./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor752702318
<...>
DUID 00:04:c5:78:79:07:21:f0:b3:e0:09:b6:1a:d6:4d:97:86:4f
forked to background, child pid 3185
[ 21.222716][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 21.231574][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts.
execve("./syz-executor752702318", ["./syz-executor752702318"], 0x7ffd438e6ee0 /* 10 vars */) = 0
brk(NULL) = 0x555556976000
brk(0x555556976c40) = 0x555556976c40
arch_prctl(ARCH_SET_FS, 0x555556976300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor752702318", 4096) = 27
brk(0x555556997c40) = 0x555556997c40
brk(0x555556998000) = 0x555556998000
mprotect(0x7f1d4ea77000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3614 attached
, child_tidptr=0x5555569765d0) = 3614
[pid 3614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3614] setpgid(0, 0) = 0
[pid 3614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3614] write(3, "1000", 4) = 4
[pid 3614] close(3) = 0
[pid 3614] openat(AT_FDCWD, "/dev/bus/usb/007/001", O_RDONLY) = 3
[pid 3614] mmap(0x20000000, 4194304, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_EXECUTABLE, 3, 0) = 0x20000000
[pid 3614] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3614] write(4, "18", 2) = 2
[pid 3614] clone(child_stack=NULL, flags=0) = -1 ENOMEM (Cannot allocate memory)
[pid 3614] exit_group(0) = ?
[pid 3614] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3614, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569765d0) = 3615
./strace-static-x86_64: Process 3615 attached
[pid 3615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3615] setpgid(0, 0) = 0
[pid 3615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3615] write(3, "1000", 4) = 4
[pid 3615] close(3) = 0
[pid 3615] openat(AT_FDCWD, "/dev/bus/usb/007/001", O_RDONLY) = 3
[pid 3615] mmap(0x20000000, 4194304, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_EXECUTABLE, 3, 0) = 0x20000000
[pid 3615] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3615] write(4, "18", 2) = 2
[pid 3615] clone(child_stack=NULL, flags=0) = -1 ENOMEM (Cannot allocate memory)
[pid 3615] exit_group(0) = ?
[pid 3615] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3615, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3616 attached
, child_tidptr=0x5555569765d0) = 3616
[pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 3616] setpgid(0, 0) = 0
[pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 3616] write(3, "1000", 4) = 4
[pid 3616] close(3) = 0
[pid 3616] openat(AT_FDCWD, "/dev/bus/usb/007/001", O_RDONLY) = 3
[pid 3616] mmap(0x20000000, 4194304, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_EXECUTABLE, 3, 0) = 0x20000000
[pid 3616] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 3616] write(4, "18", 2) = 2
syzkaller login: [ 37.885243][ T3616] ------------[ cut here ]------------
[ 37.890890][ T3616] WARNING: CPU: 0 PID: 3616 at arch/x86/mm/pat/memtype.c:1107 untrack_pfn+0x247/0x290
[ 37.900902][ T3616] Modules linked in:
[ 37.904795][ T3616] CPU: 0 PID: 3616 Comm: syz-executor752 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0
[ 37.915342][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 37.925620][ T3616] RIP: 0010:untrack_pfn+0x247/0x290
[ 37.930981][ T3616] Code: 84 6c ff ff ff e8 99 56 44 00 4c 89 ee 4c 89 e7 e8 be de ff ff e8 89 56 44 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 79 56 44 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 0a 6c 91 00 e9 98 fe ff ff e8 c0
[ 37.950795][ T3616] RSP: 0018:ffffc90003def6f8 EFLAGS: 00010293
[ 37.957028][ T3616] RAX: 0000000000000000 RBX: ffff888025423210 RCX: 0000000000000000
[ 37.965007][ T3616] RDX: ffff88802027bb00 RSI: ffffffff8136c0b7 RDI: 0000000000000005
[ 37.973235][ T3616] RBP: 1ffff920007bdedf R08: 0000000000000005 R09: 0000000000000000
[ 37.981369][ T3616] R10: 00000000ffffffea R11: 000000000008c07c R12: 00000000ffffffea
[ 37.989486][ T3616] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888025423260
[ 37.997644][ T3616] FS: 0000555556976300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 38.006762][ T3616] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.013348][ T3616] CR2: 00007f1d4ea39fd0 CR3: 00000000709ac000 CR4: 00000000003506f0
[ 38.021562][ T3616] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.029944][ T3616] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.038078][ T3616] Call Trace:
[ 38.041351][ T3616]
[ 38.044273][ T3616] ? track_pfn_insert+0x140/0x140
[ 38.049558][ T3616] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 38.054783][ T3616] ? unmap_vmas+0x148/0x310
[ 38.059497][ T3616] ? lock_downgrade+0x6e0/0x6e0
[ 38.064370][ T3616] ? uprobe_munmap+0x1c/0x560
[ 38.069249][ T3616] unmap_single_vma+0x1ba/0x360
[ 38.074102][ T3616] unmap_vmas+0x18c/0x310
[ 38.078695][ T3616] ? unmap_mapping_range+0x280/0x280
[ 38.083979][ T3616] ? lock_downgrade+0x6e0/0x6e0
[ 38.089017][ T3616] ? lru_add_drain_cpu+0x474/0x850
[ 38.094142][ T3616] exit_mmap+0x1b8/0x490
[ 38.098614][ T3616] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 38.104605][ T3616] ? lock_release+0x560/0x780
[ 38.109526][ T3616] ? dup_mm+0xb7e/0x13a0
[ 38.113773][ T3616] __mmput+0x122/0x4b0
[ 38.117872][ T3616] mmput+0x56/0x60
[ 38.121638][ T3616] dup_mm+0xdb4/0x13a0
[ 38.125737][ T3616] ? replace_mm_exe_file+0x480/0x480
[ 38.131064][ T3616] ? __raw_spin_lock_init+0x36/0x110
[ 38.136374][ T3616] copy_process+0x3ca6/0x7090
[ 38.141104][ T3616] ? vtime_account_system+0x2c6/0x530
[ 38.146644][ T3616] ? __cleanup_sighand+0xb0/0xb0
[ 38.151617][ T3616] ? trace_hardirqs_on+0x2d/0x120
[ 38.156709][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.162203][ T3616] ? lock_acquire+0x480/0x570
[ 38.166934][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.172432][ T3616] kernel_clone+0xe7/0xab0
[ 38.176901][ T3616] ? create_io_thread+0xe0/0xe0
[ 38.181765][ T3616] ? rwlock_bug.part.0+0x90/0x90
[ 38.186744][ T3616] ? recalc_sigpending_tsk+0x18f/0x1d0
[ 38.192240][ T3616] ? ptrace_stop.part.0+0x746/0xa80
[ 38.197491][ T3616] __do_sys_clone+0xba/0x100
[ 38.202110][ T3616] ? kernel_clone+0xab0/0xab0
[ 38.206868][ T3616] ? _raw_spin_unlock_irq+0x2a/0x40
[ 38.212091][ T3616] ? ptrace_notify+0xfa/0x140
[ 38.216818][ T3616] do_syscall_64+0x35/0xb0
[ 38.221248][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 38.227188][ T3616] RIP: 0033:0x7f1d4ea0a699
[ 38.231607][ T3616] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 38.251261][ T3616] RSP: 002b:00007ffdb3144598 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 38.259710][ T3616] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1d4ea0a699
[ 38.267724][ T3616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.275710][ T3616] RBP: 00007ffdb31445b0 R08: 0000000000000000 R09: 0000000000000001
[ 38.283709][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 38.291742][ T3616] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 38.299775][ T3616]
[ 38.302813][ T3616] Kernel panic - not syncing: panic_on_warn set ...
[ 38.309395][ T3616] CPU: 0 PID: 3616 Comm: syz-executor752 Not tainted 6.0.0-syzkaller-09039-ga6afa4199d3d #0
[ 38.319458][ T3616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 38.329512][ T3616] Call Trace:
[ 38.332794][ T3616]
[ 38.335728][ T3616] dump_stack_lvl+0xcd/0x134
[ 38.340326][ T3616] panic+0x2c8/0x622
[ 38.344258][ T3616] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 38.350255][ T3616] ? __warn.cold+0x248/0x2c4
[ 38.354861][ T3616] ? untrack_pfn+0x247/0x290
[ 38.359461][ T3616] __warn.cold+0x259/0x2c4
[ 38.363909][ T3616] ? untrack_pfn+0x247/0x290
[ 38.368518][ T3616] report_bug+0x1bc/0x210
[ 38.372872][ T3616] handle_bug+0x3c/0x70
[ 38.377046][ T3616] exc_invalid_op+0x14/0x40
[ 38.381570][ T3616] asm_exc_invalid_op+0x16/0x20
[ 38.386432][ T3616] RIP: 0010:untrack_pfn+0x247/0x290
[ 38.391641][ T3616] Code: 84 6c ff ff ff e8 99 56 44 00 4c 89 ee 4c 89 e7 e8 be de ff ff e8 89 56 44 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 79 56 44 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 0a 6c 91 00 e9 98 fe ff ff e8 c0
[ 38.411251][ T3616] RSP: 0018:ffffc90003def6f8 EFLAGS: 00010293
[ 38.417330][ T3616] RAX: 0000000000000000 RBX: ffff888025423210 RCX: 0000000000000000
[ 38.425645][ T3616] RDX: ffff88802027bb00 RSI: ffffffff8136c0b7 RDI: 0000000000000005
[ 38.433654][ T3616] RBP: 1ffff920007bdedf R08: 0000000000000005 R09: 0000000000000000
[ 38.441627][ T3616] R10: 00000000ffffffea R11: 000000000008c07c R12: 00000000ffffffea
[ 38.449600][ T3616] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888025423260
[ 38.457578][ T3616] ? untrack_pfn+0x247/0x290
[ 38.462198][ T3616] ? untrack_pfn+0x247/0x290
[ 38.466840][ T3616] ? track_pfn_insert+0x140/0x140
[ 38.471886][ T3616] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 38.477098][ T3616] ? unmap_vmas+0x148/0x310
[ 38.481609][ T3616] ? lock_downgrade+0x6e0/0x6e0
[ 38.486464][ T3616] ? uprobe_munmap+0x1c/0x560
[ 38.491599][ T3616] unmap_single_vma+0x1ba/0x360
[ 38.496467][ T3616] unmap_vmas+0x18c/0x310
[ 38.500801][ T3616] ? unmap_mapping_range+0x280/0x280
[ 38.506103][ T3616] ? lock_downgrade+0x6e0/0x6e0
[ 38.510959][ T3616] ? lru_add_drain_cpu+0x474/0x850
[ 38.516082][ T3616] exit_mmap+0x1b8/0x490
[ 38.520345][ T3616] ? __ia32_sys_remap_file_pages+0x150/0x150
[ 38.526346][ T3616] ? lock_release+0x560/0x780
[ 38.531030][ T3616] ? dup_mm+0xb7e/0x13a0
[ 38.535285][ T3616] __mmput+0x122/0x4b0
[ 38.539361][ T3616] mmput+0x56/0x60
[ 38.543089][ T3616] dup_mm+0xdb4/0x13a0
[ 38.547169][ T3616] ? replace_mm_exe_file+0x480/0x480
[ 38.552464][ T3616] ? __raw_spin_lock_init+0x36/0x110
[ 38.557756][ T3616] copy_process+0x3ca6/0x7090
[ 38.562444][ T3616] ? vtime_account_system+0x2c6/0x530
[ 38.567837][ T3616] ? __cleanup_sighand+0xb0/0xb0
[ 38.572784][ T3616] ? trace_hardirqs_on+0x2d/0x120
[ 38.577827][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.583324][ T3616] ? lock_acquire+0x480/0x570
[ 38.588027][ T3616] ? rcu_read_lock_sched_held+0xd/0x70
[ 38.593505][ T3616] kernel_clone+0xe7/0xab0
[ 38.597938][ T3616] ? create_io_thread+0xe0/0xe0
[ 38.602832][ T3616] ? rwlock_bug.part.0+0x90/0x90
[ 38.607780][ T3616] ? recalc_sigpending_tsk+0x18f/0x1d0
[ 38.613258][ T3616] ? ptrace_stop.part.0+0x746/0xa80
[ 38.618468][ T3616] __do_sys_clone+0xba/0x100
[ 38.623070][ T3616] ? kernel_clone+0xab0/0xab0
[ 38.627761][ T3616] ? _raw_spin_unlock_irq+0x2a/0x40
[ 38.632967][ T3616] ? ptrace_notify+0xfa/0x140
[ 38.637656][ T3616] do_syscall_64+0x35/0xb0
[ 38.642086][ T3616] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 38.648002][ T3616] RIP: 0033:0x7f1d4ea0a699
[ 38.652420][ T3616] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 38.672033][ T3616] RSP: 002b:00007ffdb3144598 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 38.680468][ T3616] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1d4ea0a699
[ 38.688455][ T3616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.696451][ T3616] RBP: 00007ffdb31445b0 R08: 0000000000000000 R09: 0000000000000001
[ 38.704453][ T3616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 38.712446][ T3616] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 38.720472][ T3616]
[ 38.723695][ T3616] Kernel Offset: disabled
[ 38.728014][ T3616] Rebooting in 86400 seconds..