Warning: Permanently added '10.128.10.17' (ED25519) to the list of known hosts. [ 74.403557][ T5047] BUG: Bad page state in process syz-executor294 pfn:10391 [ 74.403989][ T5052] ------------[ cut here ]------------ [ 74.414305][ T5051] page:ffffea000040e440 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10391 [ 74.416852][ T5052] WARNING: CPU: 1 PID: 5052 at mm/gup.c:229 try_grab_page+0x359/0x420 [ 74.430019][ T5050] page:ffffea000040e440 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10391 [ 74.435237][ T5052] Modules linked in: [ 74.435257][ T5052] CPU: 1 PID: 5052 Comm: syz-executor294 Not tainted 6.5.0-rc4-syzkaller #0 [ 74.435290][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 74.435307][ T5052] RIP: 0010:try_grab_page+0x359/0x420 [ 74.473807][ T5052] Code: 49 83 ec 01 e9 2d fd ff ff e8 d3 ee c2 ff be 04 00 00 00 4c 89 ef e8 f6 fb 16 00 f0 41 ff 45 00 e9 15 ff ff ff e8 b7 ee c2 ff <0f> 0b e8 b0 ee c2 ff bb f4 ff ff ff 89 d8 5b 5d 41 5c 41 5d 41 5e [ 74.476428][ T5047] page:ffffea000040e440 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10391 [ 74.493585][ T5052] RSP: 0018:ffffc90003c1f338 EFLAGS: 00010293 [ 74.493620][ T5052] RAX: 0000000000000000 RBX: ffffea000040e440 RCX: 0000000000000000 [ 74.493643][ T5052] RDX: ffff88807d763b80 RSI: ffffffff81c31969 RDI: 0000000000000005 [ 74.493665][ T5052] RBP: 0000000000290000 R08: 0000000000000005 R09: 0000000000000000 [ 74.493685][ T5052] R10: 0000000000000000 R11: 1ffffffff1936271 R12: ffffea000040e440 [ 74.493705][ T5052] R13: ffffea000040e474 R14: 0000000000000000 R15: ffffea000040e448 [ 74.550374][ T5052] FS: 00007fb4f1b026c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 74.559420][ T5052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.560388][ T5050] flags: 0xfff18000001042(referenced|workingset|reserved|node=0|zone=1|lastcpupid=0x7ff) [ 74.566066][ T5052] CR2: 0000000020043030 CR3: 000000002a20c000 CR4: 00000000003506e0 [ 74.566093][ T5052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.566113][ T5052] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.566135][ T5052] Call Trace: [ 74.566145][ T5052] [ 74.566158][ T5052] ? __warn+0xe6/0x380 [ 74.610493][ T5052] ? try_grab_page+0x359/0x420 [ 74.615372][ T5052] ? report_bug+0x3bc/0x580 [ 74.619965][ T5052] ? handle_bug+0x3c/0x70 [ 74.624407][ T5052] ? exc_invalid_op+0x17/0x40 [ 74.629142][ T5052] ? asm_exc_invalid_op+0x1a/0x20 [ 74.634298][ T5052] ? try_grab_page+0x359/0x420 [ 74.636233][ T5050] page_type: 0xffffffff() [ 74.639096][ T5052] ? try_grab_page+0x359/0x420 [ 74.639143][ T5052] ? try_grab_page+0x359/0x420 [ 74.653139][ T5052] follow_page_pte+0x213/0x1ba0 [ 74.658107][ T5052] ? try_grab_page+0x420/0x420 [ 74.662947][ T5052] follow_page_mask+0x3ce/0xdc0 [ 74.667913][ T5052] __get_user_pages+0x478/0x1010 [ 74.672935][ T5052] ? follow_page_mask+0xdc0/0xdc0 [ 74.675543][ T5050] raw: 00fff18000001042 ffffea000040e448 ffffea000040e448 0000000000000000 [ 74.678044][ T5052] ? down_read_killable+0x222/0x4b0 [ 74.692016][ T5052] ? down_read+0x470/0x470 [ 74.696535][ T5052] ? mark_lock+0x105/0x1950 [ 74.701110][ T5052] __gup_longterm_locked+0x755/0x24d0 [ 74.706598][ T5052] ? find_held_lock+0x2d/0x110 [ 74.711419][ T5052] ? get_user_pages_unlocked+0x6c0/0x6c0 [ 74.717162][ T5052] ? internal_get_user_pages_fast+0x1535/0x31b0 [ 74.723487][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 74.728966][ T5052] ? mark_held_locks+0x9f/0xe0 [ 74.732751][ T5050] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 74.733769][ T5052] ? sanity_check_pinned_pages+0x23/0xf60 [ 74.733825][ T5052] internal_get_user_pages_fast+0x1c4b/0x31b0 [ 74.754428][ T5052] ? __gup_device_huge+0x670/0x670 [ 74.759643][ T5052] pin_user_pages_fast+0xa8/0xf0 [ 74.764679][ T5052] ? get_user_pages_fast+0xf0/0xf0 [ 74.769868][ T5052] ? first_iovec_segment+0x16b/0x290 [ 74.775274][ T5052] iov_iter_extract_pages+0x29b/0x1860 [ 74.780904][ T5052] ? irq_fpu_usable+0x43/0xa0 [ 74.785677][ T5052] ? _copy_mc_to_iter+0x10d0/0x10d0 [ 74.790221][ T5050] page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) [ 74.798674][ T5052] ? preempt_schedule_thunk+0x1a/0x30 [ 74.798733][ T5052] ? kernel_fpu_begin_mask+0x169/0x270 [ 74.798780][ T5052] ? save_fpregs_to_fpstate+0x270/0x270 [ 74.815326][ T5052] ? kernel_fpu_end+0x5d/0x70 [ 74.820078][ T5052] extract_iter_to_sg+0x92e/0x19e0 [ 74.825333][ T5052] ? sg_init_one+0x140/0x140 [ 74.829994][ T5052] ? gup_put_folio+0x71/0x2a0 [ 74.834786][ T5052] ? sanity_check_pinned_pages+0xf60/0xf60 [ 74.840652][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 74.846168][ T5052] ? af_alg_free_sg+0xa1/0x260 [ 74.851017][ T5052] hash_sendmsg+0x459/0x1030 [ 74.855722][ T5052] ? hash_recvmsg_nokey+0x80/0x80 [ 74.860808][ T5052] sock_sendmsg+0xd9/0x180 [ 74.865319][ T5052] __sys_sendto+0x255/0x340 [ 74.869895][ T5052] ? __ia32_sys_getpeername+0xb0/0xb0 [ 74.875365][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 74.880822][ T5052] ? preempt_count_sub+0x150/0x150 [ 74.886057][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 74.889403][ T5050] page_owner info is not present (never set?) [ 74.891510][ T5052] __x64_sys_sendto+0xe0/0x1b0 [ 74.891558][ T5052] ? syscall_enter_from_user_mode+0x26/0x80 [ 74.908576][ T5052] do_syscall_64+0x38/0xb0 [ 74.913048][ T5052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 74.919043][ T5052] RIP: 0033:0x7fb4f1b83519 [ 74.923515][ T5052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 74.943252][ T5052] RSP: 002b:00007fb4f1b02228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.951767][ T5052] RAX: ffffffffffffffda RBX: 00007fb4f1c0d368 RCX: 00007fb4f1b83519 [ 74.958736][ T5050] ------------[ cut here ]------------ [ 74.959824][ T5052] RDX: ffffffffffffff5d RSI: 0000000020000100 RDI: 0000000000000006 [ 74.965316][ T5050] kernel BUG at include/linux/mm.h:1027! [ 74.973253][ T5052] RBP: 00007fb4f1c0d360 R08: 0000000000000000 R09: 000000000000fff6 [ 74.987054][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4f1bda064 [ 74.995136][ T5052] R13: 000000000000006e R14: 00007ffd79c52e50 R15: 00007ffd79c52f38 [ 75.003182][ T5052] [ 75.006295][ T5052] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.013638][ T5052] CPU: 1 PID: 5052 Comm: syz-executor294 Not tainted 6.5.0-rc4-syzkaller #0 [ 75.022353][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 75.032429][ T5052] Call Trace: [ 75.035752][ T5052] [ 75.038697][ T5052] dump_stack_lvl+0xd9/0x1b0 [ 75.043325][ T5052] panic+0x6a4/0x750 [ 75.047250][ T5052] ? panic_smp_self_stop+0xa0/0xa0 [ 75.052391][ T5052] ? show_trace_log_lvl+0x29d/0x3c0 [ 75.057642][ T5052] ? try_grab_page+0x359/0x420 [ 75.062435][ T5052] check_panic_on_warn+0xab/0xb0 [ 75.067494][ T5052] __warn+0xf2/0x380 [ 75.071422][ T5052] ? try_grab_page+0x359/0x420 [ 75.076215][ T5052] report_bug+0x3bc/0x580 [ 75.080572][ T5052] handle_bug+0x3c/0x70 [ 75.084750][ T5052] exc_invalid_op+0x17/0x40 [ 75.089280][ T5052] asm_exc_invalid_op+0x1a/0x20 [ 75.094165][ T5052] RIP: 0010:try_grab_page+0x359/0x420 [ 75.099583][ T5052] Code: 49 83 ec 01 e9 2d fd ff ff e8 d3 ee c2 ff be 04 00 00 00 4c 89 ef e8 f6 fb 16 00 f0 41 ff 45 00 e9 15 ff ff ff e8 b7 ee c2 ff <0f> 0b e8 b0 ee c2 ff bb f4 ff ff ff 89 d8 5b 5d 41 5c 41 5d 41 5e [ 75.119319][ T5052] RSP: 0018:ffffc90003c1f338 EFLAGS: 00010293 [ 75.125414][ T5052] RAX: 0000000000000000 RBX: ffffea000040e440 RCX: 0000000000000000 [ 75.133410][ T5052] RDX: ffff88807d763b80 RSI: ffffffff81c31969 RDI: 0000000000000005 [ 75.141402][ T5052] RBP: 0000000000290000 R08: 0000000000000005 R09: 0000000000000000 [ 75.149387][ T5052] R10: 0000000000000000 R11: 1ffffffff1936271 R12: ffffea000040e440 [ 75.157404][ T5052] R13: ffffea000040e474 R14: 0000000000000000 R15: ffffea000040e448 [ 75.165421][ T5052] ? try_grab_page+0x359/0x420 [ 75.170241][ T5052] ? try_grab_page+0x359/0x420 [ 75.175043][ T5052] follow_page_pte+0x213/0x1ba0 [ 75.179928][ T5052] ? try_grab_page+0x420/0x420 [ 75.184822][ T5052] follow_page_mask+0x3ce/0xdc0 [ 75.189711][ T5052] __get_user_pages+0x478/0x1010 [ 75.194686][ T5052] ? follow_page_mask+0xdc0/0xdc0 [ 75.199741][ T5052] ? down_read_killable+0x222/0x4b0 [ 75.204983][ T5052] ? down_read+0x470/0x470 [ 75.209438][ T5052] ? mark_lock+0x105/0x1950 [ 75.214010][ T5052] __gup_longterm_locked+0x755/0x24d0 [ 75.219434][ T5052] ? find_held_lock+0x2d/0x110 [ 75.224317][ T5052] ? get_user_pages_unlocked+0x6c0/0x6c0 [ 75.229984][ T5052] ? internal_get_user_pages_fast+0x1535/0x31b0 [ 75.236259][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 75.241668][ T5052] ? mark_held_locks+0x9f/0xe0 [ 75.246465][ T5052] ? sanity_check_pinned_pages+0x23/0xf60 [ 75.252222][ T5052] internal_get_user_pages_fast+0x1c4b/0x31b0 [ 75.258342][ T5052] ? __gup_device_huge+0x670/0x670 [ 75.263511][ T5052] pin_user_pages_fast+0xa8/0xf0 [ 75.268478][ T5052] ? get_user_pages_fast+0xf0/0xf0 [ 75.273625][ T5052] ? first_iovec_segment+0x16b/0x290 [ 75.278962][ T5052] iov_iter_extract_pages+0x29b/0x1860 [ 75.284476][ T5052] ? irq_fpu_usable+0x43/0xa0 [ 75.289187][ T5052] ? _copy_mc_to_iter+0x10d0/0x10d0 [ 75.294422][ T5052] ? preempt_schedule_thunk+0x1a/0x30 [ 75.299836][ T5052] ? kernel_fpu_begin_mask+0x169/0x270 [ 75.305343][ T5052] ? save_fpregs_to_fpstate+0x270/0x270 [ 75.310930][ T5052] ? kernel_fpu_end+0x5d/0x70 [ 75.315638][ T5052] extract_iter_to_sg+0x92e/0x19e0 [ 75.320883][ T5052] ? sg_init_one+0x140/0x140 [ 75.325503][ T5052] ? gup_put_folio+0x71/0x2a0 [ 75.330212][ T5052] ? sanity_check_pinned_pages+0xf60/0xf60 [ 75.336050][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 75.341670][ T5052] ? af_alg_free_sg+0xa1/0x260 [ 75.346580][ T5052] hash_sendmsg+0x459/0x1030 [ 75.351233][ T5052] ? hash_recvmsg_nokey+0x80/0x80 [ 75.356290][ T5052] sock_sendmsg+0xd9/0x180 [ 75.360747][ T5052] __sys_sendto+0x255/0x340 [ 75.365288][ T5052] ? __ia32_sys_getpeername+0xb0/0xb0 [ 75.370705][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 75.376130][ T5052] ? preempt_count_sub+0x150/0x150 [ 75.381290][ T5052] ? reacquire_held_locks+0x4b0/0x4b0 [ 75.386733][ T5052] __x64_sys_sendto+0xe0/0x1b0 [ 75.391803][ T5052] ? syscall_enter_from_user_mode+0x26/0x80 [ 75.397731][ T5052] do_syscall_64+0x38/0xb0 [ 75.402173][ T5052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 75.408102][ T5052] RIP: 0033:0x7fb4f1b83519 [ 75.412544][ T5052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 75.432183][ T5052] RSP: 002b:00007fb4f1b02228 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 75.440617][ T5052] RAX: ffffffffffffffda RBX: 00007fb4f1c0d368 RCX: 00007fb4f1b83519 [ 75.448695][ T5052] RDX: ffffffffffffff5d RSI: 0000000020000100 RDI: 0000000000000006 [ 75.456850][ T5052] RBP: 00007fb4f1c0d360 R08: 0000000000000000 R09: 000000000000fff6 [ 75.464854][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4f1bda064 [ 75.472864][ T5052] R13: 000000000000006e R14: 00007ffd79c52e50 R15: 00007ffd79c52f38 [ 75.480889][ T5052] [ 75.484225][ T5052] Kernel Offset: disabled [ 75.488886][ T5052] Rebooting in 86400 seconds..