./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3299694388 <...> Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. execve("./syz-executor3299694388", ["./syz-executor3299694388"], 0x7ffcbeb34490 /* 10 vars */) = 0 brk(NULL) = 0x555557543000 brk(0x555557543d00) = 0x555557543d00 arch_prctl(ARCH_SET_FS, 0x555557543380) = 0 set_tid_address(0x555557543650) = 5053 set_robust_list(0x555557543660, 24) = 0 rseq(0x555557543ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3299694388", 4096) = 28 getrandom("\x56\xad\xb1\x56\xdd\x1b\x0b\xfb", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557543d00 brk(0x555557564d00) = 0x555557564d00 brk(0x555557565000) = 0x555557565000 mprotect(0x7fcd719a3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555557543650) = 5054 ./strace-static-x86_64: Process 5054 attached [pid 5054] set_robust_list(0x555557543660, 24) = 0 [pid 5054] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5054] setpgid(0, 0) = 0 [pid 5054] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5054] write(3, "1000", 4) = 4 [pid 5054] close(3) = 0 [pid 5054] mmap(0x20000000, 11403264, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS|MAP_NORESERVE|MAP_POPULATE|MAP_EXECUTABLE|MAP_HUGETLB, -1, 0) = 0x20000000 [ 76.148239][ T5054] ------------[ cut here ]------------ [ 76.153987][ T5054] WARNING: CPU: 0 PID: 5054 at include/linux/hugetlb.h:1289 copy_hugetlb_page_range+0x675/0x3520 [ 76.164881][ T5054] Modules linked in: [ 76.168915][ T5054] CPU: 0 PID: 5054 Comm: syz-executor329 Not tainted 6.6.0-rc4-next-20231003-syzkaller #0 [ 76.178868][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 76.188981][ T5054] RIP: 0010:copy_hugetlb_page_range+0x675/0x3520 [ 76.195355][ T5054] Code: 00 be ff ff ff ff 48 81 c7 a0 01 00 00 e8 b3 2f 6c 08 31 ff 89 c5 89 c6 e8 68 77 ae ff 85 ed 0f 85 dd fd ff ff e8 eb 7b ae ff <0f> 0b e9 d1 fd ff ff e8 df 7b ae ff 49 89 ec 31 ff 41 81 e4 ff 0f [ 76.215483][ T5054] RSP: 0018:ffffc90003a2f4a0 EFLAGS: 00010293 [ 76.221618][ T5054] RAX: 0000000000000000 RBX: 0000000020000000 RCX: ffffffff81d9dcf8 [ 76.229648][ T5054] RDX: ffff8880675d0000 RSI: ffffffff81d9dd05 RDI: 0000000000000005 [ 76.237715][ T5054] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 76.245687][ T5054] R10: 0000000000000000 R11: ffffffff910df9a8 R12: ffff88807905b900 [ 76.253762][ T5054] R13: ffff88801efab500 R14: 0000000020000000 R15: dffffc0000000000 [ 76.261789][ T5054] FS: 0000555557543380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 76.270771][ T5054] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.277422][ T5054] CR2: 00007fcd71918140 CR3: 000000007b828000 CR4: 00000000003506f0 [ 76.285394][ T5054] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 76.293517][ T5054] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 76.301597][ T5054] Call Trace: [ 76.304893][ T5054] [ 76.307866][ T5054] ? show_regs+0x8f/0xa0 [ 76.312147][ T5054] ? __warn+0xe6/0x380 [ 76.316451][ T5054] ? copy_hugetlb_page_range+0x675/0x3520 [ 76.322298][ T5054] ? report_bug+0x3bc/0x580 [ 76.326879][ T5054] ? handle_bug+0x3c/0x70 [ 76.331236][ T5054] ? exc_invalid_op+0x17/0x40 [ 76.335916][ T5054] ? asm_exc_invalid_op+0x1a/0x20 [ 76.341018][ T5054] ? copy_hugetlb_page_range+0x668/0x3520 [ 76.346809][ T5054] ? copy_hugetlb_page_range+0x675/0x3520 [ 76.352578][ T5054] ? copy_hugetlb_page_range+0x675/0x3520 [ 76.358407][ T5054] ? filter_irq_stacks+0x90/0x90 [ 76.363388][ T5054] ? huge_pte_alloc+0x4b0/0x4b0 [ 76.368306][ T5054] ? save_trace+0x4e/0xb30 [ 76.372751][ T5054] ? _find_first_zero_bit+0x94/0xb0 [ 76.378010][ T5054] ? add_lock_to_list+0x17d/0x380 [ 76.383070][ T5054] copy_page_range+0x1dc2/0x3c70 [ 76.388084][ T5054] ? rcu_is_watching+0x12/0xb0 [ 76.392883][ T5054] ? trace_ma_write+0x173/0x1b0 [ 76.397796][ T5054] ? mas_wr_append+0x112/0xb10 [ 76.402589][ T5054] ? mas_wr_store_entry.isra.0+0x4eb/0xe40 [ 76.408478][ T5054] ? vm_iomap_memory+0x170/0x170 [ 76.413458][ T5054] ? mas_store+0x2ca/0x400 [ 76.419504][ T5054] ? mas_store_prealloc+0x270/0x270 [ 76.424750][ T5054] ? down_write+0x14f/0x200 [ 76.429321][ T5054] ? up_write+0x1b3/0x510 [ 76.433856][ T5054] dup_mmap+0x13f3/0x1d80 [ 76.438337][ T5054] ? replace_mm_exe_file+0x680/0x680 [ 76.443664][ T5054] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 76.449543][ T5054] ? mm_init+0xb51/0xf90 [ 76.453813][ T5054] copy_process+0x6cc9/0x74b0 [ 76.458570][ T5054] ? pidfd_prepare+0x80/0x80 [ 76.463182][ T5054] ? preempt_count_sub+0x150/0x150 [ 76.468381][ T5054] ? __might_fault+0xe6/0x1a0 [ 76.473184][ T5054] ? _copy_from_user+0x5d/0xf0 [ 76.478123][ T5054] kernel_clone+0xfd/0x920 [ 76.482565][ T5054] ? lock_acquire+0x1ae/0x510 [ 76.487296][ T5054] ? create_io_thread+0xe0/0xe0 [ 76.492172][ T5054] ? do_raw_spin_lock+0x12e/0x2b0 [ 76.497248][ T5054] ? spin_bug+0x1d0/0x1d0 [ 76.501597][ T5054] ? cgroup_update_frozen+0x144/0x6b0 [ 76.507022][ T5054] __do_sys_clone3+0x1f1/0x260 [ 76.511805][ T5054] ? __do_sys_clone+0x100/0x100 [ 76.516750][ T5054] ? reacquire_held_locks+0x4b0/0x4b0 [ 76.522158][ T5054] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.527407][ T5054] ? ptrace_notify+0xf4/0x130 [ 76.532104][ T5054] do_syscall_64+0x38/0xb0 [ 76.536589][ T5054] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.542521][ T5054] RIP: 0033:0x7fcd71930ab9 [ 76.547065][ T5054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 76.566823][ T5054] RSP: 002b:00007ffc79f4f9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 76.575239][ T5054] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd71930ab9 [ 76.583378][ T5054] RDX: 00007ffc79f4f9c0 RSI: 0000000000000058 RDI: 00007ffc79f4f9c0 [ 76.591618][ T5054] RBP: 00007fcd719a35f0 R08: 0000000000000000 R09: 0000000000000000 [ 76.599703][ T5054] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 76.607822][ T5054] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 76.615834][ T5054] [ 76.618917][ T5054] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.626221][ T5054] CPU: 0 PID: 5054 Comm: syz-executor329 Not tainted 6.6.0-rc4-next-20231003-syzkaller #0 [ 76.636135][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 76.646196][ T5054] Call Trace: [ 76.649476][ T5054] [ 76.652405][ T5054] dump_stack_lvl+0xd9/0x1b0 [ 76.657001][ T5054] panic+0x6dc/0x790 [ 76.660892][ T5054] ? panic_smp_self_stop+0xa0/0xa0 [ 76.666086][ T5054] ? show_trace_log_lvl+0x363/0x4f0 [ 76.671304][ T5054] ? check_panic_on_warn+0x1f/0xb0 [ 76.676413][ T5054] ? copy_hugetlb_page_range+0x675/0x3520 [ 76.682138][ T5054] check_panic_on_warn+0xab/0xb0 [ 76.687076][ T5054] __warn+0xf2/0x380 [ 76.690961][ T5054] ? copy_hugetlb_page_range+0x675/0x3520 [ 76.696675][ T5054] report_bug+0x3bc/0x580 [ 76.701005][ T5054] handle_bug+0x3c/0x70 [ 76.705159][ T5054] exc_invalid_op+0x17/0x40 [ 76.709769][ T5054] asm_exc_invalid_op+0x1a/0x20 [ 76.714617][ T5054] RIP: 0010:copy_hugetlb_page_range+0x675/0x3520 [ 76.720943][ T5054] Code: 00 be ff ff ff ff 48 81 c7 a0 01 00 00 e8 b3 2f 6c 08 31 ff 89 c5 89 c6 e8 68 77 ae ff 85 ed 0f 85 dd fd ff ff e8 eb 7b ae ff <0f> 0b e9 d1 fd ff ff e8 df 7b ae ff 49 89 ec 31 ff 41 81 e4 ff 0f [ 76.740822][ T5054] RSP: 0018:ffffc90003a2f4a0 EFLAGS: 00010293 [ 76.746992][ T5054] RAX: 0000000000000000 RBX: 0000000020000000 RCX: ffffffff81d9dcf8 [ 76.755070][ T5054] RDX: ffff8880675d0000 RSI: ffffffff81d9dd05 RDI: 0000000000000005 [ 76.763242][ T5054] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 76.771228][ T5054] R10: 0000000000000000 R11: ffffffff910df9a8 R12: ffff88807905b900 [ 76.779204][ T5054] R13: ffff88801efab500 R14: 0000000020000000 R15: dffffc0000000000 [ 76.787193][ T5054] ? copy_hugetlb_page_range+0x668/0x3520 [ 76.792932][ T5054] ? copy_hugetlb_page_range+0x675/0x3520 [ 76.798682][ T5054] ? filter_irq_stacks+0x90/0x90 [ 76.803636][ T5054] ? huge_pte_alloc+0x4b0/0x4b0 [ 76.808499][ T5054] ? save_trace+0x4e/0xb30 [ 76.812921][ T5054] ? _find_first_zero_bit+0x94/0xb0 [ 76.818128][ T5054] ? add_lock_to_list+0x17d/0x380 [ 76.823170][ T5054] copy_page_range+0x1dc2/0x3c70 [ 76.828137][ T5054] ? rcu_is_watching+0x12/0xb0 [ 76.832916][ T5054] ? trace_ma_write+0x173/0x1b0 [ 76.837866][ T5054] ? mas_wr_append+0x112/0xb10 [ 76.842640][ T5054] ? mas_wr_store_entry.isra.0+0x4eb/0xe40 [ 76.848455][ T5054] ? vm_iomap_memory+0x170/0x170 [ 76.853403][ T5054] ? mas_store+0x2ca/0x400 [ 76.857833][ T5054] ? mas_store_prealloc+0x270/0x270 [ 76.863041][ T5054] ? down_write+0x14f/0x200 [ 76.867562][ T5054] ? up_write+0x1b3/0x510 [ 76.871902][ T5054] dup_mmap+0x13f3/0x1d80 [ 76.876260][ T5054] ? replace_mm_exe_file+0x680/0x680 [ 76.881653][ T5054] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 76.887479][ T5054] ? mm_init+0xb51/0xf90 [ 76.891728][ T5054] copy_process+0x6cc9/0x74b0 [ 76.896421][ T5054] ? pidfd_prepare+0x80/0x80 [ 76.901014][ T5054] ? preempt_count_sub+0x150/0x150 [ 76.906140][ T5054] ? __might_fault+0xe6/0x1a0 [ 76.910825][ T5054] ? _copy_from_user+0x5d/0xf0 [ 76.915603][ T5054] kernel_clone+0xfd/0x920 [ 76.920026][ T5054] ? lock_acquire+0x1ae/0x510 [ 76.924797][ T5054] ? create_io_thread+0xe0/0xe0 [ 76.929660][ T5054] ? do_raw_spin_lock+0x12e/0x2b0 [ 76.934718][ T5054] ? spin_bug+0x1d0/0x1d0 [ 76.939075][ T5054] ? cgroup_update_frozen+0x144/0x6b0 [ 76.944469][ T5054] __do_sys_clone3+0x1f1/0x260 [ 76.949246][ T5054] ? __do_sys_clone+0x100/0x100 [ 76.954127][ T5054] ? reacquire_held_locks+0x4b0/0x4b0 [ 76.959524][ T5054] ? _raw_spin_unlock_irq+0x2e/0x50 [ 76.964729][ T5054] ? ptrace_notify+0xf4/0x130 [ 76.969422][ T5054] do_syscall_64+0x38/0xb0 [ 76.973852][ T5054] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 76.979763][ T5054] RIP: 0033:0x7fcd71930ab9 [ 76.984195][ T5054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.003808][ T5054] RSP: 002b:00007ffc79f4f9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 77.012484][ T5054] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd71930ab9 [ 77.020468][ T5054] RDX: 00007ffc79f4f9c0 RSI: 0000000000000058 RDI: 00007ffc79f4f9c0 [ 77.028454][ T5054] RBP: 00007fcd719a35f0 R08: 0000000000000000 R09: 0000000000000000 [ 77.036461][ T5054] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001 [ 77.044435][ T5054] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 77.052514][ T5054] [ 77.055720][ T5054] Kernel Offset: disabled [ 77.060205][ T5054] Rebooting in 86400 seconds..