[ 91.957378][ T22] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 94.072462][ T5050] BUG: Bad page state in process syz-executor148 pfn:10395 [ 94.072705][ T5055] ------------[ cut here ]------------ [ 94.080887][ T5053] page:ffffea000040e540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10395 [ 94.085818][ T5055] WARNING: CPU: 1 PID: 5055 at mm/gup.c:229 try_grab_page+0x359/0x420 [ 94.085889][ T5055] Modules linked in: [ 94.085908][ T5055] CPU: 1 PID: 5055 Comm: syz-executor148 Not tainted 6.5.0-rc5-syzkaller-00192-g829c6524d672 #0 [ 94.101537][ T5054] page:ffffea000040e540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10395 [ 94.104303][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 94.104326][ T5055] RIP: 0010:try_grab_page+0x359/0x420 [ 94.104374][ T5055] Code: 49 83 ec 01 e9 2d fd ff ff e8 63 ec c2 ff be 04 00 00 00 4c 89 ef e8 06 fd 16 00 f0 41 ff 45 00 e9 15 ff ff ff e8 47 ec c2 ff <0f> 0b e8 40 ec c2 ff bb f4 ff ff ff 89 d8 5b 5d 41 5c 41 5d 41 5e [ 94.164372][ T5055] RSP: 0018:ffffc90003c9f338 EFLAGS: 00010293 [ 94.170632][ T5055] RAX: 0000000000000000 RBX: ffffea000040e540 RCX: 0000000000000000 [ 94.175799][ T5054] flags: 0xfff18000001042(referenced|workingset|reserved|node=0|zone=1|lastcpupid=0x7ff) [ 94.178741][ T5055] RDX: ffff888078969dc0 RSI: ffffffff81c31c59 RDI: 0000000000000005 [ 94.178768][ T5055] RBP: 0000000000290000 R08: 0000000000000005 R09: 0000000000000000 [ 94.189393][ T5050] page:ffffea000040e540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10395 [ 94.196705][ T5055] R10: 0000000000000000 R11: 1ffffffff1936419 R12: ffffea000040e540 [ 94.196734][ T5055] R13: ffffea000040e574 R14: 0000000000000000 R15: ffffea000040e548 [ 94.196758][ T5055] FS: 00007fda117516c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 94.196792][ T5055] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.233404][ T5050] flags: 0xfff18000001042(referenced|workingset|reserved|node=0|zone=1|lastcpupid=0x7ff) [ 94.240325][ T5055] CR2: 0000000020057030 CR3: 0000000021bc7000 CR4: 00000000003506e0 [ 94.240353][ T5055] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.240375][ T5055] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.247945][ T5053] flags: 0xfff18000001042(referenced|workingset|reserved|node=0|zone=1|lastcpupid=0x7ff) [ 94.256838][ T5055] Call Trace: [ 94.256852][ T5055] [ 94.256866][ T5055] ? __warn+0xe6/0x380 [ 94.256909][ T5055] ? try_grab_page+0x359/0x420 [ 94.256952][ T5055] ? report_bug+0x3bc/0x580 [ 94.305087][ T5053] page_type: 0xffffffff() [ 94.306219][ T5055] ? handle_bug+0x3c/0x70 [ 94.314328][ T5053] raw: 00fff18000001042 ffffea000040e548 ffffea000040e548 0000000000000000 [ 94.315102][ T5055] ? exc_invalid_op+0x17/0x40 [ 94.315143][ T5055] ? asm_exc_invalid_op+0x1a/0x20 [ 94.315193][ T5055] ? try_grab_page+0x359/0x420 [ 94.321953][ T5052] page:ffffea000040e540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10395 [ 94.328332][ T5055] ? try_grab_page+0x359/0x420 [ 94.328382][ T5055] ? try_grab_page+0x359/0x420 [ 94.328425][ T5055] follow_page_pte+0x213/0x1ba0 [ 94.344459][ T5050] page_type: 0xffffffff() [ 94.353220][ T5055] ? try_grab_page+0x420/0x420 [ 94.353281][ T5055] follow_page_mask+0x3ce/0xdc0 [ 94.353331][ T5055] __get_user_pages+0x478/0x1010 [ 94.366326][ T5053] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 94.367936][ T5055] ? follow_page_mask+0xdc0/0xdc0 [ 94.378954][ T5052] flags: 0xfff18000001042(referenced|workingset|reserved|node=0|zone=1|lastcpupid=0x7ff) [ 94.381937][ T5055] ? down_read_killable+0x222/0x4b0 [ 94.381996][ T5055] ? down_read+0x470/0x470 [ 94.399242][ T5053] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 94.400629][ T5055] ? mark_lock+0x105/0x1950 [ 94.400688][ T5055] __gup_longterm_locked+0x755/0x24d0 [ 94.438472][ T5055] ? find_held_lock+0x2d/0x110 [ 94.443311][ T5055] ? get_user_pages_unlocked+0x6c0/0x6c0 [ 94.449066][ T5055] ? internal_get_user_pages_fast+0x1535/0x31b0 [ 94.455418][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.455557][ T5052] page_type: 0xffffffff() [ 94.460848][ T5055] ? mark_held_locks+0x9f/0xe0 [ 94.460894][ T5055] ? sanity_check_pinned_pages+0x23/0xf60 [ 94.473200][ T5050] raw: 00fff18000001042 ffffea000040e548 ffffea000040e548 0000000000000000 [ 94.475844][ T5055] internal_get_user_pages_fast+0x1c4b/0x31b0 [ 94.475923][ T5055] ? __gup_device_huge+0x670/0x670 [ 94.492973][ T5053] page_owner info is not present (never set?) [ 94.496046][ T5055] pin_user_pages_fast+0xa8/0xf0 [ 94.496103][ T5055] ? get_user_pages_fast+0xf0/0xf0 [ 94.496152][ T5055] ? first_iovec_segment+0x16b/0x290 [ 94.506030][ T5050] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 94.507391][ T5055] iov_iter_extract_pages+0x29b/0x1860 [ 94.513140][ T5050] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 94.517894][ T5055] ? _copy_mc_to_iter+0x10d0/0x10d0 [ 94.517957][ T5055] ? preempt_schedule_thunk+0x1a/0x30 [ 94.545451][ T5053] ------------[ cut here ]------------ [ 94.550099][ T5055] ? kernel_fpu_begin_mask+0x169/0x270 [ 94.555581][ T5053] kernel BUG at include/linux/mm.h:1027! [ 94.561037][ T5055] ? save_fpregs_to_fpstate+0x270/0x270 [ 94.572508][ T5055] ? kernel_fpu_end+0x5d/0x70 [ 94.577361][ T5055] extract_iter_to_sg+0x92e/0x19e0 [ 94.582326][ T5052] raw: 00fff18000001042 ffffea000040e548 ffffea000040e548 0000000000000000 [ 94.582544][ T5055] ? sg_init_one+0x140/0x140 [ 94.595881][ T5055] ? gup_put_folio+0x71/0x2a0 [ 94.600634][ T5055] ? sanity_check_pinned_pages+0xf60/0xf60 [ 94.606577][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.612033][ T5055] ? af_alg_free_sg+0xa1/0x260 [ 94.616961][ T5055] hash_sendmsg+0x459/0x1030 [ 94.621639][ T5055] ? hash_recvmsg_nokey+0x80/0x80 [ 94.626779][ T5055] sock_sendmsg+0xd9/0x180 [ 94.631262][ T5055] __sys_sendto+0x255/0x340 [ 94.634169][ T5052] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 94.635864][ T5055] ? __ia32_sys_getpeername+0xb0/0xb0 [ 94.635914][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.653705][ T5050] page_owner info is not present (never set?) [ 94.655475][ T5055] ? preempt_count_sub+0x150/0x150 [ 94.655552][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.672329][ T5055] __x64_sys_sendto+0xe0/0x1b0 [ 94.672358][ T5052] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 94.672382][ T5055] ? syscall_enter_from_user_mode+0x26/0x80 [ 94.685254][ T5050] Modules linked in: [ 94.690915][ T5055] do_syscall_64+0x38/0xb0 [ 94.699407][ T5055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 94.704359][ T5052] page_owner info is not present (never set?) [ 94.705382][ T5055] RIP: 0033:0x7fda117d24d9 [ 94.705414][ T5055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 94.705446][ T5055] RSP: 002b:00007fda11751228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.705480][ T5055] RAX: ffffffffffffffda RBX: 00007fda1185c368 RCX: 00007fda117d24d9 [ 94.717164][ T5052] ------------[ cut here ]------------ [ 94.735838][ T5055] RDX: ffffffffffffff5d RSI: 0000000020000100 RDI: 0000000000000006 [ 94.735868][ T5055] RBP: 00007fda1185c360 R08: 0000000000000000 R09: 000000000000fff6 [ 94.735889][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda11829064 [ 94.735911][ T5055] R13: 000000000000006e R14: 00007ffdf4a23ff0 R15: 00007ffdf4a240d8 [ 94.735955][ T5055] [ 94.735969][ T5055] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.735982][ T5055] CPU: 1 PID: 5055 Comm: syz-executor148 Not tainted 6.5.0-rc5-syzkaller-00192-g829c6524d672 #0 [ 94.736015][ T5055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 94.736031][ T5055] Call Trace: [ 94.736042][ T5055] [ 94.736052][ T5055] dump_stack_lvl+0xd9/0x1b0 [ 94.736095][ T5055] panic+0x6a4/0x750 [ 94.736136][ T5055] ? panic_smp_self_stop+0xa0/0xa0 [ 94.736175][ T5055] ? show_trace_log_lvl+0x29d/0x3c0 [ 94.736235][ T5055] ? try_grab_page+0x359/0x420 [ 94.736274][ T5055] check_panic_on_warn+0xab/0xb0 [ 94.736318][ T5055] __warn+0xf2/0x380 [ 94.736355][ T5055] ? try_grab_page+0x359/0x420 [ 94.736397][ T5055] report_bug+0x3bc/0x580 [ 94.736437][ T5055] handle_bug+0x3c/0x70 [ 94.736472][ T5055] exc_invalid_op+0x17/0x40 [ 94.736507][ T5055] asm_exc_invalid_op+0x1a/0x20 [ 94.736541][ T5055] RIP: 0010:try_grab_page+0x359/0x420 [ 94.736583][ T5055] Code: 49 83 ec 01 e9 2d fd ff ff e8 63 ec c2 ff be 04 00 00 00 4c 89 ef e8 06 fd 16 00 f0 41 ff 45 00 e9 15 ff ff ff e8 47 ec c2 ff <0f> 0b e8 40 ec c2 ff bb f4 ff ff ff 89 d8 5b 5d 41 5c 41 5d 41 5e [ 94.736614][ T5055] RSP: 0018:ffffc90003c9f338 EFLAGS: 00010293 [ 94.736640][ T5055] RAX: 0000000000000000 RBX: ffffea000040e540 RCX: 0000000000000000 [ 94.736661][ T5055] RDX: ffff888078969dc0 RSI: ffffffff81c31c59 RDI: 0000000000000005 [ 94.736683][ T5055] RBP: 0000000000290000 R08: 0000000000000005 R09: 0000000000000000 [ 94.736709][ T5055] R10: 0000000000000000 R11: 1ffffffff1936419 R12: ffffea000040e540 [ 94.736731][ T5055] R13: ffffea000040e574 R14: 0000000000000000 R15: ffffea000040e548 [ 94.736766][ T5055] ? try_grab_page+0x359/0x420 [ 94.736810][ T5055] ? try_grab_page+0x359/0x420 [ 94.736852][ T5055] follow_page_pte+0x213/0x1ba0 [ 94.736899][ T5055] ? try_grab_page+0x420/0x420 [ 94.736950][ T5055] follow_page_mask+0x3ce/0xdc0 [ 94.737000][ T5055] __get_user_pages+0x478/0x1010 [ 94.737049][ T5055] ? follow_page_mask+0xdc0/0xdc0 [ 94.737089][ T5055] ? down_read_killable+0x222/0x4b0 [ 94.737139][ T5055] ? down_read+0x470/0x470 [ 94.737187][ T5055] ? mark_lock+0x105/0x1950 [ 94.737235][ T5055] __gup_longterm_locked+0x755/0x24d0 [ 94.737292][ T5055] ? find_held_lock+0x2d/0x110 [ 94.737331][ T5055] ? get_user_pages_unlocked+0x6c0/0x6c0 [ 94.737375][ T5055] ? internal_get_user_pages_fast+0x1535/0x31b0 [ 94.737420][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.737472][ T5055] ? mark_held_locks+0x9f/0xe0 [ 94.737515][ T5055] ? sanity_check_pinned_pages+0x23/0xf60 [ 94.737564][ T5055] internal_get_user_pages_fast+0x1c4b/0x31b0 [ 94.737636][ T5055] ? __gup_device_huge+0x670/0x670 [ 94.737695][ T5055] pin_user_pages_fast+0xa8/0xf0 [ 94.737743][ T5055] ? get_user_pages_fast+0xf0/0xf0 [ 94.737789][ T5055] ? first_iovec_segment+0x16b/0x290 [ 94.737845][ T5055] iov_iter_extract_pages+0x29b/0x1860 [ 94.737910][ T5055] ? _copy_mc_to_iter+0x10d0/0x10d0 [ 94.737961][ T5055] ? preempt_schedule_thunk+0x1a/0x30 [ 94.738017][ T5055] ? kernel_fpu_begin_mask+0x169/0x270 [ 94.738065][ T5055] ? save_fpregs_to_fpstate+0x270/0x270 [ 94.738117][ T5055] ? kernel_fpu_end+0x5d/0x70 [ 94.738165][ T5055] extract_iter_to_sg+0x92e/0x19e0 [ 94.738230][ T5055] ? sg_init_one+0x140/0x140 [ 94.738273][ T5055] ? gup_put_folio+0x71/0x2a0 [ 94.738316][ T5055] ? sanity_check_pinned_pages+0xf60/0xf60 [ 94.738355][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.738411][ T5055] ? af_alg_free_sg+0xa1/0x260 [ 94.738470][ T5055] hash_sendmsg+0x459/0x1030 [ 94.738514][ T5055] ? hash_recvmsg_nokey+0x80/0x80 [ 94.738550][ T5055] sock_sendmsg+0xd9/0x180 [ 94.738591][ T5055] __sys_sendto+0x255/0x340 [ 94.738636][ T5055] ? __ia32_sys_getpeername+0xb0/0xb0 [ 94.738680][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.738736][ T5055] ? preempt_count_sub+0x150/0x150 [ 94.738802][ T5055] ? reacquire_held_locks+0x4b0/0x4b0 [ 94.738877][ T5055] __x64_sys_sendto+0xe0/0x1b0 [ 94.738921][ T5055] ? syscall_enter_from_user_mode+0x26/0x80 [ 94.738971][ T5055] do_syscall_64+0x38/0xb0 [ 94.739005][ T5055] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 94.739041][ T5055] RIP: 0033:0x7fda117d24d9 [ 94.739066][ T5055] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 94.739096][ T5055] RSP: 002b:00007fda11751228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 94.739126][ T5055] RAX: ffffffffffffffda RBX: 00007fda1185c368 RCX: 00007fda117d24d9 [ 94.739149][ T5055] RDX: ffffffffffffff5d RSI: 0000000020000100 RDI: 0000000000000006 [ 94.739169][ T5055] RBP: 00007fda1185c360 R08: 0000000000000000 R09: 000000000000fff6 [ 94.739190][ T5055] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda11829064 [ 94.739210][ T5055] R13: 000000000000006e R14: 00007ffdf4a23ff0 R15: 00007ffdf4a240d8 [ 94.739253][ T5055] [ 94.744668][ T5055] Kernel Offset: disabled [ 95.267429][ T5055] Rebooting in 86400 seconds..