./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor464011534 <...> Warning: Permanently added '10.128.1.160' (ECDSA) to the list of known hosts. execve("./syz-executor464011534", ["./syz-executor464011534"], 0x7ffc8e316380 /* 10 vars */) = 0 brk(NULL) = 0x5555572c2000 brk(0x5555572c2c40) = 0x5555572c2c40 arch_prctl(ARCH_SET_FS, 0x5555572c2300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor464011534", 4096) = 27 brk(0x5555572e3c40) = 0x5555572e3c40 brk(0x5555572e4000) = 0x5555572e4000 mprotect(0x7fec20295000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/dev/bus/usb/002/001", O_RDONLY) = 3 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4 write(4, "13", 2) = 2 syzkaller login: [ 78.528491][ T5004] FAULT_INJECTION: forcing a failure. [ 78.528491][ T5004] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 78.541957][ T5004] CPU: 1 PID: 5004 Comm: syz-executor464 Not tainted 6.4.0-rc2-syzkaller-00015-g1b66c114d161 #0 [ 78.552402][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 78.562477][ T5004] Call Trace: [ 78.565763][ T5004] [ 78.568705][ T5004] dump_stack_lvl+0x136/0x150 [ 78.573425][ T5004] should_fail_ex+0x4a3/0x5b0 [ 78.578134][ T5004] prepare_alloc_pages+0x178/0x570 [ 78.583298][ T5004] __alloc_pages+0x149/0x4a0 [ 78.587927][ T5004] ? lock_sync+0x190/0x190 [ 78.592396][ T5004] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 78.599202][ T5004] ? find_held_lock+0x2d/0x110 [ 78.604004][ T5004] ? lock_downgrade+0x690/0x690 [ 78.608896][ T5004] alloc_pages+0x1aa/0x270 [ 78.613361][ T5004] pte_alloc_one+0x1a/0x230 [ 78.617899][ T5004] __pte_alloc+0x6d/0x260 [ 78.622271][ T5004] ? pmd_install+0x160/0x160 [ 78.626906][ T5004] ? do_raw_spin_unlock+0x175/0x230 [ 78.632141][ T5004] remap_pfn_range_notrack+0x9fb/0xea0 [ 78.637636][ T5004] ? apply_to_existing_page_range+0x40/0x40 [ 78.643566][ T5004] remap_pfn_range+0xca/0x140 [ 78.648271][ T5004] ? remap_pfn_range_notrack+0xea0/0xea0 [ 78.654035][ T5004] ? hcd_buffer_alloc+0x19a/0x290 [ 78.659125][ T5004] usbdev_mmap+0x414/0xc40 [ 78.663574][ T5004] ? usbdev_vm_close+0x50/0x50 [ 78.668977][ T5004] ? __raw_spin_lock_init+0x3a/0x110 [ 78.674311][ T5004] mmap_region+0x694/0x28d0 [ 78.678874][ T5004] ? do_munmap+0xf0/0xf0 [ 78.683159][ T5004] ? security_mmap_addr+0x77/0xa0 [ 78.688299][ T5004] ? get_unmapped_area+0x1e8/0x3c0 [ 78.693444][ T5004] do_mmap+0x831/0xf60 [ 78.697561][ T5004] vm_mmap_pgoff+0x1a2/0x3b0 [ 78.702236][ T5004] ? randomize_page+0xb0/0xb0 [ 78.706965][ T5004] ksys_mmap_pgoff+0x41f/0x5a0 [ 78.711771][ T5004] do_syscall_64+0x39/0xb0 [ 78.716229][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.722157][ T5004] RIP: 0033:0x7fec20228c89 [ 78.726593][ T5004] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 78.746402][ T5004] RSP: 002b:00007fff16e19838 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 78.754837][ T5004] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fec20228c89 [ 78.762832][ T5004] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 78.770819][ T5004] RBP: 00007fff16e19850 R08: 0000000000000003 R09: 0000000000000000 [ 78.778832][ T5004] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000004 [ 78.786824][ T5004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 78.794828][ T5004] [ 78.801387][ T5004] ------------[ cut here ]------------ [ 78.807089][ T5004] kernel BUG at mm/page_table_check.c:142! [ 78.812917][ T5004] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 78.819075][ T5004] CPU: 0 PID: 5004 Comm: syz-executor464 Not tainted 6.4.0-rc2-syzkaller-00015-g1b66c114d161 #0 [ 78.829511][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 78.839586][ T5004] RIP: 0010:__page_table_check_zero+0x175/0x1c0 [ 78.845869][ T5004] Code: 24 08 80 38 00 75 47 48 03 2d f7 d4 04 10 49 83 c4 01 e9 00 ff ff ff e8 79 50 a2 ff 0f 0b e8 72 50 a2 ff 0f 0b e8 6b 50 a2 ff <0f> 0b e8 64 50 a2 ff 0f 0b e8 5d 50 a2 ff 48 89 ef 48 83 c4 10 5b [ 78.865586][ T5004] RSP: 0018:ffffc90003b3fa10 EFLAGS: 00010293 [ 78.871693][ T5004] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 78.879668][ T5004] RDX: ffff8880220c0000 RSI: ffffffff81e1f265 RDI: 0000000000000005 [ 78.887654][ T5004] RBP: ffff888016090000 R08: 0000000000000005 R09: 0000000000000000 [ 78.895643][ T5004] R10: 0000000000000001 R11: 1ffffffff18f47c1 R12: 0000000000000000 [ 78.903639][ T5004] R13: 000000000000000a R14: 0000000000000400 R15: dffffc0000000000 [ 78.911728][ T5004] FS: 00005555572c2300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 78.920685][ T5004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.927277][ T5004] CR2: 000000000064392c CR3: 000000007abec000 CR4: 00000000003506f0 [ 78.935254][ T5004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.943243][ T5004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.951216][ T5004] Call Trace: [ 78.954496][ T5004] [ 78.957444][ T5004] __free_pages_ok+0x9c8/0x1060 [ 78.962325][ T5004] hcd_buffer_free+0x1b9/0x250 [ 78.967112][ T5004] usb_free_coherent+0x6b/0x80 [ 78.971986][ T5004] dec_usb_memory_use_count+0x253/0x3f0 [ 78.977547][ T5004] usbdev_mmap+0x8d8/0xc40 [ 78.981980][ T5004] ? usbdev_vm_close+0x50/0x50 [ 78.986764][ T5004] ? __raw_spin_lock_init+0x3a/0x110 [ 78.992073][ T5004] mmap_region+0x694/0x28d0 [ 78.996601][ T5004] ? do_munmap+0xf0/0xf0 [ 79.000866][ T5004] ? security_mmap_addr+0x77/0xa0 [ 79.005902][ T5004] ? get_unmapped_area+0x1e8/0x3c0 [ 79.011297][ T5004] do_mmap+0x831/0xf60 [ 79.015405][ T5004] vm_mmap_pgoff+0x1a2/0x3b0 [ 79.020028][ T5004] ? randomize_page+0xb0/0xb0 [ 79.024730][ T5004] ksys_mmap_pgoff+0x41f/0x5a0 [ 79.029529][ T5004] do_syscall_64+0x39/0xb0 [ 79.033971][ T5004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.039898][ T5004] RIP: 0033:0x7fec20228c89 [ 79.044315][ T5004] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 79.064015][ T5004] RSP: 002b:00007fff16e19838 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 79.072696][ T5004] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fec20228c89 [ 79.080674][ T5004] RDX: 0000000001000002 RSI: 0000000000400000 RDI: 0000000020000000 [ 79.088648][ T5004] RBP: 00007fff16e19850 R08: 0000000000000003 R09: 0000000000000000 [ 79.096635][ T5004] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000004 [ 79.104609][ T5004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 79.112600][ T5004] [ 79.115617][ T5004] Modules linked in: [ 79.120843][ T5004] ---[ end trace 0000000000000000 ]--- [ 79.127152][ T5004] RIP: 0010:__page_table_check_zero+0x175/0x1c0 [ 79.133458][ T5004] Code: 24 08 80 38 00 75 47 48 03 2d f7 d4 04 10 49 83 c4 01 e9 00 ff ff ff e8 79 50 a2 ff 0f 0b e8 72 50 a2 ff 0f 0b e8 6b 50 a2 ff <0f> 0b e8 64 50 a2 ff 0f 0b e8 5d 50 a2 ff 48 89 ef 48 83 c4 10 5b [ 79.153280][ T5004] RSP: 0018:ffffc90003b3fa10 EFLAGS: 00010293 [ 79.159491][ T5004] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 79.167622][ T5004] RDX: ffff8880220c0000 RSI: ffffffff81e1f265 RDI: 0000000000000005 [ 79.175742][ T5004] RBP: ffff888016090000 R08: 0000000000000005 R09: 0000000000000000 [ 79.183823][ T5004] R10: 0000000000000001 R11: 1ffffffff18f47c1 R12: 0000000000000000 [ 79.191965][ T5004] R13: 000000000000000a R14: 0000000000000400 R15: dffffc0000000000 [ 79.200092][ T5004] FS: 00005555572c2300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 79.209169][ T5004] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.215890][ T5004] CR2: 000056248b8b7008 CR3: 000000007abec000 CR4: 00000000003506f0 [ 79.223906][ T5004] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.232052][ T5004] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.240272][ T5004] Kernel panic - not syncing: Fatal exception [ 79.246614][ T5004] Kernel Offset: disabled [ 79.250945][ T5004] Rebooting in 86400 seconds..