RBP: 00007f63a4d4c1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe0553ea7f R14: 00007f63a4d4c300 R15: 0000000000022000
------------[ cut here ]------------
WARNING: mm/rmap.c:528 at unlink_anon_vmas+0x564/0x780, CPU#0: syz-executor.4/10264
Modules linked in:
CPU: 0 UID: 0 PID: 10264 Comm: syz-executor.4 Not tainted 6.19.0-rc8-next-20260202 #1 PREEMPT(lazy)
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
RIP: 0010:unlink_anon_vmas+0x564/0x780
Code: 8b 44 24 08 48 8b 40 30 4c 39 e0 0f 85 98 00 00 00 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 a2 34 cf ff e8 9d 34 cf ff 90 <0f> 0b 90 e9 64 ff ff ff e8 8f 34 cf ff 90 0f 0b 90 e9 1d ff ff ff
RSP: 0018:ffff888050ea7788 EFLAGS: 00010293
RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff81a68887
RDX: ffff8880195b3700 RSI: ffffffff81a68923 RDI: 0000000000000007
RBP: ffff888050568d20 R08: 0000000000000001 R09: ffffed1009fa84ab
R10: ffffffffffffffff R11: 0000000000000000 R12: ffff88804fd42550
R13: ffff88803b756ca0 R14: ffff88803b756cb0 R15: ffffffffffffffff
FS: 0000000000000000(0000) GS:ffff8880e52de000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d722000 CR3: 000000000d751000 CR4: 0000000000350ef0
Call Trace:
free_pgtables+0x2e1/0xd10
exit_mmap+0x3f1/0x990
mmput+0xd5/0x390
do_exit+0x7ad/0x29b0
do_group_exit+0xd3/0x2a0
get_signal+0x2311/0x2340
arch_do_signal_or_restart+0x80/0x7a0
exit_to_user_mode_loop+0x89/0x4c0
do_syscall_64+0x4da/0x690
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f63a77d6b19
Code: Unable to access opcode bytes at 0x7f63a77d6aef.
RSP: 002b:00007f63a4d4c218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f63a78e9f68 RCX: 00007f63a77d6b19
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f63a78e9f68
RBP: 00007f63a78e9f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63a78e9f6c
R13: 00007ffe0553ea7f R14: 00007f63a4d4c300 R15: 0000000000022000
irq event stamp: 1543
hardirqs last enabled at (1551): [] __up_console_sem+0x78/0x80
hardirqs last disabled at (1560): [] __up_console_sem+0x5d/0x80
softirqs last enabled at (1532): [] __irq_exit_rcu+0xc4/0x100
softirqs last disabled at (1579): [] __irq_exit_rcu+0xc4/0x100
---[ end trace 0000000000000000 ]---
FAULT_INJECTION: forcing a failure.
name fail_usercopy, interval 1, probability 0, space 0, times 0
CPU: 1 UID: 0 PID: 10288 Comm: syz-executor.2 Tainted: G W 6.19.0-rc8-next-20260202 #1 PREEMPT(lazy)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
should_fail_ex+0x4d7/0x5e0
_copy_from_user+0x30/0xd0
__tun_chr_ioctl+0x2764/0x4400
__x64_sys_ioctl+0x18f/0x210
do_syscall_64+0x111/0x690
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f401085db19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f400ddd3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007f4010970f60 RCX: 00007f401085db19
RDX: 0000000020000180 RSI: 00000000400454d1 RDI: 0000000000000003
RBP: 00007f400ddd31d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffcdd98775f R14: 00007f400ddd3300 R15: 0000000000022000
FAULT_INJECTION: forcing a failure.
name failslab, interval 1, probability 0, space 0, times 0
CPU: 0 UID: 0 PID: 10325 Comm: syz-executor.4 Tainted: G W 6.19.0-rc8-next-20260202 #1 PREEMPT(lazy)
Tainted: [W]=WARN
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
Call Trace:
dump_stack_lvl+0xfa/0x120
should_fail_ex+0x4d7/0x5e0
should_failslab+0xc2/0x120
kmem_cache_alloc_noprof+0x69/0x660
mas_preallocate+0xb3d/0xd90
commit_merge+0x253/0xe50
vma_modify+0xefd/0x2270
vma_modify_flags+0x1e7/0x340
mlock_fixup+0x234/0xe20
apply_vma_lock_flags+0x248/0x370
__x64_sys_munlock+0x136/0x300
do_syscall_64+0x111/0x690
entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f63a77d6b19
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f63a4d4c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000096
RAX: ffffffffffffffda RBX: 00007f63a78e9f60 RCX: 00007f63a77d6b19
RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020f13000
RBP: 00007f63a4d4c1d0 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007ffe0553ea7f R14: 00007f63a4d4c300 R15: 0000000000022000