Warning: Permanently added '10.128.10.47' (ED25519) to the list of known hosts.
2023/09/18 15:19:56 fuzzer started
2023/09/18 15:19:56 dialing manager at 10.128.0.169:30005
[ 76.609315][ T5045] cgroup: Unknown subsys name 'net'
[ 76.724017][ T5045] cgroup: Unknown subsys name 'rlimit'
2023/09/18 15:19:58 syscalls: 3845
2023/09/18 15:19:58 code coverage: enabled
2023/09/18 15:19:58 comparison tracing: enabled
2023/09/18 15:19:58 extra coverage: enabled
2023/09/18 15:19:58 delay kcov mmap: enabled
2023/09/18 15:19:58 setuid sandbox: enabled
2023/09/18 15:19:58 namespace sandbox: enabled
2023/09/18 15:19:58 Android sandbox: /sys/fs/selinux/policy does not exist
2023/09/18 15:19:58 fault injection: enabled
2023/09/18 15:19:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2023/09/18 15:19:58 net packet injection: enabled
2023/09/18 15:19:58 net device setup: enabled
2023/09/18 15:19:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2023/09/18 15:19:58 devlink PCI setup: PCI device 0000:00:10.0 is not available
2023/09/18 15:19:58 NIC VF setup: PCI device 0000:00:11.0 is not available
2023/09/18 15:19:58 USB emulation: enabled
2023/09/18 15:19:58 hci packet injection: enabled
2023/09/18 15:19:58 wifi device emulation: enabled
2023/09/18 15:19:58 802.15.4 emulation: enabled
2023/09/18 15:19:58 swap file: enabled
[ 78.377441][ T5045] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
2023/09/18 15:19:58 fetching corpus: 50, signal 45962/47830 (executing program)
2023/09/18 15:19:59 fetching corpus: 100, signal 68750/72416 (executing program)
2023/09/18 15:19:59 fetching corpus: 150, signal 78960/84392 (executing program)
2023/09/18 15:19:59 fetching corpus: 200, signal 88561/95732 (executing program)
2023/09/18 15:19:59 fetching corpus: 250, signal 99772/108561 (executing program)
2023/09/18 15:20:00 fetching corpus: 300, signal 110903/121268 (executing program)
2023/09/18 15:20:00 fetching corpus: 350, signal 115901/127901 (executing program)
2023/09/18 15:20:00 fetching corpus: 400, signal 125580/139087 (executing program)
2023/09/18 15:20:00 fetching corpus: 450, signal 131057/146147 (executing program)
2023/09/18 15:20:01 fetching corpus: 500, signal 136117/152757 (executing program)
2023/09/18 15:20:01 fetching corpus: 550, signal 141987/160123 (executing program)
2023/09/18 15:20:01 fetching corpus: 600, signal 150845/170415 (executing program)
2023/09/18 15:20:02 fetching corpus: 650, signal 159923/180808 (executing program)
2023/09/18 15:20:02 fetching corpus: 700, signal 164896/187232 (executing program)
2023/09/18 15:20:02 fetching corpus: 750, signal 170916/194692 (executing program)
2023/09/18 15:20:02 fetching corpus: 800, signal 176919/201972 (executing program)
2023/09/18 15:20:02 fetching corpus: 850, signal 180627/207069 (executing program)
2023/09/18 15:20:03 fetching corpus: 900, signal 184940/212741 (executing program)
2023/09/18 15:20:03 fetching corpus: 950, signal 187900/217081 (executing program)
2023/09/18 15:20:03 fetching corpus: 1000, signal 191486/222059 (executing program)
2023/09/18 15:20:03 fetching corpus: 1050, signal 195412/227314 (executing program)
2023/09/18 15:20:04 fetching corpus: 1100, signal 201173/234290 (executing program)
2023/09/18 15:20:04 fetching corpus: 1150, signal 206440/240742 (executing program)
2023/09/18 15:20:04 fetching corpus: 1200, signal 210019/245626 (executing program)
2023/09/18 15:20:05 fetching corpus: 1250, signal 215408/252223 (executing program)
2023/09/18 15:20:05 fetching corpus: 1300, signal 217930/256072 (executing program)
[ 85.352067][ T5044] page:ffffea0001498000 refcount:512 mapcount:2 mapping:0000000000000000 index:0xc001e00 pfn:0x52600
[ 85.363488][ T5044] head:ffffea0001498000 order:9 entire_mapcount:1 nr_pages_mapped:1 pincount:0
[ 85.372751][ T5044] memcg:ffff88801624a000
[ 85.377053][ T5044] anon flags: 0xfff800000a0078(uptodate|dirty|lru|head|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[ 85.388979][ T5044] page_type: 0x0()
[ 85.392733][ T5044] raw: 00fff800000a0078 ffffea0001495948 ffffea00014976c8 ffff888077ff4661
[ 85.401397][ T5044] raw: 000000000c001e00 0000000000000000 0000020000000000 ffff88801624a000
[ 85.410046][ T5044] page dumped because: VM_WARN_ON_FOLIO(page_mapcount(page) > 1 && PageAnonExclusive(page))
[ 85.420157][ T5044] page_owner tracks the page as allocated
[ 85.426370][ T5044] page last allocated via order 9, migratetype Movable, gfp_mask 0x3d24ca(GFP_TRANSHUGE|__GFP_NORETRY|__GFP_THISNODE), pid 5038, tgid 5038 (syz-fuzzer), ts 81576091412, free_ts 26150383930
[ 85.445236][ T5044] post_alloc_hook+0x2cf/0x340
[ 85.450030][ T5044] get_page_from_freelist+0xf17/0x2e50
[ 85.455536][ T5044] __alloc_pages+0x1d0/0x4a0
[ 85.460156][ T5044] __folio_alloc+0x16/0x40
[ 85.464618][ T5044] vma_alloc_folio+0x63f/0x890
[ 85.469414][ T5044] do_huge_pmd_anonymous_page+0x243/0x2160
[ 85.475298][ T5044] __handle_mm_fault+0x2363/0x3da0
[ 85.480434][ T5044] handle_mm_fault+0x478/0xa00
[ 85.485551][ T5044] do_user_addr_fault+0x30b/0x1000
[ 85.490701][ T5044] exc_page_fault+0x5c/0xd0
[ 85.495275][ T5044] asm_exc_page_fault+0x26/0x30
[ 85.500150][ T5044] page last free stack trace:
[ 85.504898][ T5044] free_unref_page_prepare+0x476/0xa40
[ 85.510387][ T5044] free_unref_page+0x33/0x3b0
[ 85.515122][ T5044] free_contig_range+0xb6/0x190
[ 85.519989][ T5044] destroy_args+0x768/0x990
[ 85.524536][ T5044] debug_vm_pgtable+0x1d79/0x3df0
[ 85.529590][ T5044] do_one_initcall+0x11c/0x640
[ 85.534705][ T5044] kernel_init_freeable+0x5c2/0x8f0
[ 85.539925][ T5044] kernel_init+0x1c/0x2a0
[ 85.544303][ T5044] ret_from_fork+0x45/0x80
[ 85.548751][ T5044] ret_from_fork_asm+0x11/0x20
[ 85.553615][ T5044] ------------[ cut here ]------------
[ 85.559107][ T5044] WARNING: CPU: 0 PID: 5044 at mm/rmap.c:1252 page_add_anon_rmap+0xc33/0x1a70
[ 85.568025][ T5044] Modules linked in:
[ 85.571921][ T5044] CPU: 0 PID: 5044 Comm: syz-fuzzer Not tainted 6.6.0-rc2-next-20230918-syzkaller #0
[ 85.582070][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 85.592187][ T5044] RIP: 0010:page_add_anon_rmap+0xc33/0x1a70
[ 85.598137][ T5044] Code: 48 c1 eb 11 83 e3 01 89 de e8 99 aa b8 ff 84 db 0f 84 36 fb ff ff e8 5c af b8 ff 48 c7 c6 40 89 99 8a 4c 89 e7 e8 dd 02 f7 ff <0f> 0b e9 1b fb ff ff e8 41 af b8 ff 49 89 dd 31 ff 41 81 e5 ff 0f
[ 85.617818][ T5044] RSP: 0018:ffffc90003d476b8 EFLAGS: 00010293
[ 85.623973][ T5044] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 85.631986][ T5044] RDX: ffff8880792f1dc0 RSI: ffffffff81cf4673 RDI: ffffffff8ae94460
[ 85.640027][ T5044] RBP: ffff888021db7e00 R08: 0000000000000000 R09: fffffbfff1d9d0aa
[ 85.648065][ T5044] R10: ffffffff8ece8557 R11: 0000000000000001 R12: ffffea0001498000
[ 85.656288][ T5044] R13: 00fff800000a0078 R14: 0000000000000000 R15: ffffea0001495948
[ 85.664308][ T5044] FS: 000000c000524490(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 85.673238][ T5044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.679872][ T5044] CR2: 000000c0007e85a0 CR3: 0000000027139000 CR4: 00000000003506f0
[ 85.687896][ T5044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 85.695967][ T5044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 85.703983][ T5044] Call Trace:
[ 85.707255][ T5044]
[ 85.710176][ T5044] ? show_regs+0x8f/0xa0
[ 85.714456][ T5044] ? __warn+0xe6/0x380
[ 85.718552][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 85.723916][ T5044] ? report_bug+0x3bc/0x580
[ 85.728454][ T5044] ? handle_bug+0x3c/0x70
[ 85.732782][ T5044] ? exc_invalid_op+0x17/0x40
[ 85.737508][ T5044] ? asm_exc_invalid_op+0x1a/0x20
[ 85.742560][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 85.747932][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 85.753259][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 85.758688][ T5044] __split_huge_pmd+0x17d5/0x31e0
[ 85.763874][ T5044] ? __split_huge_pud+0x4d0/0x4d0
[ 85.768943][ T5044] unmap_page_range+0xf13/0x2c00
[ 85.773941][ T5044] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 85.779163][ T5044] ? zap_page_range_single+0x305/0x4e0
[ 85.784665][ T5044] ? reacquire_held_locks+0x4b0/0x4b0
[ 85.790091][ T5044] unmap_single_vma+0x194/0x2b0
[ 85.795038][ T5044] zap_page_range_single+0x324/0x4e0
[ 85.800355][ T5044] ? unmap_vmas+0x330/0x330
[ 85.804943][ T5044] ? userfaultfd_remove+0x128/0x2b0
[ 85.810188][ T5044] ? mas_prev_slot+0x3ad/0xf40
[ 85.815004][ T5044] ? madvise_dontneed_free_valid_vma+0x8a/0x310
[ 85.821287][ T5044] madvise_vma_behavior+0xbb0/0x1d00
[ 85.826649][ T5044] ? madvise_vma_anon_name+0xf0/0xf0
[ 85.831969][ T5044] ? mas_prev+0xc6/0x480
[ 85.836283][ T5044] ? madvise_vma_anon_name+0xf0/0xf0
[ 85.841614][ T5044] ? find_vma_prev+0xe8/0x160
[ 85.846343][ T5044] ? vm_unmapped_area+0xaf0/0xaf0
[ 85.851403][ T5044] ? lock_sync+0x190/0x190
[ 85.855966][ T5044] ? preempt_count_sub+0x150/0x150
[ 85.861106][ T5044] ? madvise_vma_anon_name+0xf0/0xf0
[ 85.866450][ T5044] madvise_walk_vmas+0x1cf/0x2c0
[ 85.871418][ T5044] ? __remove_memory+0x40/0x40
[ 85.876263][ T5044] do_madvise+0x333/0x660
[ 85.880631][ T5044] ? madvise_set_anon_name+0x110/0x110
[ 85.886151][ T5044] ? restore_fpregs_from_fpstate+0xc1/0x1d0
[ 85.892164][ T5044] ? preempt_schedule_notrace_thunk+0x1a/0x30
[ 85.898284][ T5044] __x64_sys_madvise+0xaa/0x110
[ 85.903183][ T5044] ? syscall_enter_from_user_mode+0x26/0x80
[ 85.909134][ T5044] do_syscall_64+0x38/0xb0
[ 85.913618][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 85.919579][ T5044] RIP: 0033:0x46b677
[ 85.923468][ T5044] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[ 85.943247][ T5044] RSP: 002b:000000c000235d70 EFLAGS: 00000202 ORIG_RAX: 000000000000001c
[ 85.951741][ T5044] RAX: ffffffffffffffda RBX: 0000000000024000 RCX: 000000000046b677
[ 85.959879][ T5044] RDX: 0000000000000004 RSI: 0000000000024000 RDI: 000000c001fdc000
[ 85.967917][ T5044] RBP: 000000c000235db0 R08: 0000000000200000 R09: 000080c001ffffff
[ 85.976192][ T5044] R10: 0000000001134fa0 R11: 0000000000000202 R12: 0000000001134f20
[ 85.984210][ T5044] R13: 0000000000000003 R14: 000000c0003d3520 R15: 0000000001134f60
[ 85.992188][ T5044]
[ 85.995284][ T5044] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.002578][ T5044] CPU: 0 PID: 5044 Comm: syz-fuzzer Not tainted 6.6.0-rc2-next-20230918-syzkaller #0
[ 86.012253][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 86.022314][ T5044] Call Trace:
[ 86.025613][ T5044]
[ 86.028553][ T5044] dump_stack_lvl+0xd9/0x1b0
[ 86.033176][ T5044] panic+0x6dc/0x790
[ 86.037091][ T5044] ? panic_smp_self_stop+0xa0/0xa0
[ 86.042226][ T5044] ? show_trace_log_lvl+0x363/0x4f0
[ 86.047460][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 86.052791][ T5044] check_panic_on_warn+0xab/0xb0
[ 86.057760][ T5044] __warn+0xf2/0x380
[ 86.061677][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 86.066983][ T5044] report_bug+0x3bc/0x580
[ 86.071343][ T5044] handle_bug+0x3c/0x70
[ 86.075610][ T5044] exc_invalid_op+0x17/0x40
[ 86.080141][ T5044] asm_exc_invalid_op+0x1a/0x20
[ 86.085009][ T5044] RIP: 0010:page_add_anon_rmap+0xc33/0x1a70
[ 86.090922][ T5044] Code: 48 c1 eb 11 83 e3 01 89 de e8 99 aa b8 ff 84 db 0f 84 36 fb ff ff e8 5c af b8 ff 48 c7 c6 40 89 99 8a 4c 89 e7 e8 dd 02 f7 ff <0f> 0b e9 1b fb ff ff e8 41 af b8 ff 49 89 dd 31 ff 41 81 e5 ff 0f
[ 86.110543][ T5044] RSP: 0018:ffffc90003d476b8 EFLAGS: 00010293
[ 86.116621][ T5044] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
[ 86.124601][ T5044] RDX: ffff8880792f1dc0 RSI: ffffffff81cf4673 RDI: ffffffff8ae94460
[ 86.132582][ T5044] RBP: ffff888021db7e00 R08: 0000000000000000 R09: fffffbfff1d9d0aa
[ 86.140563][ T5044] R10: ffffffff8ece8557 R11: 0000000000000001 R12: ffffea0001498000
[ 86.148540][ T5044] R13: 00fff800000a0078 R14: 0000000000000000 R15: ffffea0001495948
[ 86.156530][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 86.162014][ T5044] ? page_add_anon_rmap+0xc33/0x1a70
[ 86.167324][ T5044] __split_huge_pmd+0x17d5/0x31e0
[ 86.172465][ T5044] ? __split_huge_pud+0x4d0/0x4d0
[ 86.177526][ T5044] unmap_page_range+0xf13/0x2c00
[ 86.182590][ T5044] ? vm_normal_page_pmd+0x5a0/0x5a0
[ 86.187895][ T5044] ? zap_page_range_single+0x305/0x4e0
[ 86.193382][ T5044] ? reacquire_held_locks+0x4b0/0x4b0
[ 86.198868][ T5044] unmap_single_vma+0x194/0x2b0
[ 86.203738][ T5044] zap_page_range_single+0x324/0x4e0
[ 86.209040][ T5044] ? unmap_vmas+0x330/0x330
[ 86.213576][ T5044] ? userfaultfd_remove+0x128/0x2b0
[ 86.218817][ T5044] ? mas_prev_slot+0x3ad/0xf40
[ 86.223600][ T5044] ? madvise_dontneed_free_valid_vma+0x8a/0x310
[ 86.229866][ T5044] madvise_vma_behavior+0xbb0/0x1d00
[ 86.235268][ T5044] ? madvise_vma_anon_name+0xf0/0xf0
[ 86.240576][ T5044] ? mas_prev+0xc6/0x480
[ 86.244837][ T5044] ? madvise_vma_anon_name+0xf0/0xf0
[ 86.250225][ T5044] ? find_vma_prev+0xe8/0x160
[ 86.254955][ T5044] ? vm_unmapped_area+0xaf0/0xaf0
[ 86.259998][ T5044] ? lock_sync+0x190/0x190
[ 86.264466][ T5044] ? preempt_count_sub+0x150/0x150
[ 86.269595][ T5044] ? madvise_vma_anon_name+0xf0/0xf0
[ 86.274919][ T5044] madvise_walk_vmas+0x1cf/0x2c0
[ 86.279883][ T5044] ? __remove_memory+0x40/0x40
[ 86.284677][ T5044] do_madvise+0x333/0x660
[ 86.289027][ T5044] ? madvise_set_anon_name+0x110/0x110
[ 86.294505][ T5044] ? restore_fpregs_from_fpstate+0xc1/0x1d0
[ 86.300442][ T5044] ? preempt_schedule_notrace_thunk+0x1a/0x30
[ 86.306548][ T5044] __x64_sys_madvise+0xaa/0x110
[ 86.311415][ T5044] ? syscall_enter_from_user_mode+0x26/0x80
[ 86.317325][ T5044] do_syscall_64+0x38/0xb0
[ 86.321767][ T5044] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 86.327697][ T5044] RIP: 0033:0x46b677
[ 86.331597][ T5044] Code: 8b 24 24 48 8b 6c 24 10 48 83 c4 18 c3 cc cc cc cc cc cc 48 8b 7c 24 08 48 8b 74 24 10 8b 54 24 18 48 c7 c0 1c 00 00 00 0f 05 <89> 44 24 20 c3 cc cc cc cc 48 8b 7c 24 08 8b 74 24 10 8b 54 24 14
[ 86.351217][ T5044] RSP: 002b:000000c000235d70 EFLAGS: 00000202 ORIG_RAX: 000000000000001c
[ 86.359820][ T5044] RAX: ffffffffffffffda RBX: 0000000000024000 RCX: 000000000046b677
[ 86.367807][ T5044] RDX: 0000000000000004 RSI: 0000000000024000 RDI: 000000c001fdc000
[ 86.375804][ T5044] RBP: 000000c000235db0 R08: 0000000000200000 R09: 000080c001ffffff
[ 86.383790][ T5044] R10: 0000000001134fa0 R11: 0000000000000202 R12: 0000000001134f20
[ 86.391771][ T5044] R13: 0000000000000003 R14: 000000c0003d3520 R15: 0000000001134f60
[ 86.399775][ T5044]
[ 86.403026][ T5044] Kernel Offset: disabled
[ 86.407341][ T5044] Rebooting in 86400 seconds..