root@syzkaller:~# uname -a
Linux nic 4.16.0-rc3 #1 SMP Sun Feb 25 23:14:06 CST 2018 x86_64 GNU/Linux
root@syzkaller:~# ./crash
[  103.989170] ------------[ cut here ]------------
[  103.990229] kernel BUG at mm/hugetlb.c:741!
[  103.991243] invalid opcode: 0000 [#2] SMP KASAN PTI
[  103.992362] Modules linked in:
[  103.992965] CPU: 0 PID: 2757 Comm: crash Tainted: G      D          4.16.0-rc3 #1
[  103.994473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-20171110_100015-anatol 04/01/2014
[  103.996603] RIP: 0010:resv_map_release+0x17c/0x1f0
[  103.997672] RSP: 0018:ffff880069e27c70 EFLAGS: 00010293
[  103.998734] RAX: ffff880069294600 RBX: ffff88006ba6e238 RCX: ffffffff9173970c
[  104.000109] RDX: 0000000000000000 RSI: ffff88006cc0c5c0 RDI: ffff88006ba6e230
[  104.001642] RBP: ffff88006ba6e238 R08: ffff880069e27a08 R09: ffff8800675f9278
[  104.003190] R10: 000000007c76f3b9 R11: 0000000000000000 R12: ffff88006ba6e238
[  104.004776] R13: dffffc0000000000 R14: ffff88006ba6e238 R15: dead000000000100
[  104.006407] FS:  00007f30f272a700(0000) GS:ffff88006d000000(0000) knlGS:0000000000000000
[  104.008241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  104.009512] CR2: 00007f30f250e2e0 CR3: 000000006ce14000 CR4: 00000000000006f0
[  104.011065] Call Trace:
[  104.011630]  hugetlbfs_evict_inode+0x74/0xa0
[  104.012573]  ? hugetlbfs_setattr+0x490/0x490
[  104.013412]  evict+0x28f/0x580
[  104.014085]  iput+0x5ba/0x870
[  104.014776]  dentry_unlink_inode+0x45d/0x560
[  104.015706]  __dentry_kill+0x308/0x580
[  104.016525]  ? dput.part.20+0x27/0x730
[  104.017343]  dput.part.20+0x61d/0x730
[  104.018144]  dput+0x1b/0x30
[  104.018774]  __fput+0x46d/0x6e0
[  104.019477]  task_work_run+0x121/0x1a0
[  104.020271]  exit_to_usermode_loop+0x120/0x140
[  104.021219]  do_syscall_64+0x4ce/0x640
[  104.021997]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  104.023053] RIP: 0033:0x7f30f2260b79
[  104.023597] RSP: 002b:00007ffd1747df28 EFLAGS: 00000217 ORIG_RAX: 00000000000000d8
[  104.025122] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 00007f30f2260b79
[  104.026575] RDX: 0000000000000000 RSI: 0000000000600000 RDI: 0000000020a00000
[  104.028050] RBP: 00007ffd1747df40 R08: 0000000000000000 R09: 0000000000000000
[  104.029503] R10: 0020000000000000 R11: 0000000000000217 R12: 0000000000400400
[  104.030953] R13: 00007ffd1747e040 R14: 0000000000000000 R15: 0000000000000000
[  104.032461] Code: 8b 04 24 48 83 78 50 00 75 1c e8 30 92 e1 ff 48 8b 3c 24 48 83 c4 10 5b 5d 41 5c 41 5d 41 5e 41 5f e9 09 da 01 00 e8 14 92 e1 ff <0f> 0b 4c 89 e7 e8 9a 22 02 00 e9 c2 fe ff ff e8 90 22 02 00 eb
[  104.036395] RIP: resv_map_release+0x17c/0x1f0 RSP: ffff880069e27c70
[  104.037764] ---[ end trace 33134e9aa744faba ]---
Segmentation fault
root@syzkaller:~#