006594046 R10=dffffc0000000000 R11=ffffffff85493490 R12=dffffc0000000000 R13=ffffffff9a403f1a R14=0000000000000030 R15=00000000000003f8 RIP=ffffffff8549350e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555a0b0380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcc4f54b0f0 CR3=000000003a3a4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fff00000 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2330302f6273752f 7375622f7665642f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca3966e30 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc4f553240 00007fcc4f5475d8 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc4f5390a4 00007fcc4f54c240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000003130302f 3630302f6273752f 7375622f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001213130c 1513130c4150560c 5056410c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000