[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 68.814983][ C0] hrtimer: interrupt took 64009 ns executing program executing program executing program executing program executing program executing program [ 75.499880][ T7052] [ 75.502253][ T7052] ===================================== [ 75.507790][ T7052] WARNING: bad unlock balance detected! [ 75.513336][ T7052] 5.6.0-syzkaller #0 Not tainted [ 75.518264][ T7052] ------------------------------------- [ 75.523804][ T7052] syz-executor151/7052 is trying to release lock (&mm->mmap_sem) at: [ 75.532200][ T7052] [] __get_user_pages_remote+0x540/0x740 [ 75.539394][ T7052] but there are no more locks to release! [ 75.545148][ T7052] [ 75.545148][ T7052] other info that might help us debug this: [ 75.553235][ T7052] no locks held by syz-executor151/7052. [ 75.558859][ T7052] [ 75.558859][ T7052] stack backtrace: [ 75.564761][ T7052] CPU: 0 PID: 7052 Comm: syz-executor151 Not tainted 5.6.0-syzkaller #0 [ 75.573078][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.583130][ T7052] Call Trace: [ 75.586432][ T7052] dump_stack+0x188/0x20d [ 75.590767][ T7052] ? __get_user_pages_remote+0x540/0x740 [ 75.596409][ T7052] lock_release+0x586/0x800 [ 75.600918][ T7052] ? lock_downgrade+0x840/0x840 [ 75.605773][ T7052] ? lock_downgrade+0x840/0x840 [ 75.610636][ T7052] up_read+0x79/0x750 [ 75.614627][ T7052] ? down_read_killable+0x2d2/0x460 [ 75.619832][ T7052] ? down_read_nested+0x420/0x420 [ 75.624858][ T7052] ? get_task_mm+0xba/0xe0 [ 75.629291][ T7052] __get_user_pages_remote+0x540/0x740 [ 75.634773][ T7052] pin_user_pages_remote+0x67/0xa0 [ 75.639898][ T7052] process_vm_rw_core.isra.0+0x423/0x940 [ 75.645568][ T7052] ? alloc_vmap_area.cold+0x1f/0x1f [ 75.650880][ T7052] ? compat_import_iovec+0x236/0x3d0 [ 75.656182][ T7052] ? import_iovec+0x3d0/0x3d0 [ 75.660871][ T7052] ? compat_rw_copy_check_uvector+0x36b/0x4a0 [ 75.667015][ T7052] compat_process_vm_rw+0x21f/0x240 [ 75.672263][ T7052] ? process_vm_rw+0x240/0x240 [ 75.677037][ T7052] ? pud_val+0x7c/0xf0 [ 75.681252][ T7052] ? mark_held_locks+0xe0/0xe0 [ 75.686203][ T7052] ? find_held_lock+0x2d/0x110 [ 75.690985][ T7052] ? do_page_fault+0x59e/0x13da [ 75.695878][ T7052] ? apply_to_existing_page_range+0x40/0x40 [ 75.701788][ T7052] ? lock_downgrade+0x840/0x840 [ 75.706668][ T7052] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 75.712247][ T7052] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 75.718245][ T7052] ? down_read_nested+0x420/0x420 [ 75.723294][ T7052] ? switch_fpu_return+0x1db/0x4b0 [ 75.728423][ T7052] __ia32_compat_sys_process_vm_writev+0xdc/0x1b0 [ 75.734857][ T7052] ? lockdep_hardirqs_on+0x463/0x620 [ 75.740157][ T7052] do_fast_syscall_32+0x270/0xe90 [ 75.745321][ T7052] entry_SYSENTER_compat+0x70/0x7f executing program executing program executing program [ 76.052890][ T7052] ------------[ cut here ]------------ [ 76.091324][ T7052] DEBUG_RWSEMS_WARN_ON(tmp < 0): count = 0xffffffffffffff00, magic = 0xffff88809e2392f8, owner = 0x3, curr 0xffff88809a6c6240, list empty [ 76.154813][ T7052] WARNING: CPU: 1 PID: 7052 at kernel/locking/rwsem.c:1435 up_read+0x5f9/0x750 [ 76.163794][ T7052] Kernel panic - not syncing: panic_on_warn set ... [ 76.170403][ T7052] CPU: 1 PID: 7052 Comm: syz-executor151 Not tainted 5.6.0-syzkaller #0 [ 76.178740][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.188896][ T7052] Call Trace: [ 76.192220][ T7052] dump_stack+0x188/0x20d [ 76.196567][ T7052] ? up_read+0x530/0x750 [ 76.202043][ T7052] panic+0x2e3/0x75c [ 76.205949][ T7052] ? add_taint.cold+0x16/0x16 [ 76.210646][ T7052] ? __probe_kernel_read+0x188/0x1d0 [ 76.215946][ T7052] ? __warn.cold+0x14/0x35 [ 76.220375][ T7052] ? __warn+0xd5/0x1c8 [ 76.224583][ T7052] ? up_read+0x5f9/0x750 [ 76.228832][ T7052] __warn.cold+0x2f/0x35 [ 76.233089][ T7052] ? irq_work_queue+0xc3/0x100 [ 76.237867][ T7052] ? up_read+0x5f9/0x750 [ 76.242136][ T7052] report_bug+0x27b/0x2f0 [ 76.246614][ T7052] do_error_trap+0x12b/0x220 [ 76.251341][ T7052] ? up_read+0x5f9/0x750 [ 76.255599][ T7052] do_invalid_op+0x32/0x40 [ 76.260022][ T7052] ? up_read+0x5f9/0x750 [ 76.264295][ T7052] invalid_op+0x23/0x30 [ 76.268480][ T7052] RIP: 0010:up_read+0x5f9/0x750 [ 76.273336][ T7052] Code: 3c 02 00 0f 85 44 01 00 00 48 8b 55 00 53 4d 89 f1 4d 89 e0 4c 89 f9 48 c7 c6 a0 82 2b 88 48 c7 c7 80 81 2b 88 e8 cf 25 ec ff <0f> 0b 5a e9 5e fc ff ff 48 c7 c7 d0 11 89 8a 48 89 04 24 e8 5f a7 [ 76.292954][ T7052] RSP: 0018:ffffc90001707900 EFLAGS: 00010282 [ 76.299047][ T7052] RAX: 0000000000000000 RBX: ffffffff882b80c0 RCX: 0000000000000000 [ 76.307193][ T7052] RDX: 0000000000000000 RSI: ffffffff815ce291 RDI: fffff520002e0f12 [ 76.315185][ T7052] RBP: ffff88809e2392f8 R08: ffff88809a6c6240 R09: ffffed1015ce66a9 [ 76.323180][ T7052] R10: ffff8880ae733547 R11: ffffed1015ce66a8 R12: 0000000000000003 [ 76.331256][ T7052] R13: 1ffff920002e0f24 R14: ffff88809a6c6240 R15: ffff88809e2392f8 [ 76.339293][ T7052] ? vprintk_func+0x81/0x17e [ 76.343947][ T7052] ? down_read_nested+0x420/0x420 [ 76.349089][ T7052] __get_user_pages_remote+0x540/0x740 [ 76.354576][ T7052] pin_user_pages_remote+0x67/0xa0 [ 76.359855][ T7052] process_vm_rw_core.isra.0+0x423/0x940 [ 76.365524][ T7052] ? alloc_vmap_area.cold+0x1f/0x1f [ 76.370757][ T7052] ? compat_import_iovec+0x236/0x3d0 [ 76.376066][ T7052] ? import_iovec+0x3d0/0x3d0 [ 76.380762][ T7052] ? compat_rw_copy_check_uvector+0x36b/0x4a0 [ 76.386866][ T7052] compat_process_vm_rw+0x21f/0x240 [ 76.392091][ T7052] ? process_vm_rw+0x240/0x240 [ 76.396861][ T7052] ? pud_val+0x7c/0xf0 [ 76.400938][ T7052] ? mark_held_locks+0xe0/0xe0 [ 76.405719][ T7052] ? find_held_lock+0x2d/0x110 [ 76.410489][ T7052] ? do_page_fault+0x59e/0x13da [ 76.415375][ T7052] ? apply_to_existing_page_range+0x40/0x40 [ 76.421284][ T7052] ? lock_downgrade+0x840/0x840 [ 76.426167][ T7052] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 76.431719][ T7052] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 76.437726][ T7052] ? down_read_nested+0x420/0x420 [ 76.442766][ T7052] ? switch_fpu_return+0x1db/0x4b0 [ 76.447915][ T7052] __ia32_compat_sys_process_vm_writev+0xdc/0x1b0 [ 76.454453][ T7052] ? lockdep_hardirqs_on+0x463/0x620 [ 76.459751][ T7052] do_fast_syscall_32+0x270/0xe90 [ 76.464798][ T7052] entry_SYSENTER_compat+0x70/0x7f [ 76.471506][ T7052] Kernel Offset: disabled [ 76.475856][ T7052] Rebooting in 86400 seconds..