next ffff888098173880 prev ffff888098173ca0 mm ffff8880a30fa640 prot 25 anon_vma (null) vm_ops ffffffff8790a960 pgoff 0 file ffff8880b4f8f5c0 private_data (null) flags: 0x20fe(write|exec|shared|mayread|maywrite|mayexec|mayshare|locked) ------------[ cut here ]------------ kernel BUG at mm/memory.c:4011! invalid opcode: 0000 [#1] PREEMPT SMP KASAN Modules linked in: CPU: 1 PID: 7984 Comm: syz-executor428 Not tainted 4.14.282-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 task: ffff888097b803c0 task.stack: ffff8880b3670000 RIP: 0010:wp_huge_pmd mm/memory.c:4011 [inline] RIP: 0010:__handle_mm_fault+0x259a/0x4620 mm/memory.c:4219 RSP: 0018:ffff8880b3677860 EFLAGS: 00010287 RAX: 0000000000000140 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff878bc600 RDI: ffffed10166ceeeb RBP: 1ffff110166cef12 R08: 0000000000000140 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 000000008b8000e5 R13: ffff8880b35a5460 R14: 00000000000000e5 R15: ffffffff88cca358 FS: 00007fbb7cf57700(0000) GS:ffff8880ba500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000100 CR3: 0000000099b75000 CR4: 00000000003406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: handle_mm_fault+0x455/0x9c0 mm/memory.c:4266 __do_page_fault+0x549/0xad0 arch/x86/mm/fault.c:1442 page_fault+0x25/0x50 arch/x86/entry/entry_64.S:1123 RIP: 0010:ep_send_events_proc+0x4e6/0x9c0 fs/eventpoll.c:1684 RSP: 0018:ffff8880b3677b40 EFLAGS: 00050246 RAX: 0000000000000004 RBX: ffff8880b43f1318 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000001 RBP: dffffc0000000000 R08: ffffffff8b9c4a00 R09: 0000000000000001 R10: 0000000000000000 R11: ffff888097b803c0 R12: ffff8880b3677c58 R13: ffff8880b43f1320 R14: ffff8880b43f1370 R15: ffff8880b43f1368 ep_scan_ready_list+0x1c6/0x7e0 fs/eventpoll.c:711 ep_send_events fs/eventpoll.c:1723 [inline] ep_poll+0x234/0xa50 fs/eventpoll.c:1848 SYSC_epoll_wait fs/eventpoll.c:2195 [inline] SyS_epoll_wait+0x150/0x1a0 fs/eventpoll.c:2160 SYSC_epoll_pwait fs/eventpoll.c:2226 [inline] SyS_epoll_pwait+0x1e9/0x230 fs/eventpoll.c:2206 do_syscall_64+0x1d5/0x640 arch/x86/entry/common.c:292 entry_SYSCALL_64_after_hwframe+0x46/0xbb RIP: 0033:0x7fbb7cfcaf89 RSP: 002b:00007fbb7cf57268 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 RAX: ffffffffffffffda RBX: 00007fbb7d04f430 RCX: 00007fbb7cfcaf89 RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000008 RBP: 00007fbb7d01c190 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000fffeffff R11: 0000000000000246 R12: 776c613d65677568 R13: 00007ffdc6e2738f R14: 65725f7261656c63 R15: 00007fbb7d04f438 Code: 9d ec f6 ff e9 de e9 ff ff e8 e3 af df ff 4c 89 ef e8 5b 40 02 00 45 31 f6 e9 88 f5 ff ff e8 ce af df ff 4c 89 ef e8 85 0a 8e 05 <0f> 0b e8 bf af df ff 49 8d bc 24 88 00 00 00 48 b8 00 00 00 00 RIP: wp_huge_pmd mm/memory.c:4011 [inline] RSP: ffff8880b3677860 RIP: __handle_mm_fault+0x259a/0x4620 mm/memory.c:4219 RSP: ffff8880b3677860 ---[ end trace 11136dc1b37c4477 ]---