raw: 007ff00000001000 ffffc9000d6976e8 ffffc9000d6976e8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
page_owner info is not present (never set?)
------------[ cut here ]------------
kernel BUG at include/linux/mm.h:737!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 0 PID: 17574 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:put_page_testzero include/linux/mm.h:737 [inline]
RIP: 0010:put_page_testzero include/linux/mm.h:735 [inline]
RIP: 0010:release_pages+0x854/0x1480 mm/swap.c:938
Code: 00 00 00 e9 4d fb ff ff e8 69 d9 d6 ff 4c 8d 75 ff e9 e2 f8 ff ff e8 5b d9 d6 ff 48 c7 c6 80 7d 95 89 4c 89 f7 e8 7c e9 09 00 <0f> 0b e8 45 d9 d6 ff 48 c7 c6 80 7d 95 89 4c 89 f7 e8 66 e9 09 00
RSP: 0018:ffffc9000d697658 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888000110b28 RCX: 0000000000000000
RDX: ffff88815b9e3a00 RSI: ffffffff81a09944 RDI: fffff52001ad2ea1
RBP: ffffea0000000000 R08: 000000000000002b R09: 0000000000000000
R10: ffffffff815e96ee R11: 0000000000000000 R12: ffffea0000000034
R13: 0000000000000163 R14: ffffea0000000000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4255d543a4 CR3: 0000000086c23000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
Call Trace:
 <TASK>
 tlb_batch_pages_flush mm/mmu_gather.c:49 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:242 [inline]
 tlb_flush_mmu+0xe9/0x6b0 mm/mmu_gather.c:249
 zap_pte_range mm/memory.c:1432 [inline]
 zap_pmd_range mm/memory.c:1481 [inline]
 zap_pud_range mm/memory.c:1510 [inline]
 zap_p4d_range mm/memory.c:1531 [inline]
 unmap_page_range+0x1c58/0x2a10 mm/memory.c:1552
 unmap_single_vma+0x198/0x310 mm/memory.c:1597
 unmap_vmas+0x16b/0x2f0 mm/memory.c:1629
 exit_mmap+0x1d0/0x630 mm/mmap.c:3171
 __mmput+0x122/0x4b0 kernel/fork.c:1114
 mmput+0x56/0x60 kernel/fork.c:1135
 exit_mm kernel/exit.c:502 [inline]
 do_exit+0xab8/0x2a20 kernel/exit.c:813
 do_group_exit+0x125/0x310 kernel/exit.c:923
 get_signal+0x47d/0x21d0 kernel/signal.c:2855
 arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
 do_syscall_64+0x42/0xb0 arch/x86/entry/common.c:86
 entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f9c97d72ae9
Code: Unable to access opcode bytes at RIP 0x7f9c97d72abf.
RSP: 002b:00007f9c952e8218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
RAX: fffffffffffffe00 RBX: 00007f9c97e85f68 RCX: 00007f9c97d72ae9
RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c97e85f68
RBP: 00007f9c97e85f60 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c97e85f6c
R13: 00007ffd56ab99bf R14: 00007f9c952e8300 R15: 0000000000022000
 </TASK>
Modules linked in:
---[ end trace ed0ca62abc6c4bf7 ]---
RIP: 0010:put_page_testzero include/linux/mm.h:737 [inline]
RIP: 0010:put_page_testzero include/linux/mm.h:735 [inline]
RIP: 0010:release_pages+0x854/0x1480 mm/swap.c:938
Code: 00 00 00 e9 4d fb ff ff e8 69 d9 d6 ff 4c 8d 75 ff e9 e2 f8 ff ff e8 5b d9 d6 ff 48 c7 c6 80 7d 95 89 4c 89 f7 e8 7c e9 09 00 <0f> 0b e8 45 d9 d6 ff 48 c7 c6 80 7d 95 89 4c 89 f7 e8 66 e9 09 00
RSP: 0018:ffffc9000d697658 EFLAGS: 00010293

RAX: 0000000000000000 RBX: ffff888000110b28 RCX: 0000000000000000
RDX: ffff88815b9e3a00 RSI: ffffffff81a09944 RDI: fffff52001ad2ea1
RBP: ffffea0000000000 R08: 000000000000002b R09: 0000000000000000
R10: ffffffff815e96ee R11: 0000000000000000 R12: ffffea0000000034
R13: 0000000000000163 R14: ffffea0000000000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4255d543a4 CR3: 0000000086c23000 CR4: 0000000000350ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600