./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2092989705 <...> Warning: Permanently added '10.128.1.15' (ECDSA) to the list of known hosts. execve("./syz-executor2092989705", ["./syz-executor2092989705"], 0x7ffd3aee4730 /* 10 vars */) = 0 brk(NULL) = 0x555556f64000 brk(0x555556f64c40) = 0x555556f64c40 arch_prctl(ARCH_SET_FS, 0x555556f64300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor2092989705", 4096) = 28 brk(0x555556f85c40) = 0x555556f85c40 brk(0x555556f86000) = 0x555556f86000 mprotect(0x7f7fddef0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3610 attached , child_tidptr=0x555556f645d0) = 3610 [pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3610] setpgid(0, 0) = 0 [pid 3610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1000", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] mmap(0x20000000, 16732160, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_ANONYMOUS|MAP_NORESERVE|MAP_POPULATE|MAP_NONBLOCK|MAP_DENYWRITE|MAP_HUGETLB, -1, 0) = 0x20000000 [pid 3610] openat(AT_FDCWD, 0x200000c0, O_RDONLY) = 3 [pid 3610] openat(AT_FDCWD, 0x20000040, O_WRONLY) = 4 syzkaller login: [ 53.061559][ T3610] page:ffffea0002d60000 refcount:4 mapcount:1 mapping:ffff8881459d0d30 index:0x0 pfn:0xb5800 [ 53.061594][ T3610] head:ffffea0002d60000 order:9 compound_mapcount:1 compound_pincount:0 [ 53.061616][ T3610] aops:hugetlbfs_aops ino:6e7a dentry name:"anon_hugepage" [ 53.061658][ T3610] flags: 0xfff0000001000c(uptodate|dirty|head|node=0|zone=1|lastcpupid=0x7ff) [ 53.061693][ T3610] raw: 00fff0000001000c ffffffff90f93ad8 ffffffff90f93ad8 ffff8881459d0d30 [ 53.061716][ T3610] raw: 0000000000000000 0000000000000002 00000004ffffffff 0000000000000000 [ 53.061728][ T3610] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled()) [ 53.061780][ T3610] page_owner tracks the page as allocated [ 53.061786][ T3610] page last allocated via order 9, migratetype Movable, gfp_mask 0x346cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_THISNODE), pid 1, tgid 1 (swapper/0), ts 14038198857, free_ts 0 [ 53.061827][ T3610] get_page_from_freelist+0x1f18/0x3a40 [ 53.061860][ T3610] __alloc_pages+0x1c7/0x510 [ 53.061887][ T3610] alloc_fresh_huge_page+0x49a/0x700 [ 53.061919][ T3610] alloc_pool_huge_page+0xf8/0x1d0 [ 53.061950][ T3610] set_max_huge_pages+0x550/0x1280 [ 53.061983][ T3610] hugetlb_sysctl_handler_common+0x264/0x330 [ 53.062017][ T3610] proc_sys_call_handler+0x4a1/0x6e0 [ 53.062054][ T3610] __kernel_write+0x4e1/0xa30 [ 53.062075][ T3610] kernel_write+0xe2/0x540 [ 53.062093][ T3610] process_sysctl_arg+0x22f/0x470 [ 53.062117][ T3610] parse_args+0x46e/0x8b0 [ 53.062129][ T3610] do_sysctl_args+0xc3/0x130 [ 53.062141][ T3610] kernel_init+0x6f/0x1d0 [ 53.062152][ T3610] ret_from_fork+0x1f/0x30 [ 53.062169][ T3610] page_owner free stack trace missing [ 53.062291][ T3610] ------------[ cut here ]------------ [ 53.062296][ T3610] WARNING: CPU: 0 PID: 3610 at include/linux/memcontrol.h:800 folio_lruvec_lock_irqsave+0x2fd/0x4f0 [ 53.239956][ T3610] Modules linked in: [ 53.243965][ T3610] CPU: 0 PID: 3610 Comm: syz-executor209 Not tainted 5.19.0-rc3-next-20220622-syzkaller #0 [ 53.254068][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.264213][ T3610] RIP: 0010:folio_lruvec_lock_irqsave+0x2fd/0x4f0 [ 53.270750][ T3610] Code: 1f 44 00 00 45 31 e4 80 3d 06 3e da 0b 00 0f 85 01 fe ff ff 48 c7 c6 40 6f da 89 4c 89 f7 e8 0a 44 e2 ff c6 05 ea 3d da 0b 01 <0f> 0b e9 e4 fd ff ff e8 67 be ad 07 85 c0 0f 84 37 fd ff ff 80 3d [ 53.290429][ T3610] RSP: 0018:ffffc90002eff2c8 EFLAGS: 00010293 [ 53.296515][ T3610] RAX: 0000000000000000 RBX: fffff940005ac007 RCX: 0000000000000000 [ 53.304600][ T3610] RDX: ffff888020e3ba80 RSI: ffffffff81ce36a6 RDI: 0000000000000003 [ 53.312688][ T3610] RBP: dffffc0000000000 R08: 0000000000000003 R09: 000000000000ffff [ 53.320795][ T3610] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000000 [ 53.328788][ T3610] R13: fffff940005ac000 R14: ffffea0002d60000 R15: 0000000000000000 [ 53.336859][ T3610] FS: 0000555556f64300(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 53.345877][ T3610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.352559][ T3610] CR2: 00000000004571f0 CR3: 0000000070b3d000 CR4: 00000000003506f0 [ 53.360631][ T3610] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.368631][ T3610] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.376871][ T3610] Call Trace: [ 53.380185][ T3610] [ 53.383220][ T3610] folio_batch_move_lru+0xf9/0x500 [ 53.388367][ T3610] ? folio_activate_fn+0x1880/0x1880 [ 53.393765][ T3610] ? lock_release+0x780/0x780 [ 53.398499][ T3610] ? release_pages+0x1810/0x1810 [ 53.403564][ T3610] ? find_get_entries+0x520/0x520 [ 53.408631][ T3610] ? folio_activate_fn+0x1880/0x1880 [ 53.414068][ T3610] folio_batch_add_and_move+0xd4/0x130 [ 53.419568][ T3610] deactivate_file_folio+0x222/0x580 [ 53.424950][ T3610] invalidate_mapping_pagevec+0x38d/0x5c0 [ 53.430754][ T3610] ? invalidate_inode_page+0x160/0x160 [ 53.436237][ T3610] ? find_held_lock+0x2d/0x110 [ 53.441075][ T3610] ? drop_pagecache_sb+0xac/0x2a0 [ 53.446150][ T3610] ? lock_downgrade+0x6e0/0x6e0 [ 53.451109][ T3610] ? do_raw_spin_lock+0x120/0x2a0 [ 53.456174][ T3610] ? rwlock_bug.part.0+0x90/0x90 [ 53.461230][ T3610] drop_pagecache_sb+0xcf/0x2a0 [ 53.466116][ T3610] iterate_supers+0x13c/0x290 [ 53.470910][ T3610] ? validate_coredump_safety+0xa0/0xa0 [ 53.476491][ T3610] drop_caches_sysctl_handler+0xdb/0x110 [ 53.482217][ T3610] proc_sys_call_handler+0x4a1/0x6e0 [ 53.487543][ T3610] ? proc_sys_lookup+0x630/0x630 [ 53.492553][ T3610] ? kasan_save_stack+0x2e/0x40 [ 53.497431][ T3610] ? kasan_save_stack+0x1e/0x40 [ 53.502383][ T3610] ? __kasan_kmalloc+0xa9/0xd0 [ 53.507169][ T3610] ? direct_splice_actor+0x110/0x180 [ 53.512522][ T3610] ? splice_direct_to_actor+0x34b/0x8c0 [ 53.518096][ T3610] ? do_splice_direct+0x1a7/0x270 [ 53.523193][ T3610] ? do_sendfile+0xae0/0x1240 [ 53.527916][ T3610] ? __x64_sys_sendfile64+0x149/0x210 [ 53.533428][ T3610] ? do_syscall_64+0x35/0xb0 [ 53.538059][ T3610] do_iter_readv_writev+0x3d1/0x640 [ 53.543387][ T3610] ? new_sync_write+0x560/0x560 [ 53.548305][ T3610] ? bpf_lsm_file_permission+0x5/0x10 [ 53.553800][ T3610] ? security_file_permission+0xab/0xd0 [ 53.559383][ T3610] do_iter_write+0x182/0x700 [ 53.564063][ T3610] ? rcu_read_lock_sched_held+0x3a/0x70 [ 53.569652][ T3610] vfs_iter_write+0x70/0xa0 [ 53.574270][ T3610] iter_file_splice_write+0x723/0xc70 [ 53.579697][ T3610] ? generic_file_splice_read+0x3e5/0x5d0 [ 53.585509][ T3610] ? page_cache_pipe_buf_confirm+0x5a0/0x5a0 [ 53.591591][ T3610] ? folio_flags.constprop.0+0x150/0x150 [ 53.597259][ T3610] ? security_file_permission+0xab/0xd0 [ 53.602904][ T3610] ? page_cache_pipe_buf_confirm+0x5a0/0x5a0 [ 53.608927][ T3610] direct_splice_actor+0x110/0x180 [ 53.614129][ T3610] splice_direct_to_actor+0x34b/0x8c0 [ 53.619560][ T3610] ? generic_file_splice_read+0x5d0/0x5d0 [ 53.625458][ T3610] ? do_splice_to+0x240/0x240 [ 53.630176][ T3610] ? bpf_lsm_file_permission+0x5/0x10 [ 53.635738][ T3610] ? security_file_permission+0xab/0xd0 [ 53.641343][ T3610] do_splice_direct+0x1a7/0x270 [ 53.646222][ T3610] ? splice_direct_to_actor+0x8c0/0x8c0 [ 53.651905][ T3610] do_sendfile+0xae0/0x1240 [ 53.656452][ T3610] ? vfs_iocb_iter_write+0x480/0x480 [ 53.661827][ T3610] __x64_sys_sendfile64+0x149/0x210 [ 53.667087][ T3610] ? __ia32_sys_sendfile+0x220/0x220 [ 53.672472][ T3610] ? lockdep_hardirqs_on+0x79/0x100 [ 53.677737][ T3610] ? _raw_spin_unlock_irq+0x2a/0x40 [ 53.683048][ T3610] ? ptrace_notify+0xfa/0x140 [ 53.687766][ T3610] do_syscall_64+0x35/0xb0 [ 53.692322][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 53.698241][ T3610] RIP: 0033:0x7f7fdde83d89 [ 53.702770][ T3610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.722467][ T3610] RSP: 002b:00007ffcdbc683c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 53.730955][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7fdde83d89 [ 53.738964][ T3610] RDX: 0000000020002080 RSI: 0000000000000003 RDI: 0000000000000004 [ 53.747011][ T3610] RBP: 0000000000000000 R08: 00007ffcdbc68568 R09: 00007ffcdbc68568 [ 53.755044][ T3610] R10: 0000000000000262 R11: 0000000000000246 R12: 00007f7fdde47610 [ 53.763108][ T3610] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 53.771223][ T3610] [ 53.774273][ T3610] Kernel panic - not syncing: panic_on_warn set ... [ 53.780869][ T3610] CPU: 0 PID: 3610 Comm: syz-executor209 Not tainted 5.19.0-rc3-next-20220622-syzkaller #0 [ 53.790842][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.800894][ T3610] Call Trace: [ 53.804186][ T3610] [ 53.807150][ T3610] dump_stack_lvl+0xcd/0x134 [ 53.811771][ T3610] panic+0x2d7/0x64a [ 53.815686][ T3610] ? panic_print_sys_info.part.0+0x10b/0x10b [ 53.821762][ T3610] ? __warn.cold+0x1d9/0x2cd [ 53.826422][ T3610] ? folio_lruvec_lock_irqsave+0x2fd/0x4f0 [ 53.832367][ T3610] __warn.cold+0x1ea/0x2cd [ 53.836824][ T3610] ? folio_lruvec_lock_irqsave+0x2fd/0x4f0 [ 53.842664][ T3610] report_bug+0x1bc/0x210 [ 53.847062][ T3610] handle_bug+0x3c/0x60 [ 53.851262][ T3610] exc_invalid_op+0x14/0x40 [ 53.855783][ T3610] asm_exc_invalid_op+0x1b/0x20 [ 53.860647][ T3610] RIP: 0010:folio_lruvec_lock_irqsave+0x2fd/0x4f0 [ 53.867098][ T3610] Code: 1f 44 00 00 45 31 e4 80 3d 06 3e da 0b 00 0f 85 01 fe ff ff 48 c7 c6 40 6f da 89 4c 89 f7 e8 0a 44 e2 ff c6 05 ea 3d da 0b 01 <0f> 0b e9 e4 fd ff ff e8 67 be ad 07 85 c0 0f 84 37 fd ff ff 80 3d [ 53.886744][ T3610] RSP: 0018:ffffc90002eff2c8 EFLAGS: 00010293 [ 53.892846][ T3610] RAX: 0000000000000000 RBX: fffff940005ac007 RCX: 0000000000000000 [ 53.900825][ T3610] RDX: ffff888020e3ba80 RSI: ffffffff81ce36a6 RDI: 0000000000000003 [ 53.908803][ T3610] RBP: dffffc0000000000 R08: 0000000000000003 R09: 000000000000ffff [ 53.916781][ T3610] R10: 000000000000ffff R11: 0000000000000001 R12: 0000000000000000 [ 53.924767][ T3610] R13: fffff940005ac000 R14: ffffea0002d60000 R15: 0000000000000000 [ 53.932767][ T3610] ? folio_lruvec_lock_irqsave+0x2f6/0x4f0 [ 53.938600][ T3610] ? folio_lruvec_lock_irqsave+0x2f6/0x4f0 [ 53.944703][ T3610] folio_batch_move_lru+0xf9/0x500 [ 53.950039][ T3610] ? folio_activate_fn+0x1880/0x1880 [ 53.955366][ T3610] ? lock_release+0x780/0x780 [ 53.960059][ T3610] ? release_pages+0x1810/0x1810 [ 53.965366][ T3610] ? find_get_entries+0x520/0x520 [ 53.970418][ T3610] ? folio_activate_fn+0x1880/0x1880 [ 53.975727][ T3610] folio_batch_add_and_move+0xd4/0x130 [ 53.981203][ T3610] deactivate_file_folio+0x222/0x580 [ 53.986518][ T3610] invalidate_mapping_pagevec+0x38d/0x5c0 [ 53.992345][ T3610] ? invalidate_inode_page+0x160/0x160 [ 53.997829][ T3610] ? find_held_lock+0x2d/0x110 [ 54.002615][ T3610] ? drop_pagecache_sb+0xac/0x2a0 [ 54.007663][ T3610] ? lock_downgrade+0x6e0/0x6e0 [ 54.012556][ T3610] ? do_raw_spin_lock+0x120/0x2a0 [ 54.017607][ T3610] ? rwlock_bug.part.0+0x90/0x90 [ 54.022577][ T3610] drop_pagecache_sb+0xcf/0x2a0 [ 54.027465][ T3610] iterate_supers+0x13c/0x290 [ 54.032173][ T3610] ? validate_coredump_safety+0xa0/0xa0 [ 54.037830][ T3610] drop_caches_sysctl_handler+0xdb/0x110 [ 54.043506][ T3610] proc_sys_call_handler+0x4a1/0x6e0 [ 54.048821][ T3610] ? proc_sys_lookup+0x630/0x630 [ 54.053780][ T3610] ? kasan_save_stack+0x2e/0x40 [ 54.058639][ T3610] ? kasan_save_stack+0x1e/0x40 [ 54.063506][ T3610] ? __kasan_kmalloc+0xa9/0xd0 [ 54.068279][ T3610] ? direct_splice_actor+0x110/0x180 [ 54.073587][ T3610] ? splice_direct_to_actor+0x34b/0x8c0 [ 54.079158][ T3610] ? do_splice_direct+0x1a7/0x270 [ 54.084202][ T3610] ? do_sendfile+0xae0/0x1240 [ 54.088891][ T3610] ? __x64_sys_sendfile64+0x149/0x210 [ 54.094275][ T3610] ? do_syscall_64+0x35/0xb0 [ 54.098884][ T3610] do_iter_readv_writev+0x3d1/0x640 [ 54.104116][ T3610] ? new_sync_write+0x560/0x560 [ 54.108979][ T3610] ? bpf_lsm_file_permission+0x5/0x10 [ 54.114371][ T3610] ? security_file_permission+0xab/0xd0 [ 54.119939][ T3610] do_iter_write+0x182/0x700 [ 54.124546][ T3610] ? rcu_read_lock_sched_held+0x3a/0x70 [ 54.130135][ T3610] vfs_iter_write+0x70/0xa0 [ 54.134655][ T3610] iter_file_splice_write+0x723/0xc70 [ 54.140086][ T3610] ? generic_file_splice_read+0x3e5/0x5d0 [ 54.145866][ T3610] ? page_cache_pipe_buf_confirm+0x5a0/0x5a0 [ 54.151881][ T3610] ? folio_flags.constprop.0+0x150/0x150 [ 54.157552][ T3610] ? security_file_permission+0xab/0xd0 [ 54.163127][ T3610] ? page_cache_pipe_buf_confirm+0x5a0/0x5a0 [ 54.169137][ T3610] direct_splice_actor+0x110/0x180 [ 54.174276][ T3610] splice_direct_to_actor+0x34b/0x8c0 [ 54.179673][ T3610] ? generic_file_splice_read+0x5d0/0x5d0 [ 54.185425][ T3610] ? do_splice_to+0x240/0x240 [ 54.190138][ T3610] ? bpf_lsm_file_permission+0x5/0x10 [ 54.195889][ T3610] ? security_file_permission+0xab/0xd0 [ 54.201468][ T3610] do_splice_direct+0x1a7/0x270 [ 54.206358][ T3610] ? splice_direct_to_actor+0x8c0/0x8c0 [ 54.211970][ T3610] do_sendfile+0xae0/0x1240 [ 54.216520][ T3610] ? vfs_iocb_iter_write+0x480/0x480 [ 54.221831][ T3610] __x64_sys_sendfile64+0x149/0x210 [ 54.227064][ T3610] ? __ia32_sys_sendfile+0x220/0x220 [ 54.232359][ T3610] ? lockdep_hardirqs_on+0x79/0x100 [ 54.237580][ T3610] ? _raw_spin_unlock_irq+0x2a/0x40 [ 54.242788][ T3610] ? ptrace_notify+0xfa/0x140 [ 54.247484][ T3610] do_syscall_64+0x35/0xb0 [ 54.251922][ T3610] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 54.257841][ T3610] RIP: 0033:0x7f7fdde83d89 [ 54.262279][ T3610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 54.282006][ T3610] RSP: 002b:00007ffcdbc683c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 54.290437][ T3610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7fdde83d89 [ 54.298417][ T3610] RDX: 0000000020002080 RSI: 0000000000000003 RDI: 0000000000000004 [ 54.306396][ T3610] RBP: 0000000000000000 R08: 00007ffcdbc68568 R09: 00007ffcdbc68568 [ 54.314387][ T3610] R10: 0000000000000262 R11: 0000000000000246 R12: 00007f7fdde47610 [ 54.322364][ T3610] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000 [ 54.330357][ T3610] [ 54.333731][ T3610] Kernel Offset: disabled [ 54.338118][ T3610] Rebooting in 86400 seconds..