Warning: Permanently added '[localhost]:19545' (ED25519) to the list of known hosts. 2025/11/13 12:47:57 parsed 1 programs syzkaller login: [ 99.430558][ T5308] cgroup: Unknown subsys name 'net' [ 99.486666][ T5308] cgroup: Unknown subsys name 'cpuset' [ 99.492974][ T5308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.800064][ T10] cfg80211: failed to load regulatory.db [ 101.209885][ T5308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 105.314626][ T5324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.053909][ T5349] chnl_net:caif_netlink_parms(): no params data found [ 108.129118][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.132997][ T5349] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.136303][ T5349] bridge_slave_0: entered allmulticast mode [ 108.141843][ T5349] bridge_slave_0: entered promiscuous mode [ 108.147815][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.151785][ T5349] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.154931][ T5349] bridge_slave_1: entered allmulticast mode [ 108.158692][ T5349] bridge_slave_1: entered promiscuous mode [ 108.183070][ T5349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.190826][ T5349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.216078][ T5349] team0: Port device team_slave_0 added [ 108.221543][ T5349] team0: Port device team_slave_1 added [ 108.244364][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.247206][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.258267][ T5349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.265248][ T5349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.268263][ T5349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.280503][ T5349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.316691][ T5349] hsr_slave_0: entered promiscuous mode [ 108.320577][ T5349] hsr_slave_1: entered promiscuous mode [ 108.562483][ T5349] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.585892][ T5349] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.601504][ T5349] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.610463][ T5349] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.663337][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.666714][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.670991][ T5349] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.674021][ T5349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.754171][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.758475][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.813543][ T5349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.833418][ T5349] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.843156][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.846552][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.862974][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.865979][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.199186][ T5349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.271472][ T5349] veth0_vlan: entered promiscuous mode [ 109.279160][ T5349] veth1_vlan: entered promiscuous mode [ 109.332256][ T5349] veth0_macvtap: entered promiscuous mode [ 109.343103][ T5349] veth1_macvtap: entered promiscuous mode [ 109.368418][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.394767][ T5349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.416647][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.431569][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.435107][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.438644][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.699161][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.711463][ T5372] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.717576][ T5372] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.722202][ T5372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.731360][ T5372] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.735085][ T5372] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.841893][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.921483][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.256835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.260832][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.297041][ T1039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.301084][ T1039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.860568][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.356594][ T31] bridge_slave_1: left allmulticast mode [ 112.359369][ T31] bridge_slave_1: left promiscuous mode [ 112.380661][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.394586][ T31] bridge_slave_0: left allmulticast mode [ 112.396840][ T31] bridge_slave_0: left promiscuous mode [ 112.399222][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.936869][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.943825][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.948835][ T31] bond0 (unregistering): Released all slaves [ 113.086968][ T31] hsr_slave_0: left promiscuous mode [ 113.108136][ T31] hsr_slave_1: left promiscuous mode [ 113.115870][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.119069][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.151927][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.155537][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.185063][ T31] veth1_macvtap: left promiscuous mode [ 113.187597][ T31] veth0_macvtap: left promiscuous mode [ 113.195904][ T31] veth1_vlan: left promiscuous mode [ 113.198370][ T31] veth0_vlan: left promiscuous mode [ 113.596844][ T31] team0 (unregistering): Port device team_slave_1 removed [ 113.619123][ T31] team0 (unregistering): Port device team_slave_0 removed 2025/11/13 12:48:17 executed programs: 0 [ 116.717530][ T4666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.731327][ T4666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.735205][ T4666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.741332][ T4666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.744646][ T4666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.923677][ T5448] chnl_net:caif_netlink_parms(): no params data found [ 116.994381][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.997496][ T5448] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.001051][ T5448] bridge_slave_0: entered allmulticast mode [ 117.005409][ T5448] bridge_slave_0: entered promiscuous mode [ 117.010584][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.013305][ T5448] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.015939][ T5448] bridge_slave_1: entered allmulticast mode [ 117.021662][ T5448] bridge_slave_1: entered promiscuous mode [ 117.060772][ T5448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.067215][ T5448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.091308][ T5448] team0: Port device team_slave_0 added [ 117.097382][ T5448] team0: Port device team_slave_1 added [ 117.118092][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.122441][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.136409][ T5448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.149971][ T5448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.153086][ T5448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.169984][ T5448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.201162][ T5448] hsr_slave_0: entered promiscuous mode [ 117.204246][ T5448] hsr_slave_1: entered promiscuous mode [ 117.674375][ T5448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.695554][ T5448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.711347][ T5448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.723742][ T5448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.904529][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.926712][ T5448] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.947196][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.950396][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.972294][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.977178][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.344803][ T5448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.422194][ T5448] veth0_vlan: entered promiscuous mode [ 118.443210][ T5448] veth1_vlan: entered promiscuous mode [ 118.494783][ T5448] veth0_macvtap: entered promiscuous mode [ 118.511823][ T5448] veth1_macvtap: entered promiscuous mode [ 118.543480][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.562106][ T5448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.594466][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.611972][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.626354][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.641123][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.717569][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.727481][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.783111][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.786642][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.835913][ T4666] Bluetooth: hci0: command tx timeout [ 118.903656][ T5491] loop0: detected capacity change from 0 to 16 [ 119.162098][ T5491] erofs (device loop0): mounted with root inode @ nid 36. [ 119.181911][ T5491] ------------[ cut here ]------------ [ 119.184720][ T5491] WARNING: CPU: 0 PID: 5491 at fs/dax.c:224 get_next_unlocked_entry+0x329/0x340 [ 119.188772][ T5491] Modules linked in: [ 119.191093][ T5491] CPU: 0 UID: 0 PID: 5491 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 119.195617][ T5491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.200283][ T5491] RIP: 0010:get_next_unlocked_entry+0x329/0x340 [ 119.203137][ T5491] Code: 45 1d 10 48 3b 84 24 c0 00 00 00 75 22 4c 89 e8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 8a f9 08 cc e8 08 59 6e ff 90 <0f> 0b 90 eb a0 e8 6d a6 f6 08 66 66 66 66 2e 0f 1f 84 00 00 00 00 [ 119.211784][ T5491] RSP: 0018:ffffc900027568a0 EFLAGS: 00010093 [ 119.214392][ T5491] RAX: ffffffff8251ba68 RBX: 1ffff920004ead9c RCX: ffff888000d9c900 [ 119.217862][ T5491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.221299][ T5491] RBP: ffffc900027569b0 R08: ffffc90002756937 R09: 0000000000000000 [ 119.224594][ T5491] R10: ffffc90002756900 R11: fffff520004ead27 R12: ffffc90002756918 [ 119.228056][ T5491] R13: ffffea00004945c0 R14: ffffc90002756900 R15: dffffc0000000000 [ 119.232050][ T5491] FS: 000055557e4a2500(0000) GS:ffff88808d730000(0000) knlGS:0000000000000000 [ 119.236326][ T5491] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.239422][ T5491] CR2: 00005557dbb2f950 CR3: 000000001c1e1000 CR4: 0000000000352ef0 [ 119.242924][ T5491] Call Trace: [ 119.244464][ T5491] [ 119.245831][ T5491] ? __pfx_get_next_unlocked_entry+0x10/0x10 [ 119.248820][ T5491] ? __pfx_wake_exceptional_entry_func+0x10/0x10 [ 119.252107][ T5491] ? __lock_acquire+0xab9/0xd20 [ 119.254472][ T5491] grab_mapping_entry+0x176/0x660 [ 119.256634][ T5491] ? __pfx_grab_mapping_entry+0x10/0x10 [ 119.258897][ T5491] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 119.261538][ T5491] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.263861][ T5491] dax_iomap_fault+0x8ab/0x18d0 [ 119.266144][ T5491] ? stack_depot_save_flags+0x41b/0x860 [ 119.268766][ T5491] ? __pfx_dax_iomap_fault+0x10/0x10 [ 119.271450][ T5491] ? kasan_save_track+0x4f/0x80 [ 119.273609][ T5491] ? kasan_save_track+0x3e/0x80 [ 119.275955][ T5491] ? __kasan_slab_alloc+0x6c/0x80 [ 119.278274][ T5491] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 119.280963][ T5491] ? ptlock_alloc+0x20/0x70 [ 119.282980][ T5491] ? pte_alloc_one+0x7a/0x310 [ 119.285010][ T5491] ? __do_fault+0xd1/0x390 [ 119.286953][ T5491] ? __handle_mm_fault+0x1719/0x5400 [ 119.289480][ T5491] ? handle_mm_fault+0x40a/0x8e0 [ 119.291901][ T5491] ? __get_user_pages+0x165c/0x2a00 [ 119.294221][ T5491] ? get_user_pages_remote+0x2f1/0xac0 [ 119.296591][ T5491] ? uprobe_write+0x1b6/0x2160 [ 119.299119][ T5491] ? uprobe_write_opcode+0xa8/0xf0 [ 119.301987][ T5491] ? set_swbp+0x121/0x290 [ 119.303874][ T5491] ? install_breakpoint+0x451/0x5a0 [ 119.306226][ T5491] ? register_for_each_vma+0xabb/0xc30 [ 119.308628][ T5491] ? uprobe_apply+0xfb/0x270 [ 119.310782][ T5491] ? trace_uprobe_register+0x4df/0x560 [ 119.313459][ T5491] ? perf_trace_event_init+0x19a/0x9d0 [ 119.316036][ T5491] ? perf_uprobe_init+0x12e/0x1a0 [ 119.318318][ T5491] ? perf_uprobe_event_init+0xe6/0x180 [ 119.320479][ T5491] ? perf_try_init_event+0x17f/0x870 [ 119.322438][ T5491] ? perf_event_alloc+0x133e/0x2be0 [ 119.324347][ T5491] ? __se_sys_perf_event_open+0x772/0x1d70 [ 119.326699][ T5491] ? do_syscall_64+0xfa/0xfa0 [ 119.328603][ T5491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.331636][ T5491] ? mod_node_state+0xea/0x160 [ 119.334440][ T5491] ? pte_alloc_one+0x1f9/0x310 [ 119.336961][ T5491] __do_fault+0x138/0x390 [ 119.339126][ T5491] __handle_mm_fault+0x1719/0x5400 [ 119.341497][ T5491] ? __pfx___handle_mm_fault+0x10/0x10 [ 119.343728][ T5491] ? __pfx___might_resched+0x10/0x10 [ 119.346017][ T5491] handle_mm_fault+0x40a/0x8e0 [ 119.348029][ T5491] __get_user_pages+0x165c/0x2a00 [ 119.350073][ T5491] get_user_pages_remote+0x2f1/0xac0 [ 119.352112][ T5491] ? iomap_iter_advance+0x282/0x2f0 [ 119.354330][ T5491] ? __pfx_get_user_pages_remote+0x10/0x10 [ 119.356781][ T5491] ? insn_get_prefixes+0xe6e/0x1ca0 [ 119.358910][ T5491] uprobe_write+0x1b6/0x2160 [ 119.360966][ T5491] ? insn_get_opcode+0xb12/0x11b0 [ 119.363225][ T5491] ? __pfx_verify_opcode+0x10/0x10 [ 119.365401][ T5491] ? __pfx_uprobe_write+0x10/0x10 [ 119.367628][ T5491] ? insn_get_immediate+0x32a/0x1280 [ 119.370261][ T5491] ? insn_get_modrm+0x57/0x7d0 [ 119.372451][ T5491] uprobe_write_opcode+0xa8/0xf0 [ 119.374717][ T5491] ? insn_rip_relative+0xc6/0x130 [ 119.376883][ T5491] ? __pfx_uprobe_write_opcode+0x10/0x10 [ 119.379359][ T5491] ? arch_uprobe_analyze_insn+0xc77/0x1400 [ 119.382039][ T5491] set_swbp+0x121/0x290 [ 119.383865][ T5491] ? __pfx_set_swbp+0x10/0x10 [ 119.385987][ T5491] install_breakpoint+0x451/0x5a0 [ 119.388288][ T5491] register_for_each_vma+0xabb/0xc30 [ 119.390707][ T5491] ? uprobe_apply+0x75/0x270 [ 119.392888][ T5491] uprobe_apply+0xfb/0x270 [ 119.395180][ T5491] trace_uprobe_register+0x4df/0x560 [ 119.398010][ T5491] perf_trace_event_init+0x19a/0x9d0 [ 119.400462][ T5491] perf_uprobe_init+0x12e/0x1a0 [ 119.402575][ T5491] perf_uprobe_event_init+0xe6/0x180 [ 119.404805][ T5491] perf_try_init_event+0x17f/0x870 [ 119.406949][ T5491] ? perf_event_alloc+0xf61/0x2be0 [ 119.409108][ T5491] perf_event_alloc+0x133e/0x2be0 [ 119.411348][ T5491] ? perf_event_alloc+0xf61/0x2be0 [ 119.413782][ T5491] ? __pfx_perf_event_alloc+0x10/0x10 [ 119.416340][ T5491] ? find_lively_task_by_vpid+0x19/0x290 [ 119.418937][ T5491] ? find_lively_task_by_vpid+0x19/0x290 [ 119.421430][ T5491] ? find_lively_task_by_vpid+0x19/0x290 [ 119.423788][ T5491] __se_sys_perf_event_open+0x772/0x1d70 [ 119.426364][ T5491] ? up_write+0x1c4/0x420 [ 119.428567][ T5491] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 119.431381][ T5491] ? __pfx___se_sys_futex+0x10/0x10 [ 119.433468][ T5491] ? fput+0xa0/0xd0 [ 119.435124][ T5491] ? do_syscall_64+0xbe/0xfa0 [ 119.437117][ T5491] ? __x64_sys_perf_event_open+0x20/0xc0 [ 119.439618][ T5491] do_syscall_64+0xfa/0xfa0 [ 119.441585][ T5491] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.443850][ T5491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.446636][ T5491] ? clear_bhb_loop+0x60/0xb0 [ 119.448986][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.451914][ T5491] RIP: 0033:0x7f3cf958f6c9 [ 119.454230][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.462386][ T5491] RSP: 002b:00007ffd99cd4368 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.465757][ T5491] RAX: ffffffffffffffda RBX: 00007f3cf97e5fa0 RCX: 00007f3cf958f6c9 [ 119.469810][ T5491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 119.473913][ T5491] RBP: 00007f3cf9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.477584][ T5491] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.481105][ T5491] R13: 00007f3cf97e5fa0 R14: 00007f3cf97e5fa0 R15: 0000000000000005 [ 119.484776][ T5491] [ 119.486686][ T5491] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.490638][ T5491] CPU: 0 UID: 0 PID: 5491 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 119.494694][ T5491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.499354][ T5491] Call Trace: [ 119.500839][ T5491] [ 119.502186][ T5491] dump_stack_lvl+0x99/0x250 [ 119.504203][ T5491] ? __asan_memcpy+0x40/0x70 [ 119.506438][ T5491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.509372][ T5491] ? __pfx__printk+0x10/0x10 [ 119.511961][ T5491] vpanic+0x237/0x6d0 [ 119.514240][ T5491] ? __pfx_vpanic+0x10/0x10 [ 119.516315][ T5491] panic+0xb9/0xc0 [ 119.518161][ T5491] ? __pfx_panic+0x10/0x10 [ 119.520033][ T5491] __warn+0x31b/0x4b0 [ 119.521825][ T5491] ? get_next_unlocked_entry+0x329/0x340 [ 119.524323][ T5491] ? get_next_unlocked_entry+0x329/0x340 [ 119.526585][ T5491] report_bug+0x2be/0x4f0 [ 119.528455][ T5491] ? get_next_unlocked_entry+0x329/0x340 [ 119.530959][ T5491] ? get_next_unlocked_entry+0x329/0x340 [ 119.533752][ T5491] ? get_next_unlocked_entry+0x32b/0x340 [ 119.536591][ T5491] handle_bug+0x84/0x160 [ 119.538564][ T5491] exc_invalid_op+0x1a/0x50 [ 119.540683][ T5491] asm_exc_invalid_op+0x1a/0x20 [ 119.542780][ T5491] RIP: 0010:get_next_unlocked_entry+0x329/0x340 [ 119.545902][ T5491] Code: 45 1d 10 48 3b 84 24 c0 00 00 00 75 22 4c 89 e8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3e 8a f9 08 cc e8 08 59 6e ff 90 <0f> 0b 90 eb a0 e8 6d a6 f6 08 66 66 66 66 2e 0f 1f 84 00 00 00 00 [ 119.556358][ T5491] RSP: 0018:ffffc900027568a0 EFLAGS: 00010093 [ 119.558640][ T5491] RAX: ffffffff8251ba68 RBX: 1ffff920004ead9c RCX: ffff888000d9c900 [ 119.561541][ T5491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.564451][ T5491] RBP: ffffc900027569b0 R08: ffffc90002756937 R09: 0000000000000000 [ 119.567872][ T5491] R10: ffffc90002756900 R11: fffff520004ead27 R12: ffffc90002756918 [ 119.571981][ T5491] R13: ffffea00004945c0 R14: ffffc90002756900 R15: dffffc0000000000 [ 119.575705][ T5491] ? get_next_unlocked_entry+0x328/0x340 [ 119.578325][ T5491] ? __pfx_get_next_unlocked_entry+0x10/0x10 [ 119.581050][ T5491] ? __pfx_wake_exceptional_entry_func+0x10/0x10 [ 119.583795][ T5491] ? __lock_acquire+0xab9/0xd20 [ 119.585758][ T5491] grab_mapping_entry+0x176/0x660 [ 119.588115][ T5491] ? __pfx_grab_mapping_entry+0x10/0x10 [ 119.590620][ T5491] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 119.593083][ T5491] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.594969][ T5491] dax_iomap_fault+0x8ab/0x18d0 [ 119.596739][ T5491] ? stack_depot_save_flags+0x41b/0x860 [ 119.598889][ T5491] ? __pfx_dax_iomap_fault+0x10/0x10 [ 119.601166][ T5491] ? kasan_save_track+0x4f/0x80 [ 119.603554][ T5491] ? kasan_save_track+0x3e/0x80 [ 119.605840][ T5491] ? __kasan_slab_alloc+0x6c/0x80 [ 119.608435][ T5491] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 119.610966][ T5491] ? ptlock_alloc+0x20/0x70 [ 119.612876][ T5491] ? pte_alloc_one+0x7a/0x310 [ 119.614962][ T5491] ? __do_fault+0xd1/0x390 [ 119.617063][ T5491] ? __handle_mm_fault+0x1719/0x5400 [ 119.619470][ T5491] ? handle_mm_fault+0x40a/0x8e0 [ 119.621915][ T5491] ? __get_user_pages+0x165c/0x2a00 [ 119.624372][ T5491] ? get_user_pages_remote+0x2f1/0xac0 [ 119.627401][ T5491] ? uprobe_write+0x1b6/0x2160 [ 119.629970][ T5491] ? uprobe_write_opcode+0xa8/0xf0 [ 119.632131][ T5491] ? set_swbp+0x121/0x290 [ 119.634092][ T5491] ? install_breakpoint+0x451/0x5a0 [ 119.637020][ T5491] ? register_for_each_vma+0xabb/0xc30 [ 119.640213][ T5491] ? uprobe_apply+0xfb/0x270 [ 119.642584][ T5491] ? trace_uprobe_register+0x4df/0x560 [ 119.645044][ T5491] ? perf_trace_event_init+0x19a/0x9d0 [ 119.647360][ T5491] ? perf_uprobe_init+0x12e/0x1a0 [ 119.649567][ T5491] ? perf_uprobe_event_init+0xe6/0x180 [ 119.652359][ T5491] ? perf_try_init_event+0x17f/0x870 [ 119.654843][ T5491] ? perf_event_alloc+0x133e/0x2be0 [ 119.657007][ T5491] ? __se_sys_perf_event_open+0x772/0x1d70 [ 119.659623][ T5491] ? do_syscall_64+0xfa/0xfa0 [ 119.661883][ T5491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.664595][ T5491] ? mod_node_state+0xea/0x160 [ 119.666728][ T5491] ? pte_alloc_one+0x1f9/0x310 [ 119.669012][ T5491] __do_fault+0x138/0x390 [ 119.671089][ T5491] __handle_mm_fault+0x1719/0x5400 [ 119.673378][ T5491] ? __pfx___handle_mm_fault+0x10/0x10 [ 119.675572][ T5491] ? __pfx___might_resched+0x10/0x10 [ 119.677675][ T5491] handle_mm_fault+0x40a/0x8e0 [ 119.679791][ T5491] __get_user_pages+0x165c/0x2a00 [ 119.682020][ T5491] get_user_pages_remote+0x2f1/0xac0 [ 119.684401][ T5491] ? iomap_iter_advance+0x282/0x2f0 [ 119.687127][ T5491] ? __pfx_get_user_pages_remote+0x10/0x10 [ 119.689709][ T5491] ? insn_get_prefixes+0xe6e/0x1ca0 [ 119.691919][ T5491] uprobe_write+0x1b6/0x2160 [ 119.693989][ T5491] ? insn_get_opcode+0xb12/0x11b0 [ 119.696219][ T5491] ? __pfx_verify_opcode+0x10/0x10 [ 119.698811][ T5491] ? __pfx_uprobe_write+0x10/0x10 [ 119.701579][ T5491] ? insn_get_immediate+0x32a/0x1280 [ 119.704300][ T5491] ? insn_get_modrm+0x57/0x7d0 [ 119.706448][ T5491] uprobe_write_opcode+0xa8/0xf0 [ 119.708618][ T5491] ? insn_rip_relative+0xc6/0x130 [ 119.710860][ T5491] ? __pfx_uprobe_write_opcode+0x10/0x10 [ 119.713338][ T5491] ? arch_uprobe_analyze_insn+0xc77/0x1400 [ 119.715974][ T5491] set_swbp+0x121/0x290 [ 119.718405][ T5491] ? __pfx_set_swbp+0x10/0x10 [ 119.721107][ T5491] install_breakpoint+0x451/0x5a0 [ 119.723787][ T5491] register_for_each_vma+0xabb/0xc30 [ 119.725829][ T5491] ? uprobe_apply+0x75/0x270 [ 119.727573][ T5491] uprobe_apply+0xfb/0x270 [ 119.729250][ T5491] trace_uprobe_register+0x4df/0x560 [ 119.731533][ T5491] perf_trace_event_init+0x19a/0x9d0 [ 119.733692][ T5491] perf_uprobe_init+0x12e/0x1a0 [ 119.735984][ T5491] perf_uprobe_event_init+0xe6/0x180 [ 119.738728][ T5491] perf_try_init_event+0x17f/0x870 [ 119.741719][ T5491] ? perf_event_alloc+0xf61/0x2be0 [ 119.743915][ T5491] perf_event_alloc+0x133e/0x2be0 [ 119.745904][ T5491] ? perf_event_alloc+0xf61/0x2be0 [ 119.748087][ T5491] ? __pfx_perf_event_alloc+0x10/0x10 [ 119.750590][ T5491] ? find_lively_task_by_vpid+0x19/0x290 [ 119.753572][ T5491] ? find_lively_task_by_vpid+0x19/0x290 [ 119.756614][ T5491] ? find_lively_task_by_vpid+0x19/0x290 [ 119.758948][ T5491] __se_sys_perf_event_open+0x772/0x1d70 [ 119.761321][ T5491] ? up_write+0x1c4/0x420 [ 119.763322][ T5491] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 119.766002][ T5491] ? __pfx___se_sys_futex+0x10/0x10 [ 119.768370][ T5491] ? fput+0xa0/0xd0 [ 119.770360][ T5491] ? do_syscall_64+0xbe/0xfa0 [ 119.772755][ T5491] ? __x64_sys_perf_event_open+0x20/0xc0 [ 119.775465][ T5491] do_syscall_64+0xfa/0xfa0 [ 119.777432][ T5491] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.779191][ T5491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.781381][ T5491] ? clear_bhb_loop+0x60/0xb0 [ 119.783286][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.785901][ T5491] RIP: 0033:0x7f3cf958f6c9 [ 119.787984][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.796029][ T5491] RSP: 002b:00007ffd99cd4368 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 119.799352][ T5491] RAX: ffffffffffffffda RBX: 00007f3cf97e5fa0 RCX: 00007f3cf958f6c9 [ 119.802793][ T5491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 119.806279][ T5491] RBP: 00007f3cf9611f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.810310][ T5491] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 119.813896][ T5491] R13: 00007f3cf97e5fa0 R14: 00007f3cf97e5fa0 R15: 0000000000000005 [ 119.817376][ T5491] [ 119.819073][ T5491] Kernel Offset: disabled [ 119.821114][ T5491] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:48:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002756050 R8 =ffff888030af8237 R9 =1ffff1100615f046 R10=dffffc0000000000 R11=ffffffff85166c10 R12=dffffc0000000000 R13=ffffffff997e4904 R14=ffffffff99af8320 R15=0000000000000000 RIP=ffffffff85166c8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557e4a2500 ffffffff 00c00000 GS =0000 ffff88808d730000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005557dbb2f950 CR3=000000001c1e1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd99cd4640 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cf9613050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cf961305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cf9613057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cf961306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cf96130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3cf96131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000