BUG: Bad page map in process syz.0.548  pte:ffffffff8639a968 pmd:1dfba7067
page:ffffea0001e71940 refcount:0 mapcount:-1 mapping:0000000000000000 index:0x0
flags: 0x400000000000000a(referenced|dirty)
raw: 400000000000000a ffffea0001e71948 ffffea0001e71948 0000000000000000
raw: 0000000000000000 0000000000000000 00000000fffffffe 0000000000000000
page dumped because: bad pte
page_owner info is not present (never set?)
addr:00007f4d3e039000 vm_flags:00000875 anon_vma:0000000000000000 mapping:ffff8881ea30a170 index:e8
file:syz-executor fault:ext4_filemap_fault mmap:ext4_file_mmap readpage:ext4_readpage
CPU: 1 PID: 2591 Comm: syz.0.548 Tainted: G        W         5.4.290-syzkaller-00002-g41adfeb3d639 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x1d8/0x241 lib/dump_stack.c:118
 print_bad_pte+0x511/0x530 mm/memory.c:560
 zap_pte_range mm/memory.c:1107 [inline]
 zap_pmd_range mm/memory.c:1222 [inline]
 zap_pud_range mm/memory.c:1251 [inline]
 zap_p4d_range mm/memory.c:1272 [inline]
 unmap_page_range+0x1588/0x2620 mm/memory.c:1293
 unmap_single_vma mm/memory.c:1338 [inline]
 unmap_vmas+0x355/0x4b0 mm/memory.c:1370
 exit_mmap+0x2bc/0x520 mm/mmap.c:3191
 __mmput+0x8e/0x2c0 kernel/fork.c:1101
 exit_mm kernel/exit.c:538 [inline]
 do_exit+0xc08/0x2bc0 kernel/exit.c:848
 do_group_exit+0x138/0x300 kernel/exit.c:984
 get_signal+0xdb1/0x1440 kernel/signal.c:2738
 do_signal+0xb0/0x11f0 arch/x86/kernel/signal.c:809
 exit_to_usermode_loop+0xc0/0x1a0 arch/x86/entry/common.c:159
 prepare_exit_to_usermode+0x199/0x200 arch/x86/entry/common.c:194
 entry_SYSCALL_64_after_hwframe+0x5c/0xc1
RIP: 0033:0x7f4d3e0de169
Code: Bad RIP value.
RSP: 002b:00007f4d3c748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: 0000000000000000 RBX: 00007f4d3e2f6fa0 RCX: 00007f4d3e0de169
RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000005
RBP: 00007f4d3e15f990 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 0000000000000000 R14: 00007f4d3e2f6fa0 R15: 00007ffe43fd1a08
BUG: Bad rss-counter state mm:ffff8881e78e3900 type:MM_FILEPAGES val:-1