./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor603943356
<...>
Warning: Permanently added '10.128.1.124' (ECDSA) to the list of known hosts.
execve("./syz-executor603943356", ["./syz-executor603943356"], 0x7fffea131dc0 /* 10 vars */) = 0
brk(NULL) = 0x555556ad2000
brk(0x555556ad2c40) = 0x555556ad2c40
arch_prctl(ARCH_SET_FS, 0x555556ad2300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor603943356", 4096) = 27
brk(0x555556af3c40) = 0x555556af3c40
brk(0x555556af4000) = 0x555556af4000
mprotect(0x7f5f427cd000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("\xff", MFD_HUGETLB) = 3
mmap(0x20000000, 8192, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_NORESERVE|MAP_POPULATE|MAP_EXECUTABLE|MAP_HUGETLB|0x80, 3, 0) = 0x20000000
io_uring_setup(16381, 0x20000080) = 4
mmap(0x20ffe000, 590144, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0) = 0x20ffe000
mmap(0x20ffc000, 1048576, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE, 4, 0x10000000) = 0x20ffc000
syzkaller login: [ 50.619188][ T3611] ------------[ cut here ]------------
[ 50.619198][ T3611] WARNING: CPU: 1 PID: 3611 at mm/hugetlb.c:6250 follow_hugetlb_page+0x1326/0x1c80
[ 50.634347][ T3611] Modules linked in:
[ 50.638332][ T3611] CPU: 1 PID: 3611 Comm: syz-executor603 Not tainted 5.18.0-rc6-next-20220513-syzkaller #0
[ 50.648372][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 50.658523][ T3611] RIP: 0010:follow_hugetlb_page+0x1326/0x1c80
[ 50.664624][ T3611] Code: 89 44 24 70 e8 2b 1d b7 ff 48 8b 44 24 70 48 85 c0 0f 84 f1 07 00 00 e8 88 1a b7 ff 48 83 ed 01 e9 09 fb ff ff e8 7a 1a b7 ff <0f> 0b 48 8b 7c 24 30 bb f4 ff ff ff e8 69 74 b8 07 4c 8b a4 24 b8
[ 50.684298][ T3611] RSP: 0018:ffffc90002f6f7e0 EFLAGS: 00010293
[ 50.690451][ T3611] RAX: 0000000000000000 RBX: ffff88801bdd4e00 RCX: 0000000000000000
[ 50.698540][ T3611] RDX: ffff88801e4e3a80 RSI: ffffffff81c38f76 RDI: 0000000000000003
[ 50.706607][ T3611] RBP: ffffea0001fe8680 R08: 0000000000000000 R09: 0000000000000003
[ 50.714587][ T3611] R10: ffffffff81b128fb R11: 0000000000000008 R12: 000000000000001a
[ 50.722634][ T3611] R13: ffff88801bdd4e00 R14: ffff88801bdd5600 R15: 0000000000000019
[ 50.730686][ T3611] FS: 0000555556ad2300(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[ 50.739686][ T3611] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 50.746345][ T3611] CR2: 0000000020000458 CR3: 000000001e850000 CR4: 00000000003506e0
[ 50.754324][ T3611] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 50.762348][ T3611] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 50.770414][ T3611] Call Trace:
[ 50.773704][ T3611]
[ 50.776717][ T3611] __get_user_pages+0x27a/0xfa0
[ 50.781615][ T3611] ? follow_page_mask+0x1530/0x1530
[ 50.786905][ T3611] ? kasan_save_stack+0x2e/0x40
[ 50.791788][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 50.797835][ T3611] ? io_sqe_buffer_register+0x1c5/0x1710
[ 50.803496][ T3611] ? io_sqe_buffers_register.cold+0x28e/0x443
[ 50.809646][ T3611] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.815745][ T3611] __gup_longterm_locked+0x1d5/0xfe0
[ 50.821115][ T3611] ? pin_user_pages_unlocked+0x90/0x90
[ 50.826670][ T3611] ? down_read+0x198/0x440
[ 50.831094][ T3611] ? rwsem_down_read_slowpath+0xb00/0xb00
[ 50.836881][ T3611] pin_user_pages+0x8e/0xe0
[ 50.841406][ T3611] io_sqe_buffer_register+0x254/0x1710
[ 50.846945][ T3611] ? io_cancel_cb+0x270/0x270
[ 50.851641][ T3611] ? rcu_read_lock_sched_held+0x3a/0x70
[ 50.857255][ T3611] ? trace_kmalloc+0x32/0xf0
[ 50.861872][ T3611] io_sqe_buffers_register.cold+0x28e/0x443
[ 50.867837][ T3611] ? io_register_rsrc_update+0x970/0x970
[ 50.873498][ T3611] ? do_raw_spin_lock+0x120/0x2a0
[ 50.878585][ T3611] ? rwlock_bug.part.0+0x90/0x90
[ 50.883533][ T3611] ? _raw_spin_lock_irq+0x41/0x50
[ 50.888632][ T3611] __do_sys_io_uring_register+0xd21/0x1930
[ 50.894473][ T3611] ? ptrace_notify+0xfa/0x140
[ 50.899208][ T3611] ? io_sqe_files_register+0x230/0x230
[ 50.904696][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 50.909978][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 50.915198][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40
[ 50.920491][ T3611] ? ptrace_notify+0xfa/0x140
[ 50.925199][ T3611] do_syscall_64+0x35/0xb0
[ 50.929697][ T3611] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 50.935607][ T3611] RIP: 0033:0x7f5f42760cc9
[ 50.940081][ T3611] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.959765][ T3611] RSP: 002b:00007fffc3407aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 50.968242][ T3611] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5f42760cc9
[ 50.976292][ T3611] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000004
[ 50.984267][ T3611] RBP: 00007f5f42724e70 R08: 0000000010000000 R09: 0000000000000000
[ 50.992288][ T3611] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f5f42724f00
[ 51.000333][ T3611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 51.008384][ T3611]
[ 51.011408][ T3611] Kernel panic - not syncing: panic_on_warn set ...
[ 51.017989][ T3611] CPU: 1 PID: 3611 Comm: syz-executor603 Not tainted 5.18.0-rc6-next-20220513-syzkaller #0
[ 51.027949][ T3611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 51.037998][ T3611] Call Trace:
[ 51.041265][ T3611]
[ 51.044182][ T3611] dump_stack_lvl+0xcd/0x134
[ 51.048765][ T3611] panic+0x2d7/0x636
[ 51.052653][ T3611] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 51.058628][ T3611] ? __warn.cold+0x1d9/0x2cd
[ 51.063207][ T3611] ? follow_hugetlb_page+0x1326/0x1c80
[ 51.068668][ T3611] __warn.cold+0x1ea/0x2cd
[ 51.073091][ T3611] ? follow_hugetlb_page+0x1326/0x1c80
[ 51.078560][ T3611] report_bug+0x1bd/0x210
[ 51.082904][ T3611] handle_bug+0x3c/0x60
[ 51.087075][ T3611] exc_invalid_op+0x14/0x40
[ 51.091587][ T3611] asm_exc_invalid_op+0x1b/0x20
[ 51.096442][ T3611] RIP: 0010:follow_hugetlb_page+0x1326/0x1c80
[ 51.102520][ T3611] Code: 89 44 24 70 e8 2b 1d b7 ff 48 8b 44 24 70 48 85 c0 0f 84 f1 07 00 00 e8 88 1a b7 ff 48 83 ed 01 e9 09 fb ff ff e8 7a 1a b7 ff <0f> 0b 48 8b 7c 24 30 bb f4 ff ff ff e8 69 74 b8 07 4c 8b a4 24 b8
[ 51.122127][ T3611] RSP: 0018:ffffc90002f6f7e0 EFLAGS: 00010293
[ 51.128196][ T3611] RAX: 0000000000000000 RBX: ffff88801bdd4e00 RCX: 0000000000000000
[ 51.136168][ T3611] RDX: ffff88801e4e3a80 RSI: ffffffff81c38f76 RDI: 0000000000000003
[ 51.144139][ T3611] RBP: ffffea0001fe8680 R08: 0000000000000000 R09: 0000000000000003
[ 51.152109][ T3611] R10: ffffffff81b128fb R11: 0000000000000008 R12: 000000000000001a
[ 51.160081][ T3611] R13: ffff88801bdd4e00 R14: ffff88801bdd5600 R15: 0000000000000019
[ 51.168055][ T3611] ? try_grab_folio+0x88b/0xb50
[ 51.172916][ T3611] ? follow_hugetlb_page+0x1326/0x1c80
[ 51.178407][ T3611] __get_user_pages+0x27a/0xfa0
[ 51.183274][ T3611] ? follow_page_mask+0x1530/0x1530
[ 51.188490][ T3611] ? kasan_save_stack+0x2e/0x40
[ 51.193367][ T3611] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 51.199374][ T3611] ? io_sqe_buffer_register+0x1c5/0x1710
[ 51.205026][ T3611] ? io_sqe_buffers_register.cold+0x28e/0x443
[ 51.211115][ T3611] ? entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 51.217201][ T3611] __gup_longterm_locked+0x1d5/0xfe0
[ 51.222515][ T3611] ? pin_user_pages_unlocked+0x90/0x90
[ 51.227991][ T3611] ? down_read+0x198/0x440
[ 51.232425][ T3611] ? rwsem_down_read_slowpath+0xb00/0xb00
[ 51.238161][ T3611] pin_user_pages+0x8e/0xe0
[ 51.242673][ T3611] io_sqe_buffer_register+0x254/0x1710
[ 51.248151][ T3611] ? io_cancel_cb+0x270/0x270
[ 51.252833][ T3611] ? rcu_read_lock_sched_held+0x3a/0x70
[ 51.258390][ T3611] ? trace_kmalloc+0x32/0xf0
[ 51.263002][ T3611] io_sqe_buffers_register.cold+0x28e/0x443
[ 51.268913][ T3611] ? io_register_rsrc_update+0x970/0x970
[ 51.274560][ T3611] ? do_raw_spin_lock+0x120/0x2a0
[ 51.279588][ T3611] ? rwlock_bug.part.0+0x90/0x90
[ 51.284526][ T3611] ? _raw_spin_lock_irq+0x41/0x50
[ 51.289561][ T3611] __do_sys_io_uring_register+0xd21/0x1930
[ 51.295394][ T3611] ? ptrace_notify+0xfa/0x140
[ 51.300079][ T3611] ? io_sqe_files_register+0x230/0x230
[ 51.305558][ T3611] ? _raw_spin_unlock_irq+0x1f/0x40
[ 51.310761][ T3611] ? lockdep_hardirqs_on+0x79/0x100
[ 51.315961][ T3611] ? _raw_spin_unlock_irq+0x2a/0x40
[ 51.321164][ T3611] ? ptrace_notify+0xfa/0x140
[ 51.325849][ T3611] do_syscall_64+0x35/0xb0
[ 51.330275][ T3611] entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 51.336179][ T3611] RIP: 0033:0x7f5f42760cc9
[ 51.340593][ T3611] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 51.360200][ T3611] RSP: 002b:00007fffc3407aa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[ 51.368615][ T3611] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f5f42760cc9
[ 51.376586][ T3611] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000004
[ 51.384554][ T3611] RBP: 00007f5f42724e70 R08: 0000000010000000 R09: 0000000000000000
[ 51.392525][ T3611] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f5f42724f00
[ 51.400494][ T3611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 51.408481][ T3611]
[ 51.411778][ T3611] Kernel Offset: disabled
[ 51.416142][ T3611] Rebooting in 86400 seconds..