swap_info_get: Bad swap file entry 2003ffffffaa2347 BUG: Bad page map in process syz-executor.1 pte:80000000abb97000 pmd:00106067 addr:00000000854c0fc3 vm_flags:180400fb anon_vma: (null) mapping:0000000087eeaa10 index:40 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. file:kcov fault: (null) mmap:kcov_mmap readpage: (null) CPU: 0 PID: 8670 Comm: syz-executor.1 Not tainted 4.19.197-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_bad_pte.cold+0x1c5/0x222 mm/memory.c:785 zap_pte_range mm/memory.c:1397 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x1cbb/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1036 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: Bad RIP value. RSP: 002b:00007fe98c4bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000056bf88 RCX: 00000000004665d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf88 RBP: 000000000056bf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf8c R13: 00007ffe0cfec49f R14: 00007fe98c4bd300 R15: 0000000000022000 BUG: Bad page map in process syz-executor.1 pte:80000000001f2007 pmd:00106067 page:ffffea0000007c80 count:0 mapcount:-1 mapping:0000000000000000 index:0x0 flags: 0x7ff00000000000() raw: 007ff00000000000 ffffea0000007c88 ffffea0000007c88 0000000000000000 raw: 0000000000000000 0000000000000000 00000000fffffffe 0000000000000000 page dumped because: bad pte addr:00000000243bca73 vm_flags:180400fb anon_vma: (null) mapping:0000000087eeaa10 index:4d file:kcov fault: (null) mmap:kcov_mmap readpage: (null) CPU: 0 PID: 8670 Comm: syz-executor.1 Tainted: G B 4.19.197-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_bad_pte.cold+0x1c5/0x222 mm/memory.c:785 zap_pte_range mm/memory.c:1352 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x203d/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1036 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: Bad RIP value. RSP: 002b:00007fe98c4bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000056bf88 RCX: 00000000004665d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf88 RBP: 000000000056bf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf8c R13: 00007ffe0cfec49f R14: 00007fe98c4bd300 R15: 0000000000022000 BUG: Bad page map in process syz-executor.1 pte:80000000aa004007 pmd:00106067 page:ffffea0002a80100 count:1 mapcount:-1025 mapping:0000000000000000 index:0x0 flags: 0xfff00000000000() raw: 00fff00000000000 dead000000000100 dead000000000200 0000000000000000 raw: 0000000000000000 ffff8880aa4bf420 00000001fffffbfe 0000000000000000 page dumped because: bad pte addr:00000000497a9735 vm_flags:180400fb anon_vma: (null) mapping:0000000087eeaa10 index:90 file:kcov fault: (null) mmap:kcov_mmap readpage: (null) CPU: 0 PID: 8670 Comm: syz-executor.1 Tainted: G B 4.19.197-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. print_bad_pte.cold+0x1c5/0x222 mm/memory.c:785 zap_pte_range mm/memory.c:1352 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x203d/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1036 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: Bad RIP value. RSP: 002b:00007fe98c4bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000056bf88 RCX: 00000000004665d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf88 RBP: 000000000056bf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf8c R13: 00007ffe0cfec49f R14: 00007fe98c4bd300 R15: 0000000000022000 swap_info_get: Bad swap file entry 2003ffffffb543af BUG: Bad page map in process syz-executor.1 pte:800000009578a000 pmd:00106067 addr:00000000c3524bca vm_flags:180400fb anon_vma: (null) mapping:0000000087eeaa10 index:ab file:kcov fault: (null) mmap:kcov_mmap readpage: (null) CPU: 0 PID: 8670 Comm: syz-executor.1 Tainted: G B 4.19.197-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_bad_pte.cold+0x1c5/0x222 mm/memory.c:785 zap_pte_range mm/memory.c:1397 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x1cbb/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1036 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: Bad RIP value. RSP: 002b:00007fe98c4bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000056bf88 RCX: 00000000004665d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf88 RBP: 000000000056bf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf8c R13: 00007ffe0cfec49f R14: 00007fe98c4bd300 R15: 0000000000022000 BUG: Bad page map in process syz-executor.1 pte:800000000080e007 pmd:00106067 page:ffffea0000020380 count:0 mapcount:-1 mapping:0000000000000000 index:0x0 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. flags: 0x7ff00000000000() raw: 007ff00000000000 ffffea0000020388 ffffea0000020388 0000000000000000 raw: 0000000000000000 0000000000000000 00000000fffffffe 0000000000000000 page dumped because: bad pte addr:00000000cc5a2cda vm_flags:180400fb anon_vma: (null) mapping:0000000087eeaa10 index:b8 file:kcov fault: (null) mmap:kcov_mmap readpage: (null) CPU: 0 PID: 8670 Comm: syz-executor.1 Tainted: G B 4.19.197-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_bad_pte.cold+0x1c5/0x222 mm/memory.c:785 zap_pte_range mm/memory.c:1352 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x203d/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1036 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: Bad RIP value. RSP: 002b:00007fe98c4bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000056bf88 RCX: 00000000004665d9 netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf88 RBP: 000000000056bf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf8c R13: 00007ffe0cfec49f R14: 00007fe98c4bd300 R15: 0000000000022000 BUG: Bad page map in process syz-executor.1 pte:800000ffaaa65007 pmd:00106067 addr:000000004e7d9b35 vm_flags:180400fb anon_vma: (null) mapping:0000000087eeaa10 index:e0 file:kcov fault: (null) mmap:kcov_mmap readpage: (null) CPU: 0 PID: 8670 Comm: syz-executor.1 Tainted: G B 4.19.197-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0x1fc/0x2ef lib/dump_stack.c:118 print_bad_pte.cold+0x1c5/0x222 mm/memory.c:785 _vm_normal_page+0x21e/0x510 mm/memory.c:897 zap_pte_range mm/memory.c:1323 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x1141/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1036 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: Bad RIP value. RSP: 002b:00007fe98c4bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000056bf88 RCX: 00000000004665d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf88 RBP: 000000000056bf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf8c R13: 00007ffe0cfec49f R14: 00007fe98c4bd300 R15: 0000000000022000 page:ffffea0000007c80 count:0 mapcount:-1 mapping:0000000000000000 index:0x0 flags: 0x7ff00000000000() raw: 007ff00000000000 ffffea0000007c88 ffffea0000007c88 0000000000000000 raw: 0000000000000000 0000000000000000 00000000fffffffe 0000000000000000 page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0) ------------[ cut here ]------------ kernel BUG at include/linux/mm.h:519! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 8670 Comm: syz-executor.1 Tainted: G B 4.19.197-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:put_page_testzero include/linux/mm.h:519 [inline] RIP: 0010:release_pages+0xcd6/0x15a0 mm/swap.c:760 Code: 24 31 ed 4c 8b 28 e9 c4 fd ff ff 4d 8d 75 08 31 ed e9 79 f4 ff ff e8 19 f7 e0 ff 48 c7 c6 c0 82 71 88 4c 89 ef e8 ea 7a 08 00 <0f> 0b e8 03 f7 e0 ff 4d 8d 6c 24 ff e9 89 f4 ff ff e8 f4 f6 e0 ff RSP: 0018:ffff888236e57688 EFLAGS: 00010293 RAX: ffff88803e5a6540 RBX: 000000000000005e RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff818188e6 RDI: ffffea0000007cb8 RBP: 0000000000000000 R08: 000000000000003e R09: 0000000000000000 R10: 0000000000000005 R11: ffffffff8c66201b R12: ffffea0000007cb4 R13: ffffea0000007c80 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007fe98c4bd700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000541198 CR3: 00000000a8510000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: tlb_flush_mmu_free mm/memory.c:261 [inline] zap_pte_range mm/memory.c:1417 [inline] zap_pmd_range mm/memory.c:1463 [inline] zap_pud_range mm/memory.c:1492 [inline] zap_p4d_range mm/memory.c:1513 [inline] unmap_page_range+0x221f/0x2c50 mm/memory.c:1534 unmap_single_vma+0x198/0x300 mm/memory.c:1579 unmap_vmas+0xa9/0x180 mm/memory.c:1609 exit_mmap+0x2b9/0x530 mm/mmap.c:3093 __mmput kernel/fork.c:1015 [inline] mmput+0x14e/0x4a0 kernel/fork.c:1036 exit_mm kernel/exit.c:549 [inline] do_exit+0xaec/0x2be0 kernel/exit.c:857 do_group_exit+0x125/0x310 kernel/exit.c:967 get_signal+0x3f2/0x1f70 kernel/signal.c:2589 do_signal+0x8f/0x1670 arch/x86/kernel/signal.c:799 exit_to_usermode_loop+0x204/0x2a0 arch/x86/entry/common.c:163 prepare_exit_to_usermode arch/x86/entry/common.c:198 [inline] syscall_return_slowpath arch/x86/entry/common.c:271 [inline] do_syscall_64+0x538/0x620 arch/x86/entry/common.c:296 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x4665d9 Code: Bad RIP value. RSP: 002b:00007fe98c4bd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca RAX: 0000000000000000 RBX: 000000000056bf88 RCX: 00000000004665d9 RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000056bf88 RBP: 000000000056bf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf8c R13: 00007ffe0cfec49f R14: 00007fe98c4bd300 R15: 0000000000022000 Modules linked in: ---[ end trace 4e90b1eb30bada2f ]--- RIP: 0010:put_page_testzero include/linux/mm.h:519 [inline] RIP: 0010:release_pages+0xcd6/0x15a0 mm/swap.c:760 Code: 24 31 ed 4c 8b 28 e9 c4 fd ff ff 4d 8d 75 08 31 ed e9 79 f4 ff ff e8 19 f7 e0 ff 48 c7 c6 c0 82 71 88 4c 89 ef e8 ea 7a 08 00 <0f> 0b e8 03 f7 e0 ff 4d 8d 6c 24 ff e9 89 f4 ff ff e8 f4 f6 e0 ff RSP: 0018:ffff888236e57688 EFLAGS: 00010293 RAX: ffff88803e5a6540 RBX: 000000000000005e RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff818188e6 RDI: ffffea0000007cb8 RBP: 0000000000000000 R08: 000000000000003e R09: 0000000000000000 R10: 0000000000000005 R11: ffffffff8c66201b R12: ffffea0000007cb4 R13: ffffea0000007c80 R14: 0000000000000000 R15: dffffc0000000000 FS: 00007fe98c4bd700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004665af CR3: 0000000042aa9000 CR4: 00000000001406e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400