Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program executing program syzkaller login: [ 53.786395][ T4392] page:ffffea0001bdc2c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x2050b pfn:0x6f70b [ 53.797437][ T4392] memcg:ffff88814076c000 [ 53.801670][ T4392] anon flags: 0xfff0000008001d(locked|uptodate|dirty|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 53.812544][ T4392] raw: 00fff0000008001d ffffea0001bdc288 ffffea0001bdc308 ffff888021c15d01 [ 53.821115][ T4392] raw: 000000000002050b 0000000000000000 00000001ffffffff ffff88814076c000 [ 53.829705][ T4392] page dumped because: VM_BUG_ON_PAGE(!PageHead(page)) [ 53.836656][ T4392] page_owner tracks the page as allocated [ 53.842396][ T4392] page last allocated via order 0, migratetype Movable, gfp_mask 0x13d20ca(GFP_TRANSHUGE_LIGHT|__GFP_NORETRY|__GFP_THISNODE), pid 4391, ts 53782338328, free_ts 53772592133 [ 53.859447][ T4392] get_page_from_freelist+0xa72/0x2f50 [ 53.864959][ T4392] __alloc_pages+0x1b2/0x500 [ 53.869797][ T4392] alloc_pages_vma+0x6a7/0x7d0 [ 53.874583][ T4392] do_huge_pmd_anonymous_page+0x439/0x2840 [ 53.880392][ T4392] __handle_mm_fault+0x2a2a/0x5120 [ 53.885516][ T4392] handle_mm_fault+0x1c8/0x790 [ 53.890274][ T4392] __get_user_pages+0x522/0xfb0 [ 53.895150][ T4392] __get_user_pages_remote+0x18f/0x840 [ 53.900593][ T4392] pin_user_pages_remote+0x63/0x90 [ 53.905742][ T4392] process_vm_rw_core.constprop.0+0x445/0x990 [ 53.911840][ T4392] process_vm_rw+0x29c/0x300 [ 53.916426][ T4392] __x64_sys_process_vm_writev+0xdf/0x1b0 [ 53.922180][ T4392] do_syscall_64+0x35/0xb0 [ 53.926605][ T4392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 53.932536][ T4392] page last free stack trace: [ 53.937191][ T4392] free_pcp_prepare+0x374/0x870 [ 53.942084][ T4392] free_unref_page+0x19/0x690 [ 53.946757][ T4392] release_pages+0x825/0x1480 [ 53.951464][ T4392] tlb_finish_mmu+0x165/0x8c0 [ 53.956182][ T4392] exit_mmap+0x1ea/0x630 [ 53.960409][ T4392] __mmput+0x122/0x4b0 [ 53.964533][ T4392] mmput+0x56/0x60 [ 53.968245][ T4392] do_exit+0xb27/0x2b40 [ 53.972433][ T4392] do_group_exit+0x125/0x310 [ 53.977018][ T4392] get_signal+0x47d/0x2220 [ 53.981430][ T4392] arch_do_signal_or_restart+0x2a9/0x1c40 [ 53.987161][ T4392] exit_to_user_mode_prepare+0x17d/0x290 [ 53.992837][ T4392] syscall_exit_to_user_mode+0x19/0x60 [ 53.998283][ T4392] do_syscall_64+0x42/0xb0 [ 54.002713][ T4392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.008669][ T4392] ------------[ cut here ]------------ [ 54.014145][ T4392] kernel BUG at include/linux/page-flags.h:785! [ 54.020378][ T4392] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 54.026427][ T4392] CPU: 1 PID: 4392 Comm: syz-executor560 Not tainted 5.16.0-rc6-syzkaller #0 [ 54.035165][ T4392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 54.045201][ T4392] RIP: 0010:__page_mapcount+0x2d2/0x350 [ 54.050822][ T4392] Code: e8 d3 16 d1 ff 48 c7 c6 c0 00 b6 89 48 89 ef e8 94 4e 04 00 0f 0b e8 bd 16 d1 ff 48 c7 c6 60 01 b6 89 48 89 ef e8 7e 4e 04 00 <0f> 0b e8 a7 16 d1 ff 48 c7 c6 a0 01 b6 89 4c 89 f7 e8 68 4e 04 00 [ 54.070407][ T4392] RSP: 0018:ffffc90002b6f7b8 EFLAGS: 00010293 [ 54.076480][ T4392] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.084429][ T4392] RDX: ffff888019619d00 RSI: ffffffff81a68c12 RDI: 0000000000000003 [ 54.092381][ T4392] RBP: ffffea0001bdc2c0 R08: 0000000000000029 R09: 00000000ffffffff [ 54.100340][ T4392] R10: ffffffff8903e29f R11: 00000000ffffffff R12: 00000000ffffffff [ 54.108294][ T4392] R13: 00000000ffffea00 R14: ffffc90002b6fb30 R15: ffffea0001bd8001 [ 54.116247][ T4392] FS: 00007faa2aefd700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 54.125169][ T4392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.131748][ T4392] CR2: 00007fff7e663318 CR3: 0000000018c6e000 CR4: 00000000003506e0 [ 54.139705][ T4392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.147654][ T4392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.155606][ T4392] Call Trace: [ 54.159167][ T4392] [ 54.162082][ T4392] smaps_account+0x470/0xb10 [ 54.166686][ T4392] smaps_pte_range+0x611/0x1250 [ 54.171520][ T4392] ? gather_pte_stats+0x8d0/0x8d0 [ 54.176541][ T4392] __walk_page_range+0xe23/0x1ea0 [ 54.181571][ T4392] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.187817][ T4392] ? walk_page_test+0x78/0x180 [ 54.192571][ T4392] walk_page_vma+0x277/0x350 [ 54.197146][ T4392] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 54.202853][ T4392] ? walk_page_range_novma+0x250/0x250 [ 54.208297][ T4392] smap_gather_stats.part.0+0x148/0x260 [ 54.213832][ T4392] show_smap+0xc6/0x440 [ 54.217969][ T4392] ? smap_gather_stats.part.0+0x260/0x260 [ 54.223673][ T4392] ? find_vma+0xbd/0x270 [ 54.227900][ T4392] ? m_start+0x240/0x530 [ 54.232128][ T4392] seq_read_iter+0xbb0/0x1240 [ 54.236811][ T4392] seq_read+0x3e0/0x5b0 [ 54.240949][ T4392] ? seq_read_iter+0x1240/0x1240 [ 54.245868][ T4392] ? lock_downgrade+0x6e0/0x6e0 [ 54.250702][ T4392] ? __fdget_pos+0xe9/0x100 [ 54.255192][ T4392] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 54.261420][ T4392] ? security_file_permission+0xab/0xd0 [ 54.266950][ T4392] ? seq_read_iter+0x1240/0x1240 [ 54.271876][ T4392] vfs_read+0x1b5/0x600 [ 54.276043][ T4392] ksys_read+0x12d/0x250 [ 54.280269][ T4392] ? vfs_write+0xae0/0xae0 [ 54.284664][ T4392] ? syscall_enter_from_user_mode+0x21/0x70 [ 54.290555][ T4392] do_syscall_64+0x35/0xb0 [ 54.294975][ T4392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 54.300853][ T4392] RIP: 0033:0x7faa2af6c969 [ 54.305268][ T4392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 54.324854][ T4392] RSP: 002b:00007faa2aefd288 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.333254][ T4392] RAX: ffffffffffffffda RBX: 00007faa2aff4418 RCX: 00007faa2af6c969 [ 54.341294][ T4392] RDX: 0000000000002025 RSI: 0000000020000100 RDI: 0000000000000003 [ 54.349246][ T4392] RBP: 00007faa2aff4410 R08: 00007faa2aefd700 R09: 0000000000000000 [ 54.357197][ T4392] R10: 00007faa2aefd700 R11: 0000000000000246 R12: 00007faa2afc20ac [ 54.365175][ T4392] R13: 00007fff7e6632bf R14: 00007faa2aefd400 R15: 0000000000022000 [ 54.373137][ T4392] [ 54.376228][ T4392] Modules linked in: [ 54.380151][ T4392] ---[ end trace 24ec93ff95e4ac3d ]--- [ 54.385603][ T4392] RIP: 0010:__page_mapcount+0x2d2/0x350 [ 54.391139][ T4392] Code: e8 d3 16 d1 ff 48 c7 c6 c0 00 b6 89 48 89 ef e8 94 4e 04 00 0f 0b e8 bd 16 d1 ff 48 c7 c6 60 01 b6 89 48 89 ef e8 7e 4e 04 00 <0f> 0b e8 a7 16 d1 ff 48 c7 c6 a0 01 b6 89 4c 89 f7 e8 68 4e 04 00 [ 54.411306][ T4392] RSP: 0018:ffffc90002b6f7b8 EFLAGS: 00010293 [ 54.417380][ T4392] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.425725][ T4392] RDX: ffff888019619d00 RSI: ffffffff81a68c12 RDI: 0000000000000003 [ 54.433722][ T4392] RBP: ffffea0001bdc2c0 R08: 0000000000000029 R09: 00000000ffffffff [ 54.441735][ T4392] R10: ffffffff8903e29f R11: 00000000ffffffff R12: 00000000ffffffff [ 54.449702][ T4392] R13: 00000000ffffea00 R14: ffffc90002b6fb30 R15: ffffea0001bd8001 [ 54.457670][ T4392] FS: 00007faa2aefd700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 54.467179][ T4392] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.473777][ T4392] CR2: 00007fff7e663318 CR3: 0000000018c6e000 CR4: 00000000003506e0 [ 54.481879][ T4392] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.489841][ T4392] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.497828][ T4392] Kernel panic - not syncing: Fatal exception [ 54.504138][ T4392] Kernel Offset: disabled [ 54.508454][ T4392] Rebooting in 86400 seconds..