loop1: detected capacity change from 0 to 264192 loop1: p2 < > p3 p4 loop1: p3 size 1912633224 extends beyond EOD, truncated loop1: p4 size 3657465856 extends beyond EOD, truncated BUG: Bad page map in process syz-executor.1 pte:7777777786b76007 pmd:00113067 addr:00007f4911079000 vm_flags:180400fb anon_vma:0000000000000000 mapping:ffff888016c21158 index:a8 file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0 CPU: 0 PID: 30996 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_bad_pte.cold+0x2bc/0x2e5 mm/memory.c:559 vm_normal_page+0x10c/0x2a0 mm/memory.c:622 zap_pte_range mm/memory.c:1335 [inline] zap_pmd_range mm/memory.c:1481 [inline] zap_pud_range mm/memory.c:1510 [inline] zap_p4d_range mm/memory.c:1531 [inline] unmap_page_range+0xb2c/0x2a10 mm/memory.c:1552 unmap_single_vma+0x198/0x310 mm/memory.c:1597 unmap_vmas+0x16b/0x2f0 mm/memory.c:1629 exit_mmap+0x1d0/0x630 mm/mmap.c:3171 __mmput+0x122/0x4b0 kernel/fork.c:1113 mmput+0x56/0x60 kernel/fork.c:1134 exit_mm kernel/exit.c:507 [inline] do_exit+0xb27/0x2b40 kernel/exit.c:819 do_group_exit+0x125/0x310 kernel/exit.c:929 get_signal+0x47d/0x21d0 kernel/signal.c:2820 arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868 handle_signal_work kernel/entry/common.c:148 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4913258ae6 Code: Unable to access opcode bytes at RIP 0x7f4913258abc. RSP: 002b:00007f491078cef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 RAX: 0000000000000000 RBX: 00007f491078cf40 RCX: 00007f4913258ae6 RDX: 00007f491078cfc0 RSI: 00007f491078cfc0 RDI: 00007f491078cf40 RBP: 00007f491078d6bc R08: 0000000000000001 R09: 00007f491078cd90 R10: 00007f491078cc47 R11: 0000000000000246 R12: 0000000000000002 R13: 00007f491078cfc0 R14: 0000000000000000 R15: 00007f491078cf80 BUG: Bad page map in process syz-executor.1 pte:7777777739be2007 pmd:00113067 addr:00007f49110dd000 vm_flags:180400fb anon_vma:0000000000000000 mapping:ffff888016c21158 index:10c file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0 CPU: 0 PID: 30996 Comm: syz-executor.1 Tainted: G B 5.15.0-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_bad_pte.cold+0x2bc/0x2e5 mm/memory.c:559 vm_normal_page+0x10c/0x2a0 mm/memory.c:622 zap_pte_range mm/memory.c:1335 [inline] zap_pmd_range mm/memory.c:1481 [inline] zap_pud_range mm/memory.c:1510 [inline] zap_p4d_range mm/memory.c:1531 [inline] unmap_page_range+0xb2c/0x2a10 mm/memory.c:1552 unmap_single_vma+0x198/0x310 mm/memory.c:1597 unmap_vmas+0x16b/0x2f0 mm/memory.c:1629 exit_mmap+0x1d0/0x630 mm/mmap.c:3171 __mmput+0x122/0x4b0 kernel/fork.c:1113 mmput+0x56/0x60 kernel/fork.c:1134 exit_mm kernel/exit.c:507 [inline] do_exit+0xb27/0x2b40 kernel/exit.c:819 do_group_exit+0x125/0x310 kernel/exit.c:929 get_signal+0x47d/0x21d0 kernel/signal.c:2820 arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868 handle_signal_work kernel/entry/common.c:148 [inline] exit_to_user_mode_loop kernel/entry/common.c:172 [inline] exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline] syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4913258ae6 Code: Unable to access opcode bytes at RIP 0x7f4913258abc. RSP: 002b:00007f491078cef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 RAX: 0000000000000000 RBX: 00007f491078cf40 RCX: 00007f4913258ae6 RDX: 00007f491078cfc0 RSI: 00007f491078cfc0 RDI: 00007f491078cf40 RBP: 00007f491078d6bc R08: 0000000000000001 R09: 00007f491078cd90 R10: 00007f491078cc47 R11: 0000000000000246 R12: 0000000000000002 R13: 00007f491078cfc0 R14: 0000000000000000 R15: 00007f491078cf80 BUG: Bad rss-counter state mm:ffff88803d620000 type:MM_FILEPAGES val:2