Warning: Permanently added '10.128.10.47' (ED25519) to the list of known hosts. 2023/09/18 15:19:56 fuzzer started 2023/09/18 15:19:56 dialing manager at 10.128.0.169:30005 [ 76.609315][ T5045] cgroup: Unknown subsys name 'net' [ 76.724017][ T5045] cgroup: Unknown subsys name 'rlimit' 2023/09/18 15:19:58 syscalls: 3845 2023/09/18 15:19:58 code coverage: enabled 2023/09/18 15:19:58 comparison tracing: enabled 2023/09/18 15:19:58 extra coverage: enabled 2023/09/18 15:19:58 delay kcov mmap: enabled 2023/09/18 15:19:58 setuid sandbox: enabled 2023/09/18 15:19:58 namespace sandbox: enabled 2023/09/18 15:19:58 Android sandbox: /sys/fs/selinux/policy does not exist 2023/09/18 15:19:58 fault injection: enabled 2023/09/18 15:19:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/09/18 15:19:58 net packet injection: enabled 2023/09/18 15:19:58 net device setup: enabled 2023/09/18 15:19:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/09/18 15:19:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/09/18 15:19:58 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/09/18 15:19:58 USB emulation: enabled 2023/09/18 15:19:58 hci packet injection: enabled 2023/09/18 15:19:58 wifi device emulation: enabled 2023/09/18 15:19:58 802.15.4 emulation: enabled 2023/09/18 15:19:58 swap file: enabled [ 78.377441][ T5045] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2023/09/18 15:19:58 fetching corpus: 50, signal 45962/47830 (executing program) 2023/09/18 15:19:59 fetching corpus: 100, signal 68750/72416 (executing program) 2023/09/18 15:19:59 fetching corpus: 150, signal 78960/84392 (executing program) 2023/09/18 15:19:59 fetching corpus: 200, signal 88561/95732 (executing program) 2023/09/18 15:19:59 fetching corpus: 250, signal 99772/108561 (executing program) 2023/09/18 15:20:00 fetching corpus: 300, signal 110903/121268 (executing program) 2023/09/18 15:20:00 fetching corpus: 350, signal 115901/127901 (executing program) 2023/09/18 15:20:00 fetching corpus: 400, signal 125580/139087 (executing program) 2023/09/18 15:20:00 fetching corpus: 450, signal 131057/146147 (executing program) 2023/09/18 15:20:01 fetching corpus: 500, signal 136117/152757 (executing program) 2023/09/18 15:20:01 fetching corpus: 550, signal 141987/160123 (executing program) 2023/09/18 15:20:01 fetching corpus: 600, signal 150845/170415 (executing program) 2023/09/18 15:20:02 fetching corpus: 650, signal 159923/180808 (executing program) 2023/09/18 15:20:02 fetching corpus: 700, signal 164896/187232 (executing program) 2023/09/18 15:20:02 fetching corpus: 750, signal 170916/194692 (executing program) 2023/09/18 15:20:02 fetching corpus: 800, signal 176919/201972 (executing program) 2023/09/18 15:20:02 fetching corpus: 850, signal 180627/207069 (executing program) 2023/09/18 15:20:03 fetching corpus: 900, signal 184940/212741 (executing program) 2023/09/18 15:20:03 fetching corpus: 950, signal 187900/217081 (executing program) 2023/09/18 15:20:03 fetching corpus: 1000, signal 191486/222059 (executing program) 2023/09/18 15:20:03 fetching corpus: 1050, signal 195412/227314 (executing program) 2023/09/18 15:20:04 fetching corpus: 1100, signal 201173/234290 (executing program) 2023/09/18 15:20:04 fetching corpus: 1150, signal 206440/240742 (executing program) 2023/09/18 15:20:04 fetching corpus: 1200, signal 210019/245626 (executing program) 2023/09/18 15:20:05 fetching corpus: 1250, signal 215408/252223 (executing program) 2023/09/18 15:20:05 fetching corpus: 1300, signal 217930/256072 (executing program) [ 85.352067][ T5044] page:ffffea0001498000 refcount:512 mapcount:2 mapping:0000000000000000 index:0xc001e00 pfn:0x52600 [ 85.363488][ T5044] head:ffffea0001498000 order:9 entire_mapcount:1 nr_pages_mapped:1 pincount:0 [ 85.372751][ T5044] memcg:ffff88801624a000 [ 85.377053][ T5044] anon flags: 0xfff800000a0078(uptodate|dirty|lru|head|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 85.388979][ T5044] page_type: 0x0() [ 85.392733][ T5044] raw: 00fff800000a0078 ffffea0001495948 ffffea00014976c8 ffff888077ff4661 [ 85.401397][ T5044] raw: 000000000c001e00 0000000000000000 0000020000000000 ffff88801624a000 [ 85.410046][ T5044] page dumped because: VM_WARN_ON_FOLIO(page_mapcount(page) > 1 && PageAnonExclusive(page)) [ 85.420157][ T5044] page_owner tracks the page as allocated [ 85.426370][ T5044] page last allocated via order 9, migratetype Movable, gfp_mask 0x3d24ca(GFP_TRANSHUGE|__GFP_NORETRY|__GFP_THISNODE), pid 5038, tgid 5038 (syz-fuzzer), ts 81576091412, free_ts 26150383930 [ 85.445236][ T5044] post_alloc_hook+0x2cf/0x340 [ 85.450030][ T5044] get_page_from_freelist+0xf17/0x2e50 [ 85.455536][ T5044] __alloc_pages+0x1d0/0x4a0 [ 85.460156][ T5044] __folio_alloc+0x16/0x40 [ 85.464618][ T5044] vma_alloc_folio+0x63f/0x890 [ 85.469414][ T5044] do_huge_pmd_anonymous_page+0x243/0x2160 [ 85.475298][ T5044] __handle_mm_fault+0x2363/0x3da0 [ 85.480434][ T5044] handle_mm_fault+0x478/0xa00 [ 85.485551][ T5044] do_user_addr_fault+0x30b/0x1000 [ 85.490701][ T5044] exc_page_fault+0x5c/0xd0 [ 85.495275][ T5044] asm_exc_page_fault+0x26/0x30 [ 85.500150][ T5044] page last free stack trace: [ 85.504898][ T5044] free_unref_page_prepare+0x476/0xa40 [ 85.510387][ T5044] free_unref_page+0x33/0x3b0 [ 85.515122][ T5044] free_contig_range+0xb6/0x190 [ 85.519989][ T5044] destroy_args+0x768/0x990 [ 85.524536][ T5044] debug_vm_pgtable+0x1d79/0x3df0 [ 85.529590][ T5044] do_one_initcall+0x11c/0x640 [ 85.534705][ T5044] kernel_init_freeable+0x5c2/0x8f0 [ 85.539925][ T5044] kernel_init+0x1c/0x2a0 [ 85.544303][ T5044] ret_from_fork+0x45/0x80 [ 85.548751][ T5044] ret_from_fork_asm+0x11/0x20 [ 85.553615][ T5044] ------------[ cut here ]------------ [ 85.559107][ T5044] WARNING: CPU: 0 PID: 5044 at mm/rmap.c:1252 page_add_anon_rmap+0xc33/0x1a70 [ 85.568025][ T5044] Modules linked in: [ 85.571921][ T5044] CPU: 0 PID: 5044 Comm: syz-fuzzer Not tainted 6.6.0-rc2-next-20230918-syzkaller #0 [ 85.582070][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 85.592187][ T5044] RIP: 0010:page_add_anon_rmap+0xc33/0x1a70 [ 85.598137][ T5044] Code: 48 c1 eb 11 83 e3 01 89 de e8 99 aa b8 ff 84 db 0f 84 36 fb ff ff e8 5c af b8 ff 48 c7 c6 40 89 99 8a 4c 89 e7 e8 dd 02 f7 ff <0f> 0b e9 1b fb ff ff e8 41 af b8 ff 49 89 dd 31 ff 41 81 e5 ff 0f [ 85.617818][ T5044] RSP: 0018:ffffc90003d476b8 EFLAGS: 00010293 [ 85.623973][ T5044] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 85.631986][ T5044] RDX: ffff8880792f1dc0 RSI: ffffffff81cf4673 RDI: ffffffff8ae94460 [ 85.640027][ T5044] RBP: ffff888021db7e00 R08: 0000000000000000 R09: fffffbfff1d9d0aa [ 85.648065][ T5044] R10: ffffffff8ece8557 R11: 0000000000000001 R12: ffffea0001498000 [ 85.656288][ T5044] R13: 00fff800000a0078 R14: 0000000000000000 R15: ffffea0001495948 [ 85.664308][ T5044] FS: 000000c000524490(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 85.673238][ T5044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.679872][ T5044] CR2: 000000c0007e85a0 CR3: 0000000027139000 CR4: 00000000003506f0 [ 85.687896][ T5044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.695967][ T5044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.703983][ T5044] Call Trace: [ 85.707255][ T5044] [ 85.710176][ T5044] ? show_regs+0x8f/0xa0 [ 85.714456][ T5044] ? __warn+0xe6/0x380 [ 85.718552][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 85.723916][ T5044] ? report_bug+0x3bc/0x580 [ 85.728454][ T5044] ? handle_bug+0x3c/0x70 [ 85.732782][ T5044] ? exc_invalid_op+0x17/0x40 [ 85.737508][ T5044] ? asm_exc_invalid_op+0x1a/0x20 [ 85.742560][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 85.747932][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 85.753259][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 85.758688][ T5044] __split_huge_pmd+0x17d5/0x31e0 [ 85.763874][ T5044] ? __split_huge_pud+0x4d0/0x4d0 [ 85.768943][ T5044] unmap_page_range+0xf13/0x2c00 [ 85.773941][ T5044] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 85.779163][ T5044] ? zap_page_range_single+0x305/0x4e0 [ 85.784665][ T5044] ? reacquire_held_locks+0x4b0/0x4b0 [ 85.790091][ T5044] unmap_single_vma+0x194/0x2b0 [ 85.795038][ T5044] zap_page_range_single+0x324/0x4e0 [ 85.800355][ T5044] ? unmap_vmas+0x330/0x330 [ 85.804943][ T5044] ? userfaultfd_remove+0x128/0x2b0 [ 85.810188][ T5044] ? mas_prev_slot+0x3ad/0xf40 [ 85.815004][ T5044] ? madvise_dontneed_free_valid_vma+0x8a/0x310 [ 85.821287][ T5044] madvise_vma_behavior+0xbb0/0x1d00 [ 85.826649][ T5044] ? madvise_vma_anon_name+0xf0/0xf0 [ 85.831969][ T5044] ? mas_prev+0xc6/0x480 [ 85.836283][ T5044] ? madvise_vma_anon_name+0xf0/0xf0 [ 85.841614][ T5044] ? find_vma_prev+0xe8/0x160 [ 85.846343][ T5044] ? vm_unmapped_area+0xaf0/0xaf0 [ 85.851403][ T5044] ? lock_sync+0x190/0x190 [ 85.855966][ T5044] ? preempt_count_sub+0x150/0x150 [ 85.861106][ T5044] ? madvise_vma_anon_name+0xf0/0xf0 [ 85.866450][ T5044] madvise_walk_vmas+0x1cf/0x2c0 [ 85.871418][ T5044] ? __remove_memory+0x40/0x40 [ 85.876263][ T5044] do_madvise+0x333/0x660 [ 85.880631][ T5044] ? madvise_set_anon_name+0x110/0x110 [ 85.886151][ T5044] ? restore_fpregs_from_fpstate+0xc1/0x1d0 [ 85.892164][ T5044] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 85.898284][ T5044] __x64_sys_madvise+0xaa/0x110 [ 85.903183][ T5044] ? syscall_enter_from_user_mode+0x26/0x80 [ 85.909134][ T5044] do_syscall_64+0x38/0xb0 [ 85.913618][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 85.919579][ T5044] RIP: 0033:0x46b677 [ 85.923468][ T5044] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 85.943247][ T5044] RSP: 002b:000000c000235d70 EFLAGS: 00000202 ORIG_RAX: 000000000000001c [ 85.951741][ T5044] RAX: ffffffffffffffda RBX: 0000000000024000 RCX: 000000000046b677 [ 85.959879][ T5044] RDX: 0000000000000004 RSI: 0000000000024000 RDI: 000000c001fdc000 [ 85.967917][ T5044] RBP: 000000c000235db0 R08: 0000000000200000 R09: 000080c001ffffff [ 85.976192][ T5044] R10: 0000000001134fa0 R11: 0000000000000202 R12: 0000000001134f20 [ 85.984210][ T5044] R13: 0000000000000003 R14: 000000c0003d3520 R15: 0000000001134f60 [ 85.992188][ T5044] [ 85.995284][ T5044] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 86.002578][ T5044] CPU: 0 PID: 5044 Comm: syz-fuzzer Not tainted 6.6.0-rc2-next-20230918-syzkaller #0 [ 86.012253][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 86.022314][ T5044] Call Trace: [ 86.025613][ T5044] [ 86.028553][ T5044] dump_stack_lvl+0xd9/0x1b0 [ 86.033176][ T5044] panic+0x6dc/0x790 [ 86.037091][ T5044] ? panic_smp_self_stop+0xa0/0xa0 [ 86.042226][ T5044] ? show_trace_log_lvl+0x363/0x4f0 [ 86.047460][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 86.052791][ T5044] check_panic_on_warn+0xab/0xb0 [ 86.057760][ T5044] __warn+0xf2/0x380 [ 86.061677][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 86.066983][ T5044] report_bug+0x3bc/0x580 [ 86.071343][ T5044] handle_bug+0x3c/0x70 [ 86.075610][ T5044] exc_invalid_op+0x17/0x40 [ 86.080141][ T5044] asm_exc_invalid_op+0x1a/0x20 [ 86.085009][ T5044] RIP: 0010:page_add_anon_rmap+0xc33/0x1a70 [ 86.090922][ T5044] Code: 48 c1 eb 11 83 e3 01 89 de e8 99 aa b8 ff 84 db 0f 84 36 fb ff ff e8 5c af b8 ff 48 c7 c6 40 89 99 8a 4c 89 e7 e8 dd 02 f7 ff <0f> 0b e9 1b fb ff ff e8 41 af b8 ff 49 89 dd 31 ff 41 81 e5 ff 0f [ 86.110543][ T5044] RSP: 0018:ffffc90003d476b8 EFLAGS: 00010293 [ 86.116621][ T5044] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 86.124601][ T5044] RDX: ffff8880792f1dc0 RSI: ffffffff81cf4673 RDI: ffffffff8ae94460 [ 86.132582][ T5044] RBP: ffff888021db7e00 R08: 0000000000000000 R09: fffffbfff1d9d0aa [ 86.140563][ T5044] R10: ffffffff8ece8557 R11: 0000000000000001 R12: ffffea0001498000 [ 86.148540][ T5044] R13: 00fff800000a0078 R14: 0000000000000000 R15: ffffea0001495948 [ 86.156530][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 86.162014][ T5044] ? page_add_anon_rmap+0xc33/0x1a70 [ 86.167324][ T5044] __split_huge_pmd+0x17d5/0x31e0 [ 86.172465][ T5044] ? __split_huge_pud+0x4d0/0x4d0 [ 86.177526][ T5044] unmap_page_range+0xf13/0x2c00 [ 86.182590][ T5044] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 86.187895][ T5044] ? zap_page_range_single+0x305/0x4e0 [ 86.193382][ T5044] ? reacquire_held_locks+0x4b0/0x4b0 [ 86.198868][ T5044] unmap_single_vma+0x194/0x2b0 [ 86.203738][ T5044] zap_page_range_single+0x324/0x4e0 [ 86.209040][ T5044] ? unmap_vmas+0x330/0x330 [ 86.213576][ T5044] ? userfaultfd_remove+0x128/0x2b0 [ 86.218817][ T5044] ? mas_prev_slot+0x3ad/0xf40 [ 86.223600][ T5044] ? madvise_dontneed_free_valid_vma+0x8a/0x310 [ 86.229866][ T5044] madvise_vma_behavior+0xbb0/0x1d00 [ 86.235268][ T5044] ? madvise_vma_anon_name+0xf0/0xf0 [ 86.240576][ T5044] ? mas_prev+0xc6/0x480 [ 86.244837][ T5044] ? madvise_vma_anon_name+0xf0/0xf0 [ 86.250225][ T5044] ? find_vma_prev+0xe8/0x160 [ 86.254955][ T5044] ? vm_unmapped_area+0xaf0/0xaf0 [ 86.259998][ T5044] ? lock_sync+0x190/0x190 [ 86.264466][ T5044] ? preempt_count_sub+0x150/0x150 [ 86.269595][ T5044] ? madvise_vma_anon_name+0xf0/0xf0 [ 86.274919][ T5044] madvise_walk_vmas+0x1cf/0x2c0 [ 86.279883][ T5044] ? __remove_memory+0x40/0x40 [ 86.284677][ T5044] do_madvise+0x333/0x660 [ 86.289027][ T5044] ? madvise_set_anon_name+0x110/0x110 [ 86.294505][ T5044] ? restore_fpregs_from_fpstate+0xc1/0x1d0 [ 86.300442][ T5044] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 86.306548][ T5044] __x64_sys_madvise+0xaa/0x110 [ 86.311415][ T5044] ? syscall_enter_from_user_mode+0x26/0x80 [ 86.317325][ T5044] do_syscall_64+0x38/0xb0 [ 86.321767][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.327697][ T5044] RIP: 0033:0x46b677 [ 86.331597][ T5044] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14 [ 86.351217][ T5044] RSP: 002b:000000c000235d70 EFLAGS: 00000202 ORIG_RAX: 000000000000001c [ 86.359820][ T5044] RAX: ffffffffffffffda RBX: 0000000000024000 RCX: 000000000046b677 [ 86.367807][ T5044] RDX: 0000000000000004 RSI: 0000000000024000 RDI: 000000c001fdc000 [ 86.375804][ T5044] RBP: 000000c000235db0 R08: 0000000000200000 R09: 000080c001ffffff [ 86.383790][ T5044] R10: 0000000001134fa0 R11: 0000000000000202 R12: 0000000001134f20 [ 86.391771][ T5044] R13: 0000000000000003 R14: 000000c0003d3520 R15: 0000000001134f60 [ 86.399775][ T5044] [ 86.403026][ T5044] Kernel Offset: disabled [ 86.407341][ T5044] Rebooting in 86400 seconds..