./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3338375252 <...> Warning: Permanently added '10.128.1.88' (ECDSA) to the list of known hosts. execve("./syz-executor3338375252", ["./syz-executor3338375252"], 0x7fff328c7340 /* 10 vars */) = 0 brk(NULL) = 0x55555709b000 brk(0x55555709bc40) = 0x55555709bc40 arch_prctl(ARCH_SET_FS, 0x55555709b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3338375252", 4096) = 28 brk(0x5555570bcc40) = 0x5555570bcc40 brk(0x5555570bd000) = 0x5555570bd000 mprotect(0x7f32a46ff000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mmap(0x20000000, 40960, PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS|MAP_32BIT|MAP_GROWSDOWN|MAP_LOCKED, -1, 0) = 0x20000000 mremap(0x20005000, 16384, 4096, 0) = 0x20005000 clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 5000 attached ) = 5000 syzkaller login: [ 44.530651][ T4999] ------------[ cut here ]------------ [ 44.536377][ T4999] WARNING: CPU: 0 PID: 4999 at mm/gup.c:1173 __get_user_pages+0xd49/0x1080 [ 44.545231][ T4999] Modules linked in: [ 44.549325][ T4999] CPU: 0 PID: 4999 Comm: syz-executor333 Not tainted 6.4.0-syzkaller-08881-g533925cb7604 #0 [ 44.559497][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 44.569658][ T4999] RIP: 0010:__get_user_pages+0xd49/0x1080 [ 44.575422][ T4999] Code: 89 f8 48 c1 e8 03 80 3c 08 00 0f 85 bc 02 00 00 48 8b 44 24 20 48 8b 80 c0 00 00 00 48 8d 1c e8 e9 ad f7 ff ff e8 17 31 c3 ff <0f> 0b e9 32 f6 ff ff e8 0b 31 c3 ff 0f 0b e8 04 31 c3 ff 44 89 ed [ 44.595167][ T4999] RSP: 0018:ffffc90003a0f768 EFLAGS: 00010293 [ 44.601285][ T4999] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000000 [ 44.609300][ T4999] RDX: ffff88802ce09dc0 RSI: ffffffff81c18719 RDI: 0000000000000007 [ 44.617344][ T4999] RBP: 0000000020006000 R08: 0000000000000007 R09: 0000000000000000 [ 44.625310][ T4999] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88802b08b900 [ 44.633340][ T4999] R13: 00000000002d0001 R14: 0000000020006000 R15: 0000000000000001 [ 44.641338][ T4999] FS: 000055555709b300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 44.650297][ T4999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.656882][ T4999] CR2: 00007ffd59e54258 CR3: 00000000297a3000 CR4: 0000000000350ef0 [ 44.665132][ T4999] Call Trace: [ 44.668478][ T4999] [ 44.671397][ T4999] ? __warn+0xe6/0x390 [ 44.675472][ T4999] ? __get_user_pages+0xd49/0x1080 [pid 4999] process_vm_writev(5000, 0x20000340, 1, 0x20000540, 727, 0 [pid 5000] exit(0) = ? [pid 5000] +++ exited with 0 +++ [ 44.680743][ T4999] ? report_bug+0x2da/0x500 [ 44.685434][ T4999] ? handle_bug+0x3c/0x70 [ 44.689836][ T4999] ? exc_invalid_op+0x18/0x50 [ 44.694551][ T4999] ? asm_exc_invalid_op+0x1a/0x20 [ 44.699677][ T4999] ? __get_user_pages+0xd49/0x1080 [ 44.704840][ T4999] ? __get_user_pages+0xd49/0x1080 [ 44.710007][ T4999] ? __get_user_pages+0xd49/0x1080 [ 44.715165][ T4999] ? follow_page_mask+0xdc0/0xdc0 [ 44.720275][ T4999] __gup_longterm_locked+0x6f9/0x23e0 [ 44.725670][ T4999] ? aa_restore_previous_label+0x970/0x970 [ 44.731645][ T4999] ? get_user_pages_unlocked+0x810/0x810 [ 44.737401][ T4999] ? lock_sync+0x190/0x190 [ 44.741818][ T4999] pin_user_pages_remote+0xee/0x140 [ 44.747073][ T4999] ? __gup_longterm_locked+0x23e0/0x23e0 [ 44.752740][ T4999] process_vm_rw_core.constprop.0+0x437/0x980 [ 44.758864][ T4999] ? vmalloc_dump_obj+0x270/0x270 [ 44.763904][ T4999] ? lockdep_hardirqs_on+0x7d/0x100 [ 44.769255][ T4999] ? iovec_from_user.part.0+0x144/0x170 [ 44.774816][ T4999] ? rcu_is_watching+0x12/0xb0 [ 44.779628][ T4999] ? copy_iovec_from_user.part.0+0xc7/0x100 [ 44.785546][ T4999] ? iovec_from_user.part.0+0x7a/0x170 [ 44.791116][ T4999] process_vm_rw+0x29c/0x300 [ 44.795957][ T4999] ? process_vm_rw_core.constprop.0+0x980/0x980 [ 44.802262][ T4999] ? lock_sync+0x190/0x190 [ 44.806683][ T4999] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 44.811931][ T4999] ? spin_bug+0x1c0/0x1c0 [ 44.816300][ T4999] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 44.821842][ T4999] ? ptrace_stop.part.0+0x60f/0x8e0 [ 44.827084][ T4999] ? find_held_lock+0x2d/0x110 [ 44.831877][ T4999] ? ptrace_notify+0xfe/0x140 [ 44.836570][ T4999] ? lock_downgrade+0x690/0x690 [ 44.841497][ T4999] ? _raw_spin_unlock_irq+0x23/0x50 [ 44.846726][ T4999] __x64_sys_process_vm_writev+0xe3/0x1b0 [ 44.852504][ T4999] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 44.858869][ T4999] do_syscall_64+0x39/0xb0 [ 44.863332][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 44.869281][ T4999] RIP: 0033:0x7f32a4692bf9 [ 44.873697][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 44.893357][ T4999] RSP: 002b:00007ffd59e54248 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 44.901845][ T4999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f32a4692bf9 [ 44.909850][ T4999] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000001388 [ 44.917863][ T4999] RBP: 00007f32a4656d40 R08: 00000000000002d7 R09: 0000000000000000 [ 44.925906][ T4999] R10: 0000000020000540 R11: 0000000000000246 R12: 00007f32a4656dd0 [ 44.933908][ T4999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 44.941918][ T4999] [ 44.944926][ T4999] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 44.952242][ T4999] CPU: 0 PID: 4999 Comm: syz-executor333 Not tainted 6.4.0-syzkaller-08881-g533925cb7604 #0 [ 44.962318][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 44.972537][ T4999] Call Trace: [ 44.975912][ T4999] [ 44.979099][ T4999] dump_stack_lvl+0xd9/0x150 [ 44.983711][ T4999] panic+0x686/0x730 [ 44.987614][ T4999] ? panic_smp_self_stop+0xa0/0xa0 [ 44.992745][ T4999] ? show_trace_log_lvl+0x284/0x390 [ 44.997954][ T4999] ? __get_user_pages+0xd49/0x1080 [ 45.003068][ T4999] check_panic_on_warn+0xb1/0xc0 [ 45.008108][ T4999] __warn+0xf2/0x390 [ 45.012003][ T4999] ? __get_user_pages+0xd49/0x1080 [ 45.017121][ T4999] report_bug+0x2da/0x500 [ 45.021451][ T4999] handle_bug+0x3c/0x70 [ 45.025602][ T4999] exc_invalid_op+0x18/0x50 [ 45.030102][ T4999] asm_exc_invalid_op+0x1a/0x20 [ 45.034957][ T4999] RIP: 0010:__get_user_pages+0xd49/0x1080 [ 45.040854][ T4999] Code: 89 f8 48 c1 e8 03 80 3c 08 00 0f 85 bc 02 00 00 48 8b 44 24 20 48 8b 80 c0 00 00 00 48 8d 1c e8 e9 ad f7 ff ff e8 17 31 c3 ff <0f> 0b e9 32 f6 ff ff e8 0b 31 c3 ff 0f 0b e8 04 31 c3 ff 44 89 ed [ 45.060463][ T4999] RSP: 0018:ffffc90003a0f768 EFLAGS: 00010293 [ 45.066527][ T4999] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000000 [ 45.074582][ T4999] RDX: ffff88802ce09dc0 RSI: ffffffff81c18719 RDI: 0000000000000007 [ 45.082640][ T4999] RBP: 0000000020006000 R08: 0000000000000007 R09: 0000000000000000 [ 45.090603][ T4999] R10: 0000000000000100 R11: 0000000000000001 R12: ffff88802b08b900 [ 45.098591][ T4999] R13: 00000000002d0001 R14: 0000000020006000 R15: 0000000000000001 [ 45.106739][ T4999] ? __get_user_pages+0xd49/0x1080 [ 45.111868][ T4999] ? __get_user_pages+0xd49/0x1080 [ 45.116994][ T4999] ? follow_page_mask+0xdc0/0xdc0 [ 45.122028][ T4999] __gup_longterm_locked+0x6f9/0x23e0 [ 45.127423][ T4999] ? aa_restore_previous_label+0x970/0x970 [ 45.133237][ T4999] ? get_user_pages_unlocked+0x810/0x810 [ 45.138912][ T4999] ? lock_sync+0x190/0x190 [ 45.143342][ T4999] pin_user_pages_remote+0xee/0x140 [ 45.148555][ T4999] ? __gup_longterm_locked+0x23e0/0x23e0 [ 45.154242][ T4999] process_vm_rw_core.constprop.0+0x437/0x980 [ 45.160331][ T4999] ? vmalloc_dump_obj+0x270/0x270 [ 45.165376][ T4999] ? lockdep_hardirqs_on+0x7d/0x100 [ 45.170579][ T4999] ? iovec_from_user.part.0+0x144/0x170 [ 45.176125][ T4999] ? rcu_is_watching+0x12/0xb0 [ 45.180884][ T4999] ? copy_iovec_from_user.part.0+0xc7/0x100 [ 45.186782][ T4999] ? iovec_from_user.part.0+0x7a/0x170 [ 45.192252][ T4999] process_vm_rw+0x29c/0x300 [ 45.196848][ T4999] ? process_vm_rw_core.constprop.0+0x980/0x980 [ 45.203116][ T4999] ? lock_sync+0x190/0x190 [ 45.207536][ T4999] ? ptrace_stop.part.0+0x4a3/0x8e0 [ 45.212734][ T4999] ? spin_bug+0x1c0/0x1c0 [ 45.217074][ T4999] ? recalc_sigpending_tsk+0x18b/0x1d0 [ 45.222529][ T4999] ? ptrace_stop.part.0+0x60f/0x8e0 [ 45.227735][ T4999] ? find_held_lock+0x2d/0x110 [ 45.232538][ T4999] ? ptrace_notify+0xfe/0x140 [ 45.237216][ T4999] ? lock_downgrade+0x690/0x690 [ 45.242071][ T4999] ? _raw_spin_unlock_irq+0x23/0x50 [ 45.247279][ T4999] __x64_sys_process_vm_writev+0xe3/0x1b0 [ 45.253007][ T4999] ? syscall_trace_enter.constprop.0+0xb0/0x1e0 [ 45.259253][ T4999] do_syscall_64+0x39/0xb0 [ 45.263672][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 45.269581][ T4999] RIP: 0033:0x7f32a4692bf9 [ 45.273986][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 21 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 45.293729][ T4999] RSP: 002b:00007ffd59e54248 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 45.302147][ T4999] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f32a4692bf9 [ 45.310117][ T4999] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000001388 [ 45.318086][ T4999] RBP: 00007f32a4656d40 R08: 00000000000002d7 R09: 0000000000000000 [ 45.326051][ T4999] R10: 0000000020000540 R11: 0000000000000246 R12: 00007f32a4656dd0 [ 45.334020][ T4999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 45.341994][ T4999] [ 45.346196][ T4999] Kernel Offset: disabled [ 45.350733][ T4999] Rebooting in 86400 seconds..