[ 73.478206][ T5289] sshd (5289) used greatest stack depth: 19960 bytes left Warning: Permanently added '[localhost]:5550' (ED25519) to the list of known hosts. executing program [ 78.034013][ T5308] loop0: detected capacity change from 0 to 32768 [ 78.045376][ T5308] XFS: ikeep mount option is deprecated. [ 78.071368][ T5308] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.121859][ T5308] XFS (loop0): Ending clean mount [ 78.129249][ T5308] XFS (loop0): Quotacheck needed: Please wait. [ 78.160889][ T5308] XFS (loop0): Quotacheck: Done. [ 78.233774][ T5307] BUG: Bad page state in process syz-executor412 pfn:49401 [ 78.238048][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x49401 [ 78.242560][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 78.247167][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 78.252067][ T5307] raw: 04fff00000000000 ffffea0001250001 ffffffffffffffff ffffffff00000000 [ 78.257639][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 78.261194][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 78.265731][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 78.269182][ T5307] head: 04fff00000000000 ffffea0001250001 ffffffffffffffff ffffffff00000000 [ 78.272618][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 78.277538][ T5307] page dumped because: nonzero pincount [ 78.279717][ T5307] page_owner tracks the page as allocated [ 78.282060][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5308, tgid 5308 (syz-executor412), ts 78177893113, free_ts 0 [ 78.291736][ T5307] post_alloc_hook+0x1f4/0x240 [ 78.293961][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 78.297038][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 78.299900][ T5307] alloc_pages_mpol+0x311/0x660 [ 78.302426][ T5307] alloc_pages_noprof+0x121/0x190 [ 78.305806][ T5307] folio_alloc_noprof+0x1e/0x30 [ 78.308630][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 78.311085][ T5307] __filemap_get_folio+0x438/0xae0 [ 78.313486][ T5307] iomap_write_begin+0x4d3/0x1990 [ 78.316292][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 78.318354][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 78.320440][ T5307] vfs_write+0xacf/0xd10 [ 78.321942][ T5307] ksys_write+0x18f/0x2b0 [ 78.323452][ T5307] do_syscall_64+0xf3/0x230 [ 78.327425][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.329963][ T5307] page_owner free stack trace missing [ 78.332078][ T5307] Modules linked in: [ 78.333452][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Not tainted 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 78.333468][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.333474][ T5307] Call Trace: [ 78.333482][ T5307] [ 78.333488][ T5307] dump_stack_lvl+0x241/0x360 [ 78.333508][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.333518][ T5307] ? __pfx_print_modules+0x10/0x10 [ 78.333533][ T5307] ? uncharge_folio+0x341/0x680 [ 78.333554][ T5307] bad_page+0x176/0x1d0 [ 78.333566][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 78.333581][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 78.333599][ T5307] __folio_put+0x2b3/0x360 [ 78.333612][ T5307] ? __pfx___folio_put+0x10/0x10 [ 78.333624][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 78.333639][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 78.333657][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 78.333689][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 78.333707][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 78.333721][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 78.333736][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 78.333751][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 78.333771][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 78.333857][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 78.333926][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 78.334010][ T5307] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.334022][ T5307] ? lockdep_hardirqs_on+0x99/0x150 [ 78.334082][ T5307] evict+0x4fd/0x9a0 [ 78.334105][ T5307] ? __pfx_evict+0x10/0x10 [ 78.334120][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 78.334131][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 78.334146][ T5307] evict_inodes+0x6f6/0x790 [ 78.334163][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 78.334174][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 78.334194][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 78.334210][ T5307] kill_block_super+0x44/0x90 [ 78.334224][ T5307] xfs_kill_sb+0x15/0x50 [ 78.334237][ T5307] deactivate_locked_super+0xc4/0x130 [ 78.334250][ T5307] cleanup_mnt+0x41f/0x4b0 [ 78.334280][ T5307] ? lockdep_hardirqs_on+0x99/0x150 [ 78.334296][ T5307] task_work_run+0x24f/0x310 [ 78.334318][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 78.334331][ T5307] ? __x64_sys_umount+0x123/0x170 [ 78.334349][ T5307] ? syscall_exit_to_user_mode+0xa3/0x340 [ 78.334364][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 78.334380][ T5307] do_syscall_64+0x100/0x230 [ 78.334394][ T5307] ? clear_bhb_loop+0x35/0x90 [ 78.334412][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.334425][ T5307] RIP: 0033:0x7f3c13562647 [ 78.334438][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 78.334447][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 78.334459][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 78.334466][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 78.334473][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 78.334479][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 78.334486][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 78.334501][ T5307] [ 78.474743][ T5307] Disabling lock debugging due to kernel taint [ 78.477505][ T5307] BUG: Bad page state in process syz-executor412 pfn:49400 [ 78.480133][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49400 [ 78.483890][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 78.488846][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 78.493412][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 78.497638][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 78.501852][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 78.506334][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 78.510236][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 78.513974][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 78.517978][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 78.522764][ T5307] page_owner tracks the page as allocated [ 78.525619][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5308, tgid 5308 (syz-executor412), ts 78177893113, free_ts 0 [ 78.535128][ T5307] post_alloc_hook+0x1f4/0x240 [ 78.537241][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 78.539389][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 78.541552][ T5307] alloc_pages_mpol+0x311/0x660 [ 78.543476][ T5307] alloc_pages_noprof+0x121/0x190 [ 78.546061][ T5307] folio_alloc_noprof+0x1e/0x30 [ 78.548289][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 78.550909][ T5307] __filemap_get_folio+0x438/0xae0 [ 78.553447][ T5307] iomap_write_begin+0x4d3/0x1990 [ 78.556616][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 78.558822][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 78.560994][ T5307] vfs_write+0xacf/0xd10 [ 78.562715][ T5307] ksys_write+0x18f/0x2b0 [ 78.565009][ T5307] do_syscall_64+0xf3/0x230 [ 78.566769][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.569122][ T5307] page_owner free stack trace missing [ 78.571218][ T5307] Modules linked in: [ 78.573061][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 78.573083][ T5307] Tainted: [B]=BAD_PAGE [ 78.573088][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.573096][ T5307] Call Trace: [ 78.573104][ T5307] [ 78.573111][ T5307] dump_stack_lvl+0x241/0x360 [ 78.573132][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.573144][ T5307] ? __pfx_print_modules+0x10/0x10 [ 78.573162][ T5307] ? add_taint+0x99/0xe0 [ 78.573180][ T5307] bad_page+0x176/0x1d0 [ 78.573194][ T5307] free_frozen_pages+0x1082/0x10e0 [ 78.573214][ T5307] __folio_put+0x2b3/0x360 [ 78.573229][ T5307] ? __pfx___folio_put+0x10/0x10 [ 78.573243][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 78.573259][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 78.573279][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 78.573302][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 78.573321][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 78.573335][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 78.573351][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 78.573369][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 78.573386][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 78.573405][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 78.573432][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 78.573451][ T5307] ? _raw_spin_unlock_irq+0x23/0x50 [ 78.573463][ T5307] ? lockdep_hardirqs_on+0x99/0x150 [ 78.573479][ T5307] evict+0x4fd/0x9a0 [ 78.573498][ T5307] ? __pfx_evict+0x10/0x10 [ 78.573516][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 78.573529][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 78.573541][ T5307] evict_inodes+0x6f6/0x790 [ 78.573550][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 78.573557][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 78.573572][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 78.573588][ T5307] kill_block_super+0x44/0x90 [ 78.573604][ T5307] xfs_kill_sb+0x15/0x50 [ 78.573619][ T5307] deactivate_locked_super+0xc4/0x130 [ 78.573633][ T5307] cleanup_mnt+0x41f/0x4b0 [ 78.573649][ T5307] ? lockdep_hardirqs_on+0x99/0x150 [ 78.573664][ T5307] task_work_run+0x24f/0x310 [ 78.573684][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 78.573702][ T5307] ? __x64_sys_umount+0x123/0x170 [ 78.573720][ T5307] ? syscall_exit_to_user_mode+0xa3/0x340 [ 78.573736][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 78.573752][ T5307] do_syscall_64+0x100/0x230 [ 78.573768][ T5307] ? clear_bhb_loop+0x35/0x90 [ 78.573788][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.573805][ T5307] RIP: 0033:0x7f3c13562647 [ 78.573818][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 78.573829][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 78.573840][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 78.573845][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 78.573850][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 78.573855][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 78.573860][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 78.573870][ T5307] [ 78.715190][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 78.919372][ T5318] loop0: detected capacity change from 0 to 32768 [ 78.941455][ T5318] XFS: ikeep mount option is deprecated. [ 78.954189][ T5318] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 78.973823][ T5318] XFS (loop0): Ending clean mount [ 78.978637][ T5318] XFS (loop0): Quotacheck needed: Please wait. [ 78.989726][ T5318] XFS (loop0): Quotacheck: Done. [ 79.025274][ T5307] BUG: Bad page state in process syz-executor412 pfn:49601 [ 79.028479][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x49601 [ 79.032111][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 79.036852][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 79.041168][ T5307] raw: 04fff00000000000 ffffea0001258001 ffffffffffffffff ffffffff00000000 [ 79.045268][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 79.049180][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 79.053306][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.059571][ T5307] head: 04fff00000000000 ffffea0001258001 ffffffffffffffff ffffffff00000000 [ 79.062754][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 79.066941][ T5307] page dumped because: nonzero pincount [ 79.069478][ T5307] page_owner tracks the page as allocated [ 79.072133][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5318, tgid 5318 (syz-executor412), ts 78996722380, free_ts 78573948324 [ 79.081996][ T5307] post_alloc_hook+0x1f4/0x240 [ 79.084199][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 79.086931][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 79.089233][ T5307] alloc_pages_mpol+0x311/0x660 [ 79.091088][ T5307] alloc_pages_noprof+0x121/0x190 [ 79.093205][ T5307] folio_alloc_noprof+0x1e/0x30 [ 79.095917][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 79.098033][ T5307] __filemap_get_folio+0x438/0xae0 [ 79.100271][ T5307] iomap_write_begin+0x4d3/0x1990 [ 79.102998][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 79.106120][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 79.108349][ T5307] vfs_write+0xacf/0xd10 [ 79.109919][ T5307] ksys_write+0x18f/0x2b0 [ 79.111628][ T5307] do_syscall_64+0xf3/0x230 [ 79.113602][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.116427][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 79.119329][ T5307] free_unref_folios+0xe40/0x18b0 [ 79.121610][ T5307] folios_put_refs+0x76c/0x860 [ 79.123727][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 79.126639][ T5307] evict+0x4fd/0x9a0 [ 79.128437][ T5307] evict_inodes+0x6f6/0x790 [ 79.130434][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 79.133014][ T5307] kill_block_super+0x44/0x90 [ 79.135476][ T5307] xfs_kill_sb+0x15/0x50 [ 79.137150][ T5307] deactivate_locked_super+0xc4/0x130 [ 79.139164][ T5307] cleanup_mnt+0x41f/0x4b0 [ 79.140976][ T5307] task_work_run+0x24f/0x310 [ 79.142825][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 79.146935][ T5307] do_syscall_64+0x100/0x230 [ 79.149411][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.151835][ T5307] Modules linked in: [ 79.153333][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 79.153350][ T5307] Tainted: [B]=BAD_PAGE [ 79.153353][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.153360][ T5307] Call Trace: [ 79.153367][ T5307] [ 79.153372][ T5307] dump_stack_lvl+0x241/0x360 [ 79.153388][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.153398][ T5307] ? __pfx_print_modules+0x10/0x10 [ 79.153413][ T5307] ? uncharge_folio+0x341/0x680 [ 79.153429][ T5307] bad_page+0x176/0x1d0 [ 79.153442][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 79.153454][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 79.153466][ T5307] __folio_put+0x2b3/0x360 [ 79.153479][ T5307] ? __pfx___folio_put+0x10/0x10 [ 79.153490][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.153502][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 79.153518][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 79.153536][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 79.153550][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 79.153562][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 79.153576][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 79.153589][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 79.153602][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 79.153618][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 79.153630][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 79.153651][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 79.153667][ T5307] ? rcu_is_watching+0x15/0xb0 [ 79.153678][ T5307] evict+0x4fd/0x9a0 [ 79.153693][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 79.153705][ T5307] ? __pfx_evict+0x10/0x10 [ 79.153726][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.153737][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 79.153748][ T5307] evict_inodes+0x6f6/0x790 [ 79.153759][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 79.153769][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 79.153785][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 79.153799][ T5307] kill_block_super+0x44/0x90 [ 79.153814][ T5307] xfs_kill_sb+0x15/0x50 [ 79.153825][ T5307] deactivate_locked_super+0xc4/0x130 [ 79.153838][ T5307] cleanup_mnt+0x41f/0x4b0 [ 79.153851][ T5307] task_work_run+0x24f/0x310 [ 79.153865][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 79.153878][ T5307] ? __x64_sys_umount+0x123/0x170 [ 79.153891][ T5307] ? rcu_is_watching+0x15/0xb0 [ 79.153900][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 79.153915][ T5307] do_syscall_64+0x100/0x230 [ 79.153928][ T5307] ? clear_bhb_loop+0x35/0x90 [ 79.153944][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.153957][ T5307] RIP: 0033:0x7f3c13562647 [ 79.153968][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 79.153976][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 79.153990][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 79.153996][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 79.154003][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 79.154008][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 79.154014][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 79.154023][ T5307] [ 79.154058][ T5307] BUG: Bad page state in process syz-executor412 pfn:49600 [ 79.290785][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49600 [ 79.295414][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 79.299473][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 79.303110][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 79.306505][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.309937][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 79.313779][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.318770][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 79.322135][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 79.325883][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 79.328816][ T5307] page_owner tracks the page as allocated [ 79.330988][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5318, tgid 5318 (syz-executor412), ts 78996722380, free_ts 78573948324 [ 79.341412][ T5307] post_alloc_hook+0x1f4/0x240 [ 79.343169][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 79.345775][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 79.348031][ T5307] alloc_pages_mpol+0x311/0x660 [ 79.350007][ T5307] alloc_pages_noprof+0x121/0x190 [ 79.351998][ T5307] folio_alloc_noprof+0x1e/0x30 [ 79.353859][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 79.357549][ T5307] __filemap_get_folio+0x438/0xae0 [ 79.361207][ T5307] iomap_write_begin+0x4d3/0x1990 [ 79.363289][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 79.365814][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 79.367829][ T5307] vfs_write+0xacf/0xd10 [ 79.369351][ T5307] ksys_write+0x18f/0x2b0 [ 79.370842][ T5307] do_syscall_64+0xf3/0x230 [ 79.372570][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.375149][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 79.377929][ T5307] free_unref_folios+0xe40/0x18b0 [ 79.380232][ T5307] folios_put_refs+0x76c/0x860 [ 79.382391][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 79.385151][ T5307] evict+0x4fd/0x9a0 [ 79.386593][ T5307] evict_inodes+0x6f6/0x790 [ 79.388430][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 79.390562][ T5307] kill_block_super+0x44/0x90 [ 79.392231][ T5307] xfs_kill_sb+0x15/0x50 [ 79.394186][ T5307] deactivate_locked_super+0xc4/0x130 [ 79.397222][ T5307] cleanup_mnt+0x41f/0x4b0 [ 79.399459][ T5307] task_work_run+0x24f/0x310 [ 79.401683][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 79.403869][ T5307] do_syscall_64+0x100/0x230 [ 79.406108][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.408350][ T5307] Modules linked in: [ 79.409758][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 79.409776][ T5307] Tainted: [B]=BAD_PAGE [ 79.409779][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.409785][ T5307] Call Trace: [ 79.409792][ T5307] [ 79.409798][ T5307] dump_stack_lvl+0x241/0x360 [ 79.409815][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.409825][ T5307] ? __pfx_print_modules+0x10/0x10 [ 79.409839][ T5307] ? add_taint+0x99/0xe0 [ 79.409852][ T5307] bad_page+0x176/0x1d0 [ 79.409868][ T5307] free_frozen_pages+0x1082/0x10e0 [ 79.409889][ T5307] __folio_put+0x2b3/0x360 [ 79.409901][ T5307] ? __pfx___folio_put+0x10/0x10 [ 79.409913][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.409925][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 79.409935][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 79.409944][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 79.409959][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 79.409970][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 79.409983][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 79.410001][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 79.410015][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 79.410031][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 79.410042][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 79.410056][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 79.410065][ T5307] ? rcu_is_watching+0x15/0xb0 [ 79.410072][ T5307] evict+0x4fd/0x9a0 [ 79.410085][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 79.410096][ T5307] ? __pfx_evict+0x10/0x10 [ 79.410108][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.410191][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 79.410204][ T5307] evict_inodes+0x6f6/0x790 [ 79.410217][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 79.410226][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 79.410244][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 79.410258][ T5307] kill_block_super+0x44/0x90 [ 79.410270][ T5307] xfs_kill_sb+0x15/0x50 [ 79.410282][ T5307] deactivate_locked_super+0xc4/0x130 [ 79.410294][ T5307] cleanup_mnt+0x41f/0x4b0 [ 79.410308][ T5307] task_work_run+0x24f/0x310 [ 79.410327][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 79.410340][ T5307] ? __x64_sys_umount+0x123/0x170 [ 79.410353][ T5307] ? rcu_is_watching+0x15/0xb0 [ 79.410359][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 79.410370][ T5307] do_syscall_64+0x100/0x230 [ 79.410378][ T5307] ? clear_bhb_loop+0x35/0x90 [ 79.410388][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.410399][ T5307] RIP: 0033:0x7f3c13562647 [ 79.410411][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 79.410419][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 79.410432][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 79.410439][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 79.410445][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 79.410451][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 79.410458][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 79.410468][ T5307] [ 79.410929][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 79.732094][ T5327] loop0: detected capacity change from 0 to 32768 [ 79.746550][ T5327] XFS: ikeep mount option is deprecated. [ 79.758945][ T5327] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 79.779911][ T5327] XFS (loop0): Ending clean mount [ 79.785738][ T5327] XFS (loop0): Quotacheck needed: Please wait. [ 79.795205][ T5327] XFS (loop0): Quotacheck: Done. [ 79.829339][ T5307] BUG: Bad page state in process syz-executor412 pfn:48c01 [ 79.832650][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x48c01 [ 79.836735][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 79.840105][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 79.845355][ T5307] raw: 04fff00000000000 ffffea0001230001 ffffffffffffffff ffffffff00000000 [ 79.848629][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 79.851794][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 79.855803][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 79.859713][ T5307] head: 04fff00000000000 ffffea0001230001 ffffffffffffffff ffffffff00000000 [ 79.863898][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 79.868571][ T5307] page dumped because: nonzero pincount [ 79.870918][ T5307] page_owner tracks the page as allocated [ 79.873140][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5327, tgid 5327 (syz-executor412), ts 79801898122, free_ts 79410551677 [ 79.883107][ T5307] post_alloc_hook+0x1f4/0x240 [ 79.886203][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 79.888506][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 79.890715][ T5307] alloc_pages_mpol+0x311/0x660 [ 79.892610][ T5307] alloc_pages_noprof+0x121/0x190 [ 79.895043][ T5307] folio_alloc_noprof+0x1e/0x30 [ 79.896967][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 79.899080][ T5307] __filemap_get_folio+0x438/0xae0 [ 79.901119][ T5307] iomap_write_begin+0x4d3/0x1990 [ 79.903228][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 79.907450][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 79.910148][ T5307] vfs_write+0xacf/0xd10 [ 79.911928][ T5307] ksys_write+0x18f/0x2b0 [ 79.913737][ T5307] do_syscall_64+0xf3/0x230 [ 79.915893][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.918049][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 79.920861][ T5307] free_unref_folios+0xe40/0x18b0 [ 79.923978][ T5307] folios_put_refs+0x76c/0x860 [ 79.926820][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 79.929168][ T5307] evict+0x4fd/0x9a0 [ 79.930746][ T5307] evict_inodes+0x6f6/0x790 [ 79.932641][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 79.935125][ T5307] kill_block_super+0x44/0x90 [ 79.936875][ T5307] xfs_kill_sb+0x15/0x50 [ 79.938470][ T5307] deactivate_locked_super+0xc4/0x130 [ 79.940215][ T5307] cleanup_mnt+0x41f/0x4b0 [ 79.941826][ T5307] task_work_run+0x24f/0x310 [ 79.943702][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 79.946916][ T5307] do_syscall_64+0x100/0x230 [ 79.949081][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.951422][ T5307] Modules linked in: [ 79.952963][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 79.952979][ T5307] Tainted: [B]=BAD_PAGE [ 79.952982][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.952989][ T5307] Call Trace: [ 79.952995][ T5307] [ 79.953001][ T5307] dump_stack_lvl+0x241/0x360 [ 79.953018][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.953028][ T5307] ? __pfx_print_modules+0x10/0x10 [ 79.953041][ T5307] ? uncharge_folio+0x341/0x680 [ 79.953058][ T5307] bad_page+0x176/0x1d0 [ 79.953067][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 79.953080][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 79.953094][ T5307] __folio_put+0x2b3/0x360 [ 79.953108][ T5307] ? __pfx___folio_put+0x10/0x10 [ 79.953120][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.953132][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 79.953144][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 79.953158][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 79.953173][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 79.953184][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 79.953197][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 79.953211][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 79.953224][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 79.953241][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 79.953253][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 79.953275][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 79.953290][ T5307] ? rcu_is_watching+0x15/0xb0 [ 79.953302][ T5307] evict+0x4fd/0x9a0 [ 79.953317][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 79.953329][ T5307] ? __pfx_evict+0x10/0x10 [ 79.953342][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 79.953351][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 79.953360][ T5307] evict_inodes+0x6f6/0x790 [ 79.953371][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 79.953381][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 79.953398][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 79.953412][ T5307] kill_block_super+0x44/0x90 [ 79.953425][ T5307] xfs_kill_sb+0x15/0x50 [ 79.953436][ T5307] deactivate_locked_super+0xc4/0x130 [ 79.953448][ T5307] cleanup_mnt+0x41f/0x4b0 [ 79.953462][ T5307] task_work_run+0x24f/0x310 [ 79.953479][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 79.953492][ T5307] ? __x64_sys_umount+0x123/0x170 [ 79.953507][ T5307] ? rcu_is_watching+0x15/0xb0 [ 79.953516][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 79.953531][ T5307] do_syscall_64+0x100/0x230 [ 79.953545][ T5307] ? clear_bhb_loop+0x35/0x90 [ 79.953561][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.953574][ T5307] RIP: 0033:0x7f3c13562647 [ 79.953585][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 79.953594][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 79.953607][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 79.953614][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 79.953620][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 79.953626][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 79.953633][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 79.953643][ T5307] [ 79.953675][ T5307] BUG: Bad page state in process syz-executor412 pfn:48c00 [ 80.092585][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48c00 [ 80.095697][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 80.098802][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 80.103315][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 80.106590][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.109400][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 80.112411][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.115932][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 80.119426][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 80.122720][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 80.126013][ T5307] page_owner tracks the page as allocated [ 80.128324][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5327, tgid 5327 (syz-executor412), ts 79801898122, free_ts 79410551677 [ 80.138753][ T5307] post_alloc_hook+0x1f4/0x240 [ 80.140701][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 80.143264][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 80.146545][ T5307] alloc_pages_mpol+0x311/0x660 [ 80.149172][ T5307] alloc_pages_noprof+0x121/0x190 [ 80.151416][ T5307] folio_alloc_noprof+0x1e/0x30 [ 80.153382][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 80.156377][ T5307] __filemap_get_folio+0x438/0xae0 [ 80.158897][ T5307] iomap_write_begin+0x4d3/0x1990 [ 80.161048][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 80.163198][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 80.166054][ T5307] vfs_write+0xacf/0xd10 [ 80.167705][ T5307] ksys_write+0x18f/0x2b0 [ 80.169420][ T5307] do_syscall_64+0xf3/0x230 [ 80.171207][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.174256][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 80.177619][ T5307] free_unref_folios+0xe40/0x18b0 [ 80.179524][ T5307] folios_put_refs+0x76c/0x860 [ 80.181261][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 80.183276][ T5307] evict+0x4fd/0x9a0 [ 80.185069][ T5307] evict_inodes+0x6f6/0x790 [ 80.186837][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 80.189060][ T5307] kill_block_super+0x44/0x90 [ 80.191260][ T5307] xfs_kill_sb+0x15/0x50 [ 80.193427][ T5307] deactivate_locked_super+0xc4/0x130 [ 80.196640][ T5307] cleanup_mnt+0x41f/0x4b0 [ 80.198278][ T5307] task_work_run+0x24f/0x310 [ 80.200009][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 80.202137][ T5307] do_syscall_64+0x100/0x230 [ 80.204069][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.207059][ T5307] Modules linked in: [ 80.208812][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 80.208828][ T5307] Tainted: [B]=BAD_PAGE [ 80.208832][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.208840][ T5307] Call Trace: [ 80.208847][ T5307] [ 80.208853][ T5307] dump_stack_lvl+0x241/0x360 [ 80.208871][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.208883][ T5307] ? __pfx_print_modules+0x10/0x10 [ 80.208900][ T5307] ? add_taint+0x99/0xe0 [ 80.208917][ T5307] bad_page+0x176/0x1d0 [ 80.208929][ T5307] free_frozen_pages+0x1082/0x10e0 [ 80.208947][ T5307] __folio_put+0x2b3/0x360 [ 80.208959][ T5307] ? __pfx___folio_put+0x10/0x10 [ 80.208973][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.208982][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 80.208993][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 80.209005][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 80.209016][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 80.209030][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 80.209046][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 80.209063][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 80.209079][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 80.209090][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 80.209098][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 80.209115][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 80.209125][ T5307] ? rcu_is_watching+0x15/0xb0 [ 80.209133][ T5307] evict+0x4fd/0x9a0 [ 80.209143][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 80.209155][ T5307] ? __pfx_evict+0x10/0x10 [ 80.209169][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.209180][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 80.209192][ T5307] evict_inodes+0x6f6/0x790 [ 80.209205][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 80.209216][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 80.209236][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 80.209252][ T5307] kill_block_super+0x44/0x90 [ 80.209261][ T5307] xfs_kill_sb+0x15/0x50 [ 80.209269][ T5307] deactivate_locked_super+0xc4/0x130 [ 80.209278][ T5307] cleanup_mnt+0x41f/0x4b0 [ 80.209291][ T5307] task_work_run+0x24f/0x310 [ 80.209309][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 80.209324][ T5307] ? __x64_sys_umount+0x123/0x170 [ 80.209340][ T5307] ? rcu_is_watching+0x15/0xb0 [ 80.209352][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 80.209370][ T5307] do_syscall_64+0x100/0x230 [ 80.209386][ T5307] ? clear_bhb_loop+0x35/0x90 [ 80.209401][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.209411][ T5307] RIP: 0033:0x7f3c13562647 [ 80.209420][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 80.209426][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 80.209436][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 80.209441][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 80.209446][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 80.209450][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 80.209455][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 80.209463][ T5307] [ 80.209883][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 80.542732][ T5336] loop0: detected capacity change from 0 to 32768 [ 80.567143][ T5336] XFS: ikeep mount option is deprecated. [ 80.579550][ T5336] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 80.611009][ T5336] XFS (loop0): Ending clean mount [ 80.613878][ T5336] XFS (loop0): Quotacheck needed: Please wait. [ 80.622661][ T5336] XFS (loop0): Quotacheck: Done. [ 80.655965][ T5307] BUG: Bad page state in process syz-executor412 pfn:48e01 [ 80.658633][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x48e01 [ 80.661903][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 80.666346][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 80.670485][ T5307] raw: 04fff00000000000 ffffea0001238001 ffffffffffffffff ffffffff00000000 [ 80.673753][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 80.677798][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 80.681104][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.685949][ T5307] head: 04fff00000000000 ffffea0001238001 ffffffffffffffff ffffffff00000000 [ 80.689542][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 80.693826][ T5307] page dumped because: nonzero pincount [ 80.697510][ T5307] page_owner tracks the page as allocated [ 80.699797][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5336, tgid 5336 (syz-executor412), ts 80629586754, free_ts 80209505616 [ 80.711831][ T5307] post_alloc_hook+0x1f4/0x240 [ 80.713842][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 80.716405][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 80.718666][ T5307] alloc_pages_mpol+0x311/0x660 [ 80.720544][ T5307] alloc_pages_noprof+0x121/0x190 [ 80.722777][ T5307] folio_alloc_noprof+0x1e/0x30 [ 80.726130][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 80.728518][ T5307] __filemap_get_folio+0x438/0xae0 [ 80.730485][ T5307] iomap_write_begin+0x4d3/0x1990 [ 80.732597][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 80.738858][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 80.742115][ T5307] vfs_write+0xacf/0xd10 [ 80.745160][ T5307] ksys_write+0x18f/0x2b0 [ 80.746915][ T5307] do_syscall_64+0xf3/0x230 [ 80.748713][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.750915][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 80.753262][ T5307] free_unref_folios+0xe40/0x18b0 [ 80.756118][ T5307] folios_put_refs+0x76c/0x860 [ 80.758175][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 80.760508][ T5307] evict+0x4fd/0x9a0 [ 80.761972][ T5307] evict_inodes+0x6f6/0x790 [ 80.763855][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 80.767024][ T5307] kill_block_super+0x44/0x90 [ 80.769699][ T5307] xfs_kill_sb+0x15/0x50 [ 80.771545][ T5307] deactivate_locked_super+0xc4/0x130 [ 80.773911][ T5307] cleanup_mnt+0x41f/0x4b0 [ 80.776076][ T5307] task_work_run+0x24f/0x310 [ 80.777883][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 80.780023][ T5307] do_syscall_64+0x100/0x230 [ 80.782177][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.785743][ T5307] Modules linked in: [ 80.787319][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 80.787335][ T5307] Tainted: [B]=BAD_PAGE [ 80.787339][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.787345][ T5307] Call Trace: [ 80.787361][ T5307] [ 80.787366][ T5307] dump_stack_lvl+0x241/0x360 [ 80.787381][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.787391][ T5307] ? __pfx_print_modules+0x10/0x10 [ 80.787402][ T5307] ? uncharge_folio+0x341/0x680 [ 80.787418][ T5307] bad_page+0x176/0x1d0 [ 80.787427][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 80.787445][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 80.787460][ T5307] __folio_put+0x2b3/0x360 [ 80.787471][ T5307] ? __pfx___folio_put+0x10/0x10 [ 80.787482][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.787494][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 80.787511][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 80.787527][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 80.787543][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 80.787555][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 80.787568][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 80.787582][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 80.787596][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 80.787610][ T5307] ? blk_mq_submit_bio+0xf7a/0x25a0 [ 80.787624][ T5307] ? blk_mq_submit_bio+0x494/0x25a0 [ 80.787635][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 80.787657][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 80.787671][ T5307] ? rcu_is_watching+0x15/0xb0 [ 80.787682][ T5307] evict+0x4fd/0x9a0 [ 80.787694][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 80.787705][ T5307] ? __pfx_evict+0x10/0x10 [ 80.787717][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 80.787728][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 80.787763][ T5307] evict_inodes+0x6f6/0x790 [ 80.787773][ T5307] ? xfs_log_force+0x4cb/0x960 [ 80.787786][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 80.787796][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 80.787811][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 80.787824][ T5307] kill_block_super+0x44/0x90 [ 80.787838][ T5307] xfs_kill_sb+0x15/0x50 [ 80.787849][ T5307] deactivate_locked_super+0xc4/0x130 [ 80.787861][ T5307] cleanup_mnt+0x41f/0x4b0 [ 80.787874][ T5307] task_work_run+0x24f/0x310 [ 80.787891][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 80.787903][ T5307] ? __x64_sys_umount+0x123/0x170 [ 80.787917][ T5307] ? rcu_is_watching+0x15/0xb0 [ 80.787926][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 80.787949][ T5307] do_syscall_64+0x100/0x230 [ 80.787962][ T5307] ? clear_bhb_loop+0x35/0x90 [ 80.787977][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.787991][ T5307] RIP: 0033:0x7f3c13562647 [ 80.788001][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 80.788010][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 80.788023][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 80.788029][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 80.788035][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 80.788040][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 80.788046][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 80.788057][ T5307] [ 80.788087][ T5307] BUG: Bad page state in process syz-executor412 pfn:48e00 [ 80.933730][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48e00 [ 80.938782][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 80.941984][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 80.946250][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 80.949651][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.953164][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 80.957617][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 80.961205][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 80.964953][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 80.968299][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 80.971401][ T5307] page_owner tracks the page as allocated [ 80.974037][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5336, tgid 5336 (syz-executor412), ts 80629586754, free_ts 80209505616 [ 80.984458][ T5307] post_alloc_hook+0x1f4/0x240 [ 80.986898][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 80.988941][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 80.991112][ T5307] alloc_pages_mpol+0x311/0x660 [ 80.992974][ T5307] alloc_pages_noprof+0x121/0x190 [ 80.995500][ T5307] folio_alloc_noprof+0x1e/0x30 [ 80.997398][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 80.999540][ T5307] __filemap_get_folio+0x438/0xae0 [ 81.001586][ T5307] iomap_write_begin+0x4d3/0x1990 [ 81.003897][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 81.007033][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 81.009035][ T5307] vfs_write+0xacf/0xd10 [ 81.010702][ T5307] ksys_write+0x18f/0x2b0 [ 81.013121][ T5307] do_syscall_64+0xf3/0x230 [ 81.016398][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.018657][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 81.021188][ T5307] free_unref_folios+0xe40/0x18b0 [ 81.023282][ T5307] folios_put_refs+0x76c/0x860 [ 81.026148][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 81.028673][ T5307] evict+0x4fd/0x9a0 [ 81.030145][ T5307] evict_inodes+0x6f6/0x790 [ 81.031917][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 81.033941][ T5307] kill_block_super+0x44/0x90 [ 81.036721][ T5307] xfs_kill_sb+0x15/0x50 [ 81.038605][ T5307] deactivate_locked_super+0xc4/0x130 [ 81.040804][ T5307] cleanup_mnt+0x41f/0x4b0 [ 81.042370][ T5307] task_work_run+0x24f/0x310 [ 81.044243][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 81.047049][ T5307] do_syscall_64+0x100/0x230 [ 81.048792][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.051124][ T5307] Modules linked in: [ 81.052736][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 81.052755][ T5307] Tainted: [B]=BAD_PAGE [ 81.052759][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.052766][ T5307] Call Trace: [ 81.052806][ T5307] [ 81.052813][ T5307] dump_stack_lvl+0x241/0x360 [ 81.052828][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.052839][ T5307] ? __pfx_print_modules+0x10/0x10 [ 81.052854][ T5307] ? add_taint+0x99/0xe0 [ 81.052871][ T5307] bad_page+0x176/0x1d0 [ 81.052883][ T5307] free_frozen_pages+0x1082/0x10e0 [ 81.052899][ T5307] __folio_put+0x2b3/0x360 [ 81.052912][ T5307] ? __pfx___folio_put+0x10/0x10 [ 81.052924][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.052938][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 81.052956][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 81.052973][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.052991][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 81.053004][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 81.053019][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 81.053035][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 81.053050][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 81.053060][ T5307] ? blk_mq_submit_bio+0xf7a/0x25a0 [ 81.053071][ T5307] ? blk_mq_submit_bio+0x494/0x25a0 [ 81.053079][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.053095][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 81.053105][ T5307] ? rcu_is_watching+0x15/0xb0 [ 81.053113][ T5307] evict+0x4fd/0x9a0 [ 81.053123][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 81.053131][ T5307] ? __pfx_evict+0x10/0x10 [ 81.053139][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.053146][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 81.053153][ T5307] evict_inodes+0x6f6/0x790 [ 81.053160][ T5307] ? xfs_log_force+0x4cb/0x960 [ 81.053169][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 81.053175][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 81.053186][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 81.053196][ T5307] kill_block_super+0x44/0x90 [ 81.053204][ T5307] xfs_kill_sb+0x15/0x50 [ 81.053258][ T5307] deactivate_locked_super+0xc4/0x130 [ 81.053268][ T5307] cleanup_mnt+0x41f/0x4b0 [ 81.053277][ T5307] task_work_run+0x24f/0x310 [ 81.053288][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 81.053297][ T5307] ? __x64_sys_umount+0x123/0x170 [ 81.053306][ T5307] ? rcu_is_watching+0x15/0xb0 [ 81.053313][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 81.053323][ T5307] do_syscall_64+0x100/0x230 [ 81.053334][ T5307] ? clear_bhb_loop+0x35/0x90 [ 81.053345][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.053354][ T5307] RIP: 0033:0x7f3c13562647 [ 81.053362][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.053368][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 81.053377][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 81.053382][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 81.053386][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 81.053391][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 81.053395][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 81.053407][ T5307] [ 81.054062][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 81.389202][ T5345] loop0: detected capacity change from 0 to 32768 [ 81.406543][ T5345] XFS: ikeep mount option is deprecated. [ 81.420034][ T5345] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.441765][ T5345] XFS (loop0): Ending clean mount [ 81.445297][ T5345] XFS (loop0): Quotacheck needed: Please wait. [ 81.456653][ T5345] XFS (loop0): Quotacheck: Done. [ 81.486068][ T5307] BUG: Bad page state in process syz-executor412 pfn:49801 [ 81.489411][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x49801 [ 81.492983][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 81.497817][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 81.502905][ T5307] raw: 04fff00000000000 ffffea0001260001 ffffffffffffffff ffffffff00000000 [ 81.508570][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 81.511450][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 81.516014][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.519692][ T5307] head: 04fff00000000000 ffffea0001260001 ffffffffffffffff ffffffff00000000 [ 81.523522][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 81.528005][ T5307] page dumped because: nonzero pincount [ 81.530676][ T5307] page_owner tracks the page as allocated [ 81.532922][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5345, tgid 5345 (syz-executor412), ts 81462685895, free_ts 81053493494 [ 81.542688][ T5307] post_alloc_hook+0x1f4/0x240 [ 81.545462][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 81.547764][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 81.550311][ T5307] alloc_pages_mpol+0x311/0x660 [ 81.552565][ T5307] alloc_pages_noprof+0x121/0x190 [ 81.555513][ T5307] folio_alloc_noprof+0x1e/0x30 [ 81.557866][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 81.560143][ T5307] __filemap_get_folio+0x438/0xae0 [ 81.562427][ T5307] iomap_write_begin+0x4d3/0x1990 [ 81.565248][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 81.567497][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 81.569879][ T5307] vfs_write+0xacf/0xd10 [ 81.571815][ T5307] ksys_write+0x18f/0x2b0 [ 81.573738][ T5307] do_syscall_64+0xf3/0x230 [ 81.576565][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.578747][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 81.580986][ T5307] free_unref_folios+0xe40/0x18b0 [ 81.582855][ T5307] folios_put_refs+0x76c/0x860 [ 81.585424][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 81.588248][ T5307] evict+0x4fd/0x9a0 [ 81.589995][ T5307] evict_inodes+0x6f6/0x790 [ 81.591819][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 81.594066][ T5307] kill_block_super+0x44/0x90 [ 81.596599][ T5307] xfs_kill_sb+0x15/0x50 [ 81.598286][ T5307] deactivate_locked_super+0xc4/0x130 [ 81.600334][ T5307] cleanup_mnt+0x41f/0x4b0 [ 81.602154][ T5307] task_work_run+0x24f/0x310 [ 81.605426][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 81.608840][ T5307] do_syscall_64+0x100/0x230 [ 81.610761][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.613130][ T5307] Modules linked in: [ 81.615455][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 81.615470][ T5307] Tainted: [B]=BAD_PAGE [ 81.615474][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.615480][ T5307] Call Trace: [ 81.615498][ T5307] [ 81.615503][ T5307] dump_stack_lvl+0x241/0x360 [ 81.615521][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.615531][ T5307] ? __pfx_print_modules+0x10/0x10 [ 81.615544][ T5307] ? uncharge_folio+0x341/0x680 [ 81.615560][ T5307] bad_page+0x176/0x1d0 [ 81.615570][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 81.615578][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 81.615586][ T5307] __folio_put+0x2b3/0x360 [ 81.615594][ T5307] ? __pfx___folio_put+0x10/0x10 [ 81.615600][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.615608][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 81.615618][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 81.615627][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.615636][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 81.615643][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 81.615650][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 81.615659][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 81.615667][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 81.615675][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 81.615682][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.615696][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 81.615704][ T5307] ? rcu_is_watching+0x15/0xb0 [ 81.615713][ T5307] evict+0x4fd/0x9a0 [ 81.615721][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 81.615728][ T5307] ? __pfx_evict+0x10/0x10 [ 81.615771][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.615783][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 81.615793][ T5307] evict_inodes+0x6f6/0x790 [ 81.615800][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 81.615806][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 81.615816][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 81.615825][ T5307] kill_block_super+0x44/0x90 [ 81.615832][ T5307] xfs_kill_sb+0x15/0x50 [ 81.615839][ T5307] deactivate_locked_super+0xc4/0x130 [ 81.615846][ T5307] cleanup_mnt+0x41f/0x4b0 [ 81.615857][ T5307] task_work_run+0x24f/0x310 [ 81.615872][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 81.615885][ T5307] ? __x64_sys_umount+0x123/0x170 [ 81.615899][ T5307] ? rcu_is_watching+0x15/0xb0 [ 81.615908][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 81.615921][ T5307] do_syscall_64+0x100/0x230 [ 81.615934][ T5307] ? clear_bhb_loop+0x35/0x90 [ 81.615950][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.615969][ T5307] RIP: 0033:0x7f3c13562647 [ 81.615979][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.615987][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 81.615999][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 81.616006][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 81.616012][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 81.616017][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 81.616021][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 81.616027][ T5307] [ 81.616046][ T5307] BUG: Bad page state in process syz-executor412 pfn:49800 [ 81.759912][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49800 [ 81.764637][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.768295][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 81.772191][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 81.776133][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.780353][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 81.783688][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 81.787299][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 81.790518][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 81.793919][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 81.797502][ T5307] page_owner tracks the page as allocated [ 81.800021][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5345, tgid 5345 (syz-executor412), ts 81462685895, free_ts 81053493494 [ 81.810430][ T5307] post_alloc_hook+0x1f4/0x240 [ 81.812270][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 81.815457][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 81.818634][ T5307] alloc_pages_mpol+0x311/0x660 [ 81.820837][ T5307] alloc_pages_noprof+0x121/0x190 [ 81.823399][ T5307] folio_alloc_noprof+0x1e/0x30 [ 81.825840][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 81.827891][ T5307] __filemap_get_folio+0x438/0xae0 [ 81.830070][ T5307] iomap_write_begin+0x4d3/0x1990 [ 81.831926][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 81.834124][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 81.838008][ T5307] vfs_write+0xacf/0xd10 [ 81.840035][ T5307] ksys_write+0x18f/0x2b0 [ 81.842015][ T5307] do_syscall_64+0xf3/0x230 [ 81.843870][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.846550][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 81.848942][ T5307] free_unref_folios+0xe40/0x18b0 [ 81.850932][ T5307] folios_put_refs+0x76c/0x860 [ 81.853106][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 81.857315][ T5307] evict+0x4fd/0x9a0 [ 81.859012][ T5307] evict_inodes+0x6f6/0x790 [ 81.860729][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 81.862681][ T5307] kill_block_super+0x44/0x90 [ 81.865277][ T5307] xfs_kill_sb+0x15/0x50 [ 81.866881][ T5307] deactivate_locked_super+0xc4/0x130 [ 81.868784][ T5307] cleanup_mnt+0x41f/0x4b0 [ 81.870414][ T5307] task_work_run+0x24f/0x310 [ 81.872115][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 81.875668][ T5307] do_syscall_64+0x100/0x230 [ 81.877868][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.880437][ T5307] Modules linked in: [ 81.881936][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 81.881952][ T5307] Tainted: [B]=BAD_PAGE [ 81.881956][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.881962][ T5307] Call Trace: [ 81.882945][ T5307] [ 81.882951][ T5307] dump_stack_lvl+0x241/0x360 [ 81.882968][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.882978][ T5307] ? __pfx_print_modules+0x10/0x10 [ 81.882992][ T5307] ? add_taint+0x99/0xe0 [ 81.883007][ T5307] bad_page+0x176/0x1d0 [ 81.883018][ T5307] free_frozen_pages+0x1082/0x10e0 [ 81.883032][ T5307] __folio_put+0x2b3/0x360 [ 81.883040][ T5307] ? __pfx___folio_put+0x10/0x10 [ 81.883051][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.883061][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 81.883077][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 81.883093][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 81.883108][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 81.883119][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 81.883133][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 81.883146][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 81.883158][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 81.883174][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 81.883185][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 81.883207][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 81.883221][ T5307] ? rcu_is_watching+0x15/0xb0 [ 81.883231][ T5307] evict+0x4fd/0x9a0 [ 81.883244][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 81.883255][ T5307] ? __pfx_evict+0x10/0x10 [ 81.883268][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.883279][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 81.883289][ T5307] evict_inodes+0x6f6/0x790 [ 81.883301][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 81.883311][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 81.883326][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 81.883337][ T5307] kill_block_super+0x44/0x90 [ 81.883344][ T5307] xfs_kill_sb+0x15/0x50 [ 81.883351][ T5307] deactivate_locked_super+0xc4/0x130 [ 81.883361][ T5307] cleanup_mnt+0x41f/0x4b0 [ 81.883374][ T5307] task_work_run+0x24f/0x310 [ 81.883391][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 81.883404][ T5307] ? __x64_sys_umount+0x123/0x170 [ 81.883418][ T5307] ? rcu_is_watching+0x15/0xb0 [ 81.883427][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 81.883442][ T5307] do_syscall_64+0x100/0x230 [ 81.883456][ T5307] ? clear_bhb_loop+0x35/0x90 [ 81.883471][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.883484][ T5307] RIP: 0033:0x7f3c13562647 [ 81.883495][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 81.883504][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 81.883516][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 81.883525][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 81.883530][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 81.883536][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 81.883543][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 81.883552][ T5307] [ 81.884155][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 82.224788][ T5354] loop0: detected capacity change from 0 to 32768 [ 82.234159][ T5354] XFS: ikeep mount option is deprecated. [ 82.244851][ T5354] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 82.272901][ T5354] XFS (loop0): Ending clean mount [ 82.277066][ T5354] XFS (loop0): Quotacheck needed: Please wait. [ 82.286496][ T5354] XFS (loop0): Quotacheck: Done. [ 82.322605][ T5307] BUG: Bad page state in process syz-executor412 pfn:49a01 [ 82.325775][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x49a01 [ 82.329444][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 82.333489][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 82.338345][ T5307] raw: 04fff00000000000 ffffea0001268001 ffffffffffffffff ffffffff00000000 [ 82.341641][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 82.345681][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 82.349908][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.353810][ T5307] head: 04fff00000000000 ffffea0001268001 ffffffffffffffff ffffffff00000000 [ 82.358249][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 82.361489][ T5307] page dumped because: nonzero pincount [ 82.363537][ T5307] page_owner tracks the page as allocated [ 82.366457][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5354, tgid 5354 (syz-executor412), ts 82292440655, free_ts 81883615049 [ 82.376531][ T5307] post_alloc_hook+0x1f4/0x240 [ 82.378845][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 82.381464][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 82.384017][ T5307] alloc_pages_mpol+0x311/0x660 [ 82.386884][ T5307] alloc_pages_noprof+0x121/0x190 [ 82.388866][ T5307] folio_alloc_noprof+0x1e/0x30 [ 82.390688][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 82.393011][ T5307] __filemap_get_folio+0x438/0xae0 [ 82.396209][ T5307] iomap_write_begin+0x4d3/0x1990 [ 82.398652][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 82.401054][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 82.403169][ T5307] vfs_write+0xacf/0xd10 [ 82.405438][ T5307] ksys_write+0x18f/0x2b0 [ 82.407152][ T5307] do_syscall_64+0xf3/0x230 [ 82.409018][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.411517][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 82.415857][ T5307] free_unref_folios+0xe40/0x18b0 [ 82.418042][ T5307] folios_put_refs+0x76c/0x860 [ 82.419940][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 82.422111][ T5307] evict+0x4fd/0x9a0 [ 82.423770][ T5307] evict_inodes+0x6f6/0x790 [ 82.426299][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 82.428845][ T5307] kill_block_super+0x44/0x90 [ 82.431048][ T5307] xfs_kill_sb+0x15/0x50 [ 82.432856][ T5307] deactivate_locked_super+0xc4/0x130 [ 82.435625][ T5307] cleanup_mnt+0x41f/0x4b0 [ 82.437360][ T5307] task_work_run+0x24f/0x310 [ 82.439109][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 82.441428][ T5307] do_syscall_64+0x100/0x230 [ 82.443348][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.447422][ T5307] Modules linked in: [ 82.449479][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 82.449499][ T5307] Tainted: [B]=BAD_PAGE [ 82.449502][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.449509][ T5307] Call Trace: [ 82.449523][ T5307] [ 82.449528][ T5307] dump_stack_lvl+0x241/0x360 [ 82.449544][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.449553][ T5307] ? __pfx_print_modules+0x10/0x10 [ 82.449565][ T5307] ? uncharge_folio+0x341/0x680 [ 82.449581][ T5307] bad_page+0x176/0x1d0 [ 82.449591][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 82.449604][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 82.449617][ T5307] __folio_put+0x2b3/0x360 [ 82.449629][ T5307] ? __pfx___folio_put+0x10/0x10 [ 82.449640][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 82.449652][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 82.449670][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 82.449690][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 82.449707][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 82.449720][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 82.449736][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 82.449751][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 82.449766][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 82.449784][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 82.449797][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 82.449824][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 82.449839][ T5307] ? rcu_is_watching+0x15/0xb0 [ 82.449852][ T5307] evict+0x4fd/0x9a0 [ 82.450008][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 82.450027][ T5307] ? __pfx_evict+0x10/0x10 [ 82.450042][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 82.450054][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 82.450066][ T5307] evict_inodes+0x6f6/0x790 [ 82.450078][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 82.450089][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 82.450106][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 82.450166][ T5307] kill_block_super+0x44/0x90 [ 82.450184][ T5307] xfs_kill_sb+0x15/0x50 [ 82.450197][ T5307] deactivate_locked_super+0xc4/0x130 [ 82.450211][ T5307] cleanup_mnt+0x41f/0x4b0 [ 82.450227][ T5307] task_work_run+0x24f/0x310 [ 82.450245][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 82.450260][ T5307] ? __x64_sys_umount+0x123/0x170 [ 82.450275][ T5307] ? rcu_is_watching+0x15/0xb0 [ 82.450286][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 82.450303][ T5307] do_syscall_64+0x100/0x230 [ 82.450317][ T5307] ? clear_bhb_loop+0x35/0x90 [ 82.450334][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.450348][ T5307] RIP: 0033:0x7f3c13562647 [ 82.450360][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 82.450370][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 82.450383][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 82.450390][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 82.450397][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 82.450403][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 82.450411][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 82.450422][ T5307] [ 82.450457][ T5307] BUG: Bad page state in process syz-executor412 pfn:49a00 [ 82.596482][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49a00 [ 82.600830][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 82.604885][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 82.608718][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 82.612041][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.616037][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 82.620491][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 82.624207][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 82.628103][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 82.631551][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 82.634996][ T5307] page_owner tracks the page as allocated [ 82.637449][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5354, tgid 5354 (syz-executor412), ts 82292440655, free_ts 81883615049 [ 82.647950][ T5307] post_alloc_hook+0x1f4/0x240 [ 82.650227][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 82.652758][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 82.655839][ T5307] alloc_pages_mpol+0x311/0x660 [ 82.658546][ T5307] alloc_pages_noprof+0x121/0x190 [ 82.660473][ T5307] folio_alloc_noprof+0x1e/0x30 [ 82.662454][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 82.665479][ T5307] __filemap_get_folio+0x438/0xae0 [ 82.668040][ T5307] iomap_write_begin+0x4d3/0x1990 [ 82.670180][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 82.672379][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 82.674964][ T5307] vfs_write+0xacf/0xd10 [ 82.676668][ T5307] ksys_write+0x18f/0x2b0 [ 82.678292][ T5307] do_syscall_64+0xf3/0x230 [ 82.680053][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.682510][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 82.687162][ T5307] free_unref_folios+0xe40/0x18b0 [ 82.690741][ T5307] folios_put_refs+0x76c/0x860 [ 82.692596][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 82.696239][ T5307] evict+0x4fd/0x9a0 [ 82.697821][ T5307] evict_inodes+0x6f6/0x790 [ 82.699505][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 82.701570][ T5307] kill_block_super+0x44/0x90 [ 82.703686][ T5307] xfs_kill_sb+0x15/0x50 [ 82.707005][ T5307] deactivate_locked_super+0xc4/0x130 [ 82.709535][ T5307] cleanup_mnt+0x41f/0x4b0 [ 82.711223][ T5307] task_work_run+0x24f/0x310 [ 82.713088][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 82.715957][ T5307] do_syscall_64+0x100/0x230 [ 82.717707][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.719991][ T5307] Modules linked in: [ 82.721454][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 82.721491][ T5307] Tainted: [B]=BAD_PAGE [ 82.721495][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 82.721504][ T5307] Call Trace: [ 82.721518][ T5307] [ 82.721523][ T5307] dump_stack_lvl+0x241/0x360 [ 82.721540][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.721551][ T5307] ? __pfx_print_modules+0x10/0x10 [ 82.721566][ T5307] ? add_taint+0x99/0xe0 [ 82.721583][ T5307] bad_page+0x176/0x1d0 [ 82.721594][ T5307] free_frozen_pages+0x1082/0x10e0 [ 82.721614][ T5307] __folio_put+0x2b3/0x360 [ 82.721627][ T5307] ? __pfx___folio_put+0x10/0x10 [ 82.721640][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 82.721653][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 82.721669][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 82.721686][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 82.721702][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 82.721713][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 82.721727][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 82.721742][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 82.721755][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 82.721770][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 82.721782][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 82.721804][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 82.721816][ T5307] ? rcu_is_watching+0x15/0xb0 [ 82.721826][ T5307] evict+0x4fd/0x9a0 [ 82.721839][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 82.721851][ T5307] ? __pfx_evict+0x10/0x10 [ 82.721864][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 82.721875][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 82.721885][ T5307] evict_inodes+0x6f6/0x790 [ 82.721897][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 82.721907][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 82.721923][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 82.721935][ T5307] kill_block_super+0x44/0x90 [ 82.721948][ T5307] xfs_kill_sb+0x15/0x50 [ 82.721973][ T5307] deactivate_locked_super+0xc4/0x130 [ 82.721985][ T5307] cleanup_mnt+0x41f/0x4b0 [ 82.721998][ T5307] task_work_run+0x24f/0x310 [ 82.722016][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 82.722029][ T5307] ? __x64_sys_umount+0x123/0x170 [ 82.722045][ T5307] ? rcu_is_watching+0x15/0xb0 [ 82.722056][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 82.722072][ T5307] do_syscall_64+0x100/0x230 [ 82.722087][ T5307] ? clear_bhb_loop+0x35/0x90 [ 82.722103][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.722118][ T5307] RIP: 0033:0x7f3c13562647 [ 82.722131][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 82.722140][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 82.722153][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 82.722160][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 82.722168][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 82.722174][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 82.722181][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 82.722193][ T5307] [ 82.722844][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 83.098354][ T5364] loop0: detected capacity change from 0 to 32768 [ 83.116565][ T5364] XFS: ikeep mount option is deprecated. [ 83.137993][ T5364] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.166103][ T5364] XFS (loop0): Ending clean mount [ 83.168792][ T5364] XFS (loop0): Quotacheck needed: Please wait. [ 83.178757][ T5364] XFS (loop0): Quotacheck: Done. [ 83.208398][ T5307] BUG: Bad page state in process syz-executor412 pfn:49c01 [ 83.211782][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x49c01 [ 83.216301][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 83.219719][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 83.223606][ T5307] raw: 04fff00000000000 ffffea0001270001 ffffffffffffffff ffffffff00000000 [ 83.229210][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 83.233165][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 83.237255][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.240560][ T5307] head: 04fff00000000000 ffffea0001270001 ffffffffffffffff ffffffff00000000 [ 83.243782][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 83.247790][ T5307] page dumped because: nonzero pincount [ 83.250662][ T5307] page_owner tracks the page as allocated [ 83.253162][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5364, tgid 5364 (syz-executor412), ts 83183687110, free_ts 82722265110 [ 83.262938][ T5307] post_alloc_hook+0x1f4/0x240 [ 83.265830][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 83.268419][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 83.270628][ T5307] alloc_pages_mpol+0x311/0x660 [ 83.272510][ T5307] alloc_pages_noprof+0x121/0x190 [ 83.275032][ T5307] folio_alloc_noprof+0x1e/0x30 [ 83.277002][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 83.279176][ T5307] __filemap_get_folio+0x438/0xae0 [ 83.281464][ T5307] iomap_write_begin+0x4d3/0x1990 [ 83.285419][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 83.288503][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 83.290670][ T5307] vfs_write+0xacf/0xd10 [ 83.292283][ T5307] ksys_write+0x18f/0x2b0 [ 83.293916][ T5307] do_syscall_64+0xf3/0x230 [ 83.296584][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.298916][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 83.301903][ T5307] free_unref_folios+0xe40/0x18b0 [ 83.305736][ T5307] folios_put_refs+0x76c/0x860 [ 83.308074][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 83.310244][ T5307] evict+0x4fd/0x9a0 [ 83.311879][ T5307] evict_inodes+0x6f6/0x790 [ 83.313686][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 83.316243][ T5307] kill_block_super+0x44/0x90 [ 83.318179][ T5307] xfs_kill_sb+0x15/0x50 [ 83.319982][ T5307] deactivate_locked_super+0xc4/0x130 [ 83.322172][ T5307] cleanup_mnt+0x41f/0x4b0 [ 83.324170][ T5307] task_work_run+0x24f/0x310 [ 83.328516][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 83.331271][ T5307] do_syscall_64+0x100/0x230 [ 83.333257][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.335996][ T5307] Modules linked in: [ 83.337546][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 83.337563][ T5307] Tainted: [B]=BAD_PAGE [ 83.337567][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.337574][ T5307] Call Trace: [ 83.337623][ T5307] [ 83.337628][ T5307] dump_stack_lvl+0x241/0x360 [ 83.337645][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.337655][ T5307] ? __pfx_print_modules+0x10/0x10 [ 83.337667][ T5307] ? uncharge_folio+0x341/0x680 [ 83.337685][ T5307] bad_page+0x176/0x1d0 [ 83.337696][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 83.337709][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 83.337723][ T5307] __folio_put+0x2b3/0x360 [ 83.337734][ T5307] ? __pfx___folio_put+0x10/0x10 [ 83.337745][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 83.337758][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 83.337774][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 83.337790][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 83.337805][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 83.337816][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 83.337829][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 83.337842][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 83.337855][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 83.337869][ T5307] ? rcu_is_watching+0x15/0xb0 [ 83.337879][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 83.337904][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 83.337917][ T5307] ? rcu_is_watching+0x15/0xb0 [ 83.337934][ T5307] evict+0x4fd/0x9a0 [ 83.337947][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 83.337959][ T5307] ? __pfx_evict+0x10/0x10 [ 83.337971][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 83.337982][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 83.337993][ T5307] evict_inodes+0x6f6/0x790 [ 83.338002][ T5307] ? xfs_log_force+0x4e5/0x960 [ 83.338016][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 83.338026][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 83.338040][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 83.338054][ T5307] kill_block_super+0x44/0x90 [ 83.338068][ T5307] xfs_kill_sb+0x15/0x50 [ 83.338079][ T5307] deactivate_locked_super+0xc4/0x130 [ 83.338091][ T5307] cleanup_mnt+0x41f/0x4b0 [ 83.338104][ T5307] task_work_run+0x24f/0x310 [ 83.338117][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 83.338129][ T5307] ? __x64_sys_umount+0x123/0x170 [ 83.338144][ T5307] ? rcu_is_watching+0x15/0xb0 [ 83.338152][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 83.338168][ T5307] do_syscall_64+0x100/0x230 [ 83.338183][ T5307] ? clear_bhb_loop+0x35/0x90 [ 83.338197][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.338211][ T5307] RIP: 0033:0x7f3c13562647 [ 83.338222][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 83.338231][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 83.338244][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 83.338250][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 83.338256][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 83.338262][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 83.338269][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 83.338278][ T5307] [ 83.338310][ T5307] BUG: Bad page state in process syz-executor412 pfn:49c00 [ 83.479478][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49c00 [ 83.486827][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 83.490853][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 83.496302][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 83.501059][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.504206][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 83.507850][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 83.511038][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 83.514979][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 83.518410][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 83.521448][ T5307] page_owner tracks the page as allocated [ 83.524123][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5364, tgid 5364 (syz-executor412), ts 83183687110, free_ts 82722265110 [ 83.534688][ T5307] post_alloc_hook+0x1f4/0x240 [ 83.536470][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 83.538715][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 83.541136][ T5307] alloc_pages_mpol+0x311/0x660 [ 83.543716][ T5307] alloc_pages_noprof+0x121/0x190 [ 83.546650][ T5307] folio_alloc_noprof+0x1e/0x30 [ 83.548599][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 83.550851][ T5307] __filemap_get_folio+0x438/0xae0 [ 83.552809][ T5307] iomap_write_begin+0x4d3/0x1990 [ 83.555436][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 83.557609][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 83.559980][ T5307] vfs_write+0xacf/0xd10 [ 83.561638][ T5307] ksys_write+0x18f/0x2b0 [ 83.563340][ T5307] do_syscall_64+0xf3/0x230 [ 83.565588][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.567601][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 83.569883][ T5307] free_unref_folios+0xe40/0x18b0 [ 83.571836][ T5307] folios_put_refs+0x76c/0x860 [ 83.575614][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 83.578428][ T5307] evict+0x4fd/0x9a0 [ 83.579934][ T5307] evict_inodes+0x6f6/0x790 [ 83.581502][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 83.583304][ T5307] kill_block_super+0x44/0x90 [ 83.585658][ T5307] xfs_kill_sb+0x15/0x50 [ 83.587313][ T5307] deactivate_locked_super+0xc4/0x130 [ 83.589547][ T5307] cleanup_mnt+0x41f/0x4b0 [ 83.591432][ T5307] task_work_run+0x24f/0x310 [ 83.593466][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 83.596711][ T5307] do_syscall_64+0x100/0x230 [ 83.598525][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.600947][ T5307] Modules linked in: [ 83.602495][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 83.602512][ T5307] Tainted: [B]=BAD_PAGE [ 83.602516][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.602523][ T5307] Call Trace: [ 83.602538][ T5307] [ 83.602544][ T5307] dump_stack_lvl+0x241/0x360 [ 83.602560][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.602569][ T5307] ? __pfx_print_modules+0x10/0x10 [ 83.602583][ T5307] ? add_taint+0x99/0xe0 [ 83.602598][ T5307] bad_page+0x176/0x1d0 [ 83.602611][ T5307] free_frozen_pages+0x1082/0x10e0 [ 83.602625][ T5307] __folio_put+0x2b3/0x360 [ 83.602637][ T5307] ? __pfx___folio_put+0x10/0x10 [ 83.602649][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 83.602662][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 83.602677][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 83.602700][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 83.602716][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 83.602728][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 83.602741][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 83.602754][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 83.602767][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 83.602782][ T5307] ? rcu_is_watching+0x15/0xb0 [ 83.602791][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 83.602815][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 83.602829][ T5307] ? rcu_is_watching+0x15/0xb0 [ 83.602839][ T5307] evict+0x4fd/0x9a0 [ 83.602853][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 83.602865][ T5307] ? __pfx_evict+0x10/0x10 [ 83.602878][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 83.602888][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 83.602899][ T5307] evict_inodes+0x6f6/0x790 [ 83.602908][ T5307] ? xfs_log_force+0x4e5/0x960 [ 83.602922][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 83.602931][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 83.602946][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 83.602960][ T5307] kill_block_super+0x44/0x90 [ 83.602974][ T5307] xfs_kill_sb+0x15/0x50 [ 83.602984][ T5307] deactivate_locked_super+0xc4/0x130 [ 83.602995][ T5307] cleanup_mnt+0x41f/0x4b0 [ 83.603009][ T5307] task_work_run+0x24f/0x310 [ 83.603028][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 83.603041][ T5307] ? __x64_sys_umount+0x123/0x170 [ 83.603055][ T5307] ? rcu_is_watching+0x15/0xb0 [ 83.603063][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 83.603072][ T5307] do_syscall_64+0x100/0x230 [ 83.603080][ T5307] ? clear_bhb_loop+0x35/0x90 [ 83.603090][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.603098][ T5307] RIP: 0033:0x7f3c13562647 [ 83.603109][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 83.603117][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 83.603129][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 83.603135][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 83.603141][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 83.603147][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 83.603153][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 83.603163][ T5307] [ 83.603702][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 83.945389][ T5373] loop0: detected capacity change from 0 to 32768 [ 83.953200][ T5373] XFS: ikeep mount option is deprecated. [ 83.970943][ T5373] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.002307][ T5373] XFS (loop0): Ending clean mount [ 84.005638][ T5373] XFS (loop0): Quotacheck needed: Please wait. [ 84.016622][ T5373] XFS (loop0): Quotacheck: Done. [ 84.055444][ T5307] BUG: Bad page state in process syz-executor412 pfn:49e01 [ 84.058284][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x49e01 [ 84.061523][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 84.066405][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 84.070837][ T5307] raw: 04fff00000000000 ffffea0001278001 ffffffffffffffff ffffffff00000000 [ 84.074969][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 84.078376][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 84.082517][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.086898][ T5307] head: 04fff00000000000 ffffea0001278001 ffffffffffffffff ffffffff00000000 [ 84.090211][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 84.093929][ T5307] page dumped because: nonzero pincount [ 84.097000][ T5307] page_owner tracks the page as allocated [ 84.099579][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5373, tgid 5373 (syz-executor412), ts 84024239166, free_ts 83603221103 [ 84.109580][ T5307] post_alloc_hook+0x1f4/0x240 [ 84.112259][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 84.115327][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 84.117825][ T5307] alloc_pages_mpol+0x311/0x660 [ 84.119803][ T5307] alloc_pages_noprof+0x121/0x190 [ 84.121765][ T5307] folio_alloc_noprof+0x1e/0x30 [ 84.123764][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 84.126869][ T5307] __filemap_get_folio+0x438/0xae0 [ 84.129179][ T5307] iomap_write_begin+0x4d3/0x1990 [ 84.131570][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 84.134931][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 84.137205][ T5307] vfs_write+0xacf/0xd10 [ 84.138892][ T5307] ksys_write+0x18f/0x2b0 [ 84.140661][ T5307] do_syscall_64+0xf3/0x230 [ 84.142819][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.146388][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 84.149092][ T5307] free_unref_folios+0xe40/0x18b0 [ 84.151096][ T5307] folios_put_refs+0x76c/0x860 [ 84.152862][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 84.156037][ T5307] evict+0x4fd/0x9a0 [ 84.158324][ T5307] evict_inodes+0x6f6/0x790 [ 84.160343][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 84.162966][ T5307] kill_block_super+0x44/0x90 [ 84.165800][ T5307] xfs_kill_sb+0x15/0x50 [ 84.167390][ T5307] deactivate_locked_super+0xc4/0x130 [ 84.169260][ T5307] cleanup_mnt+0x41f/0x4b0 [ 84.170911][ T5307] task_work_run+0x24f/0x310 [ 84.172606][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 84.175243][ T5307] do_syscall_64+0x100/0x230 [ 84.176882][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.179163][ T5307] Modules linked in: [ 84.180801][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 84.180817][ T5307] Tainted: [B]=BAD_PAGE [ 84.180821][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.180827][ T5307] Call Trace: [ 84.180844][ T5307] [ 84.180850][ T5307] dump_stack_lvl+0x241/0x360 [ 84.180868][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.180878][ T5307] ? __pfx_print_modules+0x10/0x10 [ 84.180890][ T5307] ? uncharge_folio+0x341/0x680 [ 84.180902][ T5307] bad_page+0x176/0x1d0 [ 84.180910][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 84.180922][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 84.180935][ T5307] __folio_put+0x2b3/0x360 [ 84.180948][ T5307] ? __pfx___folio_put+0x10/0x10 [ 84.180960][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 84.180973][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 84.180989][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 84.181005][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 84.181019][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 84.181030][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 84.181042][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 84.181056][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 84.181070][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 84.181085][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 84.181102][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 84.181131][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 84.181144][ T5307] ? rcu_is_watching+0x15/0xb0 [ 84.181153][ T5307] evict+0x4fd/0x9a0 [ 84.181167][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 84.181182][ T5307] ? __pfx_evict+0x10/0x10 [ 84.181194][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 84.181204][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 84.181214][ T5307] evict_inodes+0x6f6/0x790 [ 84.181224][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 84.181233][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 84.181251][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 84.181265][ T5307] kill_block_super+0x44/0x90 [ 84.181279][ T5307] xfs_kill_sb+0x15/0x50 [ 84.181290][ T5307] deactivate_locked_super+0xc4/0x130 [ 84.181298][ T5307] cleanup_mnt+0x41f/0x4b0 [ 84.181307][ T5307] task_work_run+0x24f/0x310 [ 84.181318][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 84.181325][ T5307] ? __x64_sys_umount+0x123/0x170 [ 84.181334][ T5307] ? rcu_is_watching+0x15/0xb0 [ 84.181340][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 84.181350][ T5307] do_syscall_64+0x100/0x230 [ 84.181359][ T5307] ? clear_bhb_loop+0x35/0x90 [ 84.181369][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.181381][ T5307] RIP: 0033:0x7f3c13562647 [ 84.181389][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 84.181394][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 84.181402][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 84.181406][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 84.181410][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 84.181414][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 84.181418][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 84.181424][ T5307] [ 84.181444][ T5307] BUG: Bad page state in process syz-executor412 pfn:49e00 [ 84.331337][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49e00 [ 84.335968][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.339807][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 84.343670][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 84.347502][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.351189][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 84.355943][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.359254][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 84.362508][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 84.366798][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 84.371032][ T5307] page_owner tracks the page as allocated [ 84.373883][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5373, tgid 5373 (syz-executor412), ts 84024239166, free_ts 83603221103 [ 84.384912][ T5307] post_alloc_hook+0x1f4/0x240 [ 84.386895][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 84.389495][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 84.392134][ T5307] alloc_pages_mpol+0x311/0x660 [ 84.394901][ T5307] alloc_pages_noprof+0x121/0x190 [ 84.396946][ T5307] folio_alloc_noprof+0x1e/0x30 [ 84.398866][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 84.401084][ T5307] __filemap_get_folio+0x438/0xae0 [ 84.403179][ T5307] iomap_write_begin+0x4d3/0x1990 [ 84.406084][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 84.408561][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 84.411022][ T5307] vfs_write+0xacf/0xd10 [ 84.412960][ T5307] ksys_write+0x18f/0x2b0 [ 84.415293][ T5307] do_syscall_64+0xf3/0x230 [ 84.416867][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.418830][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 84.421252][ T5307] free_unref_folios+0xe40/0x18b0 [ 84.423358][ T5307] folios_put_refs+0x76c/0x860 [ 84.426194][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 84.429075][ T5307] evict+0x4fd/0x9a0 [ 84.431374][ T5307] evict_inodes+0x6f6/0x790 [ 84.433099][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 84.436172][ T5307] kill_block_super+0x44/0x90 [ 84.438352][ T5307] xfs_kill_sb+0x15/0x50 [ 84.440463][ T5307] deactivate_locked_super+0xc4/0x130 [ 84.443086][ T5307] cleanup_mnt+0x41f/0x4b0 [ 84.445564][ T5307] task_work_run+0x24f/0x310 [ 84.447182][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 84.449348][ T5307] do_syscall_64+0x100/0x230 [ 84.451086][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.453534][ T5307] Modules linked in: [ 84.455794][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 84.455815][ T5307] Tainted: [B]=BAD_PAGE [ 84.455818][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.455823][ T5307] Call Trace: [ 84.455837][ T5307] [ 84.455840][ T5307] dump_stack_lvl+0x241/0x360 [ 84.455854][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.455864][ T5307] ? __pfx_print_modules+0x10/0x10 [ 84.455874][ T5307] ? add_taint+0x99/0xe0 [ 84.455885][ T5307] bad_page+0x176/0x1d0 [ 84.455893][ T5307] free_frozen_pages+0x1082/0x10e0 [ 84.455904][ T5307] __folio_put+0x2b3/0x360 [ 84.455914][ T5307] ? __pfx___folio_put+0x10/0x10 [ 84.455922][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 84.455931][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 84.455944][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 84.455962][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 84.455980][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 84.455995][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 84.456011][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 84.456023][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 84.456033][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 84.456045][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 84.456054][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 84.456072][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 84.456086][ T5307] ? rcu_is_watching+0x15/0xb0 [ 84.456100][ T5307] evict+0x4fd/0x9a0 [ 84.456117][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 84.456132][ T5307] ? __pfx_evict+0x10/0x10 [ 84.456146][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 84.456154][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 84.456162][ T5307] evict_inodes+0x6f6/0x790 [ 84.456171][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 84.456178][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 84.456192][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 84.456202][ T5307] kill_block_super+0x44/0x90 [ 84.456212][ T5307] xfs_kill_sb+0x15/0x50 [ 84.456221][ T5307] deactivate_locked_super+0xc4/0x130 [ 84.456230][ T5307] cleanup_mnt+0x41f/0x4b0 [ 84.456241][ T5307] task_work_run+0x24f/0x310 [ 84.456255][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 84.456270][ T5307] ? __x64_sys_umount+0x123/0x170 [ 84.456288][ T5307] ? rcu_is_watching+0x15/0xb0 [ 84.456299][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 84.456317][ T5307] do_syscall_64+0x100/0x230 [ 84.456335][ T5307] ? clear_bhb_loop+0x35/0x90 [ 84.456350][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.456359][ T5307] RIP: 0033:0x7f3c13562647 [ 84.456414][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 84.456424][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 84.456440][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 84.456448][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 84.456455][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 84.456463][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 84.456471][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 84.456486][ T5307] [ 84.457154][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 84.785292][ T5382] loop0: detected capacity change from 0 to 32768 [ 84.805537][ T5382] XFS: ikeep mount option is deprecated. [ 84.820038][ T5382] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 84.844864][ T5382] XFS (loop0): Ending clean mount [ 84.847623][ T5382] XFS (loop0): Quotacheck needed: Please wait. [ 84.857734][ T5382] XFS (loop0): Quotacheck: Done. [ 84.883962][ T5307] BUG: Bad page state in process syz-executor412 pfn:4a201 [ 84.886780][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4a201 [ 84.890365][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 84.897372][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 84.901593][ T5307] raw: 04fff00000000000 ffffea0001288001 ffffffffffffffff ffffffff00000000 [ 84.906285][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 84.909693][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 84.913413][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 84.918130][ T5307] head: 04fff00000000000 ffffea0001288001 ffffffffffffffff ffffffff00000000 [ 84.921711][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 84.925767][ T5307] page dumped because: nonzero pincount [ 84.927911][ T5307] page_owner tracks the page as allocated [ 84.930244][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5382, tgid 5382 (syz-executor412), ts 84865337560, free_ts 0 [ 84.940138][ T5307] post_alloc_hook+0x1f4/0x240 [ 84.942129][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 84.945035][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 84.948356][ T5307] alloc_pages_mpol+0x311/0x660 [ 84.950636][ T5307] alloc_pages_noprof+0x121/0x190 [ 84.952921][ T5307] folio_alloc_noprof+0x1e/0x30 [ 84.955395][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 84.957669][ T5307] __filemap_get_folio+0x438/0xae0 [ 84.959917][ T5307] iomap_write_begin+0x4d3/0x1990 [ 84.962161][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 84.965216][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 84.967383][ T5307] vfs_write+0xacf/0xd10 [ 84.969624][ T5307] ksys_write+0x18f/0x2b0 [ 84.971436][ T5307] do_syscall_64+0xf3/0x230 [ 84.973056][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.976632][ T5307] page_owner free stack trace missing [ 84.979099][ T5307] Modules linked in: [ 84.980625][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 84.980642][ T5307] Tainted: [B]=BAD_PAGE [ 84.980645][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.980652][ T5307] Call Trace: [ 84.980659][ T5307] [ 84.980665][ T5307] dump_stack_lvl+0x241/0x360 [ 84.980684][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.980693][ T5307] ? __pfx_print_modules+0x10/0x10 [ 84.980714][ T5307] ? uncharge_folio+0x341/0x680 [ 84.980732][ T5307] bad_page+0x176/0x1d0 [ 84.980742][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 84.980756][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 84.980770][ T5307] __folio_put+0x2b3/0x360 [ 84.980781][ T5307] ? __pfx___folio_put+0x10/0x10 [ 84.980792][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 84.980803][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 84.980817][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 84.980834][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 84.980850][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 84.980862][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 84.980876][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 84.980890][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 84.980903][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 84.980919][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 84.980931][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 84.980954][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 84.980969][ T5307] ? rcu_is_watching+0x15/0xb0 [ 84.980981][ T5307] evict+0x4fd/0x9a0 [ 84.980994][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 84.981006][ T5307] ? __pfx_evict+0x10/0x10 [ 84.981018][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 84.981029][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 84.981039][ T5307] evict_inodes+0x6f6/0x790 [ 84.981050][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 84.981060][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 84.981076][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 84.981089][ T5307] kill_block_super+0x44/0x90 [ 84.981103][ T5307] xfs_kill_sb+0x15/0x50 [ 84.981114][ T5307] deactivate_locked_super+0xc4/0x130 [ 84.981126][ T5307] cleanup_mnt+0x41f/0x4b0 [ 84.981140][ T5307] task_work_run+0x24f/0x310 [ 84.981159][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 84.981172][ T5307] ? __x64_sys_umount+0x123/0x170 [ 84.981187][ T5307] ? rcu_is_watching+0x15/0xb0 [ 84.981196][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 84.981211][ T5307] do_syscall_64+0x100/0x230 [ 84.981225][ T5307] ? clear_bhb_loop+0x35/0x90 [ 84.981240][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.981254][ T5307] RIP: 0033:0x7f3c13562647 [ 84.981266][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 84.981275][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 84.981288][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 84.981295][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 84.981300][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 84.981306][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 84.981312][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 84.981323][ T5307] [ 84.981356][ T5307] BUG: Bad page state in process syz-executor412 pfn:4a200 [ 85.129668][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a200 [ 85.133044][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.136471][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 85.140419][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.144154][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.148611][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.151594][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.155378][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 85.158799][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 85.162119][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.164942][ T5307] page_owner tracks the page as allocated [ 85.166784][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5382, tgid 5382 (syz-executor412), ts 84865337560, free_ts 0 [ 85.176609][ T5307] post_alloc_hook+0x1f4/0x240 [ 85.178440][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 85.180427][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 85.182307][ T5307] alloc_pages_mpol+0x311/0x660 [ 85.183967][ T5307] alloc_pages_noprof+0x121/0x190 [ 85.186283][ T5307] folio_alloc_noprof+0x1e/0x30 [ 85.188122][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 85.190262][ T5307] __filemap_get_folio+0x438/0xae0 [ 85.192294][ T5307] iomap_write_begin+0x4d3/0x1990 [ 85.195248][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 85.198392][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 85.200990][ T5307] vfs_write+0xacf/0xd10 [ 85.202742][ T5307] ksys_write+0x18f/0x2b0 [ 85.204939][ T5307] do_syscall_64+0xf3/0x230 [ 85.206731][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.209166][ T5307] page_owner free stack trace missing [ 85.211248][ T5307] Modules linked in: [ 85.212620][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 85.212637][ T5307] Tainted: [B]=BAD_PAGE [ 85.212643][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.212651][ T5307] Call Trace: [ 85.212659][ T5307] [ 85.212666][ T5307] dump_stack_lvl+0x241/0x360 [ 85.212685][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.212696][ T5307] ? __pfx_print_modules+0x10/0x10 [ 85.212712][ T5307] ? add_taint+0x99/0xe0 [ 85.212731][ T5307] bad_page+0x176/0x1d0 [ 85.212743][ T5307] free_frozen_pages+0x1082/0x10e0 [ 85.212760][ T5307] __folio_put+0x2b3/0x360 [ 85.212774][ T5307] ? __pfx___folio_put+0x10/0x10 [ 85.212788][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 85.212801][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 85.212824][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 85.212845][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.212864][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 85.212878][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 85.212892][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 85.212908][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 85.212924][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 85.212942][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 85.212955][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.212991][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 85.213006][ T5307] ? rcu_is_watching+0x15/0xb0 [ 85.213018][ T5307] evict+0x4fd/0x9a0 [ 85.213034][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 85.213046][ T5307] ? __pfx_evict+0x10/0x10 [ 85.213060][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 85.213071][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 85.213084][ T5307] evict_inodes+0x6f6/0x790 [ 85.213097][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 85.213108][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 85.213125][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 85.213135][ T5307] kill_block_super+0x44/0x90 [ 85.213144][ T5307] xfs_kill_sb+0x15/0x50 [ 85.213152][ T5307] deactivate_locked_super+0xc4/0x130 [ 85.213160][ T5307] cleanup_mnt+0x41f/0x4b0 [ 85.213170][ T5307] task_work_run+0x24f/0x310 [ 85.213182][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 85.213190][ T5307] ? __x64_sys_umount+0x123/0x170 [ 85.213201][ T5307] ? rcu_is_watching+0x15/0xb0 [ 85.213208][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 85.213218][ T5307] do_syscall_64+0x100/0x230 [ 85.213228][ T5307] ? clear_bhb_loop+0x35/0x90 [ 85.213238][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.213248][ T5307] RIP: 0033:0x7f3c13562647 [ 85.213267][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 85.213273][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 85.213282][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 85.213287][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 85.213292][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 85.213296][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 85.213301][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 85.213308][ T5307] [ 85.213731][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 85.546127][ T5391] loop0: detected capacity change from 0 to 32768 [ 85.553788][ T5391] XFS: ikeep mount option is deprecated. [ 85.563583][ T5391] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.590671][ T5391] XFS (loop0): Ending clean mount [ 85.593587][ T5391] XFS (loop0): Quotacheck needed: Please wait. [ 85.600743][ T5391] XFS (loop0): Quotacheck: Done. [ 85.634236][ T5307] BUG: Bad page state in process syz-executor412 pfn:4a001 [ 85.637681][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4a001 [ 85.641716][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 85.646871][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 85.650884][ T5307] raw: 04fff00000000000 ffffea0001280001 ffffffffffffffff ffffffff00000000 [ 85.655018][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 85.658360][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.661826][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.667561][ T5307] head: 04fff00000000000 ffffea0001280001 ffffffffffffffff ffffffff00000000 [ 85.670829][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 85.674113][ T5307] page dumped because: nonzero pincount [ 85.676983][ T5307] page_owner tracks the page as allocated [ 85.679373][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5391, tgid 5391 (syz-executor412), ts 85609743935, free_ts 84456547791 [ 85.689941][ T5307] post_alloc_hook+0x1f4/0x240 [ 85.691685][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 85.694061][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 85.697473][ T5307] alloc_pages_mpol+0x311/0x660 [ 85.699969][ T5307] alloc_pages_noprof+0x121/0x190 [ 85.701741][ T5307] folio_alloc_noprof+0x1e/0x30 [ 85.703489][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 85.706151][ T5307] __filemap_get_folio+0x438/0xae0 [ 85.707939][ T5307] iomap_write_begin+0x4d3/0x1990 [ 85.710001][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 85.712531][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 85.715482][ T5307] vfs_write+0xacf/0xd10 [ 85.717395][ T5307] ksys_write+0x18f/0x2b0 [ 85.719120][ T5307] do_syscall_64+0xf3/0x230 [ 85.720984][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.723500][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 85.726712][ T5307] free_unref_folios+0xe40/0x18b0 [ 85.728879][ T5307] folios_put_refs+0x76c/0x860 [ 85.730842][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 85.733150][ T5307] evict+0x4fd/0x9a0 [ 85.735061][ T5307] evict_inodes+0x6f6/0x790 [ 85.736761][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 85.738993][ T5307] kill_block_super+0x44/0x90 [ 85.741328][ T5307] xfs_kill_sb+0x15/0x50 [ 85.743318][ T5307] deactivate_locked_super+0xc4/0x130 [ 85.746271][ T5307] cleanup_mnt+0x41f/0x4b0 [ 85.748084][ T5307] task_work_run+0x24f/0x310 [ 85.750006][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 85.752647][ T5307] do_syscall_64+0x100/0x230 [ 85.755291][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.757991][ T5307] Modules linked in: [ 85.759671][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 85.759693][ T5307] Tainted: [B]=BAD_PAGE [ 85.759697][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.759704][ T5307] Call Trace: [ 85.759723][ T5307] [ 85.759730][ T5307] dump_stack_lvl+0x241/0x360 [ 85.759773][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.759783][ T5307] ? __pfx_print_modules+0x10/0x10 [ 85.759797][ T5307] ? uncharge_folio+0x341/0x680 [ 85.759814][ T5307] bad_page+0x176/0x1d0 [ 85.759825][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 85.759838][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 85.759850][ T5307] __folio_put+0x2b3/0x360 [ 85.759861][ T5307] ? __pfx___folio_put+0x10/0x10 [ 85.759872][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 85.759884][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 85.759901][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 85.759918][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 85.759934][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 85.759945][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 85.759957][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 85.759971][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 85.759985][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 85.759999][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 85.760012][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 85.760038][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 85.760052][ T5307] ? rcu_is_watching+0x15/0xb0 [ 85.760062][ T5307] evict+0x4fd/0x9a0 [ 85.760076][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 85.760088][ T5307] ? __pfx_evict+0x10/0x10 [ 85.760102][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 85.760112][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 85.760122][ T5307] evict_inodes+0x6f6/0x790 [ 85.760133][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 85.760144][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 85.760160][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 85.760175][ T5307] kill_block_super+0x44/0x90 [ 85.760188][ T5307] xfs_kill_sb+0x15/0x50 [ 85.760199][ T5307] deactivate_locked_super+0xc4/0x130 [ 85.760211][ T5307] cleanup_mnt+0x41f/0x4b0 [ 85.760226][ T5307] task_work_run+0x24f/0x310 [ 85.760242][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 85.760256][ T5307] ? __x64_sys_umount+0x123/0x170 [ 85.760271][ T5307] ? rcu_is_watching+0x15/0xb0 [ 85.760282][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 85.760298][ T5307] do_syscall_64+0x100/0x230 [ 85.760312][ T5307] ? clear_bhb_loop+0x35/0x90 [ 85.760325][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.760338][ T5307] RIP: 0033:0x7f3c13562647 [ 85.760350][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 85.760359][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 85.760373][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 85.760380][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 85.760386][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 85.760393][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 85.760400][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 85.760409][ T5307] [ 85.760439][ T5307] BUG: Bad page state in process syz-executor412 pfn:4a000 [ 85.905243][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a000 [ 85.908637][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 85.912235][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 85.917202][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.920530][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.923884][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 85.928164][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.932115][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 85.935921][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 85.939034][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 85.941719][ T5307] page_owner tracks the page as allocated [ 85.943873][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5391, tgid 5391 (syz-executor412), ts 85609743935, free_ts 84456547791 [ 85.954700][ T5307] post_alloc_hook+0x1f4/0x240 [ 85.956662][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 85.958910][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 85.962439][ T5307] alloc_pages_mpol+0x311/0x660 [ 85.966872][ T5307] alloc_pages_noprof+0x121/0x190 [ 85.969022][ T5307] folio_alloc_noprof+0x1e/0x30 [ 85.970949][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 85.973130][ T5307] __filemap_get_folio+0x438/0xae0 [ 85.975820][ T5307] iomap_write_begin+0x4d3/0x1990 [ 85.977637][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 85.980088][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 85.982601][ T5307] vfs_write+0xacf/0xd10 [ 85.985270][ T5307] ksys_write+0x18f/0x2b0 [ 85.987128][ T5307] do_syscall_64+0xf3/0x230 [ 85.989115][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.991458][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 85.994073][ T5307] free_unref_folios+0xe40/0x18b0 [ 85.997470][ T5307] folios_put_refs+0x76c/0x860 [ 86.000059][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 86.002745][ T5307] evict+0x4fd/0x9a0 [ 86.005211][ T5307] evict_inodes+0x6f6/0x790 [ 86.006981][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 86.009081][ T5307] kill_block_super+0x44/0x90 [ 86.011224][ T5307] xfs_kill_sb+0x15/0x50 [ 86.013128][ T5307] deactivate_locked_super+0xc4/0x130 [ 86.016107][ T5307] cleanup_mnt+0x41f/0x4b0 [ 86.017890][ T5307] task_work_run+0x24f/0x310 [ 86.019663][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 86.021803][ T5307] do_syscall_64+0x100/0x230 [ 86.023680][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.027011][ T5307] Modules linked in: [ 86.028971][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 86.028990][ T5307] Tainted: [B]=BAD_PAGE [ 86.028995][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.029002][ T5307] Call Trace: [ 86.029058][ T5307] [ 86.029065][ T5307] dump_stack_lvl+0x241/0x360 [ 86.029079][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.029087][ T5307] ? __pfx_print_modules+0x10/0x10 [ 86.029097][ T5307] ? add_taint+0x99/0xe0 [ 86.029109][ T5307] bad_page+0x176/0x1d0 [ 86.029117][ T5307] free_frozen_pages+0x1082/0x10e0 [ 86.029129][ T5307] __folio_put+0x2b3/0x360 [ 86.029139][ T5307] ? __pfx___folio_put+0x10/0x10 [ 86.029147][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.029156][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 86.029168][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 86.029180][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.029191][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 86.029200][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 86.029214][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 86.029229][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 86.029245][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 86.029264][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 86.029279][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.029305][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 86.029322][ T5307] ? rcu_is_watching+0x15/0xb0 [ 86.029337][ T5307] evict+0x4fd/0x9a0 [ 86.029353][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 86.029368][ T5307] ? __pfx_evict+0x10/0x10 [ 86.029380][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.029388][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 86.029396][ T5307] evict_inodes+0x6f6/0x790 [ 86.029404][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 86.029411][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 86.029423][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 86.029433][ T5307] kill_block_super+0x44/0x90 [ 86.029443][ T5307] xfs_kill_sb+0x15/0x50 [ 86.029500][ T5307] deactivate_locked_super+0xc4/0x130 [ 86.029514][ T5307] cleanup_mnt+0x41f/0x4b0 [ 86.029529][ T5307] task_work_run+0x24f/0x310 [ 86.029548][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 86.029564][ T5307] ? __x64_sys_umount+0x123/0x170 [ 86.029581][ T5307] ? rcu_is_watching+0x15/0xb0 [ 86.029592][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 86.029610][ T5307] do_syscall_64+0x100/0x230 [ 86.029627][ T5307] ? clear_bhb_loop+0x35/0x90 [ 86.029644][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.029655][ T5307] RIP: 0033:0x7f3c13562647 [ 86.029664][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.029670][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.029689][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 86.029696][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 86.029703][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 86.029709][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 86.029716][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 86.029729][ T5307] [ 86.030307][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 86.341442][ T5400] loop0: detected capacity change from 0 to 32768 [ 86.365822][ T5400] XFS: ikeep mount option is deprecated. [ 86.376514][ T5400] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.397341][ T5400] XFS (loop0): Ending clean mount [ 86.400253][ T5400] XFS (loop0): Quotacheck needed: Please wait. [ 86.408796][ T5400] XFS (loop0): Quotacheck: Done. [ 86.441278][ T5307] BUG: Bad page state in process syz-executor412 pfn:4a801 [ 86.444148][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4a801 [ 86.448130][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 86.452440][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 86.456870][ T5307] raw: 04fff00000000000 ffffea00012a0001 ffffffffffffffff ffffffff00000000 [ 86.460235][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 86.463560][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 86.467926][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.472112][ T5307] head: 04fff00000000000 ffffea00012a0001 ffffffffffffffff ffffffff00000000 [ 86.476056][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 86.479021][ T5307] page dumped because: nonzero pincount [ 86.481039][ T5307] page_owner tracks the page as allocated [ 86.482996][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5400, tgid 5400 (syz-executor412), ts 86415955344, free_ts 0 [ 86.493175][ T5307] post_alloc_hook+0x1f4/0x240 [ 86.495998][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 86.498085][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 86.500303][ T5307] alloc_pages_mpol+0x311/0x660 [ 86.502366][ T5307] alloc_pages_noprof+0x121/0x190 [ 86.505761][ T5307] folio_alloc_noprof+0x1e/0x30 [ 86.507805][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 86.509947][ T5307] __filemap_get_folio+0x438/0xae0 [ 86.512576][ T5307] iomap_write_begin+0x4d3/0x1990 [ 86.515933][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 86.518242][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 86.520357][ T5307] vfs_write+0xacf/0xd10 [ 86.522143][ T5307] ksys_write+0x18f/0x2b0 [ 86.524114][ T5307] do_syscall_64+0xf3/0x230 [ 86.526921][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.529250][ T5307] page_owner free stack trace missing [ 86.531311][ T5307] Modules linked in: [ 86.532874][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 86.532892][ T5307] Tainted: [B]=BAD_PAGE [ 86.532896][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.532903][ T5307] Call Trace: [ 86.532923][ T5307] [ 86.532929][ T5307] dump_stack_lvl+0x241/0x360 [ 86.532946][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.532957][ T5307] ? __pfx_print_modules+0x10/0x10 [ 86.532971][ T5307] ? uncharge_folio+0x341/0x680 [ 86.532989][ T5307] bad_page+0x176/0x1d0 [ 86.532999][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 86.533012][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 86.533026][ T5307] __folio_put+0x2b3/0x360 [ 86.533038][ T5307] ? __pfx___folio_put+0x10/0x10 [ 86.533049][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.533062][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 86.533079][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 86.533098][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.533114][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 86.533125][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 86.533137][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 86.533151][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 86.533164][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 86.533180][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 86.533193][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.533214][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 86.533227][ T5307] ? rcu_is_watching+0x15/0xb0 [ 86.533239][ T5307] evict+0x4fd/0x9a0 [ 86.533252][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 86.533263][ T5307] ? __pfx_evict+0x10/0x10 [ 86.533277][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.533286][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 86.533293][ T5307] evict_inodes+0x6f6/0x790 [ 86.533300][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 86.533306][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 86.533317][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 86.533325][ T5307] kill_block_super+0x44/0x90 [ 86.533336][ T5307] xfs_kill_sb+0x15/0x50 [ 86.533347][ T5307] deactivate_locked_super+0xc4/0x130 [ 86.533358][ T5307] cleanup_mnt+0x41f/0x4b0 [ 86.533372][ T5307] task_work_run+0x24f/0x310 [ 86.533390][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 86.533404][ T5307] ? __x64_sys_umount+0x123/0x170 [ 86.533419][ T5307] ? rcu_is_watching+0x15/0xb0 [ 86.533428][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 86.533443][ T5307] do_syscall_64+0x100/0x230 [ 86.533458][ T5307] ? clear_bhb_loop+0x35/0x90 [ 86.533472][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.533485][ T5307] RIP: 0033:0x7f3c13562647 [ 86.533497][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.533505][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.533517][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 86.533524][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 86.533529][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 86.533535][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 86.533542][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 86.533552][ T5307] [ 86.533584][ T5307] BUG: Bad page state in process syz-executor412 pfn:4a800 [ 86.679949][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4a800 [ 86.685263][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.688728][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 86.692528][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 86.696330][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.699976][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 86.703759][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.707713][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 86.711698][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 86.715960][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 86.718762][ T5307] page_owner tracks the page as allocated [ 86.720995][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5400, tgid 5400 (syz-executor412), ts 86415955344, free_ts 0 [ 86.731310][ T5307] post_alloc_hook+0x1f4/0x240 [ 86.733303][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 86.736547][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 86.738973][ T5307] alloc_pages_mpol+0x311/0x660 [ 86.741127][ T5307] alloc_pages_noprof+0x121/0x190 [ 86.743947][ T5307] folio_alloc_noprof+0x1e/0x30 [ 86.746621][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 86.749004][ T5307] __filemap_get_folio+0x438/0xae0 [ 86.751027][ T5307] iomap_write_begin+0x4d3/0x1990 [ 86.753330][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 86.756442][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 86.759192][ T5307] vfs_write+0xacf/0xd10 [ 86.761334][ T5307] ksys_write+0x18f/0x2b0 [ 86.763177][ T5307] do_syscall_64+0xf3/0x230 [ 86.765577][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.767991][ T5307] page_owner free stack trace missing [ 86.770123][ T5307] Modules linked in: [ 86.771563][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 86.771579][ T5307] Tainted: [B]=BAD_PAGE [ 86.771582][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.771590][ T5307] Call Trace: [ 86.771599][ T5307] [ 86.771605][ T5307] dump_stack_lvl+0x241/0x360 [ 86.771623][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.771633][ T5307] ? __pfx_print_modules+0x10/0x10 [ 86.771647][ T5307] ? add_taint+0x99/0xe0 [ 86.771661][ T5307] bad_page+0x176/0x1d0 [ 86.771674][ T5307] free_frozen_pages+0x1082/0x10e0 [ 86.771689][ T5307] __folio_put+0x2b3/0x360 [ 86.771702][ T5307] ? __pfx___folio_put+0x10/0x10 [ 86.771713][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.771726][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 86.771782][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 86.771800][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 86.771816][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 86.771829][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 86.771843][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 86.771859][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 86.771874][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 86.771890][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 86.771901][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 86.771922][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 86.771937][ T5307] ? rcu_is_watching+0x15/0xb0 [ 86.771948][ T5307] evict+0x4fd/0x9a0 [ 86.771962][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 86.771974][ T5307] ? __pfx_evict+0x10/0x10 [ 86.771989][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 86.772000][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 86.772011][ T5307] evict_inodes+0x6f6/0x790 [ 86.772023][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 86.772034][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 86.772052][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 86.772068][ T5307] kill_block_super+0x44/0x90 [ 86.772083][ T5307] xfs_kill_sb+0x15/0x50 [ 86.772096][ T5307] deactivate_locked_super+0xc4/0x130 [ 86.772109][ T5307] cleanup_mnt+0x41f/0x4b0 [ 86.772124][ T5307] task_work_run+0x24f/0x310 [ 86.772144][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 86.772158][ T5307] ? __x64_sys_umount+0x123/0x170 [ 86.772174][ T5307] ? rcu_is_watching+0x15/0xb0 [ 86.772185][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 86.772200][ T5307] do_syscall_64+0x100/0x230 [ 86.772215][ T5307] ? clear_bhb_loop+0x35/0x90 [ 86.772231][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.772246][ T5307] RIP: 0033:0x7f3c13562647 [ 86.772260][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.772270][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.772283][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 86.772290][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 86.772297][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 86.772304][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 86.772311][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 86.772328][ T5307] [ 86.772942][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.917893][ T56] cfg80211: failed to load regulatory.db executing program [ 87.103402][ T5409] loop0: detected capacity change from 0 to 32768 [ 87.127409][ T5409] XFS: ikeep mount option is deprecated. [ 87.142769][ T5409] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 87.161576][ T5409] XFS (loop0): Ending clean mount [ 87.165849][ T5409] XFS (loop0): Quotacheck needed: Please wait. [ 87.176173][ T5409] XFS (loop0): Quotacheck: Done. [ 87.204246][ T5307] BUG: Bad page state in process syz-executor412 pfn:4aa01 [ 87.207714][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4aa01 [ 87.211304][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 87.214994][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 87.218457][ T5307] raw: 04fff00000000000 ffffea00012a8001 ffffffffffffffff ffffffff00000000 [ 87.221523][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 87.225943][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 87.229331][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.232342][ T5307] head: 04fff00000000000 ffffea00012a8001 ffffffffffffffff ffffffff00000000 [ 87.236076][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 87.239267][ T5307] page dumped because: nonzero pincount [ 87.241541][ T5307] page_owner tracks the page as allocated [ 87.244021][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5409, tgid 5409 (syz-executor412), ts 87182312980, free_ts 86772397073 [ 87.252926][ T5307] post_alloc_hook+0x1f4/0x240 [ 87.255214][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 87.257997][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 87.260830][ T5307] alloc_pages_mpol+0x311/0x660 [ 87.262841][ T5307] alloc_pages_noprof+0x121/0x190 [ 87.265584][ T5307] folio_alloc_noprof+0x1e/0x30 [ 87.267371][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 87.269433][ T5307] __filemap_get_folio+0x438/0xae0 [ 87.271352][ T5307] iomap_write_begin+0x4d3/0x1990 [ 87.273278][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 87.276408][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 87.279020][ T5307] vfs_write+0xacf/0xd10 [ 87.280977][ T5307] ksys_write+0x18f/0x2b0 [ 87.282951][ T5307] do_syscall_64+0xf3/0x230 [ 87.285432][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.287820][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 87.290339][ T5307] free_unref_folios+0xe40/0x18b0 [ 87.292271][ T5307] folios_put_refs+0x76c/0x860 [ 87.294976][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 87.297686][ T5307] evict+0x4fd/0x9a0 [ 87.299340][ T5307] evict_inodes+0x6f6/0x790 [ 87.301317][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 87.303565][ T5307] kill_block_super+0x44/0x90 [ 87.305892][ T5307] xfs_kill_sb+0x15/0x50 [ 87.307476][ T5307] deactivate_locked_super+0xc4/0x130 [ 87.309524][ T5307] cleanup_mnt+0x41f/0x4b0 [ 87.311325][ T5307] task_work_run+0x24f/0x310 [ 87.313272][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 87.315867][ T5307] do_syscall_64+0x100/0x230 [ 87.317456][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.319689][ T5307] Modules linked in: [ 87.321167][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 87.321186][ T5307] Tainted: [B]=BAD_PAGE [ 87.321190][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.321197][ T5307] Call Trace: [ 87.321216][ T5307] [ 87.321222][ T5307] dump_stack_lvl+0x241/0x360 [ 87.321239][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.321248][ T5307] ? __pfx_print_modules+0x10/0x10 [ 87.321261][ T5307] ? uncharge_folio+0x341/0x680 [ 87.321278][ T5307] bad_page+0x176/0x1d0 [ 87.321289][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 87.321303][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 87.321318][ T5307] __folio_put+0x2b3/0x360 [ 87.321331][ T5307] ? __pfx___folio_put+0x10/0x10 [ 87.321343][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 87.321356][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 87.321372][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 87.321390][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 87.321406][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 87.321419][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 87.321433][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 87.321447][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 87.321462][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 87.321502][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 87.321515][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 87.321540][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 87.321555][ T5307] ? rcu_is_watching+0x15/0xb0 [ 87.321567][ T5307] evict+0x4fd/0x9a0 [ 87.321581][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 87.321593][ T5307] ? __pfx_evict+0x10/0x10 [ 87.321607][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 87.321618][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 87.321630][ T5307] evict_inodes+0x6f6/0x790 [ 87.321641][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 87.321652][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 87.321669][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 87.321691][ T5307] kill_block_super+0x44/0x90 [ 87.321704][ T5307] xfs_kill_sb+0x15/0x50 [ 87.321716][ T5307] deactivate_locked_super+0xc4/0x130 [ 87.321728][ T5307] cleanup_mnt+0x41f/0x4b0 [ 87.321742][ T5307] task_work_run+0x24f/0x310 [ 87.321760][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 87.321774][ T5307] ? __x64_sys_umount+0x123/0x170 [ 87.321790][ T5307] ? rcu_is_watching+0x15/0xb0 [ 87.321800][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 87.321816][ T5307] do_syscall_64+0x100/0x230 [ 87.321830][ T5307] ? clear_bhb_loop+0x35/0x90 [ 87.321845][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.321859][ T5307] RIP: 0033:0x7f3c13562647 [ 87.321870][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 87.321880][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 87.321893][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 87.321900][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 87.321906][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 87.321912][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 87.321919][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 87.321930][ T5307] [ 87.321967][ T5307] BUG: Bad page state in process syz-executor412 pfn:4aa00 [ 87.475115][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4aa00 [ 87.491996][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.509644][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 87.524836][ T5307] raw: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 87.528018][ T5307] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.531237][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 87.535688][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 87.539140][ T5307] head: 04fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 87.542275][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 87.546223][ T5307] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 87.549476][ T5307] page_owner tracks the page as allocated [ 87.551692][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5409, tgid 5409 (syz-executor412), ts 87182312980, free_ts 86772397073 [ 87.560822][ T5307] post_alloc_hook+0x1f4/0x240 [ 87.562935][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 87.566670][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 87.569966][ T5307] alloc_pages_mpol+0x311/0x660 [ 87.572035][ T5307] alloc_pages_noprof+0x121/0x190 [ 87.573899][ T5307] folio_alloc_noprof+0x1e/0x30 [ 87.576984][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 87.579083][ T5307] __filemap_get_folio+0x438/0xae0 [ 87.580957][ T5307] iomap_write_begin+0x4d3/0x1990 [ 87.582764][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 87.585665][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 87.588043][ T5307] vfs_write+0xacf/0xd10 [ 87.589820][ T5307] ksys_write+0x18f/0x2b0 [ 87.591532][ T5307] do_syscall_64+0xf3/0x230 [ 87.593413][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.597182][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 87.599720][ T5307] free_unref_folios+0xe40/0x18b0 [ 87.601732][ T5307] folios_put_refs+0x76c/0x860 [ 87.605887][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 87.608102][ T5307] evict+0x4fd/0x9a0 [ 87.609550][ T5307] evict_inodes+0x6f6/0x790 [ 87.611199][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 87.613214][ T5307] kill_block_super+0x44/0x90 [ 87.615785][ T5307] xfs_kill_sb+0x15/0x50 [ 87.617829][ T5307] deactivate_locked_super+0xc4/0x130 [ 87.620351][ T5307] cleanup_mnt+0x41f/0x4b0 [ 87.622252][ T5307] task_work_run+0x24f/0x310 [ 87.624065][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 87.626787][ T5307] do_syscall_64+0x100/0x230 [ 87.628599][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.630906][ T5307] Modules linked in: [ 87.632597][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 87.632617][ T5307] Tainted: [B]=BAD_PAGE [ 87.632622][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.632630][ T5307] Call Trace: [ 87.632650][ T5307] [ 87.632657][ T5307] dump_stack_lvl+0x241/0x360 [ 87.632675][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.632686][ T5307] ? __pfx_print_modules+0x10/0x10 [ 87.632703][ T5307] ? add_taint+0x99/0xe0 [ 87.632723][ T5307] bad_page+0x176/0x1d0 [ 87.632734][ T5307] free_frozen_pages+0x1082/0x10e0 [ 87.632750][ T5307] __folio_put+0x2b3/0x360 [ 87.632764][ T5307] ? __pfx___folio_put+0x10/0x10 [ 87.632777][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 87.632790][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 87.632809][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 87.632829][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 87.632848][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 87.632860][ T5307] ? truncate_cleanup_folio+0x203/0x300 [ 87.632882][ T5307] ? __pfx_iomap_invalidate_folio+0x10/0x10 [ 87.632896][ T5307] ? truncate_cleanup_folio+0x280/0x300 [ 87.632911][ T5307] truncate_inode_pages_range+0x36b/0x10e0 [ 87.632930][ T5307] ? __pfx_filemap_get_folios_tag+0x10/0x10 [ 87.632944][ T5307] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 87.632972][ T5307] ? _raw_spin_lock_irq+0xdf/0x120 [ 87.632987][ T5307] ? rcu_is_watching+0x15/0xb0 [ 87.633000][ T5307] evict+0x4fd/0x9a0 [ 87.633016][ T5307] ? lock_list_lru_of_memcg+0x2e/0x4d0 [ 87.633029][ T5307] ? __pfx_evict+0x10/0x10 [ 87.633045][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 87.633057][ T5307] ? list_lru_del_obj+0xa8/0x250 [ 87.633069][ T5307] evict_inodes+0x6f6/0x790 [ 87.633083][ T5307] ? __pfx_evict_inodes+0x10/0x10 [ 87.633094][ T5307] ? xfs_fs_sync_fs+0x1d0/0x390 [ 87.633114][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 87.633130][ T5307] kill_block_super+0x44/0x90 [ 87.633146][ T5307] xfs_kill_sb+0x15/0x50 [ 87.633159][ T5307] deactivate_locked_super+0xc4/0x130 [ 87.633173][ T5307] cleanup_mnt+0x41f/0x4b0 [ 87.633190][ T5307] task_work_run+0x24f/0x310 [ 87.633210][ T5307] ? __pfx_task_work_run+0x10/0x10 [ 87.633226][ T5307] ? __x64_sys_umount+0x123/0x170 [ 87.633244][ T5307] ? rcu_is_watching+0x15/0xb0 [ 87.633255][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 87.633272][ T5307] do_syscall_64+0x100/0x230 [ 87.633290][ T5307] ? clear_bhb_loop+0x35/0x90 [ 87.633306][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.633321][ T5307] RIP: 0033:0x7f3c13562647 [ 87.633384][ T5307] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 87.633397][ T5307] RSP: 002b:00007ffc6e0b1718 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 87.633412][ T5307] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3c13562647 [ 87.633420][ T5307] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e0b17d0 [ 87.633427][ T5307] RBP: 00007ffc6e0b17d0 R08: 0000000000000000 R09: 0000000000000000 [ 87.633434][ T5307] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc6e0b2840 [ 87.633442][ T5307] R13: 000055556ad516c0 R14: 431bde82d7b634db R15: 00007ffc6e0b2860 [ 87.633455][ T5307] [ 87.634041][ T5307] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 executing program [ 87.949971][ T5418] loop0: detected capacity change from 0 to 32768 [ 87.977989][ T5418] XFS: ikeep mount option is deprecated. [ 87.998564][ T5418] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.029105][ T5418] XFS (loop0): Ending clean mount [ 88.032452][ T5418] XFS (loop0): Quotacheck needed: Please wait. [ 88.042575][ T5418] XFS (loop0): Quotacheck: Done. [ 88.073771][ T5307] BUG: Bad page state in process syz-executor412 pfn:4a401 [ 88.076872][ T5307] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x4a401 [ 88.080569][ T5307] head: order:0 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:-1 [ 88.085298][ T5307] flags: 0x4fff0000000004d(locked|referenced|uptodate|head|node=1|zone=1|lastcpupid=0x7ff) [ 88.089146][ T5307] raw: 04fff00000000000 ffffea0001290001 ffffffffffffffff ffffffff00000000 [ 88.092301][ T5307] raw: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 88.096539][ T5307] head: 04fff0000000004d dead000000000100 dead000000000122 0000000000000000 [ 88.100517][ T5307] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 88.105215][ T5307] head: 04fff00000000000 ffffea0001290001 ffffffffffffffff ffffffff00000000 [ 88.109052][ T5307] head: 0000000000000200 0000000000000000 00000000ffffffff 0000000000000000 [ 88.112438][ T5307] page dumped because: nonzero pincount [ 88.114835][ T5307] page_owner tracks the page as allocated [ 88.116711][ T5307] page last allocated via order 9, migratetype Movable, gfp_mask 0x153c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE|__GFP_WRITE), pid 5418, tgid 5418 (syz-executor412), ts 88050803165, free_ts 87633545020 [ 88.125818][ T5307] post_alloc_hook+0x1f4/0x240 [ 88.127982][ T5307] get_page_from_freelist+0x365c/0x37a0 [ 88.129734][ T5307] __alloc_frozen_pages_noprof+0x292/0x710 [ 88.131906][ T5307] alloc_pages_mpol+0x311/0x660 [ 88.133642][ T5307] alloc_pages_noprof+0x121/0x190 [ 88.136082][ T5307] folio_alloc_noprof+0x1e/0x30 [ 88.137939][ T5307] filemap_alloc_folio_noprof+0xe1/0x540 [ 88.140985][ T5307] __filemap_get_folio+0x438/0xae0 [ 88.143515][ T5307] iomap_write_begin+0x4d3/0x1990 [ 88.146248][ T5307] iomap_file_buffered_write+0x6ea/0x11c0 [ 88.148390][ T5307] xfs_file_buffered_write+0x2cd/0xb20 [ 88.150454][ T5307] vfs_write+0xacf/0xd10 [ 88.151986][ T5307] ksys_write+0x18f/0x2b0 [ 88.153540][ T5307] do_syscall_64+0xf3/0x230 [ 88.155906][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.157933][ T5307] page last free pid 5307 tgid 5307 stack trace: [ 88.160338][ T5307] free_unref_folios+0xe40/0x18b0 [ 88.162150][ T5307] folios_put_refs+0x76c/0x860 [ 88.163845][ T5307] truncate_inode_pages_range+0x460/0x10e0 [ 88.166596][ T5307] evict+0x4fd/0x9a0 [ 88.168201][ T5307] evict_inodes+0x6f6/0x790 [ 88.169957][ T5307] generic_shutdown_super+0xa0/0x2d0 [ 88.171791][ T5307] kill_block_super+0x44/0x90 [ 88.173462][ T5307] xfs_kill_sb+0x15/0x50 [ 88.176327][ T5307] deactivate_locked_super+0xc4/0x130 [ 88.178562][ T5307] cleanup_mnt+0x41f/0x4b0 [ 88.180231][ T5307] task_work_run+0x24f/0x310 [ 88.181971][ T5307] syscall_exit_to_user_mode+0x13f/0x340 [ 88.184165][ T5307] do_syscall_64+0x100/0x230 [ 88.186735][ T5307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.190027][ T5307] Modules linked in: [ 88.192285][ T5307] CPU: 0 UID: 0 PID: 5307 Comm: syz-executor412 Tainted: G B 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 88.192311][ T5307] Tainted: [B]=BAD_PAGE [ 88.192316][ T5307] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.192326][ T5307] Call Trace: [ 88.192334][ T5307] [ 88.192342][ T5307] dump_stack_lvl+0x241/0x360 [ 88.192364][ T5307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.192379][ T5307] ? __pfx_print_modules+0x10/0x10 [ 88.192397][ T5307] ? uncharge_folio+0x341/0x680 [ 88.192420][ T5307] bad_page+0x176/0x1d0 [ 88.192436][ T5307] free_tail_page_prepare+0x2ab/0x4b0 [ 88.192455][ T5307] free_frozen_pages+0x8b5/0x10e0 [ 88.192475][ T5307] __folio_put+0x2b3/0x360 [ 88.192493][ T5307] ? __pfx___folio_put+0x10/0x10 [ 88.192510][ T5307] ? do_raw_spin_unlock+0x58/0x8b0 [ 88.192528][ T5307] ? filemap_free_folio+0x1bd/0x230 [ 88.192550][ T5307] delete_from_page_cache_batch+0x8f5/0xa60 [ 88.192575][ T5307] ? __pfx_delete_from_page_cache_batch+0x10/0x10 [ 88.192598][ T5307] ? __pfx_workingset_update_node+0x10/0x10 [ 88.192615][ T5307] ? truncate_cleanup_folio+0x203/0x300 VM DIAGNOSIS: 01:51:49 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=ffffffff9a746080 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc9000d1beb50 R8 =ffffffff8576c71b R9 =1ffff11003d5b046 R10=dffffc0000000000 R11=ffffffff8576c6d0 R12=dffffc0000000000 R13=0000000000000061 R14=0000000000000061 R15=00000000000003f8 RIP=ffffffff8576c74e RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556ad50380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc6e0b0f68 CR3=0000000043cd0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000021 Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000170076fa 00000000a51b6135 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77693f3eb24f820e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 09039e7cb3473ee4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f006a64615f6572 6f63735f6d6f6f2f 666c65732f636f72 702f003030303100 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a004f41445f4057 4a46565f484a4a0a 434940560a464a57 550a001515151400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000