RBP: 0000000020ffe000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 R13: 0000000020feb000 R14: 0000000020000200 R15: 0000000020ffe000 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 8033 at arch/x86/mm/pat/memtype.c:1099 untrack_pfn+0x247/0x290 Modules linked in: CPU: 0 PID: 8033 Comm: iou-sqp-8032 Not tainted 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:untrack_pfn+0x247/0x290 Code: 84 6c ff ff ff e8 a9 0f 31 00 4c 89 ee 4c 89 e7 e8 9e db ff ff e8 99 0f 31 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 89 0f 31 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 0a 48 64 00 e9 98 fe ff ff e8 10 RSP: 0018:ffff888044ae78e8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888008412ea0 RCX: 0000000000000000 RDX: ffff88801d07d040 RSI: ffffffff811339b7 RDI: 0000000000000003 RBP: 1ffff1100895cf1d R08: 0000000000000000 R09: 000000000000000d R10: ffffffff81133886 R11: 0000000000000007 R12: 00000000ffffffea R13: 0000000000000000 R14: 0000000000000000 R15: ffff888008412ec0 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555557976d0 CR3: 000000000bc02000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: unmap_single_vma+0x1b4/0x350 unmap_vmas+0x21e/0x370 exit_mmap+0x1b5/0x690 mmput+0xd1/0x390 do_exit+0xa10/0x27f0 io_sq_thread.cold+0x17f/0x17f ret_from_fork+0x22/0x30 irq event stamp: 1241 hardirqs last enabled at (1251): [] __up_console_sem+0x78/0x80 hardirqs last disabled at (1262): [] __up_console_sem+0x5d/0x80 softirqs last enabled at (348): [] __irq_exit_rcu+0x113/0x170 softirqs last disabled at (313): [] __irq_exit_rcu+0x113/0x170 ---[ end trace 0000000000000000 ]--- general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 8033 Comm: iou-sqp-8032 Tainted: G W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__rb_erase_color+0x155/0xe80 Code: 89 ee 48 89 c5 e9 f6 fe ff ff 4c 8d 45 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 67 08 00 00 4c 8b 65 10 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 97 08 00 00 49 8d 7c 24 08 49 8b 04 24 48 89 f9 RSP: 0018:ffff888044ae7960 EFLAGS: 00010256 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: ffffffff81657c40 RSI: ffff88800b81cda8 RDI: ffff888008638438 RBP: ffff888008638438 R08: ffff888008638448 R09: ffff88800b81cda7 R10: ffffffff81658e58 R11: 0000000000000001 R12: 0000000000000000 R13: ffffed10017039b5 R14: 0000000000000000 R15: ffff88800b81cda8 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555557976d0 CR3: 000000000d9a8000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: vma_interval_tree_remove+0x694/0xec0 unlink_file_vma+0xbd/0x110 free_pgtables+0x255/0x420 exit_mmap+0x1c8/0x690 mmput+0xd1/0x390 do_exit+0xa10/0x27f0 io_sq_thread.cold+0x17f/0x17f ret_from_fork+0x22/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__rb_erase_color+0x155/0xe80 Code: 89 ee 48 89 c5 e9 f6 fe ff ff 4c 8d 45 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 67 08 00 00 4c 8b 65 10 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 97 08 00 00 49 8d 7c 24 08 49 8b 04 24 48 89 f9 RSP: 0018:ffff888044ae7960 EFLAGS: 00010256 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: ffffffff81657c40 RSI: ffff88800b81cda8 RDI: ffff888008638438 RBP: ffff888008638438 R08: ffff888008638448 R09: ffff88800b81cda7 R10: ffffffff81658e58 R11: 0000000000000001 R12: 0000000000000000 R13: ffffed10017039b5 R14: 0000000000000000 R15: ffff88800b81cda8 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555557976d0 CR3: 000000000d9a8000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Fixing recursive fault but reboot is needed! BUG: using smp_processor_id() in preemptible [00000000] code: iou-sqp-8032/8033 caller is __schedule+0x7f/0x2460 CPU: 0 PID: 8033 Comm: iou-sqp-8032 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 check_preemption_disabled+0x16b/0x170 __schedule+0x7f/0x2460 do_task_dead+0xd1/0x100 make_task_dead.cold+0xb9/0x1c9 rewind_stack_and_make_dead+0x17/0x17 RIP: 0033:0x0 Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 RAX: 0000000000000000 RBX: 00007f011e8f0f60 RCX: 00007f011e7ddb19 RDX: 0000000020fec000 RSI: 0000000020000080 RDI: 00000000000048cf RBP: 0000000020000080 R08: 0000000020000040 R09: 0000000020000040 R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000040 R13: 0000000020fec000 R14: 0000000020000100 R15: 00000000200a0000 BUG: scheduling while atomic: iou-sqp-8032/8033/0x00000000 INFO: lockdep is turned off. Modules linked in: Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 8033 Comm: iou-sqp-8032 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 __schedule_bug.cold+0x133/0x143 __schedule+0x18e7/0x2460 do_task_dead+0xd1/0x100 make_task_dead.cold+0xb9/0x1c9 rewind_stack_and_make_dead+0x17/0x17 RIP: 0033:0x0 Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 RAX: 0000000000000000 RBX: 00007f011e8f0f60 RCX: 00007f011e7ddb19 RDX: 0000000020fec000 RSI: 0000000020000080 RDI: 00000000000048cf RBP: 0000000020000080 R08: 0000000020000040 R09: 0000000020000040 R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000040 R13: 0000000020fec000 R14: 0000000020000100 R15: 00000000200a0000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 8052 Comm: syz-executor.2 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa should_failslab+0x5/0x10 kmem_cache_alloc+0x5b/0x480 create_object.isra.0+0x3a/0xa20 kmem_cache_alloc+0x239/0x480 mas_alloc_nodes+0x36e/0x6a0 mas_preallocate+0xff/0x270 mmap_region+0x770/0x1a70 do_mmap+0x824/0xf40 vm_mmap_pgoff+0x1b5/0x280 ksys_mmap_pgoff+0x3cc/0x4f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4ea96a2b62 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 RSP: 002b:00007f4ea6c180f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4ea96a2b62 RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 RBP: 0000000020ffe000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 R13: 0000000020feb000 R14: 0000000020000200 R15: 0000000020ffe000 FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 8057 Comm: syz-executor.1 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa should_failslab+0x5/0x10 kmem_cache_alloc+0x5b/0x480 create_object.isra.0+0x3a/0xa20 kmem_cache_alloc_bulk+0x3fa/0x780 mas_alloc_nodes+0x2a6/0x6a0 mas_preallocate+0xff/0x270 __vma_adjust+0x1f6/0x18a0 __split_vma+0x2a1/0x540 do_mas_align_munmap.constprop.0+0x263/0xfa0 do_mas_munmap+0x1ed/0x2c0 mmap_region+0x21c/0x1a70 do_mmap+0x824/0xf40 vm_mmap_pgoff+0x1b5/0x280 ksys_mmap_pgoff+0x3cc/0x4f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f2c579bdb62 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 RSP: 002b:00007f2c54f330f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f2c579bdb62 RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 RBP: 0000000020ffe000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 R13: 0000000020feb000 R14: 0000000020000200 R15: 0000000020ffe000 loop7: detected capacity change from 0 to 23 tmpfs: Unknown parameter 'appraise_type' loop7: detected capacity change from 0 to 23 tmpfs: Unknown parameter 'appraise_type' FAULT_INJECTION: forcing a failure. name failslab, interval 1, probability 0, space 0, times 0 CPU: 1 PID: 8079 Comm: syz-executor.2 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 should_fail.cold+0x5/0xa should_failslab+0x5/0x10 kmem_cache_alloc+0x5b/0x480 mas_alloc_nodes+0x36e/0x6a0 mas_preallocate+0xff/0x270 mmap_region+0x770/0x1a70 do_mmap+0x824/0xf40 vm_mmap_pgoff+0x1b5/0x280 ksys_mmap_pgoff+0x3cc/0x4f0 do_syscall_64+0x3b/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4ea96a2b62 Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 RSP: 002b:00007f4ea6c180f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f4ea96a2b62 RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffe000 RBP: 0000000020ffe000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000240 R13: 0000000020feb000 R14: 0000000020000200 R15: 0000000020ffe000 general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 8080 Comm: iou-sqp-8079 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__rb_erase_color+0x155/0xe80 Code: 89 ee 48 89 c5 e9 f6 fe ff ff 4c 8d 45 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 67 08 00 00 4c 8b 65 10 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 97 08 00 00 49 8d 7c 24 08 49 8b 04 24 48 89 f9 RSP: 0018:ffff888044b57960 EFLAGS: 00010256 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: ffffffff81657c40 RSI: ffff88801d9fe680 RDI: ffff88800d6ef6a8 RBP: ffff88800d6ef6a8 R08: ffff88800d6ef6b8 R09: ffff88801d9fe67f R10: ffffffff81658e58 R11: 0000000000000001 R12: 0000000000000000 R13: ffffed1003b3fcd0 R14: 0000000000000000 R15: ffff88801d9fe680 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1b5bfa4e25 CR3: 0000000044104000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Call Trace: vma_interval_tree_remove+0x694/0xec0 unlink_file_vma+0xbd/0x110 free_pgtables+0x255/0x420 exit_mmap+0x1c8/0x690 mmput+0xd1/0x390 do_exit+0xa10/0x27f0 io_sq_thread.cold+0x17f/0x17f ret_from_fork+0x22/0x30 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__rb_erase_color+0x155/0xe80 Code: 89 ee 48 89 c5 e9 f6 fe ff ff 4c 8d 45 10 4c 89 c0 48 c1 e8 03 80 3c 18 00 0f 85 67 08 00 00 4c 8b 65 10 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 97 08 00 00 49 8d 7c 24 08 49 8b 04 24 48 89 f9 RSP: 0018:ffff888044ae7960 EFLAGS: 00010256 RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 RDX: ffffffff81657c40 RSI: ffff88800b81cda8 RDI: ffff888008638438 RBP: ffff888008638438 R08: ffff888008638448 R09: ffff88800b81cda7 R10: ffffffff81658e58 R11: 0000000000000001 R12: 0000000000000000 R13: ffffed10017039b5 R14: 0000000000000000 R15: ffff88800b81cda8 FS: 0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1b5bfa4e25 CR3: 0000000044104000 CR4: 0000000000350ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 Fixing recursive fault but reboot is needed! BUG: using smp_processor_id() in preemptible [00000000] code: iou-sqp-8079/8080 caller is __schedule+0x7f/0x2460 CPU: 0 PID: 8080 Comm: iou-sqp-8079 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 check_preemption_disabled+0x16b/0x170 __schedule+0x7f/0x2460 do_task_dead+0xd1/0x100 make_task_dead.cold+0xb9/0x1c9 rewind_stack_and_make_dead+0x17/0x17 RIP: 0033:0x0 Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 RAX: 0000000000000000 RBX: 00007f4ea97b5f60 RCX: 00007f4ea96a2b19 RDX: 0000000020fec000 RSI: 0000000020000080 RDI: 00000000000048cf RBP: 0000000020000080 R08: 0000000020000040 R09: 0000000020000040 R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000040 R13: 0000000020fec000 R14: 0000000020000100 R15: 00000000200a0000 BUG: scheduling while atomic: iou-sqp-8079/8080/0x00000000 INFO: lockdep is turned off. Modules linked in: Preemption disabled at: [<0000000000000000>] 0x0 CPU: 0 PID: 8080 Comm: iou-sqp-8079 Tainted: G D W 5.18.0-rc4-next-20220427 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: dump_stack_lvl+0x8b/0xb3 __schedule_bug.cold+0x133/0x143 __schedule+0x18e7/0x2460 do_task_dead+0xd1/0x100 make_task_dead.cold+0xb9/0x1c9 rewind_stack_and_make_dead+0x17/0x17 RIP: 0033:0x0 Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 RAX: 0000000000000000 RBX: 00007f4ea97b5f60 RCX: 00007f4ea96a2b19 RDX: 0000000020fec000 RSI: 0000000020000080 RDI: 00000000000048cf RBP: 0000000020000080 R08: 0000000020000040 R09: 0000000020000040 R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000040 R13: 0000000020fec000 R14: 0000000020000100 R15: 00000000200a0000 ---------------- Code disassembly (best guess): 0: 89 ee mov %ebp,%esi 2: 48 89 c5 mov %rax,%rbp 5: e9 f6 fe ff ff jmpq 0xffffff00 a: 4c 8d 45 10 lea 0x10(%rbp),%r8 e: 4c 89 c0 mov %r8,%rax 11: 48 c1 e8 03 shr $0x3,%rax 15: 80 3c 18 00 cmpb $0x0,(%rax,%rbx,1) 19: 0f 85 67 08 00 00 jne 0x886 1f: 4c 8b 65 10 mov 0x10(%rbp),%r12 23: 4c 89 e0 mov %r12,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 80 3c 18 00 cmpb $0x0,(%rax,%rbx,1) <-- trapping instruction 2e: 0f 85 97 08 00 00 jne 0x8cb 34: 49 8d 7c 24 08 lea 0x8(%r12),%rdi 39: 49 8b 04 24 mov (%r12),%rax 3d: 48 89 f9 mov %rdi,%rcx