loop1: detected capacity change from 0 to 264192
loop1: p2 < > p3 p4
loop1: p3 size 1912633224 extends beyond EOD, truncated
loop1: p4 size 3657465856 extends beyond EOD, truncated
BUG: Bad page map in process syz-executor.1 pte:7777777786b76007 pmd:00113067
addr:00007f4911079000 vm_flags:180400fb anon_vma:0000000000000000 mapping:ffff888016c21158 index:a8
file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0
CPU: 0 PID: 30996 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
print_bad_pte.cold+0x2bc/0x2e5 mm/memory.c:559
vm_normal_page+0x10c/0x2a0 mm/memory.c:622
zap_pte_range mm/memory.c:1335 [inline]
zap_pmd_range mm/memory.c:1481 [inline]
zap_pud_range mm/memory.c:1510 [inline]
zap_p4d_range mm/memory.c:1531 [inline]
unmap_page_range+0xb2c/0x2a10 mm/memory.c:1552
unmap_single_vma+0x198/0x310 mm/memory.c:1597
unmap_vmas+0x16b/0x2f0 mm/memory.c:1629
exit_mmap+0x1d0/0x630 mm/mmap.c:3171
__mmput+0x122/0x4b0 kernel/fork.c:1113
mmput+0x56/0x60 kernel/fork.c:1134
exit_mm kernel/exit.c:507 [inline]
do_exit+0xb27/0x2b40 kernel/exit.c:819
do_group_exit+0x125/0x310 kernel/exit.c:929
get_signal+0x47d/0x21d0 kernel/signal.c:2820
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f4913258ae6
Code: Unable to access opcode bytes at RIP 0x7f4913258abc.
RSP: 002b:00007f491078cef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
RAX: 0000000000000000 RBX: 00007f491078cf40 RCX: 00007f4913258ae6
RDX: 00007f491078cfc0 RSI: 00007f491078cfc0 RDI: 00007f491078cf40
RBP: 00007f491078d6bc R08: 0000000000000001 R09: 00007f491078cd90
R10: 00007f491078cc47 R11: 0000000000000246 R12: 0000000000000002
R13: 00007f491078cfc0 R14: 0000000000000000 R15: 00007f491078cf80
BUG: Bad page map in process syz-executor.1 pte:7777777739be2007 pmd:00113067
addr:00007f49110dd000 vm_flags:180400fb anon_vma:0000000000000000 mapping:ffff888016c21158 index:10c
file:kcov fault:0x0 mmap:kcov_mmap readpage:0x0
CPU: 0 PID: 30996 Comm: syz-executor.1 Tainted: G B 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
print_bad_pte.cold+0x2bc/0x2e5 mm/memory.c:559
vm_normal_page+0x10c/0x2a0 mm/memory.c:622
zap_pte_range mm/memory.c:1335 [inline]
zap_pmd_range mm/memory.c:1481 [inline]
zap_pud_range mm/memory.c:1510 [inline]
zap_p4d_range mm/memory.c:1531 [inline]
unmap_page_range+0xb2c/0x2a10 mm/memory.c:1552
unmap_single_vma+0x198/0x310 mm/memory.c:1597
unmap_vmas+0x16b/0x2f0 mm/memory.c:1629
exit_mmap+0x1d0/0x630 mm/mmap.c:3171
__mmput+0x122/0x4b0 kernel/fork.c:1113
mmput+0x56/0x60 kernel/fork.c:1134
exit_mm kernel/exit.c:507 [inline]
do_exit+0xb27/0x2b40 kernel/exit.c:819
do_group_exit+0x125/0x310 kernel/exit.c:929
get_signal+0x47d/0x21d0 kernel/signal.c:2820
arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868
handle_signal_work kernel/entry/common.c:148 [inline]
exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207
__syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f4913258ae6
Code: Unable to access opcode bytes at RIP 0x7f4913258abc.
RSP: 002b:00007f491078cef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000004
RAX: 0000000000000000 RBX: 00007f491078cf40 RCX: 00007f4913258ae6
RDX: 00007f491078cfc0 RSI: 00007f491078cfc0 RDI: 00007f491078cf40
RBP: 00007f491078d6bc R08: 0000000000000001 R09: 00007f491078cd90
R10: 00007f491078cc47 R11: 0000000000000246 R12: 0000000000000002
R13: 00007f491078cfc0 R14: 0000000000000000 R15: 00007f491078cf80
BUG: Bad rss-counter state mm:ffff88803d620000 type:MM_FILEPAGES val:2