syzkaller login: [ 47.413307][ T7998] sshd (7998) used greatest stack depth: 22352 bytes left Warning: Permanently added '[localhost]:50358' (ED25519) to the list of known hosts. executing program [ 53.675143][ T8034] ubi0: attaching mtd0 [ 53.677885][ T8034] ubi0: scanning is finished [ 53.678500][ T8034] ubi0: empty MTD device detected [ 53.679366][ T8034] ------------[ cut here ]------------ [ 53.680085][ T8034] WARNING: CPU: 1 PID: 8034 at mm/vmalloc.c:3247 __vmalloc_node_range+0x10a0/0x1490 [ 53.681279][ T8034] Modules linked in: [ 53.681736][ T8034] CPU: 1 PID: 8034 Comm: syz-executor329 Not tainted 6.6.0-gd2f51b3516da #1 [ 53.682941][ T8034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [ 53.684380][ T8034] RIP: 0010:__vmalloc_node_range+0x10a0/0x1490 [ 53.685392][ T8034] Code: 65 48 2b 04 25 28 00 00 00 0f 85 98 02 00 00 48 81 c4 70 01 00 00 4c 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 f1 e3 b6 ff 90 <0f> 0b 90 45 31 e4 eb a1 e8 e3 e3 b6 ff 48 8b 4c 24 40 31 f6 45 31 [ 53.687796][ T8034] RSP: 0018:ffffc90005f9f908 EFLAGS: 00010293 [ 53.688568][ T8034] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81cf3ba4 [ 53.689547][ T8034] RDX: ffff8880175b8000 RSI: ffffffff81cf4b7f RDI: 0000000000000007 [ 53.690546][ T8034] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.691490][ T8034] R10: 0000000000000000 R11: ffffffff81db5dd2 R12: ffffed1002d5d0d2 [ 53.692398][ T8034] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888021f80000 [ 53.693303][ T8034] FS: 00005555560023c0(0000) GS:ffff88807ec00000(0000) knlGS:0000000000000000 [ 53.694324][ T8034] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.695075][ T8034] CR2: 000000002000004c CR3: 000000001ed9b000 CR4: 0000000000750ef0 [ 53.696001][ T8034] PKRU: 55555554 [ 53.696437][ T8034] Call Trace: [ 53.696904][ T8034] [ 53.697305][ T8034] ? show_regs+0x96/0xa0 [ 53.697846][ T8034] ? __warn+0xe6/0x390 [ 53.698376][ T8034] ? __vmalloc_node_range+0x10a0/0x1490 [ 53.699043][ T8034] ? report_bug+0x2dd/0x500 [ 53.699617][ T8034] ? __vmalloc_node_range+0x10a0/0x1490 [ 53.700276][ T8034] ? handle_bug+0x99/0x120 [ 53.700806][ T8034] ? exc_invalid_op+0x36/0x80 [ 53.701368][ T8034] ? asm_exc_invalid_op+0x1a/0x20 [ 53.701969][ T8034] ? kasan_save_stack+0x22/0x40 [ 53.702570][ T8034] ? __vmalloc_node_range+0xc4/0x1490 [ 53.703191][ T8034] ? __vmalloc_node_range+0x109f/0x1490 [ 53.703803][ T8034] ? __vmalloc_node_range+0x10a0/0x1490 [ 53.704431][ T8034] ? __vmalloc_node_range+0x109f/0x1490 [ 53.705086][ T8034] ? kasan_save_stack+0x22/0x40 [ 53.705679][ T8034] ? kasan_set_track+0x25/0x30 [ 53.706294][ T8034] ? kasan_save_free_info+0x2b/0x40 [ 53.706990][ T8034] ? ____kasan_slab_free+0x15e/0x1c0 [ 53.707680][ T8034] ? slab_free_freelist_hook+0x95/0x1d0 [ 53.708373][ T8034] ? __kmem_cache_free+0xc0/0x180 [ 53.709011][ T8034] ? ubi_attach_mtd_dev+0x1506/0x3860 [ 53.709657][ T8034] ? __x64_sys_ioctl+0x19d/0x210 [ 53.710275][ T8034] ? do_syscall_64+0x40/0x110 [ 53.710846][ T8034] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 53.711593][ T8034] ? ubi_read_volume_table+0x566/0x2950 [ 53.712285][ T8034] ? hlock_class+0x4e/0x120 [ 53.712862][ T8034] ? delayed_vfree_work+0x70/0x70 [ 53.713501][ T8034] ? debug_check_no_obj_freed+0x210/0x420 [ 53.714246][ T8034] ? lock_downgrade+0x6a0/0x6a0 [ 53.714885][ T8034] ? ubi_read_volume_table+0x566/0x2950 [ 53.715593][ T8034] vzalloc+0x6b/0x80 [ 53.716107][ T8034] ? ubi_read_volume_table+0x566/0x2950 [ 53.716895][ T8034] ubi_read_volume_table+0x566/0x2950 [ 53.717597][ T8034] ? mark_held_locks+0x9f/0xe0 [ 53.718251][ T8034] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.718921][ T8034] ? slab_free_freelist_hook+0x95/0x1d0 [ 53.719652][ T8034] ? ubi_vtbl_rename_volumes+0x5d0/0x5d0 [ 53.720374][ T8034] ? ubi_attach+0x169b/0x47e0 [ 53.720961][ T8034] ? __kmem_cache_free+0xc0/0x180 [ 53.721576][ T8034] ubi_attach+0x18bd/0x47e0 [ 53.722146][ T8034] ? lockdep_init_map_type+0x2c7/0x7d0 [ 53.722787][ T8034] ubi_attach_mtd_dev+0x1506/0x3860 [ 53.723438][ T8034] ? ubi_free_internal_volumes+0x250/0x250 [ 53.724148][ T8034] ? __get_mtd_device+0x250/0x250 [ 53.724772][ T8034] ctrl_cdev_ioctl+0x31c/0x3c0 [ 53.725379][ T8034] ? vol_cdev_llseek+0x160/0x160 [ 53.725956][ T8034] ? bpf_lsm_file_ioctl+0x9/0x10 [ 53.726576][ T8034] ? vol_cdev_llseek+0x160/0x160 [ 53.727247][ T8034] __x64_sys_ioctl+0x19d/0x210 [ 53.727827][ T8034] do_syscall_64+0x40/0x110 [ 53.728369][ T8034] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 53.729080][ T8034] RIP: 0033:0x7f37d78f304d [ 53.729613][ T8034] Code: 28 c3 e8 46 1e 00 00 66 0f 1f 44 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.731907][ T8034] RSP: 002b:00007ffd50024898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.732867][ T8034] RAX: ffffffffffffffda RBX: 00007ffd50024a98 RCX: 00007f37d78f304d [ 53.733772][ T8034] RDX: 0000000020000080 RSI: 0000000040186f40 RDI: 0000000000000003 [ 53.734680][ T8034] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007ffd50024a98 [ 53.735599][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.736512][ T8034] R13: 00007ffd50024a88 R14: 00007f37d7970530 R15: 0000000000000001 [ 53.737560][ T8034] [ 53.737949][ T8034] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 53.738792][ T8034] CPU: 1 PID: 8034 Comm: syz-executor329 Not tainted 6.6.0-gd2f51b3516da #1 [ 53.739782][ T8034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [ 53.740845][ T8034] Call Trace: [ 53.741237][ T8034] [ 53.741596][ T8034] dump_stack_lvl+0xd9/0x150 [ 53.742152][ T8034] panic+0x6b9/0x760 [ 53.742627][ T8034] ? panic_smp_self_stop+0xa0/0xa0 [ 53.743263][ T8034] ? check_panic_on_warn+0x1f/0xc0 [ 53.743922][ T8034] ? __vmalloc_node_range+0x10a0/0x1490 [ 53.744626][ T8034] check_panic_on_warn+0xb1/0xc0 [ 53.745244][ T8034] __warn+0xf2/0x390 [ 53.745731][ T8034] ? __vmalloc_node_range+0x10a0/0x1490 [ 53.746435][ T8034] report_bug+0x2dd/0x500 [ 53.747002][ T8034] ? __vmalloc_node_range+0x10a0/0x1490 [ 53.747703][ T8034] handle_bug+0x99/0x120 [ 53.748259][ T8034] exc_invalid_op+0x36/0x80 [ 53.748820][ T8034] asm_exc_invalid_op+0x1a/0x20 [ 53.749464][ T8034] RIP: 0010:__vmalloc_node_range+0x10a0/0x1490 [ 53.750283][ T8034] Code: 65 48 2b 04 25 28 00 00 00 0f 85 98 02 00 00 48 81 c4 70 01 00 00 4c 89 e0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 f1 e3 b6 ff 90 <0f> 0b 90 45 31 e4 eb a1 e8 e3 e3 b6 ff 48 8b 4c 24 40 31 f6 45 31 [ 53.752619][ T8034] RSP: 0018:ffffc90005f9f908 EFLAGS: 00010293 [ 53.753316][ T8034] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81cf3ba4 [ 53.754231][ T8034] RDX: ffff8880175b8000 RSI: ffffffff81cf4b7f RDI: 0000000000000007 [ 53.755139][ T8034] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 53.756028][ T8034] R10: 0000000000000000 R11: ffffffff81db5dd2 R12: ffffed1002d5d0d2 [ 53.756928][ T8034] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888021f80000 [ 53.757881][ T8034] ? kasan_save_stack+0x22/0x40 [ 53.758502][ T8034] ? __vmalloc_node_range+0xc4/0x1490 [ 53.759186][ T8034] ? __vmalloc_node_range+0x109f/0x1490 [ 53.759853][ T8034] ? __vmalloc_node_range+0x109f/0x1490 [ 53.760537][ T8034] ? kasan_save_stack+0x22/0x40 [ 53.761137][ T8034] ? kasan_set_track+0x25/0x30 [ 53.761692][ T8034] ? kasan_save_free_info+0x2b/0x40 [ 53.762357][ T8034] ? ____kasan_slab_free+0x15e/0x1c0 [ 53.763022][ T8034] ? slab_free_freelist_hook+0x95/0x1d0 [ 53.763689][ T8034] ? __kmem_cache_free+0xc0/0x180 [ 53.764312][ T8034] ? ubi_attach_mtd_dev+0x1506/0x3860 [ 53.764964][ T8034] ? __x64_sys_ioctl+0x19d/0x210 [ 53.765543][ T8034] ? do_syscall_64+0x40/0x110 [ 53.766133][ T8034] ? entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 53.766860][ T8034] ? ubi_read_volume_table+0x566/0x2950 [ 53.767550][ T8034] ? hlock_class+0x4e/0x120 [ 53.768136][ T8034] ? delayed_vfree_work+0x70/0x70 [ 53.768745][ T8034] ? debug_check_no_obj_freed+0x210/0x420 [ 53.769467][ T8034] ? lock_downgrade+0x6a0/0x6a0 [ 53.770100][ T8034] ? ubi_read_volume_table+0x566/0x2950 [ 53.770793][ T8034] vzalloc+0x6b/0x80 [ 53.771285][ T8034] ? ubi_read_volume_table+0x566/0x2950 [ 53.771967][ T8034] ubi_read_volume_table+0x566/0x2950 [ 53.772651][ T8034] ? mark_held_locks+0x9f/0xe0 [ 53.773256][ T8034] ? lockdep_hardirqs_on+0x7d/0x110 [ 53.773921][ T8034] ? slab_free_freelist_hook+0x95/0x1d0 [ 53.774643][ T8034] ? ubi_vtbl_rename_volumes+0x5d0/0x5d0 [ 53.775367][ T8034] ? ubi_attach+0x169b/0x47e0 [ 53.775959][ T8034] ? __kmem_cache_free+0xc0/0x180 [ 53.776563][ T8034] ubi_attach+0x18bd/0x47e0 [ 53.776969][ T8034] ? lockdep_init_map_type+0x2c7/0x7d0 [ 53.777503][ T8034] ubi_attach_mtd_dev+0x1506/0x3860 [ 53.777977][ T8034] ? ubi_free_internal_volumes+0x250/0x250 [ 53.778544][ T8034] ? __get_mtd_device+0x250/0x250 [ 53.778991][ T8034] ctrl_cdev_ioctl+0x31c/0x3c0 [ 53.779556][ T8034] ? vol_cdev_llseek+0x160/0x160 [ 53.780188][ T8034] ? bpf_lsm_file_ioctl+0x9/0x10 [ 53.780834][ T8034] ? vol_cdev_llseek+0x160/0x160 [ 53.781442][ T8034] __x64_sys_ioctl+0x19d/0x210 [ 53.781991][ T8034] do_syscall_64+0x40/0x110 [ 53.782554][ T8034] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 53.783094][ T8034] RIP: 0033:0x7f37d78f304d [ 53.783463][ T8034] Code: 28 c3 e8 46 1e 00 00 66 0f 1f 44 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 53.785050][ T8034] RSP: 002b:00007ffd50024898 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.785746][ T8034] RAX: ffffffffffffffda RBX: 00007ffd50024a98 RCX: 00007f37d78f304d [ 53.786407][ T8034] RDX: 0000000020000080 RSI: 0000000040186f40 RDI: 0000000000000003 [ 53.787071][ T8034] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007ffd50024a98 [ 53.787749][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.788401][ T8034] R13: 00007ffd50024a88 R14: 00007f37d7970530 R15: 0000000000000001 [ 53.789062][ T8034] [ 53.789512][ T8034] Kernel Offset: disabled [ 53.790147][ T8034] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:47:26 Registers: info registers vcpu 0 RAX=0000000000021a0b RBX=0000000000000000 RCX=ffffffff8a6223db RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffffff8ca07e08 R8 =0000000000000001 R9 =ffffed1005946dbd R10=ffff88802ca36deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8ef7d250 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8a623bfe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88802ca00000 00000000 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f161b7ad4c8 CR3=00000000171c4000 CR4=00750ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 c1ddd554fe19edbd 3d4ca73b2713f3d5 YMM02=0000000000000000 0000000000000000 ed225225ed5e8c1c 00000000000ae998 YMM03=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aeae0 YMM04=0000000000000000 0000000000000000 2acd19729887025a 00000000001f37d8 YMM05=0000000000000000 0000000000000000 5fd79732dee39f0d 00000000000aea38 YMM06=0000000000000000 0000000000000000 8ca0b852b1c7c8e1 00000000000ae7b8 YMM07=0000000000000000 0000000000000000 15c32259ea588043 00000000000ae6a8 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84c81c55 RDI=ffffffff9286ff60 RBP=ffffffff9286ff20 RSP=ffffc90005f9f2a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000034 R14=ffffffff84c81bf0 R15=0000000000000000 RIP=ffffffff84c81c7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555560023c0 00000000 00000000 GS =0000 ffff88807ec00000 00000000 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002000004c CR3=000000001ed9b000 CR4=00750ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 00007f37d7970510 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000