./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2854033102
<...>
DUID 00:04:53:46:a9:9d:03:7a:46:b2:48:ff:4a:ea:3f:46:f2:43
forked to background, child pid 3185
[ 26.759635][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.769860][ T3186] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.97' (ECDSA) to the list of known hosts.
execve("./syz-executor2854033102", ["./syz-executor2854033102"], 0x7ffdc8b52800 /* 10 vars */) = 0
brk(NULL) = 0x5555562ad000
brk(0x5555562adc40) = 0x5555562adc40
arch_prctl(ARCH_SET_FS, 0x5555562ad300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2854033102", 4096) = 28
brk(0x5555562cec40) = 0x5555562cec40
brk(0x5555562cf000) = 0x5555562cf000
mprotect(0x7f1846808000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/fb0", O_RDONLY) = 3
mmap(0x20002000, 16384, PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSDOWN, MAP_PRIVATE|MAP_FIXED, 3, 0xa9000) = 0x20002000
openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
syzkaller login: [ 49.569763][ T3613] ------------[ cut here ]------------
[ 49.575368][ T3613] kernel BUG at mm/memory.c:2218!
[ 49.580941][ T3613] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 49.587022][ T3613] CPU: 1 PID: 3613 Comm: syz-executor285 Not tainted 5.19.0-next-20220809-syzkaller #0
[ 49.596658][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022
[ 49.606721][ T3613] RIP: 0010:vmf_insert_pfn_prot+0x248/0x460
[ 49.612617][ T3613] Code: 0f 0b e8 cb dd c6 ff 4d 89 f7 bf 20 00 00 00 41 83 e7 28 4c 89 fe e8 97 da c6 ff 49 83 ff 20 0f 85 a5 fe ff ff e8 a8 dd c6 ff <0f> 0b 49 be ff ff ff ff ff ff 0f 00 e8 97 dd c6 ff 4d 21 ee 4c 89
[ 49.632309][ T3613] RSP: 0018:ffffc9000380f628 EFLAGS: 00010293
[ 49.638377][ T3613] RAX: 0000000000000000 RBX: 1ffff92000701ec7 RCX: 0000000000000000
[ 49.646432][ T3613] RDX: ffff888020c6bb00 RSI: ffffffff81b52858 RDI: 0000000000000007
[ 49.654398][ T3613] RBP: ffff88801da76528 R08: 0000000000000007 R09: 0000000000000020
[ 49.662372][ T3613] R10: 0000000000000020 R11: 0000000000000002 R12: 0000000020002000
[ 49.670356][ T3613] R13: 000000000001d637 R14: 000000000c140476 R15: 0000000000000020
[ 49.679284][ T3613] FS: 00005555562ad300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 49.688219][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.694800][ T3613] CR2: 00000000005f6b40 CR3: 0000000072590000 CR4: 00000000003506e0
[ 49.702770][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.710736][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.718727][ T3613] Call Trace:
[ 49.721998][ T3613] <TASK>
[ 49.724922][ T3613] ? __lock_acquire+0xbc3/0x56d0
[ 49.729876][ T3613] ? insert_pfn+0x680/0x680
[ 49.734396][ T3613] drm_gem_shmem_fault+0x1e3/0x290
[ 49.739539][ T3613] __do_fault+0x10d/0x610
[ 49.743879][ T3613] __handle_mm_fault+0x213c/0x39c0
[ 49.748999][ T3613] ? vm_iomap_memory+0x190/0x190
[ 49.753966][ T3613] handle_mm_fault+0x1c8/0x780
[ 49.758743][ T3613] do_user_addr_fault+0x475/0x1210
[ 49.763887][ T3613] exc_page_fault+0x94/0x170
[ 49.768488][ T3613] asm_exc_page_fault+0x22/0x30
[ 49.773352][ T3613] RIP: 0010:fault_in_readable+0x175/0x290
[ 49.779095][ T3613] Code: 9c c9 ff 49 39 dd 0f 84 06 01 00 00 45 31 f6 eb 11 e8 2f 9c c9 ff 48 81 c3 00 10 00 00 4c 39 eb 74 1d e8 1e 9c c9 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 cb 98 c9 ff 45 85 ff 74 d2 e8
[ 49.798700][ T3613] RSP: 0018:ffffc9000380fa40 EFLAGS: 00050293
[ 49.804761][ T3613] RAX: 0000000000000000 RBX: 0000000020002000 RCX: 0000000000000000
[ 49.812726][ T3613] RDX: ffff888020c6bb00 RSI: ffffffff81b269e2 RDI: 0000000000000005
[ 49.820689][ T3613] RBP: 0000000020001040 R08: 0000000000000005 R09: 0000000000000000
[ 49.828655][ T3613] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001000
[ 49.836633][ T3613] R13: 0000000020003000 R14: 0000000000000000 R15: 0000000000000000
[ 49.844602][ T3613] ? fault_in_readable+0x172/0x290
[ 49.849722][ T3613] ? fault_in_subpage_writeable+0x20/0x20
[ 49.855448][ T3613] ? balance_dirty_pages_ratelimited_flags+0x8b/0x1630
[ 49.862300][ T3613] fault_in_iov_iter_readable+0x24e/0x2c0
[ 49.868024][ T3613] generic_perform_write+0x19e/0x560
[ 49.874976][ T3613] ? folio_add_wait_queue+0x1b0/0x1b0
[ 49.880353][ T3613] ? discard_new_inode+0x190/0x190
[ 49.885470][ T3613] ? down_write_killable_nested+0x180/0x180
[ 49.891369][ T3613] ext4_buffered_write_iter+0x15b/0x460
[ 49.896924][ T3613] ext4_file_write_iter+0x44a/0x1660
[ 49.902231][ T3613] ? lock_release+0x780/0x780
[ 49.906909][ T3613] ? ext4_buffered_write_iter+0x460/0x460
[ 49.912642][ T3613] vfs_write+0x9e9/0xdd0
[ 49.916889][ T3613] ? vfs_read+0x930/0x930
[ 49.921223][ T3613] ? find_held_lock+0x2d/0x110
[ 49.925984][ T3613] ? lock_downgrade+0x6e0/0x6e0
[ 49.930834][ T3613] ? __fget_light+0x20a/0x270
[ 49.935526][ T3613] ksys_write+0x127/0x250
[ 49.939858][ T3613] ? __ia32_sys_read+0xb0/0xb0
[ 49.944621][ T3613] ? lockdep_hardirqs_on+0x79/0x100
[ 49.949830][ T3613] ? _raw_spin_unlock_irq+0x2a/0x40
[ 49.955034][ T3613] ? ptrace_notify+0xfa/0x140
[ 49.959714][ T3613] do_syscall_64+0x35/0xb0
[ 49.964134][ T3613] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.970024][ T3613] RIP: 0033:0x7f184679bb89
[ 49.974439][ T3613] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.994044][ T3613] RSP: 002b:00007fff1fe67848 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 50.002456][ T3613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f184679bb89
[ 50.010423][ T3613] RDX: 000000000000fea7 RSI: 0000000020000040 RDI: 0000000000000004
[ 50.018390][ T3613] RBP: 00007f184675fd30 R08: 00000000000a9000 R09: 0000000000000000
[ 50.026358][ T3613] R10: 00000000000a9000 R11: 0000000000000246 R12: 00007f184675fdc0
[ 50.034330][ T3613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.042311][ T3613] </TASK>
[ 50.045324][ T3613] Modules linked in:
[ 50.049479][ T3613] ---[ end trace 0000000000000000 ]---
[ 50.054949][ T3613] RIP: 0010:vmf_insert_pfn_prot+0x248/0x460
[ 50.061011][ T3613] Code: 0f 0b e8 cb dd c6 ff 4d 89 f7 bf 20 00 00 00 41 83 e7 28 4c 89 fe e8 97 da c6 ff 49 83 ff 20 0f 85 a5 fe ff ff e8 a8 dd c6 ff <0f> 0b 49 be ff ff ff ff ff ff 0f 00 e8 97 dd c6 ff 4d 21 ee 4c 89
[ 50.080834][ T3613] RSP: 0018:ffffc9000380f628 EFLAGS: 00010293
[ 50.086895][ T3613] RAX: 0000000000000000 RBX: 1ffff92000701ec7 RCX: 0000000000000000
[ 50.094930][ T3613] RDX: ffff888020c6bb00 RSI: ffffffff81b52858 RDI: 0000000000000007
[ 50.103025][ T3613] RBP: ffff88801da76528 R08: 0000000000000007 R09: 0000000000000020
[ 50.111057][ T3613] R10: 0000000000000020 R11: 0000000000000002 R12: 0000000020002000
[ 50.119086][ T3613] R13: 000000000001d637 R14: 000000000c140476 R15: 0000000000000020
[ 50.127050][ T3613] FS: 00005555562ad300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 50.136113][ T3613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.142733][ T3613] CR2: 0000000020002000 CR3: 0000000072590000 CR4: 00000000003506f0
[ 50.150720][ T3613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.158714][ T3613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.166671][ T3613] Kernel panic - not syncing: Fatal exception
[ 50.172892][ T3613] Kernel Offset: disabled
[ 50.177210][ T3613] Rebooting in 86400 seconds..