Warning: Permanently added '[localhost]:17957' (ED25519) to the list of known hosts. executing program syzkaller login: [ 79.857893][ T5310] loop0: detected capacity change from 0 to 32768 [ 79.866799][ T5310] XFS: ikeep mount option is deprecated. [ 79.883597][ T5310] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.938702][ T5310] XFS (loop0): Ending clean mount [ 79.944231][ T5310] XFS (loop0): Quotacheck needed: Please wait. [ 79.977610][ T5310] XFS (loop0): Quotacheck: Done. [ 80.021651][ T5309] BUG: Bad page state in process syz-executor125 pfn:49201 [ 80.024707][ T5309] page does not match folio [ 80.027817][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49201 [ 80.033669][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 80.036816][ T5309] raw: 04fff00000000000 ffffea0001248000 00000000ffffffff ffffffffffffffff [ 80.041765][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 80.045398][ T5309] page dumped because: nonzero pincount [ 80.047793][ T5309] page_owner tracks the page as allocated [ 80.051082][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5310, tgid 5310 (syz-executor125), ts 79988473057, free_ts 0 [ 80.061141][ T5309] post_alloc_hook+0x240/0x2a0 [ 80.063478][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 80.065996][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 80.069070][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 80.071378][ T5309] alloc_pages_noprof+0xa9/0x190 [ 80.073659][ T5309] folio_alloc_noprof+0x1e/0x30 [ 80.075846][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 80.078397][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 80.081431][ T5309] iomap_write_begin+0x660/0x1bc0 [ 80.083697][ T5309] iomap_file_buffered_write+0x438/0x980 [ 80.086288][ T5309] xfs_file_buffered_write+0x201/0x890 [ 80.089237][ T5309] vfs_write+0x54b/0xa90 [ 80.091290][ T5309] ksys_write+0x145/0x250 [ 80.093204][ T5309] do_syscall_64+0xfa/0x3b0 [ 80.095393][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.098220][ T5309] page_owner free stack trace missing [ 80.101785][ T5309] Modules linked in: [ 80.103590][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 80.103600][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.103604][ T5309] Call Trace: [ 80.103609][ T5309] [ 80.103612][ T5309] dump_stack_lvl+0x189/0x250 [ 80.103628][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.103643][ T5309] ? __pfx_print_modules+0x10/0x10 [ 80.103654][ T5309] ? uncharge_batch+0x19e/0x250 [ 80.103664][ T5309] bad_page+0x180/0x1c0 [ 80.103675][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 80.103684][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 80.103696][ T5309] __folio_put+0x21b/0x2c0 [ 80.103711][ T5309] ? __pfx___folio_put+0x10/0x10 [ 80.103729][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 80.103748][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 80.103761][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 80.103776][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 80.103788][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 80.103803][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 80.103812][ T5309] ? lockdep_unlock+0x89/0x120 [ 80.103831][ T5309] ? __lock_acquire+0xab9/0xd20 [ 80.103856][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 80.103873][ T5309] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.103887][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 80.103898][ T5309] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.103914][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 80.103926][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 80.103939][ T5309] evict+0x504/0x9c0 [ 80.103955][ T5309] ? __pfx_evict+0x10/0x10 [ 80.103967][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 80.103978][ T5309] evict_inodes+0x636/0x6c0 [ 80.103988][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 80.103999][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 80.104016][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 80.104033][ T5309] kill_block_super+0x44/0x90 [ 80.104046][ T5309] xfs_kill_sb+0x15/0x50 [ 80.104056][ T5309] deactivate_locked_super+0xbc/0x130 [ 80.104073][ T5309] cleanup_mnt+0x425/0x4c0 [ 80.104084][ T5309] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.104094][ T5309] task_work_run+0x1d4/0x260 [ 80.104105][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 80.104113][ T5309] ? __x64_sys_umount+0x122/0x160 [ 80.104122][ T5309] ? exit_to_user_mode_loop+0x40/0x110 [ 80.104138][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 80.104153][ T5309] do_syscall_64+0x2bd/0x3b0 [ 80.104168][ T5309] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.104182][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.104193][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 80.104206][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.104217][ T5309] RIP: 0033:0x7f09c2e9a647 [ 80.104225][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 80.104231][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 80.104240][ T5309] RAX: 0000000000000000 RBX: 000000000001368c RCX: 00007f09c2e9a647 [ 80.104244][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 80.104249][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 80.104253][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 80.104257][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 80.104268][ T5309] [ 80.104272][ T5309] Disabling lock debugging due to kernel taint [ 80.354394][ T5309] BUG: Bad page state in process syz-executor125 pfn:49200 [ 80.363523][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49200 [ 80.367270][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 80.371643][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 80.375912][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 80.380213][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.383894][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 80.387665][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.392401][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.396098][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 80.403170][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 80.406401][ T5309] page_owner tracks the page as allocated [ 80.409278][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5310, tgid 5310 (syz-executor125), ts 79988473057, free_ts 0 [ 80.419953][ T5309] post_alloc_hook+0x240/0x2a0 [ 80.422084][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 80.424519][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 80.427093][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 80.429607][ T5309] alloc_pages_noprof+0xa9/0x190 [ 80.431808][ T5309] folio_alloc_noprof+0x1e/0x30 [ 80.433940][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 80.436382][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 80.439045][ T5309] iomap_write_begin+0x660/0x1bc0 [ 80.441318][ T5309] iomap_file_buffered_write+0x438/0x980 [ 80.443784][ T5309] xfs_file_buffered_write+0x201/0x890 [ 80.446084][ T5309] vfs_write+0x54b/0xa90 [ 80.447883][ T5309] ksys_write+0x145/0x250 [ 80.450148][ T5309] do_syscall_64+0xfa/0x3b0 [ 80.452110][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.454543][ T5309] page_owner free stack trace missing [ 80.456786][ T5309] Modules linked in: [ 80.458476][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 80.458493][ T5309] Tainted: [B]=BAD_PAGE [ 80.458498][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.458522][ T5309] Call Trace: [ 80.458529][ T5309] [ 80.458535][ T5309] dump_stack_lvl+0x189/0x250 [ 80.458556][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.458573][ T5309] ? __pfx_print_modules+0x10/0x10 [ 80.458589][ T5309] bad_page+0x180/0x1c0 [ 80.458607][ T5309] __free_frozen_pages+0xe17/0xe70 [ 80.458622][ T5309] __folio_put+0x21b/0x2c0 [ 80.458643][ T5309] ? __pfx___folio_put+0x10/0x10 [ 80.458658][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 80.458673][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 80.458686][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 80.458702][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 80.458719][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 80.458739][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 80.458755][ T5309] ? lockdep_unlock+0x89/0x120 [ 80.458777][ T5309] ? __lock_acquire+0xab9/0xd20 [ 80.458797][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 80.458813][ T5309] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.458827][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 80.458840][ T5309] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.458857][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 80.458870][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 80.458884][ T5309] evict+0x504/0x9c0 [ 80.458906][ T5309] ? __pfx_evict+0x10/0x10 [ 80.458924][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 80.458965][ T5309] evict_inodes+0x636/0x6c0 [ 80.458979][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 80.458992][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 80.459007][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 80.459024][ T5309] kill_block_super+0x44/0x90 [ 80.459037][ T5309] xfs_kill_sb+0x15/0x50 [ 80.459048][ T5309] deactivate_locked_super+0xbc/0x130 [ 80.459064][ T5309] cleanup_mnt+0x425/0x4c0 [ 80.459080][ T5309] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.459095][ T5309] task_work_run+0x1d4/0x260 [ 80.459111][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 80.459124][ T5309] ? __x64_sys_umount+0x122/0x160 [ 80.459136][ T5309] ? exit_to_user_mode_loop+0x40/0x110 [ 80.459154][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 80.459169][ T5309] do_syscall_64+0x2bd/0x3b0 [ 80.459186][ T5309] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.459205][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.459217][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 80.459230][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.459241][ T5309] RIP: 0033:0x7f09c2e9a647 [ 80.459253][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 80.459263][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 80.459277][ T5309] RAX: 0000000000000000 RBX: 000000000001368c RCX: 00007f09c2e9a647 [ 80.459284][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 80.459292][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 80.459299][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 80.459307][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 80.459319][ T5309] [ 80.607816][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 80.802827][ T5320] loop0: detected capacity change from 0 to 32768 [ 80.810981][ T5320] XFS: ikeep mount option is deprecated. [ 80.822251][ T5320] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.850015][ T5320] XFS (loop0): Ending clean mount [ 80.857359][ T5320] XFS (loop0): Quotacheck needed: Please wait. [ 80.866345][ T5320] XFS (loop0): Quotacheck: Done. [ 80.894130][ T5309] BUG: Bad page state in process syz-executor125 pfn:49801 [ 80.897368][ T5309] page does not match folio [ 80.899739][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49801 [ 80.903939][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 80.907154][ T5309] raw: 04fff00000000000 ffffea0001260000 00000000ffffffff ffffffffffffffff [ 80.911653][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 80.915317][ T5309] page dumped because: nonzero pincount [ 80.917608][ T5309] page_owner tracks the page as allocated [ 80.920745][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5320, tgid 5320 (syz-executor125), ts 80872473213, free_ts 80607470154 [ 80.931881][ T5309] post_alloc_hook+0x240/0x2a0 [ 80.934078][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 80.936617][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 80.939809][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 80.942046][ T5309] alloc_pages_noprof+0xa9/0x190 [ 80.944210][ T5309] folio_alloc_noprof+0x1e/0x30 [ 80.946424][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 80.949466][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 80.951824][ T5309] iomap_write_begin+0x660/0x1bc0 [ 80.954104][ T5309] iomap_file_buffered_write+0x438/0x980 [ 80.956525][ T5309] xfs_file_buffered_write+0x201/0x890 [ 80.959209][ T5309] vfs_write+0x54b/0xa90 [ 80.961117][ T5309] ksys_write+0x145/0x250 [ 80.962961][ T5309] do_syscall_64+0xfa/0x3b0 [ 80.964923][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.967269][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 80.970275][ T5309] free_unref_folios+0xc66/0x14d0 [ 80.972657][ T5309] folios_put_refs+0x559/0x640 [ 80.974827][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 80.977279][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 80.979701][ T5309] evict+0x504/0x9c0 [ 80.981448][ T5309] evict_inodes+0x636/0x6c0 [ 80.983372][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 80.985679][ T5309] kill_block_super+0x44/0x90 [ 80.987664][ T5309] xfs_kill_sb+0x15/0x50 [ 80.989975][ T5309] deactivate_locked_super+0xbc/0x130 [ 80.992466][ T5309] cleanup_mnt+0x425/0x4c0 [ 80.994543][ T5309] task_work_run+0x1d4/0x260 [ 80.996628][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 80.999521][ T5309] do_syscall_64+0x2bd/0x3b0 [ 81.001693][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.004353][ T5309] Modules linked in: [ 81.006049][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 81.006067][ T5309] Tainted: [B]=BAD_PAGE [ 81.006071][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.006078][ T5309] Call Trace: [ 81.006084][ T5309] [ 81.006090][ T5309] dump_stack_lvl+0x189/0x250 [ 81.006109][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.006124][ T5309] ? __pfx_print_modules+0x10/0x10 [ 81.006136][ T5309] ? uncharge_batch+0x19e/0x250 [ 81.006149][ T5309] bad_page+0x180/0x1c0 [ 81.006165][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 81.006177][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 81.006190][ T5309] __folio_put+0x21b/0x2c0 [ 81.006204][ T5309] ? __pfx___folio_put+0x10/0x10 [ 81.006218][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 81.006231][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.006242][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 81.006258][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 81.006273][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 81.006290][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 81.006303][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 81.006316][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.006338][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 81.006354][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.006368][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.006377][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.006397][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.006407][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.006419][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 81.006432][ T5309] evict+0x504/0x9c0 [ 81.006449][ T5309] ? __pfx_evict+0x10/0x10 [ 81.006464][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.006474][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 81.006487][ T5309] evict_inodes+0x636/0x6c0 [ 81.006500][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 81.006511][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 81.006524][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 81.006541][ T5309] kill_block_super+0x44/0x90 [ 81.006552][ T5309] xfs_kill_sb+0x15/0x50 [ 81.006562][ T5309] deactivate_locked_super+0xbc/0x130 [ 81.006577][ T5309] cleanup_mnt+0x425/0x4c0 [ 81.006593][ T5309] task_work_run+0x1d4/0x260 [ 81.006608][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 81.006620][ T5309] ? __x64_sys_umount+0x122/0x160 [ 81.006630][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 81.006640][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.006650][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 81.006665][ T5309] do_syscall_64+0x2bd/0x3b0 [ 81.006683][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.006694][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 81.006705][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.006716][ T5309] RIP: 0033:0x7f09c2e9a647 [ 81.006728][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.006736][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 81.006749][ T5309] RAX: 0000000000000000 RBX: 0000000000013a8e RCX: 00007f09c2e9a647 [ 81.006756][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 81.006762][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 81.006769][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 81.006776][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 81.006788][ T5309] [ 81.006820][ T5309] BUG: Bad page state in process syz-executor125 pfn:49800 [ 81.162123][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49800 [ 81.166016][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 81.169963][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 81.174472][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 81.178470][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.182596][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 81.186431][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.190579][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.194438][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 81.198321][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 81.202035][ T5309] page_owner tracks the page as allocated [ 81.204409][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5320, tgid 5320 (syz-executor125), ts 80872473213, free_ts 80607470154 [ 81.215373][ T5309] post_alloc_hook+0x240/0x2a0 [ 81.217585][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 81.220478][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.223060][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 81.225210][ T5309] alloc_pages_noprof+0xa9/0x190 [ 81.227417][ T5309] folio_alloc_noprof+0x1e/0x30 [ 81.230003][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 81.232572][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 81.234826][ T5309] iomap_write_begin+0x660/0x1bc0 [ 81.237142][ T5309] iomap_file_buffered_write+0x438/0x980 [ 81.240093][ T5309] xfs_file_buffered_write+0x201/0x890 [ 81.242540][ T5309] vfs_write+0x54b/0xa90 [ 81.244560][ T5309] ksys_write+0x145/0x250 [ 81.246520][ T5309] do_syscall_64+0xfa/0x3b0 [ 81.249065][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.251808][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 81.254607][ T5309] free_unref_folios+0xc66/0x14d0 [ 81.256988][ T5309] folios_put_refs+0x559/0x640 [ 81.259654][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 81.262322][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 81.264429][ T5309] evict+0x504/0x9c0 [ 81.265987][ T5309] evict_inodes+0x636/0x6c0 [ 81.267693][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 81.270511][ T5309] kill_block_super+0x44/0x90 [ 81.272570][ T5309] xfs_kill_sb+0x15/0x50 [ 81.274468][ T5309] deactivate_locked_super+0xbc/0x130 [ 81.276934][ T5309] cleanup_mnt+0x425/0x4c0 [ 81.279312][ T5309] task_work_run+0x1d4/0x260 [ 81.281636][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 81.284104][ T5309] do_syscall_64+0x2bd/0x3b0 [ 81.286339][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.289557][ T5309] Modules linked in: [ 81.291424][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 81.291441][ T5309] Tainted: [B]=BAD_PAGE [ 81.291445][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.291451][ T5309] Call Trace: [ 81.291457][ T5309] [ 81.291462][ T5309] dump_stack_lvl+0x189/0x250 [ 81.291483][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.291498][ T5309] ? __pfx_print_modules+0x10/0x10 [ 81.291513][ T5309] bad_page+0x180/0x1c0 [ 81.291529][ T5309] __free_frozen_pages+0xe17/0xe70 [ 81.291543][ T5309] __folio_put+0x21b/0x2c0 [ 81.291557][ T5309] ? __pfx___folio_put+0x10/0x10 [ 81.291570][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 81.291584][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.291595][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 81.291610][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 81.291626][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 81.291643][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 81.291656][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 81.291668][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.291689][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 81.291705][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.291718][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.291728][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.291740][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.291751][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.291762][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 81.291776][ T5309] evict+0x504/0x9c0 [ 81.291794][ T5309] ? __pfx_evict+0x10/0x10 [ 81.291810][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.291819][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 81.291833][ T5309] evict_inodes+0x636/0x6c0 [ 81.291845][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 81.291857][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 81.291871][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 81.291887][ T5309] kill_block_super+0x44/0x90 [ 81.291897][ T5309] xfs_kill_sb+0x15/0x50 [ 81.291908][ T5309] deactivate_locked_super+0xbc/0x130 [ 81.291923][ T5309] cleanup_mnt+0x425/0x4c0 [ 81.291938][ T5309] task_work_run+0x1d4/0x260 [ 81.291953][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 81.291966][ T5309] ? __x64_sys_umount+0x122/0x160 [ 81.291976][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 81.291986][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.291996][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 81.292012][ T5309] do_syscall_64+0x2bd/0x3b0 [ 81.292028][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.292038][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 81.292051][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.292061][ T5309] RIP: 0033:0x7f09c2e9a647 [ 81.292072][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.292082][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 81.292094][ T5309] RAX: 0000000000000000 RBX: 0000000000013a8e RCX: 00007f09c2e9a647 [ 81.292102][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 81.292108][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 81.292114][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 81.292121][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 81.292132][ T5309] [ 81.292502][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 81.621539][ T5329] loop0: detected capacity change from 0 to 32768 [ 81.630833][ T5329] XFS: ikeep mount option is deprecated. [ 81.642246][ T5329] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.672121][ T5329] XFS (loop0): Ending clean mount [ 81.675171][ T5329] XFS (loop0): Quotacheck needed: Please wait. [ 81.686760][ T5329] XFS (loop0): Quotacheck: Done. [ 81.714245][ T5309] BUG: Bad page state in process syz-executor125 pfn:49a01 [ 81.717572][ T5309] page does not match folio [ 81.719878][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49a01 [ 81.724306][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 81.727836][ T5309] raw: 04fff00000000000 ffffea0001268000 00000000ffffffff ffffffffffffffff [ 81.732577][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 81.736108][ T5309] page dumped because: nonzero pincount [ 81.739208][ T5309] page_owner tracks the page as allocated [ 81.741841][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5329, tgid 5329 (syz-executor125), ts 81693905888, free_ts 81292175937 [ 81.752783][ T5309] post_alloc_hook+0x240/0x2a0 [ 81.754819][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 81.756859][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 81.759775][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 81.762098][ T5309] alloc_pages_noprof+0xa9/0x190 [ 81.763862][ T5309] folio_alloc_noprof+0x1e/0x30 [ 81.765756][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 81.768144][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 81.770967][ T5309] iomap_write_begin+0x660/0x1bc0 [ 81.773199][ T5309] iomap_file_buffered_write+0x438/0x980 [ 81.775844][ T5309] xfs_file_buffered_write+0x201/0x890 [ 81.778381][ T5309] vfs_write+0x54b/0xa90 [ 81.780735][ T5309] ksys_write+0x145/0x250 [ 81.782752][ T5309] do_syscall_64+0xfa/0x3b0 [ 81.784911][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.787733][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 81.791600][ T5309] free_unref_folios+0xc66/0x14d0 [ 81.794204][ T5309] folios_put_refs+0x559/0x640 [ 81.796789][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 81.800280][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 81.802711][ T5309] evict+0x504/0x9c0 [ 81.804599][ T5309] evict_inodes+0x636/0x6c0 [ 81.806572][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 81.809498][ T5309] kill_block_super+0x44/0x90 [ 81.811768][ T5309] xfs_kill_sb+0x15/0x50 [ 81.813756][ T5309] deactivate_locked_super+0xbc/0x130 [ 81.816301][ T5309] cleanup_mnt+0x425/0x4c0 [ 81.818423][ T5309] task_work_run+0x1d4/0x260 [ 81.821109][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 81.823590][ T5309] do_syscall_64+0x2bd/0x3b0 [ 81.825923][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.829275][ T5309] Modules linked in: [ 81.831188][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 81.831207][ T5309] Tainted: [B]=BAD_PAGE [ 81.831211][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.831217][ T5309] Call Trace: [ 81.831223][ T5309] [ 81.831228][ T5309] dump_stack_lvl+0x189/0x250 [ 81.831248][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.831264][ T5309] ? __pfx_print_modules+0x10/0x10 [ 81.831276][ T5309] ? uncharge_batch+0x19e/0x250 [ 81.831288][ T5309] bad_page+0x180/0x1c0 [ 81.831304][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 81.831317][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 81.831331][ T5309] __folio_put+0x21b/0x2c0 [ 81.831346][ T5309] ? __pfx___folio_put+0x10/0x10 [ 81.831360][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 81.831374][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.831385][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 81.831413][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 81.831429][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 81.831445][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 81.831458][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 81.831470][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.831491][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 81.831501][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.831516][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.831528][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.831533][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.831541][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.831547][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 81.831554][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 81.831562][ T5309] evict+0x504/0x9c0 [ 81.831573][ T5309] ? __pfx_evict+0x10/0x10 [ 81.831583][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.831593][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 81.831605][ T5309] evict_inodes+0x636/0x6c0 [ 81.831619][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 81.831630][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 81.831643][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 81.831659][ T5309] kill_block_super+0x44/0x90 [ 81.831670][ T5309] xfs_kill_sb+0x15/0x50 [ 81.831681][ T5309] deactivate_locked_super+0xbc/0x130 [ 81.831695][ T5309] cleanup_mnt+0x425/0x4c0 [ 81.831711][ T5309] task_work_run+0x1d4/0x260 [ 81.831726][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 81.831735][ T5309] ? __x64_sys_umount+0x122/0x160 [ 81.831742][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 81.831748][ T5309] ? rcu_is_watching+0x15/0xb0 [ 81.831755][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 81.831770][ T5309] do_syscall_64+0x2bd/0x3b0 [ 81.831788][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.831798][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 81.831811][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.831821][ T5309] RIP: 0033:0x7f09c2e9a647 [ 81.831832][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.831841][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 81.831854][ T5309] RAX: 0000000000000000 RBX: 0000000000013dc7 RCX: 00007f09c2e9a647 [ 81.831861][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 81.831867][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 81.831873][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 81.831880][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 81.831891][ T5309] [ 81.831921][ T5309] BUG: Bad page state in process syz-executor125 pfn:49a00 [ 81.992439][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49a00 [ 81.995860][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 82.000053][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 82.004075][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 82.007496][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.011355][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 82.015063][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.019011][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.022636][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 82.026389][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.029875][ T5309] page_owner tracks the page as allocated [ 82.032405][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5329, tgid 5329 (syz-executor125), ts 81693905888, free_ts 81292175937 [ 82.042586][ T5309] post_alloc_hook+0x240/0x2a0 [ 82.044656][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 82.047337][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 82.050411][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 82.052637][ T5309] alloc_pages_noprof+0xa9/0x190 [ 82.054675][ T5309] folio_alloc_noprof+0x1e/0x30 [ 82.056839][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 82.059871][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 82.062240][ T5309] iomap_write_begin+0x660/0x1bc0 [ 82.064595][ T5309] iomap_file_buffered_write+0x438/0x980 [ 82.067085][ T5309] xfs_file_buffered_write+0x201/0x890 [ 82.069816][ T5309] vfs_write+0x54b/0xa90 [ 82.071896][ T5309] ksys_write+0x145/0x250 [ 82.073885][ T5309] do_syscall_64+0xfa/0x3b0 [ 82.075926][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.078311][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 82.081563][ T5309] free_unref_folios+0xc66/0x14d0 [ 82.083712][ T5309] folios_put_refs+0x559/0x640 [ 82.085576][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 82.087998][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 82.090634][ T5309] evict+0x504/0x9c0 [ 82.092433][ T5309] evict_inodes+0x636/0x6c0 [ 82.094383][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 82.096661][ T5309] kill_block_super+0x44/0x90 [ 82.099401][ T5309] xfs_kill_sb+0x15/0x50 [ 82.101129][ T5309] deactivate_locked_super+0xbc/0x130 [ 82.103360][ T5309] cleanup_mnt+0x425/0x4c0 [ 82.105345][ T5309] task_work_run+0x1d4/0x260 [ 82.107231][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 82.109795][ T5309] do_syscall_64+0x2bd/0x3b0 [ 82.111908][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.114474][ T5309] Modules linked in: [ 82.116134][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 82.116149][ T5309] Tainted: [B]=BAD_PAGE [ 82.116153][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.116161][ T5309] Call Trace: [ 82.116167][ T5309] [ 82.116171][ T5309] dump_stack_lvl+0x189/0x250 [ 82.116191][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.116205][ T5309] ? __pfx_print_modules+0x10/0x10 [ 82.116221][ T5309] bad_page+0x180/0x1c0 [ 82.116238][ T5309] __free_frozen_pages+0xe17/0xe70 [ 82.116251][ T5309] __folio_put+0x21b/0x2c0 [ 82.116264][ T5309] ? __pfx___folio_put+0x10/0x10 [ 82.116278][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 82.116292][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 82.116303][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 82.116327][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 82.116342][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 82.116359][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 82.116372][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 82.116385][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 82.116401][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 82.116408][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.116417][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.116426][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.116431][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.116439][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.116445][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.116452][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 82.116460][ T5309] evict+0x504/0x9c0 [ 82.116471][ T5309] ? __pfx_evict+0x10/0x10 [ 82.116480][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.116486][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 82.116495][ T5309] evict_inodes+0x636/0x6c0 [ 82.116503][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 82.116515][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 82.116526][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 82.116543][ T5309] kill_block_super+0x44/0x90 [ 82.116553][ T5309] xfs_kill_sb+0x15/0x50 [ 82.116562][ T5309] deactivate_locked_super+0xbc/0x130 [ 82.116577][ T5309] cleanup_mnt+0x425/0x4c0 [ 82.116592][ T5309] task_work_run+0x1d4/0x260 [ 82.116605][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 82.116617][ T5309] ? __x64_sys_umount+0x122/0x160 [ 82.116627][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 82.116637][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.116647][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 82.116663][ T5309] do_syscall_64+0x2bd/0x3b0 [ 82.116680][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.116690][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 82.116702][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.116713][ T5309] RIP: 0033:0x7f09c2e9a647 [ 82.116724][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 82.116733][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 82.116746][ T5309] RAX: 0000000000000000 RBX: 0000000000013dc7 RCX: 00007f09c2e9a647 [ 82.116753][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 82.116760][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 82.116766][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 82.116773][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 82.116784][ T5309] [ 82.117152][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 82.465077][ T5338] loop0: detected capacity change from 0 to 32768 [ 82.472107][ T5338] XFS: ikeep mount option is deprecated. [ 82.486465][ T5338] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.515111][ T5338] XFS (loop0): Ending clean mount [ 82.520044][ T5338] XFS (loop0): Quotacheck needed: Please wait. [ 82.531141][ T5338] XFS (loop0): Quotacheck: Done. [ 82.556263][ T5309] BUG: Bad page state in process syz-executor125 pfn:49c01 [ 82.559922][ T5309] page does not match folio [ 82.562043][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49c01 [ 82.566494][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 82.571168][ T5309] raw: 04fff00000000000 ffffea0001270000 00000000ffffffff ffffffffffffffff [ 82.575120][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 82.579681][ T5309] page dumped because: nonzero pincount [ 82.582250][ T5309] page_owner tracks the page as allocated [ 82.584894][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5338, tgid 5338 (syz-executor125), ts 82537231698, free_ts 82116827957 [ 82.596156][ T5309] post_alloc_hook+0x240/0x2a0 [ 82.598440][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 82.603740][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 82.606547][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 82.609092][ T5309] alloc_pages_noprof+0xa9/0x190 [ 82.611484][ T5309] folio_alloc_noprof+0x1e/0x30 [ 82.613699][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 82.616211][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 82.619011][ T5309] iomap_write_begin+0x660/0x1bc0 [ 82.621346][ T5309] iomap_file_buffered_write+0x438/0x980 [ 82.623857][ T5309] xfs_file_buffered_write+0x201/0x890 [ 82.626346][ T5309] vfs_write+0x54b/0xa90 [ 82.628298][ T5309] ksys_write+0x145/0x250 [ 82.630653][ T5309] do_syscall_64+0xfa/0x3b0 [ 82.632809][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.635600][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 82.639277][ T5309] free_unref_folios+0xc66/0x14d0 [ 82.641659][ T5309] folios_put_refs+0x559/0x640 [ 82.643961][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 82.646555][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 82.649418][ T5309] evict+0x504/0x9c0 [ 82.651380][ T5309] evict_inodes+0x636/0x6c0 [ 82.653358][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 82.655743][ T5309] kill_block_super+0x44/0x90 [ 82.657765][ T5309] xfs_kill_sb+0x15/0x50 [ 82.660216][ T5309] deactivate_locked_super+0xbc/0x130 [ 82.662565][ T5309] cleanup_mnt+0x425/0x4c0 [ 82.664523][ T5309] task_work_run+0x1d4/0x260 [ 82.666409][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 82.669021][ T5309] do_syscall_64+0x2bd/0x3b0 [ 82.671136][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.673801][ T5309] Modules linked in: [ 82.675564][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 82.675581][ T5309] Tainted: [B]=BAD_PAGE [ 82.675584][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.675591][ T5309] Call Trace: [ 82.675597][ T5309] [ 82.675602][ T5309] dump_stack_lvl+0x189/0x250 [ 82.675632][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.675647][ T5309] ? __pfx_print_modules+0x10/0x10 [ 82.675660][ T5309] ? uncharge_batch+0x19e/0x250 [ 82.675674][ T5309] bad_page+0x180/0x1c0 [ 82.675689][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 82.675701][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 82.675714][ T5309] __folio_put+0x21b/0x2c0 [ 82.675729][ T5309] ? __pfx___folio_put+0x10/0x10 [ 82.675743][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 82.675756][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 82.675768][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 82.675784][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 82.675800][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 82.675817][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 82.675829][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 82.675841][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 82.675861][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 82.675878][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.675891][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.675900][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.675912][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.675922][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.675933][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 82.675945][ T5309] evict+0x504/0x9c0 [ 82.675963][ T5309] ? __pfx_evict+0x10/0x10 [ 82.675977][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.675987][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 82.676001][ T5309] evict_inodes+0x636/0x6c0 [ 82.676014][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 82.676025][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 82.676039][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 82.676054][ T5309] kill_block_super+0x44/0x90 [ 82.676065][ T5309] xfs_kill_sb+0x15/0x50 [ 82.676076][ T5309] deactivate_locked_super+0xbc/0x130 [ 82.676090][ T5309] cleanup_mnt+0x425/0x4c0 [ 82.676105][ T5309] task_work_run+0x1d4/0x260 [ 82.676118][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 82.676130][ T5309] ? __x64_sys_umount+0x122/0x160 [ 82.676139][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 82.676148][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.676157][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 82.676172][ T5309] do_syscall_64+0x2bd/0x3b0 [ 82.676188][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.676198][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 82.676209][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.676219][ T5309] RIP: 0033:0x7f09c2e9a647 [ 82.676231][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 82.676241][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 82.676253][ T5309] RAX: 0000000000000000 RBX: 000000000001410d RCX: 00007f09c2e9a647 [ 82.676261][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 82.676267][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 82.676274][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 82.676281][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 82.676292][ T5309] [ 82.676319][ T5309] BUG: Bad page state in process syz-executor125 pfn:49c00 [ 82.840853][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49c00 [ 82.844821][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 82.848821][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 82.853312][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 82.857138][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.861321][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 82.865137][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.869510][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.873477][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 82.877341][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.885243][ T5309] page_owner tracks the page as allocated [ 82.889253][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5338, tgid 5338 (syz-executor125), ts 82537231698, free_ts 82116827957 [ 82.901343][ T5309] post_alloc_hook+0x240/0x2a0 [ 82.903336][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 82.905856][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 82.909142][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 82.911342][ T5309] alloc_pages_noprof+0xa9/0x190 [ 82.913379][ T5309] folio_alloc_noprof+0x1e/0x30 [ 82.915437][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 82.917792][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 82.920496][ T5309] iomap_write_begin+0x660/0x1bc0 [ 82.922752][ T5309] iomap_file_buffered_write+0x438/0x980 [ 82.925186][ T5309] xfs_file_buffered_write+0x201/0x890 [ 82.927560][ T5309] vfs_write+0x54b/0xa90 [ 82.929869][ T5309] ksys_write+0x145/0x250 [ 82.931870][ T5309] do_syscall_64+0xfa/0x3b0 [ 82.933925][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.936624][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 82.939897][ T5309] free_unref_folios+0xc66/0x14d0 [ 82.942212][ T5309] folios_put_refs+0x559/0x640 [ 82.944363][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 82.946988][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 82.949883][ T5309] evict+0x504/0x9c0 [ 82.951659][ T5309] evict_inodes+0x636/0x6c0 [ 82.953600][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 82.955936][ T5309] kill_block_super+0x44/0x90 [ 82.957958][ T5309] xfs_kill_sb+0x15/0x50 [ 82.960300][ T5309] deactivate_locked_super+0xbc/0x130 [ 82.962622][ T5309] cleanup_mnt+0x425/0x4c0 [ 82.964662][ T5309] task_work_run+0x1d4/0x260 [ 82.966711][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 82.969530][ T5309] do_syscall_64+0x2bd/0x3b0 [ 82.971753][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.974477][ T5309] Modules linked in: [ 82.976363][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 82.976382][ T5309] Tainted: [B]=BAD_PAGE [ 82.976386][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.976393][ T5309] Call Trace: [ 82.976400][ T5309] [ 82.976405][ T5309] dump_stack_lvl+0x189/0x250 [ 82.976439][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.976456][ T5309] ? __pfx_print_modules+0x10/0x10 [ 82.976472][ T5309] bad_page+0x180/0x1c0 [ 82.976489][ T5309] __free_frozen_pages+0xe17/0xe70 [ 82.976504][ T5309] __folio_put+0x21b/0x2c0 [ 82.976518][ T5309] ? __pfx___folio_put+0x10/0x10 [ 82.976534][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 82.976549][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 82.976561][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 82.976578][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 82.976594][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 82.976613][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 82.976627][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 82.976640][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 82.976726][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 82.976742][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.976754][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.976765][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.976778][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.976788][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 82.976800][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 82.976812][ T5309] evict+0x504/0x9c0 [ 82.976830][ T5309] ? __pfx_evict+0x10/0x10 [ 82.976845][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.976855][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 82.976869][ T5309] evict_inodes+0x636/0x6c0 [ 82.976882][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 82.976894][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 82.976908][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 82.976926][ T5309] kill_block_super+0x44/0x90 [ 82.976937][ T5309] xfs_kill_sb+0x15/0x50 [ 82.976949][ T5309] deactivate_locked_super+0xbc/0x130 [ 82.976965][ T5309] cleanup_mnt+0x425/0x4c0 [ 82.976982][ T5309] task_work_run+0x1d4/0x260 [ 82.976998][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 82.977012][ T5309] ? __x64_sys_umount+0x122/0x160 [ 82.977022][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 82.977033][ T5309] ? rcu_is_watching+0x15/0xb0 [ 82.977044][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 82.977062][ T5309] do_syscall_64+0x2bd/0x3b0 [ 82.977080][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.977090][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 82.977102][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.977113][ T5309] RIP: 0033:0x7f09c2e9a647 [ 82.977192][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 82.977204][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 82.977218][ T5309] RAX: 0000000000000000 RBX: 000000000001410d RCX: 00007f09c2e9a647 [ 82.977226][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 82.977233][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 82.977240][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 82.977248][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 82.977260][ T5309] [ 82.977751][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 83.313452][ T5347] loop0: detected capacity change from 0 to 32768 [ 83.326488][ T5347] XFS: ikeep mount option is deprecated. [ 83.362217][ T5347] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.376977][ T5347] XFS (loop0): Ending clean mount [ 83.380878][ T5347] XFS (loop0): Quotacheck needed: Please wait. [ 83.388188][ T5347] XFS (loop0): Quotacheck: Done. [ 83.413347][ T5309] BUG: Bad page state in process syz-executor125 pfn:49e01 [ 83.416697][ T5309] page does not match folio [ 83.418994][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x49e01 [ 83.423342][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 83.426619][ T5309] raw: 04fff00000000000 ffffea0001278000 00000000ffffffff ffffffffffffffff [ 83.431153][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 83.435013][ T5309] page dumped because: nonzero pincount [ 83.437354][ T5309] page_owner tracks the page as allocated [ 83.440498][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5347, tgid 5347 (syz-executor125), ts 83394449677, free_ts 82977321971 [ 83.451218][ T5309] post_alloc_hook+0x240/0x2a0 [ 83.453441][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 83.455922][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 83.459201][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 83.461536][ T5309] alloc_pages_noprof+0xa9/0x190 [ 83.463829][ T5309] folio_alloc_noprof+0x1e/0x30 [ 83.465867][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 83.468194][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 83.470821][ T5309] iomap_write_begin+0x660/0x1bc0 [ 83.472949][ T5309] iomap_file_buffered_write+0x438/0x980 [ 83.475282][ T5309] xfs_file_buffered_write+0x201/0x890 [ 83.477502][ T5309] vfs_write+0x54b/0xa90 [ 83.480465][ T5309] ksys_write+0x145/0x250 [ 83.482471][ T5309] do_syscall_64+0xfa/0x3b0 [ 83.484575][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.487267][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 83.490595][ T5309] free_unref_folios+0xc66/0x14d0 [ 83.492886][ T5309] folios_put_refs+0x559/0x640 [ 83.495104][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 83.497648][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 83.500311][ T5309] evict+0x504/0x9c0 [ 83.502117][ T5309] evict_inodes+0x636/0x6c0 [ 83.504228][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 83.506597][ T5309] kill_block_super+0x44/0x90 [ 83.509167][ T5309] xfs_kill_sb+0x15/0x50 [ 83.511104][ T5309] deactivate_locked_super+0xbc/0x130 [ 83.513458][ T5309] cleanup_mnt+0x425/0x4c0 [ 83.515561][ T5309] task_work_run+0x1d4/0x260 [ 83.517713][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 83.520796][ T5309] do_syscall_64+0x2bd/0x3b0 [ 83.522935][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.525514][ T5309] Modules linked in: [ 83.527276][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 83.527293][ T5309] Tainted: [B]=BAD_PAGE [ 83.527297][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.527305][ T5309] Call Trace: [ 83.527312][ T5309] [ 83.527318][ T5309] dump_stack_lvl+0x189/0x250 [ 83.527337][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.527352][ T5309] ? __pfx_print_modules+0x10/0x10 [ 83.527365][ T5309] ? uncharge_batch+0x19e/0x250 [ 83.527378][ T5309] bad_page+0x180/0x1c0 [ 83.527392][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 83.527405][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 83.527419][ T5309] __folio_put+0x21b/0x2c0 [ 83.527432][ T5309] ? __pfx___folio_put+0x10/0x10 [ 83.527447][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 83.527461][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 83.527472][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 83.527487][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 83.527502][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 83.527518][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 83.527536][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.527548][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.527558][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.527567][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.527579][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.527589][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.527612][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 83.527625][ T5309] evict+0x504/0x9c0 [ 83.527642][ T5309] ? __pfx_evict+0x10/0x10 [ 83.527657][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.527668][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 83.527683][ T5309] evict_inodes+0x636/0x6c0 [ 83.527694][ T5309] ? xfs_log_force+0x4cf/0x930 [ 83.527706][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 83.527718][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 83.527733][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 83.527751][ T5309] kill_block_super+0x44/0x90 [ 83.527762][ T5309] xfs_kill_sb+0x15/0x50 [ 83.527773][ T5309] deactivate_locked_super+0xbc/0x130 [ 83.527789][ T5309] cleanup_mnt+0x425/0x4c0 [ 83.527806][ T5309] task_work_run+0x1d4/0x260 [ 83.527822][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 83.527835][ T5309] ? __x64_sys_umount+0x122/0x160 [ 83.527846][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 83.527858][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.527868][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 83.527884][ T5309] do_syscall_64+0x2bd/0x3b0 [ 83.527903][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.527915][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 83.527928][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.527939][ T5309] RIP: 0033:0x7f09c2e9a647 [ 83.527951][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 83.527961][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 83.527975][ T5309] RAX: 0000000000000000 RBX: 0000000000014453 RCX: 00007f09c2e9a647 [ 83.527983][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 83.527990][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 83.527997][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 83.528004][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 83.528017][ T5309] [ 83.528049][ T5309] BUG: Bad page state in process syz-executor125 pfn:49e00 [ 83.685885][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49e00 [ 83.689934][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 83.693500][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 83.697660][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 83.701771][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.705574][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 83.709869][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.713664][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.717368][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 83.721448][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 83.724593][ T5309] page_owner tracks the page as allocated [ 83.728061][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5347, tgid 5347 (syz-executor125), ts 83394449677, free_ts 82977321971 [ 83.739708][ T5309] post_alloc_hook+0x240/0x2a0 [ 83.741964][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 83.744493][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 83.747094][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 83.749921][ T5309] alloc_pages_noprof+0xa9/0x190 [ 83.752168][ T5309] folio_alloc_noprof+0x1e/0x30 [ 83.754393][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 83.756924][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 83.760177][ T5309] iomap_write_begin+0x660/0x1bc0 [ 83.762401][ T5309] iomap_file_buffered_write+0x438/0x980 [ 83.764878][ T5309] xfs_file_buffered_write+0x201/0x890 [ 83.767258][ T5309] vfs_write+0x54b/0xa90 [ 83.769504][ T5309] ksys_write+0x145/0x250 [ 83.771510][ T5309] do_syscall_64+0xfa/0x3b0 [ 83.773623][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.776185][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 83.779431][ T5309] free_unref_folios+0xc66/0x14d0 [ 83.781690][ T5309] folios_put_refs+0x559/0x640 [ 83.783766][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 83.786233][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 83.788375][ T5309] evict+0x504/0x9c0 [ 83.791076][ T5309] evict_inodes+0x636/0x6c0 [ 83.793163][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 83.795563][ T5309] kill_block_super+0x44/0x90 [ 83.797745][ T5309] xfs_kill_sb+0x15/0x50 [ 83.800156][ T5309] deactivate_locked_super+0xbc/0x130 [ 83.802546][ T5309] cleanup_mnt+0x425/0x4c0 [ 83.804518][ T5309] task_work_run+0x1d4/0x260 [ 83.806570][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 83.809380][ T5309] do_syscall_64+0x2bd/0x3b0 [ 83.811496][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.814189][ T5309] Modules linked in: [ 83.815977][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 83.815994][ T5309] Tainted: [B]=BAD_PAGE [ 83.815998][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.816005][ T5309] Call Trace: [ 83.816012][ T5309] [ 83.816019][ T5309] dump_stack_lvl+0x189/0x250 [ 83.816050][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.816066][ T5309] ? __pfx_print_modules+0x10/0x10 [ 83.816082][ T5309] bad_page+0x180/0x1c0 [ 83.816099][ T5309] __free_frozen_pages+0xe17/0xe70 [ 83.816113][ T5309] __folio_put+0x21b/0x2c0 [ 83.816128][ T5309] ? __pfx___folio_put+0x10/0x10 [ 83.816143][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 83.816159][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 83.816172][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 83.816188][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 83.816205][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 83.816225][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 83.816249][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.816265][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.816279][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.816288][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.816301][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.816312][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 83.816325][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 83.816339][ T5309] evict+0x504/0x9c0 [ 83.816358][ T5309] ? __pfx_evict+0x10/0x10 [ 83.816372][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.816382][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 83.816396][ T5309] evict_inodes+0x636/0x6c0 [ 83.816408][ T5309] ? xfs_log_force+0x4cf/0x930 [ 83.816419][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 83.816431][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 83.816446][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 83.816463][ T5309] kill_block_super+0x44/0x90 [ 83.816475][ T5309] xfs_kill_sb+0x15/0x50 [ 83.816486][ T5309] deactivate_locked_super+0xbc/0x130 [ 83.816501][ T5309] cleanup_mnt+0x425/0x4c0 [ 83.816517][ T5309] task_work_run+0x1d4/0x260 [ 83.816532][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 83.816545][ T5309] ? __x64_sys_umount+0x122/0x160 [ 83.816555][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 83.816567][ T5309] ? rcu_is_watching+0x15/0xb0 [ 83.816578][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 83.816592][ T5309] do_syscall_64+0x2bd/0x3b0 [ 83.816621][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.816633][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 83.816645][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.816657][ T5309] RIP: 0033:0x7f09c2e9a647 [ 83.816669][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 83.816683][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 83.816701][ T5309] RAX: 0000000000000000 RBX: 0000000000014453 RCX: 00007f09c2e9a647 [ 83.816709][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 83.816716][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 83.816723][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 83.816731][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 83.816743][ T5309] [ 83.817396][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 84.137585][ T5356] loop0: detected capacity change from 0 to 32768 [ 84.173932][ T5356] XFS: ikeep mount option is deprecated. [ 84.184540][ T5356] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.202136][ T5356] XFS (loop0): Ending clean mount [ 84.205225][ T5356] XFS (loop0): Quotacheck needed: Please wait. [ 84.212405][ T5356] XFS (loop0): Quotacheck: Done. [ 84.237577][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a001 [ 84.241476][ T5309] page does not match folio [ 84.243630][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a001 [ 84.248078][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 84.251773][ T5309] raw: 04fff00000000000 ffffea0001280000 00000000ffffffff ffffffffffffffff [ 84.255506][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 84.260215][ T5309] page dumped because: nonzero pincount [ 84.262663][ T5309] page_owner tracks the page as allocated [ 84.265179][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5356, tgid 5356 (syz-executor125), ts 84217705154, free_ts 83816843078 [ 84.275658][ T5309] post_alloc_hook+0x240/0x2a0 [ 84.277862][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 84.280685][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 84.283340][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 84.285554][ T5309] alloc_pages_noprof+0xa9/0x190 [ 84.287945][ T5309] folio_alloc_noprof+0x1e/0x30 [ 84.290858][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 84.293509][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 84.295792][ T5309] iomap_write_begin+0x660/0x1bc0 [ 84.297982][ T5309] iomap_file_buffered_write+0x438/0x980 [ 84.301034][ T5309] xfs_file_buffered_write+0x201/0x890 [ 84.303537][ T5309] vfs_write+0x54b/0xa90 [ 84.305445][ T5309] ksys_write+0x145/0x250 [ 84.307417][ T5309] do_syscall_64+0xfa/0x3b0 [ 84.309909][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.312570][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 84.315287][ T5309] free_unref_folios+0xc66/0x14d0 [ 84.317469][ T5309] folios_put_refs+0x559/0x640 [ 84.320458][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 84.322926][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 84.325003][ T5309] evict+0x504/0x9c0 [ 84.326670][ T5309] evict_inodes+0x636/0x6c0 [ 84.329085][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 84.331483][ T5309] kill_block_super+0x44/0x90 [ 84.333549][ T5309] xfs_kill_sb+0x15/0x50 [ 84.335515][ T5309] deactivate_locked_super+0xbc/0x130 [ 84.337805][ T5309] cleanup_mnt+0x425/0x4c0 [ 84.340202][ T5309] task_work_run+0x1d4/0x260 [ 84.342368][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 84.344712][ T5309] do_syscall_64+0x2bd/0x3b0 [ 84.346727][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.349723][ T5309] Modules linked in: [ 84.351540][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 84.351557][ T5309] Tainted: [B]=BAD_PAGE [ 84.351561][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.351567][ T5309] Call Trace: [ 84.351573][ T5309] [ 84.351577][ T5309] dump_stack_lvl+0x189/0x250 [ 84.351642][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.351658][ T5309] ? __pfx_print_modules+0x10/0x10 [ 84.351671][ T5309] ? uncharge_batch+0x19e/0x250 [ 84.351684][ T5309] bad_page+0x180/0x1c0 [ 84.351699][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 84.351712][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 84.351725][ T5309] __folio_put+0x21b/0x2c0 [ 84.351740][ T5309] ? __pfx___folio_put+0x10/0x10 [ 84.351753][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 84.351767][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 84.351778][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 84.351794][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 84.351809][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 84.351826][ T5309] ? preempt_schedule_thunk+0x16/0x30 [ 84.351840][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 84.351860][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.351870][ T5309] ? __pfx___blk_flush_plug+0x10/0x10 [ 84.351886][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.351898][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.351907][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.351919][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.351928][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.351940][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 84.351952][ T5309] evict+0x504/0x9c0 [ 84.351969][ T5309] ? __pfx_evict+0x10/0x10 [ 84.351983][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.351993][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 84.352006][ T5309] evict_inodes+0x636/0x6c0 [ 84.352018][ T5309] ? xfs_log_force+0x4b4/0x930 [ 84.352029][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 84.352041][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 84.352055][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 84.352071][ T5309] kill_block_super+0x44/0x90 [ 84.352081][ T5309] xfs_kill_sb+0x15/0x50 [ 84.352092][ T5309] deactivate_locked_super+0xbc/0x130 [ 84.352106][ T5309] cleanup_mnt+0x425/0x4c0 [ 84.352121][ T5309] task_work_run+0x1d4/0x260 [ 84.352136][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 84.352148][ T5309] ? __x64_sys_umount+0x122/0x160 [ 84.352158][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 84.352168][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.352177][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 84.352193][ T5309] do_syscall_64+0x2bd/0x3b0 [ 84.352210][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.352221][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 84.352232][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.352242][ T5309] RIP: 0033:0x7f09c2e9a647 [ 84.352253][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 84.352262][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 84.352274][ T5309] RAX: 0000000000000000 RBX: 0000000000014797 RCX: 00007f09c2e9a647 [ 84.352282][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 84.352289][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 84.352295][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 84.352302][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 84.352312][ T5309] [ 84.352341][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a000 [ 84.519960][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a000 [ 84.523692][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 84.527134][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 84.531901][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 84.535759][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.539530][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 84.543277][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.547224][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.551524][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 84.555193][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 84.558401][ T5309] page_owner tracks the page as allocated [ 84.563638][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5356, tgid 5356 (syz-executor125), ts 84217705154, free_ts 83816843078 [ 84.573854][ T5309] post_alloc_hook+0x240/0x2a0 [ 84.575857][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 84.578362][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 84.581372][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 84.583575][ T5309] alloc_pages_noprof+0xa9/0x190 [ 84.585764][ T5309] folio_alloc_noprof+0x1e/0x30 [ 84.587970][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 84.591096][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 84.593392][ T5309] iomap_write_begin+0x660/0x1bc0 [ 84.595586][ T5309] iomap_file_buffered_write+0x438/0x980 [ 84.598117][ T5309] xfs_file_buffered_write+0x201/0x890 [ 84.601065][ T5309] vfs_write+0x54b/0xa90 [ 84.603059][ T5309] ksys_write+0x145/0x250 [ 84.605018][ T5309] do_syscall_64+0xfa/0x3b0 [ 84.607394][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.610866][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 84.613782][ T5309] free_unref_folios+0xc66/0x14d0 [ 84.616154][ T5309] folios_put_refs+0x559/0x640 [ 84.618338][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 84.621850][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 84.624128][ T5309] evict+0x504/0x9c0 [ 84.625860][ T5309] evict_inodes+0x636/0x6c0 [ 84.627966][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 84.630709][ T5309] kill_block_super+0x44/0x90 [ 84.632746][ T5309] xfs_kill_sb+0x15/0x50 [ 84.634634][ T5309] deactivate_locked_super+0xbc/0x130 [ 84.636958][ T5309] cleanup_mnt+0x425/0x4c0 [ 84.639285][ T5309] task_work_run+0x1d4/0x260 [ 84.641397][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 84.643631][ T5309] do_syscall_64+0x2bd/0x3b0 [ 84.645681][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.648336][ T5309] Modules linked in: [ 84.650684][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 84.650700][ T5309] Tainted: [B]=BAD_PAGE [ 84.650704][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.650710][ T5309] Call Trace: [ 84.650715][ T5309] [ 84.650719][ T5309] dump_stack_lvl+0x189/0x250 [ 84.650756][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.650773][ T5309] ? __pfx_print_modules+0x10/0x10 [ 84.650788][ T5309] bad_page+0x180/0x1c0 [ 84.650804][ T5309] __free_frozen_pages+0xe17/0xe70 [ 84.650819][ T5309] __folio_put+0x21b/0x2c0 [ 84.650833][ T5309] ? __pfx___folio_put+0x10/0x10 [ 84.650847][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 84.650865][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 84.650877][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 84.650923][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 84.650939][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 84.650957][ T5309] ? preempt_schedule_thunk+0x16/0x30 [ 84.650975][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 84.650997][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.651007][ T5309] ? __pfx___blk_flush_plug+0x10/0x10 [ 84.651023][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.651041][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.651051][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.651063][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.651073][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 84.651086][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 84.651098][ T5309] evict+0x504/0x9c0 [ 84.651120][ T5309] ? __pfx_evict+0x10/0x10 [ 84.651135][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.651145][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 84.651158][ T5309] evict_inodes+0x636/0x6c0 [ 84.651170][ T5309] ? xfs_log_force+0x4b4/0x930 [ 84.651182][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 84.651194][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 84.651208][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 84.651224][ T5309] kill_block_super+0x44/0x90 [ 84.651236][ T5309] xfs_kill_sb+0x15/0x50 [ 84.651246][ T5309] deactivate_locked_super+0xbc/0x130 [ 84.651260][ T5309] cleanup_mnt+0x425/0x4c0 [ 84.651276][ T5309] task_work_run+0x1d4/0x260 [ 84.651290][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 84.651302][ T5309] ? __x64_sys_umount+0x122/0x160 [ 84.651321][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 84.651331][ T5309] ? rcu_is_watching+0x15/0xb0 [ 84.651337][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 84.651348][ T5309] do_syscall_64+0x2bd/0x3b0 [ 84.651364][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.651373][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 84.651384][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.651394][ T5309] RIP: 0033:0x7f09c2e9a647 [ 84.651405][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 84.651414][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 84.651428][ T5309] RAX: 0000000000000000 RBX: 0000000000014797 RCX: 00007f09c2e9a647 [ 84.651435][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 84.651442][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 84.651448][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 84.651455][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 84.651466][ T5309] [ 84.651808][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 84.990378][ T5365] loop0: detected capacity change from 0 to 32768 [ 84.998003][ T5365] XFS: ikeep mount option is deprecated. [ 85.008073][ T5365] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.037098][ T5365] XFS (loop0): Ending clean mount [ 85.044853][ T5365] XFS (loop0): Quotacheck needed: Please wait. [ 85.052891][ T5365] XFS (loop0): Quotacheck: Done. [ 85.080796][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a201 [ 85.083989][ T5309] page does not match folio [ 85.085984][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a201 [ 85.091266][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 85.094630][ T5309] raw: 04fff00000000000 ffffea0001288000 00000000ffffffff ffffffffffffffff [ 85.098490][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 85.102842][ T5309] page dumped because: nonzero pincount [ 85.105377][ T5309] page_owner tracks the page as allocated [ 85.107966][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5365, tgid 5365 (syz-executor125), ts 85059330031, free_ts 84651511287 [ 85.118600][ T5309] post_alloc_hook+0x240/0x2a0 [ 85.120863][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 85.123236][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 85.125680][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 85.127692][ T5309] alloc_pages_noprof+0xa9/0x190 [ 85.130467][ T5309] folio_alloc_noprof+0x1e/0x30 [ 85.132650][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 85.135056][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 85.137296][ T5309] iomap_write_begin+0x660/0x1bc0 [ 85.139872][ T5309] iomap_file_buffered_write+0x438/0x980 [ 85.142351][ T5309] xfs_file_buffered_write+0x201/0x890 [ 85.144730][ T5309] vfs_write+0x54b/0xa90 [ 85.146624][ T5309] ksys_write+0x145/0x250 [ 85.148495][ T5309] do_syscall_64+0xfa/0x3b0 [ 85.151044][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.153696][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 85.156464][ T5309] free_unref_folios+0xc66/0x14d0 [ 85.159109][ T5309] folios_put_refs+0x559/0x640 [ 85.161312][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 85.163816][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 85.165907][ T5309] evict+0x504/0x9c0 [ 85.167683][ T5309] evict_inodes+0x636/0x6c0 [ 85.170184][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 85.172530][ T5309] kill_block_super+0x44/0x90 [ 85.174603][ T5309] xfs_kill_sb+0x15/0x50 [ 85.176420][ T5309] deactivate_locked_super+0xbc/0x130 [ 85.179093][ T5309] cleanup_mnt+0x425/0x4c0 [ 85.181147][ T5309] task_work_run+0x1d4/0x260 [ 85.183111][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 85.185356][ T5309] do_syscall_64+0x2bd/0x3b0 [ 85.187380][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.190538][ T5309] Modules linked in: [ 85.192371][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 85.192387][ T5309] Tainted: [B]=BAD_PAGE [ 85.192391][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.192398][ T5309] Call Trace: [ 85.192403][ T5309] [ 85.192408][ T5309] dump_stack_lvl+0x189/0x250 [ 85.192443][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.192458][ T5309] ? __pfx_print_modules+0x10/0x10 [ 85.192471][ T5309] ? uncharge_batch+0x19e/0x250 [ 85.192484][ T5309] bad_page+0x180/0x1c0 [ 85.192500][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 85.192512][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 85.192526][ T5309] __folio_put+0x21b/0x2c0 [ 85.192540][ T5309] ? __pfx___folio_put+0x10/0x10 [ 85.192555][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 85.192569][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.192580][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 85.192597][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 85.192613][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 85.192630][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 85.192643][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 85.192655][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.192676][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 85.192686][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.192702][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.192714][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.192722][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.192730][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.192740][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.192750][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 85.192769][ T5309] evict+0x504/0x9c0 [ 85.192785][ T5309] ? __pfx_evict+0x10/0x10 [ 85.192800][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.192814][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 85.192831][ T5309] evict_inodes+0x636/0x6c0 [ 85.192839][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 85.192846][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 85.192855][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 85.192865][ T5309] kill_block_super+0x44/0x90 [ 85.192876][ T5309] xfs_kill_sb+0x15/0x50 [ 85.192883][ T5309] deactivate_locked_super+0xbc/0x130 [ 85.192893][ T5309] cleanup_mnt+0x425/0x4c0 [ 85.192902][ T5309] task_work_run+0x1d4/0x260 [ 85.192912][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 85.192919][ T5309] ? __x64_sys_umount+0x122/0x160 [ 85.192925][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 85.192932][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.192941][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 85.192955][ T5309] do_syscall_64+0x2bd/0x3b0 [ 85.192972][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.192981][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 85.192993][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.193003][ T5309] RIP: 0033:0x7f09c2e9a647 [ 85.193014][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 85.193023][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 85.193035][ T5309] RAX: 0000000000000000 RBX: 0000000000014aea RCX: 00007f09c2e9a647 [ 85.193042][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 85.193049][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 85.193055][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 85.193062][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 85.193073][ T5309] [ 85.193102][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a200 [ 85.353866][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a200 [ 85.357605][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 85.394069][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 85.398491][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 85.409242][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.412928][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 85.416672][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.430348][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.434104][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 85.437804][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.441924][ T5309] page_owner tracks the page as allocated [ 85.444352][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5365, tgid 5365 (syz-executor125), ts 85059330031, free_ts 84651511287 [ 85.454919][ T5309] post_alloc_hook+0x240/0x2a0 [ 85.457096][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 85.459867][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 85.462481][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 85.464632][ T5309] alloc_pages_noprof+0xa9/0x190 [ 85.466705][ T5309] folio_alloc_noprof+0x1e/0x30 [ 85.469477][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 85.471926][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 85.474120][ T5309] iomap_write_begin+0x660/0x1bc0 [ 85.476315][ T5309] iomap_file_buffered_write+0x438/0x980 [ 85.479096][ T5309] xfs_file_buffered_write+0x201/0x890 [ 85.481513][ T5309] vfs_write+0x54b/0xa90 [ 85.483346][ T5309] ksys_write+0x145/0x250 [ 85.485226][ T5309] do_syscall_64+0xfa/0x3b0 [ 85.487232][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.490246][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 85.492895][ T5309] free_unref_folios+0xc66/0x14d0 [ 85.495299][ T5309] folios_put_refs+0x559/0x640 [ 85.497387][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 85.500695][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 85.503017][ T5309] evict+0x504/0x9c0 [ 85.504904][ T5309] evict_inodes+0x636/0x6c0 [ 85.507029][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 85.510040][ T5309] kill_block_super+0x44/0x90 [ 85.512472][ T5309] xfs_kill_sb+0x15/0x50 [ 85.514375][ T5309] deactivate_locked_super+0xbc/0x130 [ 85.516617][ T5309] cleanup_mnt+0x425/0x4c0 [ 85.518482][ T5309] task_work_run+0x1d4/0x260 [ 85.520705][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 85.523077][ T5309] do_syscall_64+0x2bd/0x3b0 [ 85.525050][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.528639][ T5309] Modules linked in: [ 85.530414][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 85.530426][ T5309] Tainted: [B]=BAD_PAGE [ 85.530429][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.530433][ T5309] Call Trace: [ 85.530438][ T5309] [ 85.530442][ T5309] dump_stack_lvl+0x189/0x250 [ 85.530461][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.530477][ T5309] ? __pfx_print_modules+0x10/0x10 [ 85.530488][ T5309] bad_page+0x180/0x1c0 [ 85.530499][ T5309] __free_frozen_pages+0xe17/0xe70 [ 85.530508][ T5309] __folio_put+0x21b/0x2c0 [ 85.530516][ T5309] ? __pfx___folio_put+0x10/0x10 [ 85.530525][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 85.530533][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.530541][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 85.530552][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 85.530561][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 85.530572][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 85.530591][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 85.530599][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.530611][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 85.530618][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.530629][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.530641][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.530649][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.530660][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.530671][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 85.530680][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 85.530690][ T5309] evict+0x504/0x9c0 [ 85.530706][ T5309] ? __pfx_evict+0x10/0x10 [ 85.530721][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.530731][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 85.530743][ T5309] evict_inodes+0x636/0x6c0 [ 85.530751][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 85.530758][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 85.530770][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 85.530785][ T5309] kill_block_super+0x44/0x90 [ 85.530796][ T5309] xfs_kill_sb+0x15/0x50 [ 85.530807][ T5309] deactivate_locked_super+0xbc/0x130 [ 85.530821][ T5309] cleanup_mnt+0x425/0x4c0 [ 85.530837][ T5309] task_work_run+0x1d4/0x260 [ 85.530851][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 85.530862][ T5309] ? __x64_sys_umount+0x122/0x160 [ 85.530871][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 85.530906][ T5309] ? rcu_is_watching+0x15/0xb0 [ 85.530917][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 85.530933][ T5309] do_syscall_64+0x2bd/0x3b0 [ 85.530949][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.530960][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 85.530971][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.530982][ T5309] RIP: 0033:0x7f09c2e9a647 [ 85.531004][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 85.531013][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 85.531025][ T5309] RAX: 0000000000000000 RBX: 0000000000014aea RCX: 00007f09c2e9a647 [ 85.531033][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 85.531039][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 85.531046][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 85.531052][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 85.531063][ T5309] [ 85.531409][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 85.892929][ T5374] loop0: detected capacity change from 0 to 32768 [ 85.903716][ T5374] XFS: ikeep mount option is deprecated. [ 85.915286][ T5374] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.947721][ T5374] XFS (loop0): Ending clean mount [ 85.951589][ T5374] XFS (loop0): Quotacheck needed: Please wait. [ 85.960033][ T5374] XFS (loop0): Quotacheck: Done. [ 85.984951][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a401 [ 85.988087][ T5309] page does not match folio [ 85.990674][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a401 [ 85.995053][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 85.998375][ T5309] raw: 04fff00000000000 ffffea0001290000 00000000ffffffff ffffffffffffffff [ 86.003134][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 86.006911][ T5309] page dumped because: nonzero pincount [ 86.010026][ T5309] page_owner tracks the page as allocated [ 86.012547][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5374, tgid 5374 (syz-executor125), ts 85965897331, free_ts 85531106732 [ 86.023137][ T5309] post_alloc_hook+0x240/0x2a0 [ 86.025426][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 86.027859][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.030694][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 86.032765][ T5309] alloc_pages_noprof+0xa9/0x190 [ 86.035466][ T5309] folio_alloc_noprof+0x1e/0x30 [ 86.037722][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 86.040656][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 86.043044][ T5309] iomap_write_begin+0x660/0x1bc0 [ 86.045268][ T5309] iomap_file_buffered_write+0x438/0x980 [ 86.047965][ T5309] xfs_file_buffered_write+0x201/0x890 [ 86.050905][ T5309] vfs_write+0x54b/0xa90 [ 86.052816][ T5309] ksys_write+0x145/0x250 [ 86.054764][ T5309] do_syscall_64+0xfa/0x3b0 [ 86.056903][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.059980][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 86.062720][ T5309] free_unref_folios+0xc66/0x14d0 [ 86.065073][ T5309] folios_put_refs+0x559/0x640 [ 86.067241][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 86.070173][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 86.072303][ T5309] evict+0x504/0x9c0 [ 86.074003][ T5309] evict_inodes+0x636/0x6c0 [ 86.075989][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 86.079493][ T5309] kill_block_super+0x44/0x90 [ 86.082247][ T5309] xfs_kill_sb+0x15/0x50 [ 86.084599][ T5309] deactivate_locked_super+0xbc/0x130 [ 86.087144][ T5309] cleanup_mnt+0x425/0x4c0 [ 86.089422][ T5309] task_work_run+0x1d4/0x260 [ 86.091509][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 86.093845][ T5309] do_syscall_64+0x2bd/0x3b0 [ 86.095822][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.098473][ T5309] Modules linked in: [ 86.101187][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 86.101210][ T5309] Tainted: [B]=BAD_PAGE [ 86.101215][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.101222][ T5309] Call Trace: [ 86.101226][ T5309] [ 86.101230][ T5309] dump_stack_lvl+0x189/0x250 [ 86.101298][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.101314][ T5309] ? __pfx_print_modules+0x10/0x10 [ 86.101327][ T5309] ? uncharge_batch+0x19e/0x250 [ 86.101339][ T5309] bad_page+0x180/0x1c0 [ 86.101363][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 86.101375][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 86.101389][ T5309] __folio_put+0x21b/0x2c0 [ 86.101402][ T5309] ? __pfx___folio_put+0x10/0x10 [ 86.101417][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 86.101431][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.101442][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 86.101458][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 86.101474][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 86.101491][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 86.101504][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 86.101516][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.101538][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 86.101549][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.101563][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.101576][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.101585][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.101596][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.101606][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.101618][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 86.101630][ T5309] evict+0x504/0x9c0 [ 86.101647][ T5309] ? __pfx_evict+0x10/0x10 [ 86.101661][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.101671][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 86.101685][ T5309] evict_inodes+0x636/0x6c0 [ 86.101697][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 86.101708][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 86.101722][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 86.101738][ T5309] kill_block_super+0x44/0x90 [ 86.101749][ T5309] xfs_kill_sb+0x15/0x50 [ 86.101760][ T5309] deactivate_locked_super+0xbc/0x130 [ 86.101775][ T5309] cleanup_mnt+0x425/0x4c0 [ 86.101790][ T5309] task_work_run+0x1d4/0x260 [ 86.101805][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 86.101817][ T5309] ? __x64_sys_umount+0x122/0x160 [ 86.101826][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 86.101856][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.101866][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 86.101881][ T5309] do_syscall_64+0x2bd/0x3b0 [ 86.101898][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.101909][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 86.101920][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.101930][ T5309] RIP: 0033:0x7f09c2e9a647 [ 86.101940][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.101949][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.101963][ T5309] RAX: 0000000000000000 RBX: 0000000000014e5f RCX: 00007f09c2e9a647 [ 86.101971][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 86.101977][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 86.101984][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 86.101990][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 86.102002][ T5309] [ 86.102109][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a400 [ 86.267246][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a400 [ 86.271293][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 86.274981][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 86.279403][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 86.283400][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.287150][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 86.291407][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.295195][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.299172][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 86.302840][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.306103][ T5309] page_owner tracks the page as allocated [ 86.309580][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5374, tgid 5374 (syz-executor125), ts 85965897331, free_ts 85531106732 [ 86.320557][ T5309] post_alloc_hook+0x240/0x2a0 [ 86.322718][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 86.324913][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.327231][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 86.329564][ T5309] alloc_pages_noprof+0xa9/0x190 [ 86.331609][ T5309] folio_alloc_noprof+0x1e/0x30 [ 86.333614][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 86.335918][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 86.338047][ T5309] iomap_write_begin+0x660/0x1bc0 [ 86.340478][ T5309] iomap_file_buffered_write+0x438/0x980 [ 86.342730][ T5309] xfs_file_buffered_write+0x201/0x890 [ 86.344926][ T5309] vfs_write+0x54b/0xa90 [ 86.346503][ T5309] ksys_write+0x145/0x250 [ 86.348429][ T5309] do_syscall_64+0xfa/0x3b0 [ 86.350863][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.353482][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 86.356234][ T5309] free_unref_folios+0xc66/0x14d0 [ 86.358829][ T5309] folios_put_refs+0x559/0x640 [ 86.360991][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 86.363485][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 86.365591][ T5309] evict+0x504/0x9c0 [ 86.367333][ T5309] evict_inodes+0x636/0x6c0 [ 86.370137][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 86.372404][ T5309] kill_block_super+0x44/0x90 [ 86.374380][ T5309] xfs_kill_sb+0x15/0x50 [ 86.376148][ T5309] deactivate_locked_super+0xbc/0x130 [ 86.378953][ T5309] cleanup_mnt+0x425/0x4c0 [ 86.380980][ T5309] task_work_run+0x1d4/0x260 [ 86.383119][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 86.385387][ T5309] do_syscall_64+0x2bd/0x3b0 [ 86.387300][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.390441][ T5309] Modules linked in: [ 86.392258][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 86.392275][ T5309] Tainted: [B]=BAD_PAGE [ 86.392279][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.392286][ T5309] Call Trace: [ 86.392291][ T5309] [ 86.392296][ T5309] dump_stack_lvl+0x189/0x250 [ 86.392328][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.392343][ T5309] ? __pfx_print_modules+0x10/0x10 [ 86.392358][ T5309] bad_page+0x180/0x1c0 [ 86.392374][ T5309] __free_frozen_pages+0xe17/0xe70 [ 86.392388][ T5309] __folio_put+0x21b/0x2c0 [ 86.392401][ T5309] ? __pfx___folio_put+0x10/0x10 [ 86.392415][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 86.392428][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.392439][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 86.392454][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 86.392471][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 86.392487][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 86.392500][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 86.392513][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.392533][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 86.392543][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.392558][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.392572][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.392581][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.392593][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.392612][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.392625][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 86.392638][ T5309] evict+0x504/0x9c0 [ 86.392655][ T5309] ? __pfx_evict+0x10/0x10 [ 86.392670][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.392681][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 86.392696][ T5309] evict_inodes+0x636/0x6c0 [ 86.392710][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 86.392721][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 86.392736][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 86.392754][ T5309] kill_block_super+0x44/0x90 [ 86.392764][ T5309] xfs_kill_sb+0x15/0x50 [ 86.392775][ T5309] deactivate_locked_super+0xbc/0x130 [ 86.392789][ T5309] cleanup_mnt+0x425/0x4c0 [ 86.392804][ T5309] task_work_run+0x1d4/0x260 [ 86.392818][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 86.392829][ T5309] ? __x64_sys_umount+0x122/0x160 [ 86.392838][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 86.392847][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.392858][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 86.392872][ T5309] do_syscall_64+0x2bd/0x3b0 [ 86.392889][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.392899][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 86.392910][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.392920][ T5309] RIP: 0033:0x7f09c2e9a647 [ 86.392932][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.392940][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.392952][ T5309] RAX: 0000000000000000 RBX: 0000000000014e5f RCX: 00007f09c2e9a647 [ 86.392960][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 86.392966][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 86.392973][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 86.392980][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 86.392990][ T5309] [ 86.393384][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 86.739752][ T5383] loop0: detected capacity change from 0 to 32768 [ 86.748313][ T5383] XFS: ikeep mount option is deprecated. [ 86.758206][ T5383] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.791530][ T5383] XFS (loop0): Ending clean mount [ 86.794617][ T5383] XFS (loop0): Quotacheck needed: Please wait. [ 86.803314][ T5383] XFS (loop0): Quotacheck: Done. [ 86.828335][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a601 [ 86.831941][ T5309] page does not match folio [ 86.833777][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a601 [ 86.837495][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 86.841092][ T5309] raw: 04fff00000000000 ffffea0001298000 00000000ffffffff ffffffffffffffff [ 86.844173][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 86.847653][ T5309] page dumped because: nonzero pincount [ 86.850609][ T5309] page_owner tracks the page as allocated [ 86.852796][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5383, tgid 5383 (syz-executor125), ts 86809364932, free_ts 86393041223 [ 86.862149][ T5309] post_alloc_hook+0x240/0x2a0 [ 86.864019][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 86.866193][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 86.868917][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 86.870927][ T5309] alloc_pages_noprof+0xa9/0x190 [ 86.872998][ T5309] folio_alloc_noprof+0x1e/0x30 [ 86.875460][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 86.878087][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 86.882418][ T5309] iomap_write_begin+0x660/0x1bc0 [ 86.884519][ T5309] iomap_file_buffered_write+0x438/0x980 [ 86.886657][ T5309] xfs_file_buffered_write+0x201/0x890 [ 86.889019][ T5309] vfs_write+0x54b/0xa90 [ 86.890956][ T5309] ksys_write+0x145/0x250 [ 86.892642][ T5309] do_syscall_64+0xfa/0x3b0 [ 86.894529][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.896727][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 86.899960][ T5309] free_unref_folios+0xc66/0x14d0 [ 86.902676][ T5309] folios_put_refs+0x559/0x640 [ 86.904670][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 86.906967][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 86.909580][ T5309] evict+0x504/0x9c0 [ 86.911273][ T5309] evict_inodes+0x636/0x6c0 [ 86.913212][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 86.915323][ T5309] kill_block_super+0x44/0x90 [ 86.917587][ T5309] xfs_kill_sb+0x15/0x50 [ 86.919826][ T5309] deactivate_locked_super+0xbc/0x130 [ 86.922096][ T5309] cleanup_mnt+0x425/0x4c0 [ 86.923945][ T5309] task_work_run+0x1d4/0x260 [ 86.925857][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 86.927813][ T5309] do_syscall_64+0x2bd/0x3b0 [ 86.930208][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.932565][ T5309] Modules linked in: [ 86.934272][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 86.934287][ T5309] Tainted: [B]=BAD_PAGE [ 86.934291][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.934298][ T5309] Call Trace: [ 86.934303][ T5309] [ 86.934308][ T5309] dump_stack_lvl+0x189/0x250 [ 86.934337][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.934351][ T5309] ? __pfx_print_modules+0x10/0x10 [ 86.934363][ T5309] ? uncharge_batch+0x19e/0x250 [ 86.934376][ T5309] bad_page+0x180/0x1c0 [ 86.934393][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 86.934404][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 86.934416][ T5309] __folio_put+0x21b/0x2c0 [ 86.934428][ T5309] ? __pfx___folio_put+0x10/0x10 [ 86.934442][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 86.934455][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.934466][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 86.934481][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 86.934498][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 86.934514][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 86.934526][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 86.934544][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.934566][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 86.934582][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.934595][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.934604][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.934617][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.934627][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 86.934639][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 86.934651][ T5309] evict+0x504/0x9c0 [ 86.934669][ T5309] ? __pfx_evict+0x10/0x10 [ 86.934684][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.934693][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 86.934707][ T5309] evict_inodes+0x636/0x6c0 [ 86.934719][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 86.934731][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 86.934745][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 86.934761][ T5309] kill_block_super+0x44/0x90 [ 86.934772][ T5309] xfs_kill_sb+0x15/0x50 [ 86.934782][ T5309] deactivate_locked_super+0xbc/0x130 [ 86.934797][ T5309] cleanup_mnt+0x425/0x4c0 [ 86.934812][ T5309] task_work_run+0x1d4/0x260 [ 86.934826][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 86.934839][ T5309] ? __x64_sys_umount+0x122/0x160 [ 86.934848][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 86.934858][ T5309] ? rcu_is_watching+0x15/0xb0 [ 86.934893][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 86.934971][ T5309] do_syscall_64+0x2bd/0x3b0 [ 86.935044][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.935057][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 86.935069][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.935080][ T5309] RIP: 0033:0x7f09c2e9a647 [ 86.935090][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.935099][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.935111][ T5309] RAX: 0000000000000000 RBX: 00000000000151ba RCX: 00007f09c2e9a647 [ 86.935118][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 86.935125][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 86.935131][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 86.935138][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 86.935149][ T5309] [ 86.935182][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a600 [ 87.094561][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a600 [ 87.098282][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 87.102134][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 87.106364][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 87.110404][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.114057][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 87.117708][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.121815][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.125648][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 87.129902][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.133521][ T5309] page_owner tracks the page as allocated [ 87.136076][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5383, tgid 5383 (syz-executor125), ts 86809364932, free_ts 86393041223 [ 87.147125][ T5309] post_alloc_hook+0x240/0x2a0 [ 87.149213][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 87.151622][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.153982][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 87.156042][ T5309] alloc_pages_noprof+0xa9/0x190 [ 87.158109][ T5309] folio_alloc_noprof+0x1e/0x30 [ 87.160951][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 87.163972][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 87.166465][ T5309] iomap_write_begin+0x660/0x1bc0 [ 87.169133][ T5309] iomap_file_buffered_write+0x438/0x980 [ 87.171725][ T5309] xfs_file_buffered_write+0x201/0x890 [ 87.174101][ T5309] vfs_write+0x54b/0xa90 [ 87.176022][ T5309] ksys_write+0x145/0x250 [ 87.178022][ T5309] do_syscall_64+0xfa/0x3b0 [ 87.180604][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.183265][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 87.186004][ T5309] free_unref_folios+0xc66/0x14d0 [ 87.188224][ T5309] folios_put_refs+0x559/0x640 [ 87.190771][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 87.193302][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 87.195587][ T5309] evict+0x504/0x9c0 [ 87.197548][ T5309] evict_inodes+0x636/0x6c0 [ 87.200181][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 87.202582][ T5309] kill_block_super+0x44/0x90 [ 87.204790][ T5309] xfs_kill_sb+0x15/0x50 [ 87.206709][ T5309] deactivate_locked_super+0xbc/0x130 [ 87.209256][ T5309] cleanup_mnt+0x425/0x4c0 [ 87.211384][ T5309] task_work_run+0x1d4/0x260 [ 87.213541][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 87.215990][ T5309] do_syscall_64+0x2bd/0x3b0 [ 87.218061][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.221142][ T5309] Modules linked in: [ 87.223010][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 87.223026][ T5309] Tainted: [B]=BAD_PAGE [ 87.223031][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.223037][ T5309] Call Trace: [ 87.223042][ T5309] [ 87.223046][ T5309] dump_stack_lvl+0x189/0x250 [ 87.223066][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.223082][ T5309] ? __pfx_print_modules+0x10/0x10 [ 87.223097][ T5309] bad_page+0x180/0x1c0 [ 87.223113][ T5309] __free_frozen_pages+0xe17/0xe70 [ 87.223126][ T5309] __folio_put+0x21b/0x2c0 [ 87.223139][ T5309] ? __pfx___folio_put+0x10/0x10 [ 87.223154][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 87.223166][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 87.223177][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 87.223192][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 87.223207][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 87.223224][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 87.223237][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 87.223250][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 87.223271][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 87.223286][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.223305][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.223314][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.223326][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.223337][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.223348][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 87.223367][ T5309] evict+0x504/0x9c0 [ 87.223383][ T5309] ? __pfx_evict+0x10/0x10 [ 87.223397][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.223407][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 87.223419][ T5309] evict_inodes+0x636/0x6c0 [ 87.223430][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 87.223440][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 87.223453][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 87.223469][ T5309] kill_block_super+0x44/0x90 [ 87.223478][ T5309] xfs_kill_sb+0x15/0x50 [ 87.223487][ T5309] deactivate_locked_super+0xbc/0x130 [ 87.223500][ T5309] cleanup_mnt+0x425/0x4c0 [ 87.223516][ T5309] task_work_run+0x1d4/0x260 [ 87.223528][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 87.223540][ T5309] ? __x64_sys_umount+0x122/0x160 [ 87.223549][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 87.223559][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.223569][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 87.223584][ T5309] do_syscall_64+0x2bd/0x3b0 [ 87.223600][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.223610][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 87.223621][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.223632][ T5309] RIP: 0033:0x7f09c2e9a647 [ 87.223688][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 87.223699][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 87.223712][ T5309] RAX: 0000000000000000 RBX: 00000000000151ba RCX: 00007f09c2e9a647 [ 87.223720][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 87.223726][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 87.223733][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 87.223740][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 87.223751][ T5309] [ 87.224090][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 87.546972][ T5392] loop0: detected capacity change from 0 to 32768 [ 87.556292][ T5392] XFS: ikeep mount option is deprecated. [ 87.565511][ T5392] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.597445][ T5392] XFS (loop0): Ending clean mount [ 87.601273][ T5392] XFS (loop0): Quotacheck needed: Please wait. [ 87.609711][ T5392] XFS (loop0): Quotacheck: Done. [ 87.630535][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a801 [ 87.633393][ T5309] page does not match folio [ 87.635562][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4a801 [ 87.641444][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 87.645559][ T5309] raw: 04fff00000000000 ffffea00012a0000 00000000ffffffff ffffffffffffffff [ 87.651280][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 87.655186][ T5309] page dumped because: nonzero pincount [ 87.657667][ T5309] page_owner tracks the page as allocated [ 87.660603][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5392, tgid 5392 (syz-executor125), ts 87615846253, free_ts 87223795057 [ 87.670690][ T5309] post_alloc_hook+0x240/0x2a0 [ 87.672639][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 87.674926][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.677325][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 87.679966][ T5309] alloc_pages_noprof+0xa9/0x190 [ 87.682125][ T5309] folio_alloc_noprof+0x1e/0x30 [ 87.684074][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 87.686555][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 87.689181][ T5309] iomap_write_begin+0x660/0x1bc0 [ 87.691555][ T5309] iomap_file_buffered_write+0x438/0x980 [ 87.694104][ T5309] xfs_file_buffered_write+0x201/0x890 [ 87.696682][ T5309] vfs_write+0x54b/0xa90 [ 87.699262][ T5309] ksys_write+0x145/0x250 [ 87.701362][ T5309] do_syscall_64+0xfa/0x3b0 [ 87.703577][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.706371][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 87.709908][ T5309] free_unref_folios+0xc66/0x14d0 [ 87.712257][ T5309] folios_put_refs+0x559/0x640 [ 87.714449][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 87.717128][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 87.719781][ T5309] evict+0x504/0x9c0 [ 87.721475][ T5309] evict_inodes+0x636/0x6c0 [ 87.723519][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 87.725936][ T5309] kill_block_super+0x44/0x90 [ 87.728095][ T5309] xfs_kill_sb+0x15/0x50 [ 87.730561][ T5309] deactivate_locked_super+0xbc/0x130 [ 87.733048][ T5309] cleanup_mnt+0x425/0x4c0 [ 87.735150][ T5309] task_work_run+0x1d4/0x260 [ 87.737281][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 87.740160][ T5309] do_syscall_64+0x2bd/0x3b0 [ 87.742317][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.745039][ T5309] Modules linked in: [ 87.746894][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 87.746912][ T5309] Tainted: [B]=BAD_PAGE [ 87.746916][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.746923][ T5309] Call Trace: [ 87.746931][ T5309] [ 87.746937][ T5309] dump_stack_lvl+0x189/0x250 [ 87.746957][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.746973][ T5309] ? __pfx_print_modules+0x10/0x10 [ 87.746988][ T5309] ? uncharge_batch+0x19e/0x250 [ 87.747001][ T5309] bad_page+0x180/0x1c0 [ 87.747018][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 87.747031][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 87.747046][ T5309] __folio_put+0x21b/0x2c0 [ 87.747060][ T5309] ? __pfx___folio_put+0x10/0x10 [ 87.747075][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 87.747090][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 87.747102][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 87.747119][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 87.747136][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 87.747154][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 87.747168][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 87.747181][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 87.747204][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 87.747221][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.747235][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.747246][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.747259][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.747271][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 87.747283][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 87.747296][ T5309] evict+0x504/0x9c0 [ 87.747314][ T5309] ? __pfx_evict+0x10/0x10 [ 87.747330][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.747341][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 87.747356][ T5309] evict_inodes+0x636/0x6c0 [ 87.747369][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 87.747381][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 87.747396][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 87.747412][ T5309] kill_block_super+0x44/0x90 [ 87.747423][ T5309] xfs_kill_sb+0x15/0x50 [ 87.747435][ T5309] deactivate_locked_super+0xbc/0x130 [ 87.747451][ T5309] cleanup_mnt+0x425/0x4c0 [ 87.747467][ T5309] task_work_run+0x1d4/0x260 [ 87.747483][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 87.747495][ T5309] ? __x64_sys_umount+0x122/0x160 [ 87.747506][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 87.747517][ T5309] ? rcu_is_watching+0x15/0xb0 [ 87.747527][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 87.747545][ T5309] do_syscall_64+0x2bd/0x3b0 [ 87.747562][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.747573][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 87.747585][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.747597][ T5309] RIP: 0033:0x7f09c2e9a647 [ 87.747608][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 87.747623][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 87.747635][ T5309] RAX: 0000000000000000 RBX: 00000000000154ee RCX: 00007f09c2e9a647 [ 87.747642][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 87.747649][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 87.747656][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 87.747664][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 87.747675][ T5309] [ 87.747707][ T5309] BUG: Bad page state in process syz-executor125 pfn:4a800 [ 87.912121][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 87.916044][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 87.919949][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 87.924099][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 87.927635][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.931703][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 87.935316][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.939281][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.942896][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 87.946534][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.949965][ T5309] page_owner tracks the page as allocated [ 87.952462][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5392, tgid 5392 (syz-executor125), ts 87615846253, free_ts 87223795057 [ 87.963379][ T5309] post_alloc_hook+0x240/0x2a0 [ 87.965562][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 87.968032][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.971103][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 87.973284][ T5309] alloc_pages_noprof+0xa9/0x190 [ 87.975479][ T5309] folio_alloc_noprof+0x1e/0x30 [ 87.977609][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 87.980490][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 87.982723][ T5309] iomap_write_begin+0x660/0x1bc0 [ 87.984981][ T5309] iomap_file_buffered_write+0x438/0x980 [ 87.987451][ T5309] xfs_file_buffered_write+0x201/0x890 [ 87.990285][ T5309] vfs_write+0x54b/0xa90 [ 87.992229][ T5309] ksys_write+0x145/0x250 [ 87.994120][ T5309] do_syscall_64+0xfa/0x3b0 [ 87.996192][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.999191][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 88.001984][ T5309] free_unref_folios+0xc66/0x14d0 [ 88.005589][ T5309] folios_put_refs+0x559/0x640 [ 88.007851][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 88.011777][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 88.014046][ T5309] evict+0x504/0x9c0 [ 88.015894][ T5309] evict_inodes+0x636/0x6c0 [ 88.017971][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 88.021176][ T5309] kill_block_super+0x44/0x90 [ 88.023294][ T5309] xfs_kill_sb+0x15/0x50 [ 88.025173][ T5309] deactivate_locked_super+0xbc/0x130 [ 88.027547][ T5309] cleanup_mnt+0x425/0x4c0 [ 88.030008][ T5309] task_work_run+0x1d4/0x260 [ 88.032819][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 88.035191][ T5309] do_syscall_64+0x2bd/0x3b0 [ 88.037299][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.040336][ T5309] Modules linked in: [ 88.042177][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 88.042194][ T5309] Tainted: [B]=BAD_PAGE [ 88.042203][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.042211][ T5309] Call Trace: [ 88.042216][ T5309] [ 88.042220][ T5309] dump_stack_lvl+0x189/0x250 [ 88.042249][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.042266][ T5309] ? __pfx_print_modules+0x10/0x10 [ 88.042283][ T5309] bad_page+0x180/0x1c0 [ 88.042302][ T5309] __free_frozen_pages+0xe17/0xe70 [ 88.042318][ T5309] __folio_put+0x21b/0x2c0 [ 88.042332][ T5309] ? __pfx___folio_put+0x10/0x10 [ 88.042348][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 88.042364][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 88.042377][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 88.042394][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 88.042411][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 88.042431][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 88.042445][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 88.042459][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 88.042483][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 88.042501][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.042515][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.042526][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.042540][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.042551][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.042565][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 88.042587][ T5309] evict+0x504/0x9c0 [ 88.042606][ T5309] ? __pfx_evict+0x10/0x10 [ 88.042622][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.042633][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 88.042648][ T5309] evict_inodes+0x636/0x6c0 [ 88.042663][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 88.042675][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 88.042690][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 88.042708][ T5309] kill_block_super+0x44/0x90 [ 88.042721][ T5309] xfs_kill_sb+0x15/0x50 [ 88.042733][ T5309] deactivate_locked_super+0xbc/0x130 [ 88.042749][ T5309] cleanup_mnt+0x425/0x4c0 [ 88.042766][ T5309] task_work_run+0x1d4/0x260 [ 88.042782][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 88.042796][ T5309] ? __x64_sys_umount+0x122/0x160 [ 88.042807][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 88.042819][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.042830][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 88.042847][ T5309] do_syscall_64+0x2bd/0x3b0 [ 88.042893][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.042905][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 88.042918][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.042929][ T5309] RIP: 0033:0x7f09c2e9a647 [ 88.042941][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 88.042951][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 88.042965][ T5309] RAX: 0000000000000000 RBX: 00000000000154ee RCX: 00007f09c2e9a647 [ 88.042973][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 88.042981][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 88.042988][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 88.042996][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 88.043008][ T5309] [ 88.043467][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 88.396561][ T5401] loop0: detected capacity change from 0 to 32768 [ 88.403634][ T5401] XFS: ikeep mount option is deprecated. [ 88.414246][ T5401] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.442356][ T5401] XFS (loop0): Ending clean mount [ 88.445304][ T5401] XFS (loop0): Quotacheck needed: Please wait. [ 88.457058][ T5401] XFS (loop0): Quotacheck: Done. [ 88.483155][ T5309] BUG: Bad page state in process syz-executor125 pfn:4aa01 [ 88.487161][ T5309] page does not match folio [ 88.490027][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4aa01 [ 88.494084][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 88.497244][ T5309] raw: 04fff00000000000 ffffea00012a8000 00000000ffffffff ffffffffffffffff [ 88.502114][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 88.505778][ T5309] page dumped because: nonzero pincount [ 88.508098][ T5309] page_owner tracks the page as allocated [ 88.511300][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5401, tgid 5401 (syz-executor125), ts 88464509566, free_ts 88043059616 [ 88.521815][ T5309] post_alloc_hook+0x240/0x2a0 [ 88.524049][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 88.526439][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 88.529567][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 88.531754][ T5309] alloc_pages_noprof+0xa9/0x190 [ 88.533902][ T5309] folio_alloc_noprof+0x1e/0x30 [ 88.536068][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 88.538305][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 88.541041][ T5309] iomap_write_begin+0x660/0x1bc0 [ 88.543314][ T5309] iomap_file_buffered_write+0x438/0x980 [ 88.545641][ T5309] xfs_file_buffered_write+0x201/0x890 [ 88.548016][ T5309] vfs_write+0x54b/0xa90 [ 88.550283][ T5309] ksys_write+0x145/0x250 [ 88.552150][ T5309] do_syscall_64+0xfa/0x3b0 [ 88.554142][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.556622][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 88.559743][ T5309] free_unref_folios+0xc66/0x14d0 [ 88.561846][ T5309] folios_put_refs+0x559/0x640 [ 88.563906][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 88.566244][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 88.568258][ T5309] evict+0x504/0x9c0 [ 88.570356][ T5309] evict_inodes+0x636/0x6c0 [ 88.572300][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 88.574949][ T5309] kill_block_super+0x44/0x90 [ 88.577040][ T5309] xfs_kill_sb+0x15/0x50 [ 88.579259][ T5309] deactivate_locked_super+0xbc/0x130 [ 88.581556][ T5309] cleanup_mnt+0x425/0x4c0 [ 88.583450][ T5309] task_work_run+0x1d4/0x260 [ 88.585416][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 88.587803][ T5309] do_syscall_64+0x2bd/0x3b0 [ 88.590250][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.592975][ T5309] Modules linked in: [ 88.594874][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 88.594895][ T5309] Tainted: [B]=BAD_PAGE [ 88.594899][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.594906][ T5309] Call Trace: [ 88.594913][ T5309] [ 88.594918][ T5309] dump_stack_lvl+0x189/0x250 [ 88.595080][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.595096][ T5309] ? __pfx_print_modules+0x10/0x10 [ 88.595109][ T5309] ? uncharge_batch+0x19e/0x250 [ 88.595122][ T5309] bad_page+0x180/0x1c0 [ 88.595138][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 88.595151][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 88.595165][ T5309] __folio_put+0x21b/0x2c0 [ 88.595179][ T5309] ? __pfx___folio_put+0x10/0x10 [ 88.595193][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 88.595206][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 88.595218][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 88.595233][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 88.595249][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 88.595266][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 88.595279][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 88.595292][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 88.595312][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 88.595329][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.595342][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.595352][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.595364][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.595374][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.595386][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 88.595398][ T5309] evict+0x504/0x9c0 [ 88.595415][ T5309] ? __pfx_evict+0x10/0x10 [ 88.595430][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.595439][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 88.595453][ T5309] evict_inodes+0x636/0x6c0 [ 88.595466][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 88.595478][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 88.595497][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 88.595521][ T5309] kill_block_super+0x44/0x90 [ 88.595531][ T5309] xfs_kill_sb+0x15/0x50 [ 88.595542][ T5309] deactivate_locked_super+0xbc/0x130 [ 88.595556][ T5309] cleanup_mnt+0x425/0x4c0 [ 88.595572][ T5309] task_work_run+0x1d4/0x260 [ 88.595586][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 88.595597][ T5309] ? __x64_sys_umount+0x122/0x160 [ 88.595607][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 88.595617][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.595627][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 88.595642][ T5309] do_syscall_64+0x2bd/0x3b0 [ 88.595659][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.595670][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 88.595682][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.595691][ T5309] RIP: 0033:0x7f09c2e9a647 [ 88.595702][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 88.595712][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 88.595724][ T5309] RAX: 0000000000000000 RBX: 0000000000015834 RCX: 00007f09c2e9a647 [ 88.595732][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 88.595738][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 88.595745][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 88.595752][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 88.595762][ T5309] [ 88.595791][ T5309] BUG: Bad page state in process syz-executor125 pfn:4aa00 [ 88.767929][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4aa00 [ 88.772072][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 88.776476][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 88.782089][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 88.785768][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.791750][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 88.795609][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.800341][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.804097][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 88.807860][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 88.811561][ T5309] page_owner tracks the page as allocated [ 88.814073][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5401, tgid 5401 (syz-executor125), ts 88464509566, free_ts 88043059616 [ 88.824789][ T5309] post_alloc_hook+0x240/0x2a0 [ 88.826996][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 88.829769][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 88.832393][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 88.834638][ T5309] alloc_pages_noprof+0xa9/0x190 [ 88.836836][ T5309] folio_alloc_noprof+0x1e/0x30 [ 88.839407][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 88.841883][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 88.844097][ T5309] iomap_write_begin+0x660/0x1bc0 [ 88.846365][ T5309] iomap_file_buffered_write+0x438/0x980 [ 88.849287][ T5309] xfs_file_buffered_write+0x201/0x890 [ 88.851795][ T5309] vfs_write+0x54b/0xa90 [ 88.853643][ T5309] ksys_write+0x145/0x250 [ 88.855540][ T5309] do_syscall_64+0xfa/0x3b0 [ 88.857661][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.860858][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 88.863738][ T5309] free_unref_folios+0xc66/0x14d0 [ 88.866034][ T5309] folios_put_refs+0x559/0x640 [ 88.868142][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 88.871606][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 88.873674][ T5309] evict+0x504/0x9c0 [ 88.875474][ T5309] evict_inodes+0x636/0x6c0 [ 88.877479][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 88.882141][ T5309] kill_block_super+0x44/0x90 [ 88.884339][ T5309] xfs_kill_sb+0x15/0x50 [ 88.886242][ T5309] deactivate_locked_super+0xbc/0x130 [ 88.888967][ T5309] cleanup_mnt+0x425/0x4c0 [ 88.891012][ T5309] task_work_run+0x1d4/0x260 [ 88.893102][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 88.895411][ T5309] do_syscall_64+0x2bd/0x3b0 [ 88.897513][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.900410][ T5309] Modules linked in: [ 88.902109][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 88.902127][ T5309] Tainted: [B]=BAD_PAGE [ 88.902131][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.902139][ T5309] Call Trace: [ 88.902145][ T5309] [ 88.902150][ T5309] dump_stack_lvl+0x189/0x250 [ 88.902181][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.902198][ T5309] ? __pfx_print_modules+0x10/0x10 [ 88.902214][ T5309] bad_page+0x180/0x1c0 [ 88.902231][ T5309] __free_frozen_pages+0xe17/0xe70 [ 88.902246][ T5309] __folio_put+0x21b/0x2c0 [ 88.902260][ T5309] ? __pfx___folio_put+0x10/0x10 [ 88.902275][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 88.902290][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 88.902302][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 88.902320][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 88.902337][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 88.902356][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 88.902370][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 88.902383][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 88.902406][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 88.902424][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.902437][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.902449][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.902462][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.902472][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 88.902484][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 88.902503][ T5309] evict+0x504/0x9c0 [ 88.902522][ T5309] ? __pfx_evict+0x10/0x10 [ 88.902536][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.902546][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 88.902560][ T5309] evict_inodes+0x636/0x6c0 [ 88.902574][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 88.902586][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 88.902601][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 88.902617][ T5309] kill_block_super+0x44/0x90 [ 88.902629][ T5309] xfs_kill_sb+0x15/0x50 [ 88.902641][ T5309] deactivate_locked_super+0xbc/0x130 [ 88.902656][ T5309] cleanup_mnt+0x425/0x4c0 [ 88.902673][ T5309] task_work_run+0x1d4/0x260 [ 88.902687][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 88.902699][ T5309] ? __x64_sys_umount+0x122/0x160 [ 88.902709][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 88.902720][ T5309] ? rcu_is_watching+0x15/0xb0 [ 88.902731][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 88.902746][ T5309] do_syscall_64+0x2bd/0x3b0 [ 88.902764][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.902777][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 88.902789][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.902801][ T5309] RIP: 0033:0x7f09c2e9a647 [ 88.902813][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 88.902823][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 88.902836][ T5309] RAX: 0000000000000000 RBX: 0000000000015834 RCX: 00007f09c2e9a647 [ 88.902873][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 88.902881][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 88.902889][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 88.902897][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 88.902908][ T5309] [ 88.903631][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 89.273361][ T5412] loop0: detected capacity change from 0 to 32768 [ 89.286512][ T5412] XFS: ikeep mount option is deprecated. [ 89.302573][ T5412] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 89.328950][ T5412] XFS (loop0): Ending clean mount [ 89.332077][ T5412] XFS (loop0): Quotacheck needed: Please wait. [ 89.341146][ T5412] XFS (loop0): Quotacheck: Done. [ 89.363088][ T5309] BUG: Bad page state in process syz-executor125 pfn:4ac01 [ 89.366372][ T5309] page does not match folio [ 89.368408][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffffffffffffffff pfn:0x4ac01 [ 89.374225][ T5309] ksm flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 89.377707][ T5309] raw: 04fff00000000000 ffffea00012b0000 00000000ffffffff ffffffffffffffff [ 89.382184][ T5309] raw: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 89.385928][ T5309] page dumped because: nonzero pincount [ 89.388355][ T5309] page_owner tracks the page as allocated [ 89.391238][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5412, tgid 5412 (syz-executor125), ts 89347158146, free_ts 88903201375 [ 89.401770][ T5309] post_alloc_hook+0x240/0x2a0 [ 89.408774][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 89.411282][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 89.413886][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 89.416065][ T5309] alloc_pages_noprof+0xa9/0x190 [ 89.418257][ T5309] folio_alloc_noprof+0x1e/0x30 [ 89.420822][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 89.423168][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 89.425277][ T5309] iomap_write_begin+0x660/0x1bc0 [ 89.427367][ T5309] iomap_file_buffered_write+0x438/0x980 [ 89.430327][ T5309] xfs_file_buffered_write+0x201/0x890 [ 89.432766][ T5309] vfs_write+0x54b/0xa90 [ 89.434666][ T5309] ksys_write+0x145/0x250 [ 89.436682][ T5309] do_syscall_64+0xfa/0x3b0 [ 89.439010][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.446266][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 89.449364][ T5309] free_unref_folios+0xc66/0x14d0 [ 89.451669][ T5309] folios_put_refs+0x559/0x640 [ 89.453837][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 89.456391][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 89.458977][ T5309] evict+0x504/0x9c0 [ 89.460786][ T5309] evict_inodes+0x636/0x6c0 [ 89.462862][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 89.465101][ T5309] kill_block_super+0x44/0x90 [ 89.467198][ T5309] xfs_kill_sb+0x15/0x50 [ 89.469940][ T5309] deactivate_locked_super+0xbc/0x130 [ 89.472813][ T5309] cleanup_mnt+0x425/0x4c0 [ 89.474755][ T5309] task_work_run+0x1d4/0x260 [ 89.476889][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 89.479683][ T5309] do_syscall_64+0x2bd/0x3b0 [ 89.481841][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.491359][ T5309] Modules linked in: [ 89.493218][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 89.493237][ T5309] Tainted: [B]=BAD_PAGE [ 89.493241][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.493248][ T5309] Call Trace: [ 89.493254][ T5309] [ 89.493259][ T5309] dump_stack_lvl+0x189/0x250 [ 89.493290][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.493306][ T5309] ? __pfx_print_modules+0x10/0x10 [ 89.493320][ T5309] ? uncharge_batch+0x19e/0x250 [ 89.493333][ T5309] bad_page+0x180/0x1c0 [ 89.493350][ T5309] free_tail_page_prepare+0x2c3/0x4f0 [ 89.493362][ T5309] __free_frozen_pages+0x8aa/0xe70 [ 89.493375][ T5309] __folio_put+0x21b/0x2c0 [ 89.493389][ T5309] ? __pfx___folio_put+0x10/0x10 [ 89.493403][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 89.493417][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 89.493429][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 89.493444][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 89.493461][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 89.493478][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 89.493501][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 89.493514][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 89.493535][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 89.493616][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.493633][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.493646][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.493654][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.493666][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.493677][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.493689][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 89.493702][ T5309] evict+0x504/0x9c0 [ 89.493718][ T5309] ? __pfx_evict+0x10/0x10 [ 89.493740][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.493750][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 89.493768][ T5309] evict_inodes+0x636/0x6c0 [ 89.493780][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 89.493791][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 89.493805][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 89.493820][ T5309] kill_block_super+0x44/0x90 [ 89.493832][ T5309] xfs_kill_sb+0x15/0x50 [ 89.493843][ T5309] deactivate_locked_super+0xbc/0x130 [ 89.493858][ T5309] cleanup_mnt+0x425/0x4c0 [ 89.493873][ T5309] task_work_run+0x1d4/0x260 [ 89.493889][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 89.493901][ T5309] ? __x64_sys_umount+0x122/0x160 [ 89.493911][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 89.493923][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.493933][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 89.493947][ T5309] do_syscall_64+0x2bd/0x3b0 [ 89.493964][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.493974][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 89.493985][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.493995][ T5309] RIP: 0033:0x7f09c2e9a647 [ 89.494006][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 89.494016][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 89.494029][ T5309] RAX: 0000000000000000 RBX: 0000000000015b93 RCX: 00007f09c2e9a647 [ 89.494037][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 89.494043][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 89.494050][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 89.494058][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 89.494070][ T5309] [ 89.494097][ T5309] BUG: Bad page state in process syz-executor125 pfn:4ac00 [ 89.665536][ T5309] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4ac00 [ 89.676535][ T5309] head: order:0 mapcount:0 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 89.681552][ T5309] flags: 0x4fff0800000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 89.686164][ T5309] raw: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 89.690180][ T5309] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 89.693879][ T5309] head: 04fff0800000004d dead000000000100 dead000000000122 0000000000000000 [ 89.697481][ T5309] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 89.702418][ T5309] head: 04fff00000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 89.705985][ T5309] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000000 [ 89.709760][ T5309] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 89.712891][ T5309] page_owner tracks the page as allocated [ 89.715310][ T5309] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_WRITE|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5412, tgid 5412 (syz-executor125), ts 89347158146, free_ts 88903201375 [ 89.725810][ T5309] post_alloc_hook+0x240/0x2a0 [ 89.727942][ T5309] get_page_from_freelist+0x21e4/0x22c0 [ 89.730906][ T5309] __alloc_frozen_pages_noprof+0x181/0x370 [ 89.733547][ T5309] alloc_pages_mpol+0x232/0x4a0 [ 89.735714][ T5309] alloc_pages_noprof+0xa9/0x190 [ 89.737981][ T5309] folio_alloc_noprof+0x1e/0x30 [ 89.740680][ T5309] filemap_alloc_folio_noprof+0xdf/0x470 [ 89.743216][ T5309] __filemap_get_folio+0x3f2/0xaf0 [ 89.745514][ T5309] iomap_write_begin+0x660/0x1bc0 [ 89.747756][ T5309] iomap_file_buffered_write+0x438/0x980 [ 89.750648][ T5309] xfs_file_buffered_write+0x201/0x890 [ 89.753357][ T5309] vfs_write+0x54b/0xa90 [ 89.755040][ T5309] ksys_write+0x145/0x250 [ 89.756965][ T5309] do_syscall_64+0xfa/0x3b0 [ 89.759538][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.761992][ T5309] page last free pid 5309 tgid 5309 stack trace: [ 89.764714][ T5309] free_unref_folios+0xc66/0x14d0 [ 89.766675][ T5309] folios_put_refs+0x559/0x640 [ 89.769455][ T5309] truncate_inode_pages_range+0x346/0xda0 [ 89.772120][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 89.774202][ T5309] evict+0x504/0x9c0 [ 89.775808][ T5309] evict_inodes+0x636/0x6c0 [ 89.777844][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 89.780826][ T5309] kill_block_super+0x44/0x90 [ 89.782996][ T5309] xfs_kill_sb+0x15/0x50 [ 89.785100][ T5309] deactivate_locked_super+0xbc/0x130 [ 89.787560][ T5309] cleanup_mnt+0x425/0x4c0 [ 89.790181][ T5309] task_work_run+0x1d4/0x260 [ 89.792367][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 89.794783][ T5309] do_syscall_64+0x2bd/0x3b0 [ 89.796722][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.799733][ T5309] Modules linked in: [ 89.801513][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: syz-executor125 Tainted: G B 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 89.801532][ T5309] Tainted: [B]=BAD_PAGE [ 89.801536][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.801543][ T5309] Call Trace: [ 89.801548][ T5309] [ 89.801553][ T5309] dump_stack_lvl+0x189/0x250 [ 89.801584][ T5309] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.801601][ T5309] ? __pfx_print_modules+0x10/0x10 [ 89.801617][ T5309] bad_page+0x180/0x1c0 [ 89.801633][ T5309] __free_frozen_pages+0xe17/0xe70 [ 89.801647][ T5309] __folio_put+0x21b/0x2c0 [ 89.801661][ T5309] ? __pfx___folio_put+0x10/0x10 [ 89.801673][ T5309] delete_from_page_cache_batch+0x84c/0x9b0 [ 89.801685][ T5309] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 89.801696][ T5309] ? __pfx_workingset_update_node+0x10/0x10 [ 89.801712][ T5309] ? truncate_cleanup_folio+0x34a/0x430 [ 89.801728][ T5309] truncate_inode_pages_range+0x28a/0xda0 [ 89.801745][ T5309] ? filemap_get_folios_tag+0x53b/0x630 [ 89.801759][ T5309] ? filemap_get_folios_tag+0xed/0x630 [ 89.801771][ T5309] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 89.801792][ T5309] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 89.801803][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.801817][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.801830][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.801838][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.801850][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.801860][ T5309] ? __pfx_xfs_fs_evict_inode+0x10/0x10 [ 89.801872][ T5309] xfs_fs_evict_inode+0x67/0x90 [ 89.801885][ T5309] evict+0x504/0x9c0 [ 89.801902][ T5309] ? __pfx_evict+0x10/0x10 [ 89.801916][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.801924][ T5309] ? do_raw_spin_unlock+0x4d/0x240 [ 89.801933][ T5309] evict_inodes+0x636/0x6c0 [ 89.801941][ T5309] ? __pfx_evict_inodes+0x10/0x10 [ 89.801949][ T5309] ? xfs_fs_sync_fs+0x1cf/0x380 [ 89.801961][ T5309] generic_shutdown_super+0x9a/0x2c0 [ 89.801976][ T5309] kill_block_super+0x44/0x90 [ 89.801986][ T5309] xfs_kill_sb+0x15/0x50 [ 89.801996][ T5309] deactivate_locked_super+0xbc/0x130 [ 89.802010][ T5309] cleanup_mnt+0x425/0x4c0 [ 89.802027][ T5309] task_work_run+0x1d4/0x260 [ 89.802041][ T5309] ? __pfx_task_work_run+0x10/0x10 [ 89.802053][ T5309] ? __x64_sys_umount+0x122/0x160 [ 89.802062][ T5309] ? __pfx___x64_sys_umount+0x10/0x10 [ 89.802072][ T5309] ? rcu_is_watching+0x15/0xb0 [ 89.802080][ T5309] exit_to_user_mode_loop+0xec/0x110 [ 89.802090][ T5309] do_syscall_64+0x2bd/0x3b0 [ 89.802102][ T5309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.802109][ T5309] ? clear_bhb_loop+0x60/0xb0 [ 89.802116][ T5309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.802123][ T5309] RIP: 0033:0x7f09c2e9a647 [ 89.802175][ T5309] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 89.802187][ T5309] RSP: 002b:00007ffda74357b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 89.802200][ T5309] RAX: 0000000000000000 RBX: 0000000000015b93 RCX: 00007f09c2e9a647 [ 89.802209][ T5309] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7435870 [ 89.802215][ T5309] RBP: 00007ffda7435870 R08: 0000000000000000 R09: 0000000000000000 [ 89.802221][ T5309] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffda74368e0 [ 89.802228][ T5309] R13: 0000555556cd26c0 R14: 431bde82d7b634db R15: 00007ffda7436900 [ 89.802239][ T5309] [ 89.802884][ T5309] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program VM DIAGNOSIS: 14:58:26 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000d316b90 R8 =ffff888033758237 R9 =1ffff110066eb046 R10=dffffc0000000000 R11=ffffffff85461540 R12=dffffc0000000000 R13=ffffffff99ab98ed R14=ffffffff99dbe760 R15=0000000000000000 RIP=ffffffff854615bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555556cd1380 ffffffff 00c00000 GS =0000 ffff88808d25c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffda7434ff8 CR3=000000004432d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000021 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000170076fa 00000000a51b6135 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 50477d6e54342c54 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 09039e7cb3473ee4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f006a64615f6572 6f63735f6d6f6f2f 666c65732f636f72 702f003030303100 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a004f41445f4057 4a46565f484a4a0a 434940560a464a57 550a001515151400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000