[ 20.533897][ T408] device veth1_macvtap entered promiscuous mode [ 20.542243][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.557018][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.635285][ T408] syz-executor.0 (408) used greatest stack depth: 20928 bytes left [ 21.135071][ T42] device bridge_slave_1 left promiscuous mode [ 21.141090][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.152424][ T42] device bridge_slave_0 left promiscuous mode [ 21.159277][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.167495][ T42] device veth1_macvtap left promiscuous mode [ 21.173618][ T42] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. 2023/03/23 11:13:18 ignoring optional flag "sandboxArg"="0" 2023/03/23 11:13:18 parsed 1 programs 2023/03/23 11:13:18 executed programs: 0 [ 38.964060][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 38.964075][ T27] audit: type=1400 audit(1679569998.690:136): avc: denied { mounton } for pid=453 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 38.996002][ T27] audit: type=1400 audit(1679569998.690:137): avc: denied { mount } for pid=453 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.027811][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.034704][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.041794][ T457] device bridge_slave_0 entered promiscuous mode [ 39.048885][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.056141][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.063327][ T457] device bridge_slave_1 entered promiscuous mode [ 39.097812][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.104699][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.111910][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.118857][ T457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.135043][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.142218][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.149738][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.157011][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.175361][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.183445][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.191673][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.199386][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.207591][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.215786][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.222871][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.230813][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.239712][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.247467][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.254787][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.262534][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.271763][ T457] device veth0_vlan entered promiscuous mode [ 39.280795][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.289744][ T457] device veth1_macvtap entered promiscuous mode [ 39.299007][ T409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.310780][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.322308][ T27] audit: type=1400 audit(1679569999.050:138): avc: denied { mount } for pid=457 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 39.475047][ T463] loop0: detected capacity change from 0 to 63271 [ 39.482063][ T27] audit: type=1400 audit(1679569999.210:139): avc: denied { mounton } for pid=462 comm="syz-executor.0" path="/root/syzkaller-testdir3652395001/syzkaller.GbPLFB/0/bus" dev="sda1" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.494503][ T463] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 39.517265][ T463] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 39.526595][ T463] F2FS-fs (loop0): invalid crc value [ 39.534169][ T463] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.555182][ T463] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 39.562083][ T463] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 39.569668][ T27] audit: type=1400 audit(1679569999.310:140): avc: denied { mount } for pid=462 comm="syz-executor.0" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.591805][ T27] audit: type=1400 audit(1679569999.310:141): avc: denied { write } for pid=462 comm="syz-executor.0" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.613874][ T27] audit: type=1400 audit(1679569999.310:142): avc: denied { add_name } for pid=462 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.635863][ T27] audit: type=1400 audit(1679569999.310:143): avc: denied { create } for pid=462 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.656406][ T27] audit: type=1400 audit(1679569999.310:144): avc: denied { read write open } for pid=462 comm="syz-executor.0" path="/root/syzkaller-testdir3652395001/syzkaller.GbPLFB/0/bus/bus" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.671954][ T463] syz-executor.0: attempt to access beyond end of device [ 39.671954][ T463] loop0: rw=2049, want=77952, limit=63271 [ 39.684158][ T27] audit: type=1400 audit(1679569999.370:145): avc: denied { map } for pid=462 comm="syz-executor.0" path="/root/syzkaller-testdir3652395001/syzkaller.GbPLFB/0/bus/bus" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.696888][ T469] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 [ 39.965939][ T471] loop0: detected capacity change from 0 to 63271 [ 39.973163][ T471] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 39.982290][ T471] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 39.991138][ T471] F2FS-fs (loop0): invalid crc value [ 39.997470][ T471] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.017764][ T471] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.025678][ T471] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 40.113095][ T476] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=6 [ 40.235996][ T471] BUG: scheduling while atomic: syz-executor.0/471/0x00000002 [ 40.243831][ T471] Modules linked in: [ 40.247593][ T471] Preemption disabled at: [ 40.247599][ T471] [] unmap_page_range+0xa82/0x1ed0 [ 40.258472][ T471] CPU: 0 PID: 471 Comm: syz-executor.0 Not tainted 5.18.0-syzkaller #0 [ 40.266562][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 40.276440][ T471] Call Trace: [ 40.279564][ T471] [ 40.282437][ T471] dump_stack_lvl+0x151/0x1b7 [ 40.287035][ T471] ? unmap_page_range+0xa82/0x1ed0 [ 40.292068][ T471] ? unmap_page_range+0xa82/0x1ed0 [ 40.297018][ T471] ? bfq_pos_tree_add_move+0x43b/0x43b [ 40.302313][ T471] ? unmap_page_range+0xa82/0x1ed0 [ 40.307256][ T471] dump_stack+0x15/0x17 [ 40.311250][ T471] __schedule_bug+0x1a0/0x240 [ 40.315849][ T471] ? select_fallback_rq+0x220/0x220 [ 40.320884][ T471] ? __kernel_text_address+0xd/0x40 [ 40.325931][ T471] __schedule+0xd0a/0x1560 [ 40.330356][ T471] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 40.335990][ T471] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 40.341974][ T471] ? __sched_text_start+0x8/0x8 [ 40.346660][ T471] ? mutex_spin_on_owner+0x140/0x2b0 [ 40.351781][ T471] schedule+0xeb/0x1a0 [ 40.355687][ T471] schedule_preempt_disabled+0x13/0x20 [ 40.360980][ T471] __mutex_lock+0x4b1/0x1040 [ 40.365408][ T471] ? __kasan_slab_alloc+0xb1/0xe0 [ 40.370319][ T471] ? slab_post_alloc_hook+0x53/0x2c0 [ 40.375412][ T471] ? kmem_cache_alloc+0x106/0x210 [ 40.380249][ T471] ? folio_mark_dirty+0xd3/0xf0 [ 40.384935][ T471] ? unmap_vmas+0x389/0x560 [ 40.389274][ T471] ? exit_mmap+0x1cc/0x4c0 [ 40.393544][ T471] ? do_exit+0xa5b/0x27d0 [ 40.397820][ T471] ? do_group_exit+0x255/0x320 [ 40.402503][ T471] ? get_signal+0x170e/0x1870 [ 40.407111][ T471] ? arch_do_signal_or_restart+0xb0/0x12a0 [ 40.412822][ T471] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 40.419679][ T471] ? do_syscall_64+0x49/0x80 [ 40.424581][ T471] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 40.430443][ T471] __mutex_lock_slowpath+0xe/0x10 [ 40.435298][ T471] mutex_lock+0xeb/0x120 [ 40.439381][ T471] ? slab_post_alloc_hook+0x72/0x2c0 [ 40.444501][ T471] ? bit_wait_io_timeout+0x120/0x120 [ 40.449804][ T471] ? kmem_cache_alloc+0x106/0x210 [ 40.454739][ T471] ? f2fs_register_inmem_page+0x13f/0x4b0 [ 40.460297][ T471] f2fs_register_inmem_page+0x22c/0x4b0 [ 40.465764][ T471] f2fs_dirty_data_folio+0x31d/0x440 [ 40.471067][ T471] folio_mark_dirty+0xd3/0xf0 [ 40.475579][ T471] set_page_dirty+0x5c/0x70 [ 40.480005][ T471] unmap_page_range+0x12e4/0x1ed0 [ 40.485038][ T471] ? kasan_set_track+0x4b/0x70 [ 40.489724][ T471] ? kasan_set_free_info+0x23/0x40 [ 40.494673][ T471] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 40.501098][ T471] ? uprobe_munmap+0x18d/0x450 [ 40.506079][ T471] unmap_vmas+0x389/0x560 [ 40.510466][ T471] ? unmap_page_range+0x1ed0/0x1ed0 [ 40.515774][ T471] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 40.521152][ T471] exit_mmap+0x1cc/0x4c0 [ 40.525244][ T471] ? vm_brk+0x30/0x30 [ 40.529037][ T471] ? uprobe_clear_state+0x2cd/0x320 [ 40.534169][ T471] __mmput+0x95/0x300 [ 40.537977][ T471] mmput+0x59/0x70 [ 40.541534][ T471] do_exit+0xa5b/0x27d0 [ 40.545615][ T471] ? put_task_struct+0x80/0x80 [ 40.550220][ T471] ? __kasan_check_write+0x14/0x20 [ 40.555678][ T471] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 40.560632][ T471] do_group_exit+0x255/0x320 [ 40.565052][ T471] ? __kasan_check_write+0x14/0x20 [ 40.570002][ T471] get_signal+0x170e/0x1870 [ 40.574543][ T471] ? __kasan_check_read+0x11/0x20 [ 40.579411][ T471] ? ptrace_notify+0x350/0x350 [ 40.584178][ T471] arch_do_signal_or_restart+0xb0/0x12a0 [ 40.589643][ T471] ? __kasan_check_write+0x14/0x20 [ 40.594587][ T471] ? fput_many+0x160/0x1b0 [ 40.598841][ T471] ? do_futex+0x3b5/0x490 [ 40.603014][ T471] ? __ia32_sys_get_robust_list+0x90/0x90 [ 40.610054][ T471] ? get_sigframe_size+0x10/0x10 [ 40.614813][ T471] ? __se_sys_futex+0x35e/0x3c0 [ 40.619809][ T471] exit_to_user_mode_loop+0x6b/0xa0 [ 40.624826][ T471] exit_to_user_mode_prepare+0x5a/0xa0 [ 40.630120][ T471] syscall_exit_to_user_mode+0x26/0x130 [ 40.635507][ T471] do_syscall_64+0x49/0x80 [ 40.640795][ T471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 40.646619][ T471] RIP: 0033:0x7f2ce468c0f9 [ 40.650864][ T471] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 40.658071][ T471] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.666401][ T471] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 40.674308][ T471] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 40.682310][ T471] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 40.690098][ T471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 40.697908][ T471] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 40.705838][ T471] [ 40.713535][ T471] ------------[ cut here ]------------ [ 40.718931][ T471] DEBUG_LOCKS_WARN_ON(val > preempt_count()) [ 40.718961][ T471] WARNING: CPU: 0 PID: 471 at kernel/sched/core.c:5561 preempt_count_sub+0xa8/0x160 [ 40.734332][ T471] Modules linked in: [ 40.737992][ T471] CPU: 0 PID: 471 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 40.747743][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 40.758055][ T471] RIP: 0010:preempt_count_sub+0xa8/0x160 [ 40.763533][ T471] Code: 03 42 0f b6 04 30 84 c0 0f 85 86 00 00 00 83 3d b5 b3 35 05 00 75 d1 48 c7 c7 40 dc 08 85 48 c7 c6 e0 dc 08 85 e8 a8 bb f5 ff <0f> 0b eb ba e8 af 1e 08 01 85 c0 74 b1 48 c7 c0 98 0c 83 86 48 c1 [ 40.783512][ T471] RSP: 0018:ffffc90002b2f488 EFLAGS: 00010246 [ 40.789476][ T471] RAX: a46c710448cf8800 RBX: 0000000000000001 RCX: ffff88810dc10000 [ 40.797376][ T471] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 40.805347][ T471] RBP: ffffc90002b2f498 R08: ffffffff815697c8 R09: ffffed103ee44e8b [ 40.813364][ T471] R10: 0000000000000000 R11: dffffc0000000001 R12: 0400000000000080 [ 40.821709][ T471] R13: 0000000020200000 R14: dffffc0000000000 R15: dffffc0000000000 [ 40.829841][ T471] FS: 0000000000000000(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 40.839092][ T471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.845780][ T471] CR2: 0000000020003700 CR3: 000000010b04d000 CR4: 00000000003506a0 [ 40.853587][ T471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.861991][ T471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.869995][ T471] Call Trace: [ 40.873121][ T471] [ 40.876329][ T471] _raw_spin_unlock+0x4c/0x70 [ 40.881018][ T471] unmap_page_range+0x1c84/0x1ed0 [ 40.886002][ T471] ? kasan_set_track+0x4b/0x70 [ 40.890800][ T471] ? kasan_set_free_info+0x23/0x40 [ 40.896231][ T471] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 40.902457][ T471] ? uprobe_munmap+0x18d/0x450 [ 40.907362][ T471] unmap_vmas+0x389/0x560 [ 40.911653][ T471] ? unmap_page_range+0x1ed0/0x1ed0 [ 40.916922][ T471] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 40.922305][ T471] exit_mmap+0x1cc/0x4c0 [ 40.926526][ T471] ? vm_brk+0x30/0x30 [ 40.930344][ T471] ? uprobe_clear_state+0x2cd/0x320 [ 40.935566][ T471] __mmput+0x95/0x300 [ 40.939288][ T471] mmput+0x59/0x70 [ 40.942846][ T471] do_exit+0xa5b/0x27d0 [ 40.947123][ T471] ? put_task_struct+0x80/0x80 [ 40.951793][ T471] ? __kasan_check_write+0x14/0x20 [ 40.956800][ T471] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 40.961693][ T471] do_group_exit+0x255/0x320 [ 40.966799][ T471] ? __kasan_check_write+0x14/0x20 [ 40.971915][ T471] get_signal+0x170e/0x1870 [ 40.976522][ T471] ? __kasan_check_read+0x11/0x20 [ 40.981564][ T471] ? ptrace_notify+0x350/0x350 [ 40.986360][ T471] arch_do_signal_or_restart+0xb0/0x12a0 [ 40.991994][ T471] ? __kasan_check_write+0x14/0x20 [ 40.997169][ T471] ? fput_many+0x160/0x1b0 [ 41.001525][ T471] ? do_futex+0x3b5/0x490 [ 41.005857][ T471] ? __ia32_sys_get_robust_list+0x90/0x90 [ 41.011309][ T471] ? get_sigframe_size+0x10/0x10 [ 41.016167][ T471] ? __se_sys_futex+0x35e/0x3c0 [ 41.021077][ T471] exit_to_user_mode_loop+0x6b/0xa0 [ 41.026452][ T471] exit_to_user_mode_prepare+0x5a/0xa0 [ 41.032022][ T471] syscall_exit_to_user_mode+0x26/0x130 [ 41.037649][ T471] do_syscall_64+0x49/0x80 [ 41.042086][ T471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 41.047849][ T471] RIP: 0033:0x7f2ce468c0f9 [ 41.052248][ T471] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 41.059707][ T471] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 41.068664][ T471] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 41.076589][ T471] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 41.084584][ T471] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 41.092556][ T471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 41.100429][ T471] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 41.108723][ T471] [ 41.111553][ T471] ---[ end trace 0000000000000000 ]--- [ 41.377255][ T481] loop0: detected capacity change from 0 to 63271 [ 41.384890][ T481] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 41.393521][ T481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 41.402606][ T481] F2FS-fs (loop0): invalid crc value [ 41.408682][ T481] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.428785][ T481] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 41.435836][ T481] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 41.525163][ T486] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 [ 41.954928][ T488] loop0: detected capacity change from 0 to 63271 [ 41.962174][ T488] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 41.970494][ T488] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 41.979418][ T488] F2FS-fs (loop0): invalid crc value [ 41.985753][ T488] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.006299][ T488] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.013173][ T488] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 42.100675][ T493] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=17 [ 42.100925][ T488] syz-executor.0: attempt to access beyond end of device [ 42.100925][ T488] loop0: rw=2049, want=77952, limit=63271 [ 42.367569][ T497] loop0: detected capacity change from 0 to 63271 [ 42.375332][ T497] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 42.383721][ T497] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.392906][ T497] F2FS-fs (loop0): invalid crc value [ 42.400046][ T497] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.421155][ T497] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.429694][ T497] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 42.515148][ T502] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 [ 42.953814][ T504] loop0: detected capacity change from 0 to 63271 [ 42.962161][ T504] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 42.970629][ T504] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.980833][ T504] F2FS-fs (loop0): invalid crc value [ 42.987558][ T504] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.008853][ T504] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.015949][ T504] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 43.101625][ T509] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=8 [ 43.494004][ T512] loop0: detected capacity change from 0 to 63271 [ 43.501613][ T512] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 43.510254][ T512] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 43.519171][ T512] F2FS-fs (loop0): invalid crc value [ 43.526027][ T512] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.547162][ T512] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 43.554179][ T512] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 43.636491][ T517] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 [ 44.086994][ T519] loop0: detected capacity change from 0 to 63271 [ 44.099411][ T519] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 44.107906][ T519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.116687][ T519] F2FS-fs (loop0): invalid crc value [ 44.123181][ T519] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.143815][ T519] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 44.150985][ T519] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 44.236028][ T524] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 2023/03/23 11:13:24 executed programs: 8 [ 44.643909][ T527] loop0: detected capacity change from 0 to 63271 [ 44.651547][ T527] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 44.660107][ T527] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.669527][ T527] F2FS-fs (loop0): invalid crc value [ 44.676700][ T527] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.697598][ T527] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 44.704926][ T527] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 44.790631][ T532] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 [ 45.214345][ T534] loop0: detected capacity change from 0 to 63271 [ 45.221635][ T534] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 45.230414][ T534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.239336][ T534] F2FS-fs (loop0): invalid crc value [ 45.246177][ T534] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.266978][ T534] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.273828][ T534] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 45.357228][ T540] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=9 [ 45.780325][ T542] loop0: detected capacity change from 0 to 63271 [ 45.787873][ T542] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 45.796627][ T542] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.805707][ T542] F2FS-fs (loop0): invalid crc value [ 45.812370][ T542] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.833529][ T542] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.840970][ T542] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 45.926327][ T547] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 [ 46.358343][ T550] loop0: detected capacity change from 0 to 63271 [ 46.366544][ T550] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 46.374857][ T550] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.383573][ T550] F2FS-fs (loop0): invalid crc value [ 46.390158][ T550] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.411081][ T550] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.418088][ T550] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 46.499894][ T555] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=17 [ 46.500130][ T550] syz-executor.0: attempt to access beyond end of device [ 46.500130][ T550] loop0: rw=2049, want=77952, limit=63271 [ 46.786570][ T557] loop0: detected capacity change from 0 to 63271 [ 46.794546][ T557] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 46.802958][ T557] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 46.812166][ T557] F2FS-fs (loop0): invalid crc value [ 46.818709][ T557] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.839019][ T557] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 46.846249][ T557] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 46.929944][ T562] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=6 [ 47.365123][ T565] loop0: detected capacity change from 0 to 63271 [ 47.373225][ T565] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 47.381640][ T565] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 47.391002][ T565] F2FS-fs (loop0): invalid crc value [ 47.397330][ T565] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.418443][ T565] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 47.426760][ T565] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 47.511858][ T570] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=17 [ 47.512106][ T565] syz-executor.0: attempt to access beyond end of device [ 47.512106][ T565] loop0: rw=2049, want=77952, limit=63271 [ 47.793732][ T572] loop0: detected capacity change from 0 to 63271 [ 47.801299][ T572] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 47.809723][ T572] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 47.819241][ T572] F2FS-fs (loop0): invalid crc value [ 47.825734][ T572] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.846490][ T572] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 47.853359][ T572] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 47.941721][ T577] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=4, npages=1 [ 48.074241][ T572] BUG: scheduling while atomic: syz-executor.0/572/0x00000002 [ 48.081638][ T572] Modules linked in: [ 48.085721][ T572] Preemption disabled at: [ 48.085733][ T572] [] unmap_page_range+0xa82/0x1ed0 [ 48.097049][ T572] CPU: 0 PID: 572 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 48.106729][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 48.117373][ T572] Call Trace: [ 48.120870][ T572] [ 48.123680][ T572] dump_stack_lvl+0x151/0x1b7 [ 48.128399][ T572] ? unmap_page_range+0xa82/0x1ed0 [ 48.133461][ T572] ? unmap_page_range+0xa82/0x1ed0 [ 48.138412][ T572] ? bfq_pos_tree_add_move+0x43b/0x43b [ 48.143833][ T572] ? unmap_page_range+0xa82/0x1ed0 [ 48.148767][ T572] dump_stack+0x15/0x17 [ 48.152767][ T572] __schedule_bug+0x1a0/0x240 [ 48.157265][ T572] ? select_fallback_rq+0x220/0x220 [ 48.162392][ T572] __schedule+0xd0a/0x1560 [ 48.166645][ T572] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 48.172650][ T572] ? mutex_spin_on_owner+0x21c/0x2b0 [ 48.177786][ T572] ? __sched_text_start+0x8/0x8 [ 48.182431][ T572] ? mutex_spin_on_owner+0x140/0x2b0 [ 48.187578][ T572] schedule+0xeb/0x1a0 [ 48.191459][ T572] schedule_preempt_disabled+0x13/0x20 [ 48.196841][ T572] __mutex_lock+0x4b1/0x1040 [ 48.201271][ T572] ? __kasan_slab_alloc+0xb1/0xe0 [ 48.206123][ T572] ? slab_post_alloc_hook+0x53/0x2c0 [ 48.211248][ T572] ? kmem_cache_alloc+0x106/0x210 [ 48.216194][ T572] ? folio_mark_dirty+0xd3/0xf0 [ 48.220884][ T572] ? unmap_vmas+0x389/0x560 [ 48.225227][ T572] ? exit_mmap+0x1cc/0x4c0 [ 48.229886][ T572] ? do_exit+0xa5b/0x27d0 [ 48.234047][ T572] ? do_group_exit+0x255/0x320 [ 48.238654][ T572] ? get_signal+0x170e/0x1870 [ 48.243158][ T572] ? arch_do_signal_or_restart+0xb0/0x12a0 [ 48.248936][ T572] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 48.255535][ T572] ? do_syscall_64+0x49/0x80 [ 48.260043][ T572] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.265954][ T572] __mutex_lock_slowpath+0xe/0x10 [ 48.270804][ T572] mutex_lock+0xeb/0x120 [ 48.274977][ T572] ? slab_post_alloc_hook+0x72/0x2c0 [ 48.280184][ T572] ? bit_wait_io_timeout+0x120/0x120 [ 48.285302][ T572] ? kmem_cache_alloc+0x106/0x210 [ 48.290159][ T572] ? f2fs_register_inmem_page+0x13f/0x4b0 [ 48.295716][ T572] f2fs_register_inmem_page+0x22c/0x4b0 [ 48.301722][ T572] f2fs_dirty_data_folio+0x31d/0x440 [ 48.307002][ T572] folio_mark_dirty+0xd3/0xf0 [ 48.311617][ T572] set_page_dirty+0x5c/0x70 [ 48.315966][ T572] unmap_page_range+0x12e4/0x1ed0 [ 48.320906][ T572] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 48.327066][ T572] ? uprobe_munmap+0x18d/0x450 [ 48.331721][ T572] unmap_vmas+0x389/0x560 [ 48.335849][ T572] ? unmap_page_range+0x1ed0/0x1ed0 [ 48.341044][ T572] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 48.346419][ T572] exit_mmap+0x1cc/0x4c0 [ 48.350587][ T572] ? vm_brk+0x30/0x30 [ 48.354507][ T572] ? uprobe_clear_state+0x2cd/0x320 [ 48.359639][ T572] __mmput+0x95/0x300 [ 48.363465][ T572] mmput+0x59/0x70 [ 48.367013][ T572] do_exit+0xa5b/0x27d0 [ 48.371007][ T572] ? put_task_struct+0x80/0x80 [ 48.375605][ T572] ? __kasan_check_write+0x14/0x20 [ 48.380551][ T572] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 48.385542][ T572] do_group_exit+0x255/0x320 [ 48.389924][ T572] ? __kasan_check_write+0x14/0x20 [ 48.396059][ T572] get_signal+0x170e/0x1870 [ 48.400406][ T572] ? __kasan_check_read+0x11/0x20 [ 48.405523][ T572] ? ptrace_notify+0x350/0x350 [ 48.410420][ T572] arch_do_signal_or_restart+0xb0/0x12a0 [ 48.416003][ T572] ? __kasan_check_write+0x14/0x20 [ 48.420914][ T572] ? fput_many+0x160/0x1b0 [ 48.425195][ T572] ? do_futex+0x3b5/0x490 [ 48.429335][ T572] ? __ia32_sys_get_robust_list+0x90/0x90 [ 48.434896][ T572] ? get_sigframe_size+0x10/0x10 [ 48.439928][ T572] ? __se_sys_futex+0x35e/0x3c0 [ 48.444656][ T572] exit_to_user_mode_loop+0x6b/0xa0 [ 48.450269][ T572] exit_to_user_mode_prepare+0x5a/0xa0 [ 48.455643][ T572] syscall_exit_to_user_mode+0x26/0x130 [ 48.461198][ T572] do_syscall_64+0x49/0x80 [ 48.465449][ T572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.471176][ T572] RIP: 0033:0x7f2ce468c0f9 [ 48.475983][ T572] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 48.483362][ T572] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.492130][ T572] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 48.499947][ T572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 48.508006][ T572] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 48.515815][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 48.523625][ T572] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 48.531449][ T572] [ 48.534770][ T572] check_preemption_disabled: 3581 callbacks suppressed [ 48.534785][ T572] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/572 [ 48.550794][ T572] caller is __this_cpu_preempt_check+0x13/0x20 [ 48.557133][ T572] CPU: 0 PID: 572 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 48.566738][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 48.576746][ T572] Call Trace: [ 48.579863][ T572] [ 48.583129][ T572] dump_stack_lvl+0x151/0x1b7 [ 48.587816][ T572] ? bfq_pos_tree_add_move+0x43b/0x43b [ 48.593293][ T572] ? mutex_unlock+0xa1/0x110 [ 48.597805][ T572] ? __mutex_lock_slowpath+0x10/0x10 [ 48.603347][ T572] dump_stack+0x15/0x17 [ 48.607724][ T572] check_preemption_disabled+0x109/0x110 [ 48.613196][ T572] __this_cpu_preempt_check+0x13/0x20 [ 48.618399][ T572] __mod_node_page_state+0x6d/0xf0 [ 48.623344][ T572] __mod_lruvec_page_state+0x154/0x200 [ 48.628640][ T572] ? page_remove_rmap+0x20f/0xa20 [ 48.633599][ T572] page_remove_rmap+0x73d/0xa20 [ 48.638384][ T572] ? mark_page_accessed+0x51/0x70 [ 48.643249][ T572] unmap_page_range+0x1039/0x1ed0 [ 48.648084][ T572] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 48.654502][ T572] ? uprobe_munmap+0x18d/0x450 [ 48.659104][ T572] unmap_vmas+0x389/0x560 [ 48.663268][ T572] ? unmap_page_range+0x1ed0/0x1ed0 [ 48.668307][ T572] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 48.673740][ T572] exit_mmap+0x1cc/0x4c0 [ 48.677938][ T572] ? vm_brk+0x30/0x30 [ 48.681755][ T572] ? uprobe_clear_state+0x2cd/0x320 [ 48.686792][ T572] __mmput+0x95/0x300 [ 48.690805][ T572] mmput+0x59/0x70 [ 48.694437][ T572] do_exit+0xa5b/0x27d0 [ 48.698363][ T572] ? put_task_struct+0x80/0x80 [ 48.703060][ T572] ? __kasan_check_write+0x14/0x20 [ 48.708115][ T572] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 48.713128][ T572] do_group_exit+0x255/0x320 [ 48.717576][ T572] ? __kasan_check_write+0x14/0x20 [ 48.722497][ T572] get_signal+0x170e/0x1870 [ 48.726939][ T572] ? __kasan_check_read+0x11/0x20 [ 48.731797][ T572] ? ptrace_notify+0x350/0x350 [ 48.736551][ T572] arch_do_signal_or_restart+0xb0/0x12a0 [ 48.742070][ T572] ? __kasan_check_write+0x14/0x20 [ 48.747100][ T572] ? fput_many+0x160/0x1b0 [ 48.751439][ T572] ? do_futex+0x3b5/0x490 [ 48.755728][ T572] ? __ia32_sys_get_robust_list+0x90/0x90 [ 48.761332][ T572] ? get_sigframe_size+0x10/0x10 [ 48.766194][ T572] ? __se_sys_futex+0x35e/0x3c0 [ 48.770970][ T572] exit_to_user_mode_loop+0x6b/0xa0 [ 48.776259][ T572] exit_to_user_mode_prepare+0x5a/0xa0 [ 48.781734][ T572] syscall_exit_to_user_mode+0x26/0x130 [ 48.787226][ T572] do_syscall_64+0x49/0x80 [ 48.791498][ T572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 48.797183][ T572] RIP: 0033:0x7f2ce468c0f9 [ 48.801572][ T572] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 48.809365][ T572] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.818218][ T572] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 48.826028][ T572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 48.834168][ T572] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 48.842081][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 48.850325][ T572] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 48.858428][ T572] [ 48.861576][ T572] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/572 [ 48.870875][ T572] caller is __this_cpu_preempt_check+0x13/0x20 [ 48.876870][ T572] CPU: 0 PID: 572 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 48.886444][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 48.896619][ T572] Call Trace: [ 48.899957][ T572] [ 48.902734][ T572] dump_stack_lvl+0x151/0x1b7 [ 48.907327][ T572] ? bfq_pos_tree_add_move+0x43b/0x43b [ 48.912668][ T572] ? mutex_unlock+0xa1/0x110 [ 48.917134][ T572] ? __mutex_lock_slowpath+0x10/0x10 [ 48.922343][ T572] dump_stack+0x15/0x17 [ 48.926331][ T572] check_preemption_disabled+0x109/0x110 [ 48.931801][ T572] __this_cpu_preempt_check+0x13/0x20 [ 48.937020][ T572] __mod_node_page_state+0x89/0xf0 [ 48.941964][ T572] __mod_lruvec_page_state+0x154/0x200 [ 48.947334][ T572] ? page_remove_rmap+0x20f/0xa20 [ 48.952308][ T572] page_remove_rmap+0x73d/0xa20 [ 48.957156][ T572] ? mark_page_accessed+0x51/0x70 [ 48.962111][ T572] unmap_page_range+0x1039/0x1ed0 [ 48.967071][ T572] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 48.973664][ T572] ? uprobe_munmap+0x18d/0x450 [ 48.978949][ T572] unmap_vmas+0x389/0x560 [ 48.983210][ T572] ? unmap_page_range+0x1ed0/0x1ed0 [ 48.988493][ T572] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 48.993868][ T572] exit_mmap+0x1cc/0x4c0 [ 48.998041][ T572] ? vm_brk+0x30/0x30 [ 49.002042][ T572] ? uprobe_clear_state+0x2cd/0x320 [ 49.007068][ T572] __mmput+0x95/0x300 [ 49.011064][ T572] mmput+0x59/0x70 [ 49.014622][ T572] do_exit+0xa5b/0x27d0 [ 49.018701][ T572] ? put_task_struct+0x80/0x80 [ 49.023312][ T572] ? __kasan_check_write+0x14/0x20 [ 49.028348][ T572] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 49.033763][ T572] do_group_exit+0x255/0x320 [ 49.038392][ T572] ? __kasan_check_write+0x14/0x20 [ 49.043342][ T572] get_signal+0x170e/0x1870 [ 49.047956][ T572] ? __kasan_check_read+0x11/0x20 [ 49.052813][ T572] ? ptrace_notify+0x350/0x350 [ 49.057514][ T572] arch_do_signal_or_restart+0xb0/0x12a0 [ 49.062992][ T572] ? __kasan_check_write+0x14/0x20 [ 49.067938][ T572] ? fput_many+0x160/0x1b0 [ 49.072387][ T572] ? do_futex+0x3b5/0x490 [ 49.076645][ T572] ? __ia32_sys_get_robust_list+0x90/0x90 [ 49.082255][ T572] ? get_sigframe_size+0x10/0x10 [ 49.087026][ T572] ? __se_sys_futex+0x35e/0x3c0 [ 49.091801][ T572] exit_to_user_mode_loop+0x6b/0xa0 [ 49.097034][ T572] exit_to_user_mode_prepare+0x5a/0xa0 [ 49.102318][ T572] syscall_exit_to_user_mode+0x26/0x130 [ 49.107781][ T572] do_syscall_64+0x49/0x80 [ 49.112033][ T572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.117752][ T572] RIP: 0033:0x7f2ce468c0f9 [ 49.122012][ T572] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 49.129216][ T572] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.137699][ T572] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 49.145973][ T572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 49.154121][ T572] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 49.161934][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 49.169742][ T572] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 49.177560][ T572] [ 49.180512][ T572] BUG: using __this_cpu_write() in preemptible [00000000] code: syz-executor.0/572 [ 49.190210][ T572] caller is __this_cpu_preempt_check+0x13/0x20 [ 49.196269][ T572] CPU: 0 PID: 572 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 49.206228][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 49.216212][ T572] Call Trace: [ 49.219335][ T572] [ 49.222121][ T572] dump_stack_lvl+0x151/0x1b7 [ 49.226771][ T572] ? bfq_pos_tree_add_move+0x43b/0x43b [ 49.232093][ T572] ? mutex_unlock+0xa1/0x110 [ 49.236579][ T572] ? __mutex_lock_slowpath+0x10/0x10 [ 49.241703][ T572] dump_stack+0x15/0x17 [ 49.245782][ T572] check_preemption_disabled+0x109/0x110 [ 49.251265][ T572] __this_cpu_preempt_check+0x13/0x20 [ 49.256469][ T572] __mod_node_page_state+0xac/0xf0 [ 49.261785][ T572] __mod_lruvec_page_state+0x154/0x200 [ 49.267037][ T572] ? page_remove_rmap+0x20f/0xa20 [ 49.271878][ T572] page_remove_rmap+0x73d/0xa20 [ 49.276569][ T572] ? mark_page_accessed+0x51/0x70 [ 49.281526][ T572] unmap_page_range+0x1039/0x1ed0 [ 49.286369][ T572] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 49.292533][ T572] ? uprobe_munmap+0x18d/0x450 [ 49.297305][ T572] unmap_vmas+0x389/0x560 [ 49.301731][ T572] ? unmap_page_range+0x1ed0/0x1ed0 [ 49.306858][ T572] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 49.312229][ T572] exit_mmap+0x1cc/0x4c0 [ 49.316401][ T572] ? vm_brk+0x30/0x30 [ 49.320217][ T572] ? uprobe_clear_state+0x2cd/0x320 [ 49.325259][ T572] __mmput+0x95/0x300 [ 49.329096][ T572] mmput+0x59/0x70 [ 49.332716][ T572] do_exit+0xa5b/0x27d0 [ 49.336706][ T572] ? put_task_struct+0x80/0x80 [ 49.341829][ T572] ? __kasan_check_write+0x14/0x20 [ 49.346957][ T572] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 49.351896][ T572] do_group_exit+0x255/0x320 [ 49.356408][ T572] ? __kasan_check_write+0x14/0x20 [ 49.361669][ T572] get_signal+0x170e/0x1870 [ 49.366081][ T572] ? __kasan_check_read+0x11/0x20 [ 49.371020][ T572] ? ptrace_notify+0x350/0x350 [ 49.375620][ T572] arch_do_signal_or_restart+0xb0/0x12a0 [ 49.381090][ T572] ? __kasan_check_write+0x14/0x20 [ 49.386030][ T572] ? fput_many+0x160/0x1b0 [ 49.390373][ T572] ? do_futex+0x3b5/0x490 [ 49.394638][ T572] ? __ia32_sys_get_robust_list+0x90/0x90 [ 49.400178][ T572] ? get_sigframe_size+0x10/0x10 [ 49.405069][ T572] ? __se_sys_futex+0x35e/0x3c0 [ 49.410115][ T572] exit_to_user_mode_loop+0x6b/0xa0 [ 49.415151][ T572] exit_to_user_mode_prepare+0x5a/0xa0 [ 49.420541][ T572] syscall_exit_to_user_mode+0x26/0x130 [ 49.425923][ T572] do_syscall_64+0x49/0x80 [ 49.430336][ T572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.436148][ T572] RIP: 0033:0x7f2ce468c0f9 [ 49.441619][ T572] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 49.448825][ T572] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.457064][ T572] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 49.464972][ T572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 49.472789][ T572] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 49.480767][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 49.488726][ T572] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 49.496757][ T572] [ 49.509160][ T572] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/572 [ 49.518202][ T572] caller is __this_cpu_preempt_check+0x13/0x20 [ 49.524176][ T572] CPU: 0 PID: 572 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 49.533717][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 49.543920][ T572] Call Trace: [ 49.547044][ T572] [ 49.549907][ T572] dump_stack_lvl+0x151/0x1b7 [ 49.554545][ T572] ? bfq_pos_tree_add_move+0x43b/0x43b [ 49.559919][ T572] ? mutex_unlock+0xa1/0x110 [ 49.564741][ T572] ? __mutex_lock_slowpath+0x10/0x10 [ 49.570050][ T572] dump_stack+0x15/0x17 [ 49.574040][ T572] check_preemption_disabled+0x109/0x110 [ 49.579518][ T572] __this_cpu_preempt_check+0x13/0x20 [ 49.584836][ T572] __mod_memcg_lruvec_state+0x4f/0x1b0 [ 49.590134][ T572] ? __mod_node_page_state+0xac/0xf0 [ 49.595348][ T572] __mod_lruvec_page_state+0x164/0x200 [ 49.600808][ T572] ? page_remove_rmap+0x20f/0xa20 [ 49.605669][ T572] page_remove_rmap+0x73d/0xa20 [ 49.610527][ T572] ? mark_page_accessed+0x51/0x70 [ 49.615390][ T572] unmap_page_range+0x1039/0x1ed0 [ 49.620266][ T572] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 49.626410][ T572] ? uprobe_munmap+0x18d/0x450 [ 49.631008][ T572] unmap_vmas+0x389/0x560 [ 49.635292][ T572] ? unmap_page_range+0x1ed0/0x1ed0 [ 49.640554][ T572] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 49.645846][ T572] exit_mmap+0x1cc/0x4c0 [ 49.649925][ T572] ? vm_brk+0x30/0x30 [ 49.653755][ T572] ? uprobe_clear_state+0x2cd/0x320 [ 49.658868][ T572] __mmput+0x95/0x300 [ 49.662689][ T572] mmput+0x59/0x70 [ 49.666245][ T572] do_exit+0xa5b/0x27d0 [ 49.670237][ T572] ? put_task_struct+0x80/0x80 [ 49.674836][ T572] ? __kasan_check_write+0x14/0x20 [ 49.680049][ T572] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 49.684991][ T572] do_group_exit+0x255/0x320 [ 49.689512][ T572] ? __kasan_check_write+0x14/0x20 [ 49.694458][ T572] get_signal+0x170e/0x1870 [ 49.698914][ T572] ? __kasan_check_read+0x11/0x20 [ 49.703835][ T572] ? ptrace_notify+0x350/0x350 [ 49.708576][ T572] arch_do_signal_or_restart+0xb0/0x12a0 [ 49.714122][ T572] ? __kasan_check_write+0x14/0x20 [ 49.719242][ T572] ? fput_many+0x160/0x1b0 [ 49.723500][ T572] ? do_futex+0x3b5/0x490 [ 49.727664][ T572] ? __ia32_sys_get_robust_list+0x90/0x90 [ 49.733301][ T572] ? get_sigframe_size+0x10/0x10 [ 49.738114][ T572] ? __se_sys_futex+0x35e/0x3c0 [ 49.742758][ T572] exit_to_user_mode_loop+0x6b/0xa0 [ 49.748082][ T572] exit_to_user_mode_prepare+0x5a/0xa0 [ 49.753635][ T572] syscall_exit_to_user_mode+0x26/0x130 [ 49.759013][ T572] do_syscall_64+0x49/0x80 [ 49.763262][ T572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 49.769106][ T572] RIP: 0033:0x7f2ce468c0f9 [ 49.773604][ T572] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 49.780938][ T572] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.789376][ T572] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 49.797183][ T572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 49.804995][ T572] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 49.813183][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 49.820976][ T572] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 49.828880][ T572] [ 49.831846][ T572] BUG: using __this_cpu_add() in preemptible [00000000] code: syz-executor.0/572 [ 49.840705][ T572] caller is __this_cpu_preempt_check+0x13/0x20 [ 49.846797][ T572] CPU: 0 PID: 572 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 49.856375][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 49.866730][ T572] Call Trace: [ 49.869871][ T572] [ 49.872715][ T572] dump_stack_lvl+0x151/0x1b7 [ 49.877424][ T572] ? bfq_pos_tree_add_move+0x43b/0x43b [ 49.883825][ T572] ? mutex_unlock+0xa1/0x110 [ 49.888706][ T572] ? __mutex_lock_slowpath+0x10/0x10 [ 49.894038][ T572] dump_stack+0x15/0x17 [ 49.898506][ T572] check_preemption_disabled+0x109/0x110 [ 49.904290][ T572] __this_cpu_preempt_check+0x13/0x20 [ 49.909523][ T572] __mod_memcg_lruvec_state+0xa2/0x1b0 [ 49.914880][ T572] __mod_lruvec_page_state+0x164/0x200 [ 49.920263][ T572] ? page_remove_rmap+0x20f/0xa20 [ 49.925122][ T572] page_remove_rmap+0x73d/0xa20 [ 49.930030][ T572] ? mark_page_accessed+0x51/0x70 [ 49.935262][ T572] unmap_page_range+0x1039/0x1ed0 [ 49.940245][ T572] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 49.946490][ T572] ? uprobe_munmap+0x18d/0x450 [ 49.951176][ T572] unmap_vmas+0x389/0x560 [ 49.955456][ T572] ? unmap_page_range+0x1ed0/0x1ed0 [ 49.960722][ T572] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 49.966275][ T572] exit_mmap+0x1cc/0x4c0 [ 49.970353][ T572] ? vm_brk+0x30/0x30 [ 49.974277][ T572] ? uprobe_clear_state+0x2cd/0x320 [ 49.980074][ T572] __mmput+0x95/0x300 [ 49.983890][ T572] mmput+0x59/0x70 [ 49.987793][ T572] do_exit+0xa5b/0x27d0 [ 49.991791][ T572] ? put_task_struct+0x80/0x80 [ 49.996490][ T572] ? __kasan_check_write+0x14/0x20 [ 50.001511][ T572] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 50.006554][ T572] do_group_exit+0x255/0x320 [ 50.011092][ T572] ? __kasan_check_write+0x14/0x20 [ 50.016108][ T572] get_signal+0x170e/0x1870 [ 50.020441][ T572] ? __kasan_check_read+0x11/0x20 [ 50.025329][ T572] ? ptrace_notify+0x350/0x350 [ 50.029989][ T572] arch_do_signal_or_restart+0xb0/0x12a0 [ 50.035549][ T572] ? __kasan_check_write+0x14/0x20 [ 50.040489][ T572] ? fput_many+0x160/0x1b0 [ 50.044739][ T572] ? do_futex+0x3b5/0x490 [ 50.048997][ T572] ? __ia32_sys_get_robust_list+0x90/0x90 [ 50.054894][ T572] ? get_sigframe_size+0x10/0x10 [ 50.059756][ T572] ? __se_sys_futex+0x35e/0x3c0 [ 50.064563][ T572] exit_to_user_mode_loop+0x6b/0xa0 [ 50.069560][ T572] exit_to_user_mode_prepare+0x5a/0xa0 [ 50.074942][ T572] syscall_exit_to_user_mode+0x26/0x130 [ 50.080513][ T572] do_syscall_64+0x49/0x80 [ 50.084853][ T572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 50.090590][ T572] RIP: 0033:0x7f2ce468c0f9 [ 50.094932][ T572] Code: Unable to access opcode bytes at RIP 0x7f2ce468c0cf. [ 50.102588][ T572] RSP: 002b:00007f2ce5335218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.110933][ T572] RAX: fffffffffffffe00 RBX: 00007f2ce47abf88 RCX: 00007f2ce468c0f9 [ 50.119011][ T572] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2ce47abf88 [ 50.126821][ T572] RBP: 00007f2ce47abf80 R08: 0000000000000000 R09: 0000000000000000 [ 50.134637][ T572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2ce47abf8c [ 50.142451][ T572] R13: 00007ffd046a06ef R14: 00007f2ce5335300 R15: 0000000000022000 [ 50.150592][ T572] [ 50.153472][ T572] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.0/572 [ 50.162559][ T572] caller is debug_smp_processor_id+0x17/0x20 [ 50.168373][ T572] CPU: 0 PID: 572 Comm: syz-executor.0 Tainted: G W 5.18.0-syzkaller #0 [ 50.178075][ T572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 50.187969][ T572] Call Trace: [ 50.191092][ T572] [ 50.193880][ T572] dump_stack_lvl+0x151/0x1b7 [ 50.198397][ T572] ? bfq_pos_tree_add_move+0x43b/0x43b [ 50.203681][ T572] ? mutex_unlock+0xa1/0x110 [ 50.208208][ T572] ? __mutex_lock_slowpath+0x10/0x10 [ 50.213337][ T572] dump_stack+0x15/0x17 [ 50.217326][ T572] check_preemption_disabled+0x109/0x110 [ 50.222890][ T572] debug_smp_processor_id+0x17/0x20 [ 50.227911][ T572] __mod_memcg_lruvec_state+0x106/0x1b0 [ 50.233415][ T572] __mod_lruvec_page_state+0x164/0x200 [ 50.239300][ T572] ? page_remove_rmap+0x20f/0xa20 [ 50.244378][ T572] page_remove_rmap+0x73d/0xa20 [ 50.249116][ T572] ? mark_page_accessed+0x51/0x70 [ 50.253962][ T572] unmap_page_range+0x1039/0x1ed0 [ 50.258824][ T572] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 50.265099][ T572] ? uprobe_munmap+0x18d/0x450 [ 50.269778][ T572] unmap_vmas+0x389/0x560 [ 50.274034][ T572] ? unmap_page_range+0x1ed0/0x1ed0