./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1156078737 <...> Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. execve("./syz-executor1156078737", ["./syz-executor1156078737"], 0x7ffc40012910 /* 10 vars */) = 0 brk(NULL) = 0x555556508000 brk(0x555556508d00) = 0x555556508d00 arch_prctl(ARCH_SET_FS, 0x555556508380) = 0 set_tid_address(0x555556508650) = 5059 set_robust_list(0x555556508660, 24) = 0 rseq(0x555556508ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1156078737", 4096) = 28 getrandom("\xff\x70\xb4\xe9\x5c\xab\x11\x1e", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555556508d00 brk(0x555556529d00) = 0x555556529d00 brk(0x55555652a000) = 0x55555652a000 mprotect(0x7ff89df89000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 socket(AF_PACKET, SOCK_DGRAM, htons(ETH_P_ALL)) = 3 setsockopt(3, SOL_PACKET, PACKET_RX_RING, 0x200000c0, 28) = 0 [ 88.445664][ T5059] page:ffffea00008cde00 refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23378 [ 88.456129][ T5059] head:ffffea00008cde00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.465157][ T5059] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 88.472742][ T5059] page_type: 0xffffffff() [ 88.477145][ T5059] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 88.485855][ T5059] raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000 [ 88.494459][ T5059] page dumped because: VM_WARN_ON_FOLIO(folio_test_large(folio) && !folio_test_large_rmappable(folio)) [ 88.505588][ T5059] page_owner tracks the page as allocated [ 88.511335][ T5059] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 5059, tgid 5059 (syz-executor115), ts 88421111497, free_ts 88212247071 [ 88.531965][ T5059] post_alloc_hook+0x2d0/0x350 [ 88.536878][ T5059] get_page_from_freelist+0xa19/0x3740 [ 88.542378][ T5059] __alloc_pages+0x22e/0x2410 [ 88.547119][ T5059] alloc_pages_mpol+0x258/0x5f0 [ 88.552025][ T5059] __get_free_pages+0xc/0x40 [ 88.556682][ T5059] packet_set_ring+0xb74/0x18f0 [ 88.561578][ T5059] packet_setsockopt+0x180f/0x23b0 [ 88.566770][ T5059] do_sock_setsockopt+0x222/0x470 [ 88.571863][ T5059] __sys_setsockopt+0x1a4/0x260 [ 88.576798][ T5059] __x64_sys_setsockopt+0xbd/0x150 [ 88.581947][ T5059] do_syscall_64+0xd0/0x250 [ 88.586624][ T5059] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 88.592558][ T5059] page last free pid 5056 tgid 5056 stack trace: [ 88.598927][ T5059] free_unref_page_prepare+0x51f/0xb10 [ 88.604438][ T5059] free_unref_page+0x33/0x3c0 [ 88.609191][ T5059] __put_partials+0x14c/0x160 [ 88.613913][ T5059] qlist_free_all+0x58/0x150 [ 88.618570][ T5059] kasan_quarantine_reduce+0x18e/0x1d0 [ 88.624075][ T5059] __kasan_slab_alloc+0x65/0x90 [ 88.629001][ T5059] kmem_cache_alloc+0x136/0x320 [ 88.633899][ T5059] vm_area_alloc+0x1f/0x220 [ 88.638464][ T5059] mmap_region+0x3ae/0x2a90 [ 88.643013][ T5059] do_mmap+0x890/0xef0 [ 88.647173][ T5059] vm_mmap_pgoff+0x1a7/0x3c0 [ 88.651817][ T5059] ksys_mmap_pgoff+0x421/0x5a0 [ 88.656659][ T5059] __x64_sys_mmap+0x125/0x190 [ 88.661469][ T5059] do_syscall_64+0xd0/0x250 [ 88.666062][ T5059] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 88.672152][ T5059] ------------[ cut here ]------------ [ 88.677651][ T5059] WARNING: CPU: 1 PID: 5059 at include/linux/rmap.h:202 __folio_rmap_sanity_checks+0x4d5/0x630 [ 88.688069][ T5059] Modules linked in: [ 88.691998][ T5059] CPU: 1 PID: 5059 Comm: syz-executor115 Not tainted 6.7.0-rc8-next-20240102-syzkaller #0 [ 88.701945][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 88.712068][ T5059] RIP: 0010:__folio_rmap_sanity_checks+0x4d5/0x630 [ 88.718651][ T5059] Code: 41 83 e4 01 44 89 e6 e8 79 bc b7 ff 45 84 e4 0f 85 08 fc ff ff e8 3b c1 b7 ff 48 c7 c6 e0 b5 d9 8a 48 89 df e8 5c 12 f7 ff 90 <0f> 0b 90 e9 eb fb ff ff e8 1e c1 b7 ff be 01 00 00 00 48 89 df e8 [ 88.738349][ T5059] RSP: 0018:ffffc900038df978 EFLAGS: 00010293 [ 88.744428][ T5059] RAX: 0000000000000000 RBX: ffffea00008cde00 RCX: ffffffff81687419 [ 88.752539][ T5059] RDX: ffff88807becbb80 RSI: ffffffff81d06104 RDI: 0000000000000000 [ 88.760580][ T5059] RBP: ffffea00008cde00 R08: 0000000000000000 R09: fffffbfff1e75f6a [ 88.768627][ T5059] R10: ffffffff8f3afb57 R11: 0000000000000001 R12: 0000000000000000 [ 88.776703][ T5059] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 88.784734][ T5059] FS: 0000555556508380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 88.793712][ T5059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.800372][ T5059] CR2: 00000000200000c0 CR3: 0000000079000000 CR4: 00000000003506f0 [ 88.808408][ T5059] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.816435][ T5059] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.824440][ T5059] Call Trace: [ 88.827780][ T5059] [ 88.830748][ T5059] ? show_regs+0x8e/0xa0 [ 88.835080][ T5059] ? __warn+0xe5/0x390 [ 88.839202][ T5059] ? __folio_rmap_sanity_checks+0x4d5/0x630 [ 88.845173][ T5059] ? report_bug+0x3bc/0x580 [ 88.849725][ T5059] ? handle_bug+0x3d/0x70 [ 88.854173][ T5059] ? exc_invalid_op+0x17/0x40 [ 88.858934][ T5059] ? asm_exc_invalid_op+0x1a/0x20 [ 88.864003][ T5059] ? lock_release+0xa9/0x6a0 [ 88.868659][ T5059] ? __folio_rmap_sanity_checks+0x4d4/0x630 [ 88.874631][ T5059] ? __folio_rmap_sanity_checks+0x4d5/0x630 [ 88.880547][ T5059] ? __folio_rmap_sanity_checks+0x4d4/0x630 [ 88.886526][ T5059] folio_add_file_rmap_ptes+0x8e/0x2c0 [ 88.892046][ T5059] ? rcu_is_watching+0x12/0xb0 [ 88.896924][ T5059] insert_page_into_pte_locked.isra.0+0x34d/0x960 [ 88.903382][ T5059] ? restore_exclusive_pte+0x8f0/0x8f0 [ 88.908908][ T5059] vm_insert_page+0x62c/0x8c0 [ 88.913622][ T5059] ? __get_locked_pte+0xc0/0xc0 [ 88.918571][ T5059] packet_mmap+0x314/0x570 [ 88.923057][ T5059] mmap_region+0x745/0x2a90 [ 88.927663][ T5059] ? expand_stack+0x4b0/0x4b0 [ 88.932412][ T5059] ? security_mmap_addr+0x84/0xa0 [ 88.937529][ T5059] ? get_unmapped_area+0x2c9/0x3f0 [ 88.942686][ T5059] do_mmap+0x890/0xef0 [ 88.946836][ T5059] vm_mmap_pgoff+0x1a7/0x3c0 [ 88.951511][ T5059] ? randomize_page+0xb0/0xb0 [ 88.956296][ T5059] ? __fget_files+0x256/0x400 [ 88.961036][ T5059] ksys_mmap_pgoff+0x421/0x5a0 [ 88.965880][ T5059] __x64_sys_mmap+0x125/0x190 [ 88.970594][ T5059] do_syscall_64+0xd0/0x250 [ 88.975167][ T5059] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 88.981106][ T5059] RIP: 0033:0x7ff89df16329 [ 88.985602][ T5059] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.005286][ T5059] RSP: 002b:00007ffcbc3eb618 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 89.013736][ T5059] RAX: ffffffffffffffda RBX: 00007ffcbc3eb7f8 RCX: 00007ff89df16329 [ 89.021971][ T5059] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 0000000020568000 [ 89.030013][ T5059] RBP: 00007ff89df89610 R08: 0000000000000003 R09: 0000000000000000 [ 89.038036][ T5059] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 89.046114][ T5059] R13: 00007ffcbc3eb7e8 R14: 0000000000000001 R15: 0000000000000001 [ 89.054141][ T5059] [ 89.057284][ T5059] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.064588][ T5059] CPU: 1 PID: 5059 Comm: syz-executor115 Not tainted 6.7.0-rc8-next-20240102-syzkaller #0 [ 89.074497][ T5059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 89.084573][ T5059] Call Trace: [ 89.087868][ T5059] [ 89.090846][ T5059] dump_stack_lvl+0xd9/0x1b0 [ 89.095469][ T5059] panic+0x6dc/0x790 [ 89.099397][ T5059] ? panic_smp_self_stop+0xa0/0xa0 [ 89.104543][ T5059] ? show_trace_log_lvl+0x363/0x4f0 [ 89.109777][ T5059] ? check_panic_on_warn+0x1f/0xb0 [ 89.114921][ T5059] ? __folio_rmap_sanity_checks+0x4d5/0x630 [ 89.120836][ T5059] check_panic_on_warn+0xab/0xb0 [ 89.125806][ T5059] __warn+0xf1/0x390 [ 89.129729][ T5059] ? __folio_rmap_sanity_checks+0x4d5/0x630 [ 89.135659][ T5059] report_bug+0x3bc/0x580 [ 89.140028][ T5059] handle_bug+0x3d/0x70 [ 89.144236][ T5059] exc_invalid_op+0x17/0x40 [ 89.148785][ T5059] asm_exc_invalid_op+0x1a/0x20 [ 89.153738][ T5059] RIP: 0010:__folio_rmap_sanity_checks+0x4d5/0x630 [ 89.160344][ T5059] Code: 41 83 e4 01 44 89 e6 e8 79 bc b7 ff 45 84 e4 0f 85 08 fc ff ff e8 3b c1 b7 ff 48 c7 c6 e0 b5 d9 8a 48 89 df e8 5c 12 f7 ff 90 <0f> 0b 90 e9 eb fb ff ff e8 1e c1 b7 ff be 01 00 00 00 48 89 df e8 [ 89.179981][ T5059] RSP: 0018:ffffc900038df978 EFLAGS: 00010293 [ 89.186072][ T5059] RAX: 0000000000000000 RBX: ffffea00008cde00 RCX: ffffffff81687419 [ 89.194060][ T5059] RDX: ffff88807becbb80 RSI: ffffffff81d06104 RDI: 0000000000000000 [ 89.202047][ T5059] RBP: ffffea00008cde00 R08: 0000000000000000 R09: fffffbfff1e75f6a [ 89.210047][ T5059] R10: ffffffff8f3afb57 R11: 0000000000000001 R12: 0000000000000000 [ 89.218033][ T5059] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 89.226027][ T5059] ? lock_release+0xa9/0x6a0 [ 89.230644][ T5059] ? __folio_rmap_sanity_checks+0x4d4/0x630 [ 89.236565][ T5059] ? __folio_rmap_sanity_checks+0x4d4/0x630 [ 89.242494][ T5059] folio_add_file_rmap_ptes+0x8e/0x2c0 [ 89.247985][ T5059] ? rcu_is_watching+0x12/0xb0 [ 89.252779][ T5059] insert_page_into_pte_locked.isra.0+0x34d/0x960 [ 89.259218][ T5059] ? restore_exclusive_pte+0x8f0/0x8f0 [ 89.264797][ T5059] vm_insert_page+0x62c/0x8c0 [ 89.269532][ T5059] ? __get_locked_pte+0xc0/0xc0 [ 89.274420][ T5059] packet_mmap+0x314/0x570 [ 89.279004][ T5059] mmap_region+0x745/0x2a90 [ 89.283565][ T5059] ? expand_stack+0x4b0/0x4b0 [ 89.288292][ T5059] ? security_mmap_addr+0x84/0xa0 [ 89.293356][ T5059] ? get_unmapped_area+0x2c9/0x3f0 [ 89.298501][ T5059] do_mmap+0x890/0xef0 [ 89.302605][ T5059] vm_mmap_pgoff+0x1a7/0x3c0 [ 89.307265][ T5059] ? randomize_page+0xb0/0xb0 [ 89.311980][ T5059] ? __fget_files+0x256/0x400 [ 89.316689][ T5059] ksys_mmap_pgoff+0x421/0x5a0 [ 89.321499][ T5059] __x64_sys_mmap+0x125/0x190 [ 89.326224][ T5059] do_syscall_64+0xd0/0x250 [ 89.330852][ T5059] entry_SYSCALL_64_after_hwframe+0x62/0x6a [ 89.336772][ T5059] RIP: 0033:0x7ff89df16329 [ 89.341215][ T5059] Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.360843][ T5059] RSP: 002b:00007ffcbc3eb618 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 89.369278][ T5059] RAX: ffffffffffffffda RBX: 00007ffcbc3eb7f8 RCX: 00007ff89df16329 [ 89.377265][ T5059] RDX: 0000000000000000 RSI: 0000000001000000 RDI: 0000000020568000 [ 89.385253][ T5059] RBP: 00007ff89df89610 R08: 0000000000000003 R09: 0000000000000000 [ 89.393240][ T5059] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 89.401227][ T5059] R13: 00007ffcbc3eb7e8 R14: 0000000000000001 R15: 0000000000000001 [ 89.409225][ T5059] [ 89.412586][ T5059] Kernel Offset: disabled [ 89.416913][ T5059] Rebooting in 86400 seconds..