./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2666844540
<...>
Warning: Permanently added '10.128.0.147' (ED25519) to the list of known hosts.
execve("./syz-executor2666844540", ["./syz-executor2666844540"], 0x7ffcc2a5cfc0 /* 10 vars */) = 0
brk(NULL) = 0x555555943000
brk(0x555555943d00) = 0x555555943d00
arch_prctl(ARCH_SET_FS, 0x555555943380) = 0
set_tid_address(0x555555943650) = 5039
set_robust_list(0x555555943660, 24) = 0
rseq(0x555555943ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2666844540", 4096) = 28
getrandom("\x72\xa1\x5d\x88\xd1\xee\x17\x50", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555943d00
brk(0x555555964d00) = 0x555555964d00
brk(0x555555965000) = 0x555555965000
mprotect(0x7f2389437000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
madvise(0x20a93000, 16384, MADV_HUGEPAGE) = 0
mremap(0x20a96000, 4096, 8388608, MREMAP_MAYMOVE|MREMAP_FIXED, 0x20130000) = 0x20130000
gettid() = 5039
process_vm_writev(5039, [{iov_base="\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., iov_len=247}], 1, [{iov_base=0x20217f28, iov_len=4294967118}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, {iov_base=NULL, iov_len=0}, ...], 570, 0) = 247
[ 75.208711][ T5039] page:ffffea0001c88000 refcount:512 mapcount:2 mapping:0000000000000000 index:0x20200 pfn:0x72200
[ 75.219895][ T5039] head:ffffea0001c88000 order:9 entire_mapcount:1 nr_pages_mapped:1 pincount:0
[ 75.228872][ T5039] memcg:ffff88814066a000
[ 75.233118][ T5039] anon flags: 0xfff800000a0078(uptodate|dirty|lru|head|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[ 75.244890][ T5039] page_type: 0x0()
[ 75.248630][ T5039] raw: 00fff800000a0078 ffffea0001cc4d88 ffffea0001c70008 ffff88802a611771
[ 75.257199][ T5039] raw: 0000000000020200 0000000000000000 0000020000000000 ffff88814066a000
[ 75.265787][ T5039] page dumped because: VM_WARN_ON_FOLIO(page_mapcount(page) > 1 && PageAnonExclusive(page))
[ 75.275857][ T5039] page_owner tracks the page as allocated
[ 75.281587][ T5039] page last allocated via order 9, migratetype Movable, gfp_mask 0x3d24ca(GFP_TRANSHUGE|__GFP_NORETRY|__GFP_THISNODE), pid 5039, tgid 5039 (syz-executor266), ts 75206209041, free_ts 22129700405
[ 75.300549][ T5039] post_alloc_hook+0x2cf/0x340
[ 75.305302][ T5039] get_page_from_freelist+0xdcd/0x2d10
[ 75.310884][ T5039] __alloc_pages+0x1d0/0x4a0
[ 75.315504][ T5039] __folio_alloc+0x16/0x40
[ 75.319995][ T5039] vma_alloc_folio+0x63f/0x890
[ 75.324797][ T5039] do_huge_pmd_anonymous_page+0x243/0x2160
[ 75.330624][ T5039] __handle_mm_fault+0x2363/0x3da0
[ 75.335743][ T5039] handle_mm_fault+0x478/0xa00
[ 75.340537][ T5039] __get_user_pages+0x4b2/0x1480
[ 75.345495][ T5039] __gup_longterm_locked+0x755/0x2570
[ 75.350906][ T5039] pin_user_pages_remote+0xee/0x140
[ 75.356115][ T5039] process_vm_rw_core.constprop.0+0x43d/0xa10
[ 75.362326][ T5039] process_vm_rw+0x2ff/0x360
[ 75.366935][ T5039] __x64_sys_process_vm_writev+0xe2/0x1b0
[ 75.372678][ T5039] do_syscall_64+0x38/0xb0
[ 75.377103][ T5039] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 75.383013][ T5039] page last free stack trace:
[ 75.387683][ T5039] free_unref_page+0x554/0xd70
[ 75.392461][ T5039] free_contig_range+0xb6/0x190
[ 75.397314][ T5039] destroy_args+0x768/0x990
[ 75.401859][ T5039] debug_vm_pgtable+0x1d79/0x3df0
[ 75.406894][ T5039] do_one_initcall+0x117/0x630
[ 75.411680][ T5039] kernel_init_freeable+0x5c2/0x8f0
[ 75.416884][ T5039] kernel_init+0x1c/0x2a0
[ 75.421233][ T5039] ret_from_fork+0x45/0x80
[ 75.425666][ T5039] ret_from_fork_asm+0x11/0x20
[ 75.430565][ T5039] ------------[ cut here ]------------
[ 75.436014][ T5039] WARNING: CPU: 0 PID: 5039 at mm/rmap.c:1252 page_add_anon_rmap+0xc33/0x1a70
[ 75.444935][ T5039] Modules linked in:
[ 75.448857][ T5039] CPU: 0 PID: 5039 Comm: syz-executor266 Not tainted 6.6.0-rc1-next-20230914-syzkaller #0
[ 75.458776][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 75.468857][ T5039] RIP: 0010:page_add_anon_rmap+0xc33/0x1a70
[ 75.474780][ T5039] Code: 48 c1 eb 11 83 e3 01 89 de e8 79 d4 b8 ff 84 db 0f 84 36 fb ff ff e8 3c d9 b8 ff 48 c7 c6 80 83 99 8a 4c 89 e7 e8 dd 02 f7 ff <0f> 0b e9 1b fb ff ff e8 21 d9 b8 ff 49 89 dd 31 ff 41 81 e5 ff 0f
[ 75.494427][ T5039] RSP: 0018:ffffc90003ccf900 EFLAGS: 00010293
[ 75.500520][ T5039] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 75.508508][ T5039] RDX: ffff88801c4a5940 RSI: ffffffff81cf16a3 RDI: 0000000000000000
[ 75.516480][ T5039] RBP: ffff888072c4fb00 R08: 0000000000000000 R09: fffffbfff1d9c7b2
[ 75.524464][ T5039] R10: ffffffff8ece3d97 R11: 0000000000000001 R12: ffffea0001c88000
[ 75.532455][ T5039] R13: 00fff800000a0078 R14: 0000000000000000 R15: ffffea0001cc4d88
[ 75.540436][ T5039] FS: 0000555555943380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 75.549392][ T5039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 75.555961][ T5039] CR2: 0000000020123008 CR3: 000000001c4d7000 CR4: 00000000003506f0
[ 75.563961][ T5039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 75.571996][ T5039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 75.580011][ T5039] Call Trace:
[ 75.583294][ T5039]
[ 75.586230][ T5039] ? show_regs+0x8f/0xa0
[ 75.590505][ T5039] ? __warn+0xe6/0x380
[ 75.594587][ T5039] ? page_add_anon_rmap+0xc33/0x1a70
[ 75.599947][ T5039] ? report_bug+0x3bc/0x580
[ 75.604499][ T5039] ? handle_bug+0x3c/0x70
[ 75.608865][ T5039] ? exc_invalid_op+0x17/0x40
[ 75.613570][ T5039] ? asm_exc_invalid_op+0x1a/0x20
[ 75.618623][ T5039] ? page_add_anon_rmap+0xc33/0x1a70
[ 75.623933][ T5039] ? page_add_anon_rmap+0xc33/0x1a70
[ 75.629252][ T5039] __split_huge_pmd+0x17d5/0x31e0
[ 75.634289][ T5039] ? __split_huge_pud+0x4d0/0x4d0
[ 75.639333][ T5039] ? lock_release+0x4bf/0x680
[ 75.644024][ T5039] ? anon_vma_interval_tree_remove+0xbdc/0xfd0
[ 75.650204][ T5039] ? down_write+0x14f/0x200
[ 75.654711][ T5039] vma_adjust_trans_huge+0x2da/0x560
[ 75.660017][ T5039] __split_vma+0xba3/0x1070
[ 75.664546][ T5039] ? generic_get_unmapped_area_topdown+0x690/0x690
[ 75.671083][ T5039] ? vma_shrink+0xb90/0xb90
[ 75.675615][ T5039] ? mas_next_slot+0xd0a/0x1d40
[ 75.680483][ T5039] split_vma+0xc8/0x110
[ 75.684654][ T5039] mlock_fixup+0x9b7/0x1290
[ 75.689204][ T5039] ? mas_find+0xec/0x320
[ 75.693458][ T5039] apply_vma_lock_flags+0x250/0x370
[ 75.698694][ T5039] ? mlock_fixup+0x1290/0x1290
[ 75.703483][ T5039] ? down_write_killable_nested+0x250/0x250
[ 75.709397][ T5039] ? ptrace_stop.part.0+0x61a/0x900
[ 75.714583][ T5039] do_mlock+0x263/0x820
[ 75.718755][ T5039] ? reacquire_held_locks+0x4b0/0x4b0
[ 75.724141][ T5039] ? apply_vma_lock_flags+0x370/0x370
[ 75.729540][ T5039] ? rcu_is_watching+0x12/0xb0
[ 75.734309][ T5039] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 75.740308][ T5039] ? _raw_spin_unlock_irq+0x2e/0x50
[ 75.745517][ T5039] __x64_sys_mlock+0x59/0x80
[ 75.750145][ T5039] do_syscall_64+0x38/0xb0
[ 75.754576][ T5039] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 75.760490][ T5039] RIP: 0033:0x7f23893c4329
[ 75.764911][ T5039] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 75.784539][ T5039] RSP: 002b:00007ffc63bf5018 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 75.793002][ T5039] RAX: ffffffffffffffda RBX: 00007ffc63bf51f8 RCX: 00007f23893c4329
[ 75.800989][ T5039] RDX: 00007f23893c4329 RSI: 0000000000001000 RDI: 00000000202cf000
[ 75.808997][ T5039] RBP: 00007f2389437610 R08: 0000000000000000 R09: 0000000000000000
[ 75.816967][ T5039] R10: 000000000000023a R11: 0000000000000246 R12: 0000000000000001
[ 75.824950][ T5039] R13: 00007ffc63bf51e8 R14: 0000000000000001 R15: 0000000000000001
[ 75.832950][ T5039]
[ 75.835978][ T5039] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 75.843249][ T5039] CPU: 0 PID: 5039 Comm: syz-executor266 Not tainted 6.6.0-rc1-next-20230914-syzkaller #0
[ 75.853121][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 75.863156][ T5039] Call Trace:
[ 75.866417][ T5039]
[ 75.869339][ T5039] dump_stack_lvl+0xd9/0x1b0
[ 75.873920][ T5039] panic+0x6dc/0x790
[ 75.877804][ T5039] ? panic_smp_self_stop+0xa0/0xa0
[ 75.882905][ T5039] ? show_trace_log_lvl+0x363/0x4f0
[ 75.888103][ T5039] ? page_add_anon_rmap+0xc33/0x1a70
[ 75.893388][ T5039] check_panic_on_warn+0xab/0xb0
[ 75.898331][ T5039] __warn+0xf2/0x380
[ 75.902231][ T5039] ? page_add_anon_rmap+0xc33/0x1a70
[ 75.907523][ T5039] report_bug+0x3bc/0x580
[ 75.911852][ T5039] handle_bug+0x3c/0x70
[ 75.916009][ T5039] exc_invalid_op+0x17/0x40
[ 75.920506][ T5039] asm_exc_invalid_op+0x1a/0x20
[ 75.925345][ T5039] RIP: 0010:page_add_anon_rmap+0xc33/0x1a70
[ 75.931228][ T5039] Code: 48 c1 eb 11 83 e3 01 89 de e8 79 d4 b8 ff 84 db 0f 84 36 fb ff ff e8 3c d9 b8 ff 48 c7 c6 80 83 99 8a 4c 89 e7 e8 dd 02 f7 ff <0f> 0b e9 1b fb ff ff e8 21 d9 b8 ff 49 89 dd 31 ff 41 81 e5 ff 0f
[ 75.950825][ T5039] RSP: 0018:ffffc90003ccf900 EFLAGS: 00010293
[ 75.956889][ T5039] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 75.964857][ T5039] RDX: ffff88801c4a5940 RSI: ffffffff81cf16a3 RDI: 0000000000000000
[ 75.972822][ T5039] RBP: ffff888072c4fb00 R08: 0000000000000000 R09: fffffbfff1d9c7b2
[ 75.980789][ T5039] R10: ffffffff8ece3d97 R11: 0000000000000001 R12: ffffea0001c88000
[ 75.988751][ T5039] R13: 00fff800000a0078 R14: 0000000000000000 R15: ffffea0001cc4d88
[ 75.996720][ T5039] ? page_add_anon_rmap+0xc33/0x1a70
[ 76.002014][ T5039] __split_huge_pmd+0x17d5/0x31e0
[ 76.007048][ T5039] ? __split_huge_pud+0x4d0/0x4d0
[ 76.012071][ T5039] ? lock_release+0x4bf/0x680
[ 76.016754][ T5039] ? anon_vma_interval_tree_remove+0xbdc/0xfd0
[ 76.022907][ T5039] ? down_write+0x14f/0x200
[ 76.027409][ T5039] vma_adjust_trans_huge+0x2da/0x560
[ 76.032694][ T5039] __split_vma+0xba3/0x1070
[ 76.037200][ T5039] ? generic_get_unmapped_area_topdown+0x690/0x690
[ 76.043705][ T5039] ? vma_shrink+0xb90/0xb90
[ 76.048225][ T5039] ? mas_next_slot+0xd0a/0x1d40
[ 76.053073][ T5039] split_vma+0xc8/0x110
[ 76.057231][ T5039] mlock_fixup+0x9b7/0x1290
[ 76.061732][ T5039] ? mas_find+0xec/0x320
[ 76.065973][ T5039] apply_vma_lock_flags+0x250/0x370
[ 76.071172][ T5039] ? mlock_fixup+0x1290/0x1290
[ 76.075942][ T5039] ? down_write_killable_nested+0x250/0x250
[ 76.081833][ T5039] ? ptrace_stop.part.0+0x61a/0x900
[ 76.087030][ T5039] do_mlock+0x263/0x820
[ 76.091182][ T5039] ? reacquire_held_locks+0x4b0/0x4b0
[ 76.096555][ T5039] ? apply_vma_lock_flags+0x370/0x370
[ 76.101935][ T5039] ? rcu_is_watching+0x12/0xb0
[ 76.106694][ T5039] ? trace_irq_enable.constprop.0+0xd0/0x100
[ 76.112673][ T5039] ? _raw_spin_unlock_irq+0x2e/0x50
[ 76.117875][ T5039] __x64_sys_mlock+0x59/0x80
[ 76.122487][ T5039] do_syscall_64+0x38/0xb0
[ 76.126968][ T5039] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 76.132864][ T5039] RIP: 0033:0x7f23893c4329
[ 76.137270][ T5039] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 76.156872][ T5039] RSP: 002b:00007ffc63bf5018 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 76.165280][ T5039] RAX: ffffffffffffffda RBX: 00007ffc63bf51f8 RCX: 00007f23893c4329
[ 76.173243][ T5039] RDX: 00007f23893c4329 RSI: 0000000000001000 RDI: 00000000202cf000
[ 76.181207][ T5039] RBP: 00007f2389437610 R08: 0000000000000000 R09: 0000000000000000
[ 76.189169][ T5039] R10: 000000000000023a R11: 0000000000000246 R12: 0000000000000001
[ 76.197133][ T5039] R13: 00007ffc63bf51e8 R14: 0000000000000001 R15: 0000000000000001
[ 76.205103][ T5039]
[ 76.208225][ T5039] Kernel Offset: disabled
[ 76.212553][ T5039] Rebooting in 86400 seconds..