Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
[ 55.788176][ T5049] BUG: Bad page state in process syz-executor285 pfn:103aa
[ 55.821805][ T5049] page:ffffea000040ea80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103aa
[ 55.866286][ T5049] flags: 0xfff18000001042(referenced|workingset|reserved|node=0|zone=1|lastcpupid=0x7ff)
[ 55.910783][ T5049] page_type: 0xffffffff()
[ 55.932325][ T5049] raw: 00fff18000001042 ffffea000040ea88 ffffea000040ea88 0000000000000000
[ 55.961227][ T5049] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 55.991270][ T5049] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[ 56.016480][ T5049] page_owner info is not present (never set?)
[ 56.038365][ T5049] Modules linked in:
[ 56.052330][ T5049] CPU: 1 PID: 5049 Comm: syz-executor285 Not tainted 6.5.0-rc5-syzkaller-01626-gf54a2a132a9d #0
[ 56.062793][ T5049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 56.073127][ T5049] Call Trace:
[ 56.076418][ T5049]
[ 56.079446][ T5049] dump_stack_lvl+0x125/0x1b0
[ 56.084596][ T5049] bad_page+0xb4/0x200
[ 56.088865][ T5049] ? zone_batchsize+0xa0/0xa0
[ 56.093728][ T5049] ? page_bad_reason+0x9d/0x190
[ 56.098605][ T5049] free_unref_page_prepare+0x598/0xb90
[ 56.104074][ T5049] ? mem_cgroup_swapin_charge_folio+0x240/0x300
[ 56.110436][ T5049] free_unref_page+0x33/0x3b0
[ 56.115133][ T5049] __folio_put+0xc5/0x140
[ 56.119471][ T5049] extract_iter_to_sg+0x1604/0x19e0
[ 56.124694][ T5049] ? sg_init_one+0x140/0x140
[ 56.129368][ T5049] ? gup_put_folio+0x71/0x2a0
[ 56.134165][ T5049] ? sanity_check_pinned_pages+0xf60/0xf60
[ 56.140120][ T5049] ? reacquire_held_locks+0x4b0/0x4b0
[ 56.145577][ T5049] ? af_alg_free_sg+0xa1/0x260
[ 56.150705][ T5049] hash_sendmsg+0x459/0x1030
[ 56.155311][ T5049] ? hash_recvmsg_nokey+0x80/0x80
[ 56.160372][ T5049] sock_sendmsg+0xd9/0x180
[ 56.164802][ T5049] __sys_sendto+0x255/0x340
[ 56.169321][ T5049] ? __ia32_sys_getpeername+0xb0/0xb0
[ 56.174706][ T5049] ? reacquire_held_locks+0x4b0/0x4b0
[ 56.180092][ T5049] ? preempt_count_sub+0x150/0x150
[ 56.185230][ T5049] ? reacquire_held_locks+0x4b0/0x4b0
[ 56.190629][ T5049] __x64_sys_sendto+0xe0/0x1b0
[ 56.195492][ T5049] ? syscall_enter_from_user_mode+0x26/0x80
[ 56.201418][ T5049] do_syscall_64+0x38/0xb0
[ 56.205847][ T5049] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.211841][ T5049] RIP: 0033:0x7f7e5f5c0519
[ 56.216342][ T5049] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 56.236043][ T5049] RSP: 002b:00007f7e5f53f228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 56.244463][ T5049] RAX: ffffffffffffffda RBX: 00007f7e5f64a368 RCX: 00007f7e5f5c0519
[ 56.252633][ T5049] RDX: ffffffffffffff5d RSI: 0000000020000100 RDI: 0000000000000006
[ 56.260609][ T5049] RBP: 00007f7e5f64a360 R08: 0000000000000000 R09: 000000000000fff6
[ 56.268614][ T5049] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e5f617064
[ 56.276627][ T5049] R13: 000000000000006e R14: 00007fffdd4d33e0 R15: 00007fffdd4d34c8
[ 56.284719][ T5049]
[ 56.763420][ T5049] Disabling lock debugging due to kernel taint
[ 56.769723][ T5049] page:ffffea000040ea80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x103aa
[ 56.823417][ T5049] flags: 0xfff18000001042(referenced|workingset|reserved|node=0|zone=1|lastcpupid=0x7ff)
[ 56.833269][ T5049] page_type: 0xffffffff()
[ 56.863434][ T5049] raw: 00fff18000001042 ffffea000040ea88 ffffea000040ea88 0000000000000000
[ 56.872066][ T5049] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 56.943431][ T5049] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
[ 56.951284][ T5049] page_owner info is not present (never set?)
[ 57.003773][ T5049] ------------[ cut here ]------------
[ 57.009272][ T5049] kernel BUG at include/linux/mm.h:1027!
[ 57.018700][ T5053] ------------[ cut here ]------------
[ 57.024366][ T5053] WARNING: CPU: 1 PID: 5053 at mm/gup.c:229 try_grab_page+0x359/0x420
[ 57.032575][ T5053] Modules linked in:
[ 57.036522][ T5053] CPU: 1 PID: 5053 Comm: syz-executor285 Tainted: G B 6.5.0-rc5-syzkaller-01626-gf54a2a132a9d #0
[ 57.048572][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 57.058980][ T5053] RIP: 0010:try_grab_page+0x359/0x420
[ 57.064360][ T5053] Code: 49 83 ec 01 e9 2d fd ff ff e8 a3 11 c2 ff be 04 00 00 00 4c 89 ef e8 06 fd 16 00 f0 41 ff 45 00 e9 15 ff ff ff e8 87 11 c2 ff <0f> 0b e8 80 11 c2 ff bb f4 ff ff ff 89 d8 5b 5d 41 5c 41 5d 41 5e
[ 57.083980][ T5053] RSP: 0018:ffffc90003cff338 EFLAGS: 00010293
[ 57.090041][ T5053] RAX: 0000000000000000 RBX: ffffea000040ea80 RCX: 0000000000000000
[ 57.098121][ T5053] RDX: ffff888075ebbb80 RSI: ffffffff81c40f09 RDI: 0000000000000005
[ 57.106100][ T5053] RBP: 0000000000290000 R08: 0000000000000005 R09: 0000000000000000
[ 57.114155][ T5053] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea000040ea80
[ 57.122114][ T5053] R13: ffffea000040eab4 R14: 0000000000000000 R15: ffffea000040ea88
[ 57.130542][ T5053] FS: 00007f7e5f53f6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 57.139477][ T5053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.146059][ T5053] CR2: 000000002035c030 CR3: 00000000788a9000 CR4: 00000000003506e0
[ 57.154066][ T5053] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.162223][ T5053] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.170389][ T5053] Call Trace:
[ 57.173673][ T5053]
[ 57.176635][ T5053] ? __warn+0xe6/0x380
[ 57.180695][ T5053] ? try_grab_page+0x359/0x420
[ 57.185460][ T5053] ? report_bug+0x3bc/0x580
[ 57.189956][ T5053] ? handle_bug+0x3c/0x70
[ 57.194288][ T5053] ? exc_invalid_op+0x17/0x40
[ 57.198960][ T5053] ? asm_exc_invalid_op+0x1a/0x20
[ 57.204023][ T5053] ? try_grab_page+0x359/0x420
[ 57.208797][ T5053] ? try_grab_page+0x359/0x420
[ 57.213594][ T5053] ? try_grab_page+0x359/0x420
[ 57.218363][ T5053] follow_page_pte+0x213/0x1ba0
[ 57.223259][ T5053] ? try_grab_page+0x420/0x420
[ 57.228067][ T5053] ? find_vma+0x10e/0x1b0
[ 57.232404][ T5053] ? vma_link+0x290/0x290
[ 57.236753][ T5053] follow_page_mask+0x3ce/0xdc0
[ 57.241728][ T5053] __get_user_pages+0x478/0x1010
[ 57.246694][ T5053] ? follow_page_mask+0xdc0/0xdc0
[ 57.251919][ T5053] ? down_read_killable+0x222/0x4b0
[ 57.257159][ T5053] ? down_read+0x470/0x470
[ 57.261660][ T5053] __gup_longterm_locked+0x755/0x24d0
[ 57.267067][ T5053] ? rcu_is_watching+0x12/0xb0
[ 57.271842][ T5053] ? get_user_pages_unlocked+0x6c0/0x6c0
[ 57.277519][ T5053] ? lock_release+0x4bf/0x680
[ 57.282189][ T5053] ? internal_get_user_pages_fast+0x1535/0x31b0
[ 57.288443][ T5053] ? PageHuge+0x134/0x240
[ 57.292759][ T5053] ? sanity_check_pinned_pages+0x270/0xf60
[ 57.298574][ T5053] internal_get_user_pages_fast+0x1c4b/0x31b0
[ 57.304686][ T5053] ? __gup_device_huge+0x670/0x670
[ 57.309798][ T5053] pin_user_pages_fast+0xa8/0xf0
[ 57.314920][ T5053] ? get_user_pages_fast+0xf0/0xf0
[ 57.320062][ T5053] ? first_iovec_segment+0x16b/0x290
[ 57.325383][ T5053] iov_iter_extract_pages+0x29b/0x1860
[ 57.330905][ T5053] ? xfd_validate_state+0x5d/0x180
[ 57.336034][ T5053] ? _copy_mc_to_iter+0x10d0/0x10d0
[ 57.341236][ T5053] ? save_fpregs_to_fpstate+0x148/0x270
[ 57.346906][ T5053] ? kernel_fpu_begin_mask+0x169/0x270
[ 57.352475][ T5053] ? save_fpregs_to_fpstate+0x270/0x270
[ 57.358395][ T5053] ? __poly1305_init_avx+0x172/0x1f0
[ 57.363793][ T5053] ? poly1305_blocks_avx2+0x263/0x780
[ 57.369286][ T5053] extract_iter_to_sg+0x92e/0x19e0
[ 57.374500][ T5053] ? sg_init_one+0x140/0x140
[ 57.379082][ T5053] ? gup_put_folio+0x19d/0x2a0
[ 57.383856][ T5053] ? sanity_check_pinned_pages+0xf60/0xf60
[ 57.389749][ T5053] ? reacquire_held_locks+0x4b0/0x4b0
[ 57.395335][ T5053] ? af_alg_free_sg+0xa1/0x260
[ 57.400378][ T5053] hash_sendmsg+0x459/0x1030
[ 57.404978][ T5053] ? hash_recvmsg_nokey+0x80/0x80
[ 57.409993][ T5053] sock_sendmsg+0xd9/0x180
[ 57.414420][ T5053] __sys_sendto+0x255/0x340
[ 57.419098][ T5053] ? __ia32_sys_getpeername+0xb0/0xb0
[ 57.424500][ T5053] ? reacquire_held_locks+0x4b0/0x4b0
[ 57.429881][ T5053] ? af_alg_accept+0x288/0x5c0
[ 57.434719][ T5053] ? preempt_count_sub+0x150/0x150
[ 57.439831][ T5053] ? reacquire_held_locks+0x4b0/0x4b0
[ 57.445212][ T5053] __x64_sys_sendto+0xe0/0x1b0
[ 57.449973][ T5053] ? syscall_enter_from_user_mode+0x26/0x80
[ 57.455866][ T5053] do_syscall_64+0x38/0xb0
[ 57.460373][ T5053] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.466295][ T5053] RIP: 0033:0x7f7e5f5c0519
[ 57.470704][ T5053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 57.490331][ T5053] RSP: 002b:00007f7e5f53f228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 57.498805][ T5053] RAX: ffffffffffffffda RBX: 00007f7e5f64a368 RCX: 00007f7e5f5c0519
[ 57.506797][ T5053] RDX: ffffffffffffff5d RSI: 0000000020000100 RDI: 0000000000000006
[ 57.514778][ T5053] RBP: 00007f7e5f64a360 R08: 0000000000000000 R09: 000000000000fff6
[ 57.522733][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e5f617064
[ 57.530708][ T5053] R13: 000000000000006e R14: 00007fffdd4d33e0 R15: 00007fffdd4d34c8
[ 57.538716][ T5053]
[ 57.541727][ T5053] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 57.548996][ T5053] CPU: 1 PID: 5053 Comm: syz-executor285 Tainted: G B 6.5.0-rc5-syzkaller-01626-gf54a2a132a9d #0
[ 57.560869][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 57.570927][ T5053] Call Trace:
[ 57.574209][ T5053]
[ 57.577130][ T5053] dump_stack_lvl+0xd9/0x1b0
[ 57.581718][ T5053] panic+0x6a4/0x750
[ 57.585600][ T5053] ? panic_smp_self_stop+0xa0/0xa0
[ 57.590700][ T5053] ? show_trace_log_lvl+0x29d/0x3c0
[ 57.595893][ T5053] ? try_grab_page+0x359/0x420
[ 57.600645][ T5053] check_panic_on_warn+0xab/0xb0
[ 57.605581][ T5053] __warn+0xf2/0x380
[ 57.609581][ T5053] ? try_grab_page+0x359/0x420
[ 57.614359][ T5053] report_bug+0x3bc/0x580
[ 57.618692][ T5053] handle_bug+0x3c/0x70
[ 57.622842][ T5053] exc_invalid_op+0x17/0x40
[ 57.627333][ T5053] asm_exc_invalid_op+0x1a/0x20
[ 57.632182][ T5053] RIP: 0010:try_grab_page+0x359/0x420
[ 57.637552][ T5053] Code: 49 83 ec 01 e9 2d fd ff ff e8 a3 11 c2 ff be 04 00 00 00 4c 89 ef e8 06 fd 16 00 f0 41 ff 45 00 e9 15 ff ff ff e8 87 11 c2 ff <0f> 0b e8 80 11 c2 ff bb f4 ff ff ff 89 d8 5b 5d 41 5c 41 5d 41 5e
[ 57.657427][ T5053] RSP: 0018:ffffc90003cff338 EFLAGS: 00010293
[ 57.663498][ T5053] RAX: 0000000000000000 RBX: ffffea000040ea80 RCX: 0000000000000000
[ 57.671468][ T5053] RDX: ffff888075ebbb80 RSI: ffffffff81c40f09 RDI: 0000000000000005
[ 57.679442][ T5053] RBP: 0000000000290000 R08: 0000000000000005 R09: 0000000000000000
[ 57.687429][ T5053] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea000040ea80
[ 57.695563][ T5053] R13: ffffea000040eab4 R14: 0000000000000000 R15: ffffea000040ea88
[ 57.703542][ T5053] ? try_grab_page+0x359/0x420
[ 57.708405][ T5053] ? try_grab_page+0x359/0x420
[ 57.713210][ T5053] follow_page_pte+0x213/0x1ba0
[ 57.718064][ T5053] ? try_grab_page+0x420/0x420
[ 57.722820][ T5053] ? find_vma+0x10e/0x1b0
[ 57.727140][ T5053] ? vma_link+0x290/0x290
[ 57.731459][ T5053] follow_page_mask+0x3ce/0xdc0
[ 57.736303][ T5053] __get_user_pages+0x478/0x1010
[ 57.741240][ T5053] ? follow_page_mask+0xdc0/0xdc0
[ 57.746454][ T5053] ? down_read_killable+0x222/0x4b0
[ 57.751728][ T5053] ? down_read+0x470/0x470
[ 57.756162][ T5053] __gup_longterm_locked+0x755/0x24d0
[ 57.761542][ T5053] ? rcu_is_watching+0x12/0xb0
[ 57.766308][ T5053] ? get_user_pages_unlocked+0x6c0/0x6c0
[ 57.771931][ T5053] ? lock_release+0x4bf/0x680
[ 57.776598][ T5053] ? internal_get_user_pages_fast+0x1535/0x31b0
[ 57.782920][ T5053] ? PageHuge+0x134/0x240
[ 57.787232][ T5053] ? sanity_check_pinned_pages+0x270/0xf60
[ 57.793028][ T5053] internal_get_user_pages_fast+0x1c4b/0x31b0
[ 57.799111][ T5053] ? __gup_device_huge+0x670/0x670
[ 57.804219][ T5053] pin_user_pages_fast+0xa8/0xf0
[ 57.809145][ T5053] ? get_user_pages_fast+0xf0/0xf0
[ 57.814263][ T5053] ? first_iovec_segment+0x16b/0x290
[ 57.819540][ T5053] iov_iter_extract_pages+0x29b/0x1860
[ 57.825160][ T5053] ? xfd_validate_state+0x5d/0x180
[ 57.830262][ T5053] ? _copy_mc_to_iter+0x10d0/0x10d0
[ 57.835443][ T5053] ? save_fpregs_to_fpstate+0x148/0x270
[ 57.840977][ T5053] ? kernel_fpu_begin_mask+0x169/0x270
[ 57.846424][ T5053] ? save_fpregs_to_fpstate+0x270/0x270
[ 57.851958][ T5053] ? __poly1305_init_avx+0x172/0x1f0
[ 57.857238][ T5053] ? poly1305_blocks_avx2+0x263/0x780
[ 57.862599][ T5053] extract_iter_to_sg+0x92e/0x19e0
[ 57.867704][ T5053] ? sg_init_one+0x140/0x140
[ 57.872283][ T5053] ? gup_put_folio+0x19d/0x2a0
[ 57.877044][ T5053] ? sanity_check_pinned_pages+0xf60/0xf60
[ 57.882836][ T5053] ? reacquire_held_locks+0x4b0/0x4b0
[ 57.888393][ T5053] ? af_alg_free_sg+0xa1/0x260
[ 57.893249][ T5053] hash_sendmsg+0x459/0x1030
[ 57.897834][ T5053] ? hash_recvmsg_nokey+0x80/0x80
[ 57.902844][ T5053] sock_sendmsg+0xd9/0x180
[ 57.907339][ T5053] __sys_sendto+0x255/0x340
[ 57.911931][ T5053] ? __ia32_sys_getpeername+0xb0/0xb0
[ 57.917313][ T5053] ? reacquire_held_locks+0x4b0/0x4b0
[ 57.922673][ T5053] ? af_alg_accept+0x288/0x5c0
[ 57.927422][ T5053] ? preempt_count_sub+0x150/0x150
[ 57.932530][ T5053] ? reacquire_held_locks+0x4b0/0x4b0
[ 57.937895][ T5053] __x64_sys_sendto+0xe0/0x1b0
[ 57.942650][ T5053] ? syscall_enter_from_user_mode+0x26/0x80
[ 57.948655][ T5053] do_syscall_64+0x38/0xb0
[ 57.953067][ T5053] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.958954][ T5053] RIP: 0033:0x7f7e5f5c0519
[ 57.963359][ T5053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 57.982973][ T5053] RSP: 002b:00007f7e5f53f228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 57.991373][ T5053] RAX: ffffffffffffffda RBX: 00007f7e5f64a368 RCX: 00007f7e5f5c0519
[ 57.999328][ T5053] RDX: ffffffffffffff5d RSI: 0000000020000100 RDI: 0000000000000006
[ 58.007285][ T5053] RBP: 00007f7e5f64a360 R08: 0000000000000000 R09: 000000000000fff6
[ 58.015239][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7e5f617064
[ 58.023207][ T5053] R13: 000000000000006e R14: 00007fffdd4d33e0 R15: 00007fffdd4d34c8
[ 58.031179][ T5053]
[ 58.034284][ T5053] Kernel Offset: disabled
[ 58.038598][ T5053] Rebooting in 86400 seconds..