------------[ cut here ]------------ kernel BUG at mm/page_table_check.c:146! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 0 PID: 6718 Comm: syz-executor.5 Not tainted 6.5.0-rc3-next-20230728-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 RIP: 0010:__page_table_check_zero+0x409/0x5e0 mm/page_table_check.c:146 Code: 0f 84 f1 fc ff ff e8 96 82 a0 ff 48 83 ed 01 49 89 ec e9 eb fc ff ff e8 85 82 a0 ff 0f 0b e8 7e 82 a0 ff 0f 0b e8 77 82 a0 ff <0f> 0b e8 70 82 a0 ff 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 48 89 ee RSP: 0018:ffffc900056073c0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 RDX: ffff8880843f9dc0 RSI: ffffffff81e68179 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: ffffffff81cffbd8 R12: ffff888017105000 R13: 0000000000000009 R14: ffff888017105044 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f515c19d988 CR3: 000000003c0c7000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: page_table_check_free include/linux/page_table_check.h:40 [inline] free_pages_prepare mm/page_alloc.c:1161 [inline] free_unref_page_prepare+0x4f8/0xb90 mm/page_alloc.c:2383 free_unref_page+0x33/0x3b0 mm/page_alloc.c:2478 __folio_put_large mm/swap.c:119 [inline] release_pages+0x539/0x14e0 mm/swap.c:1008 __folio_batch_release+0x77/0xe0 mm/swap.c:1062 folio_batch_release include/linux/pagevec.h:83 [inline] shmem_undo_range+0x5c0/0x1190 mm/shmem.c:1007 shmem_truncate_range mm/shmem.c:1119 [inline] shmem_evict_inode+0x334/0xb00 mm/shmem.c:1249 evict+0x2ed/0x6b0 fs/inode.c:665 iput_final fs/inode.c:1791 [inline] iput.part.0+0x55e/0x7a0 fs/inode.c:1817 iput+0x5c/0x80 fs/inode.c:1807 dentry_unlink_inode+0x292/0x430 fs/dcache.c:401 __dentry_kill+0x3b8/0x640 fs/dcache.c:607 dentry_kill fs/dcache.c:733 [inline] dput+0x8dd/0xfd0 fs/dcache.c:913 __fput+0x53c/0xac0 fs/file_table.c:392 task_work_run+0x14d/0x240 kernel/task_work.c:179 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0xa99/0x2a20 kernel/exit.c:876 do_group_exit+0xd4/0x2a0 kernel/exit.c:1026 get_signal+0x23d1/0x27b0 kernel/signal.c:2892 arch_do_signal_or_restart+0x89/0x5f0 arch/x86/kernel/signal.c:308 exit_to_user_mode_loop kernel/entry/common.c:168 [inline] exit_to_user_mode_prepare+0x11f/0x240 kernel/entry/common.c:204 __syscall_exit_to_user_mode_work kernel/entry/common.c:286 [inline] syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:297 do_syscall_64+0x44/0xb0 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7f0741c7cae9 Code: Unable to access opcode bytes at 0x7f0741c7cabf. RSP: 002b:00007f074297b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000001c RAX: 0000000000000000 RBX: 00007f0741d9c050 RCX: 00007f0741c7cae9 RDX: 0000000000000019 RSI: 000000000060005f RDI: 0000000020000000 RBP: 00007f0741cc847a R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000006e R14: 00007f0741d9c050 R15: 00007fffa2a8e678 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__page_table_check_zero+0x409/0x5e0 mm/page_table_check.c:146 Code: 0f 84 f1 fc ff ff e8 96 82 a0 ff 48 83 ed 01 49 89 ec e9 eb fc ff ff e8 85 82 a0 ff 0f 0b e8 7e 82 a0 ff 0f 0b e8 77 82 a0 ff <0f> 0b e8 70 82 a0 ff 4c 8b 63 08 31 ff 4c 89 e5 83 e5 01 48 89 ee RSP: 0018:ffffc900056073c0 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 RDX: ffff8880843f9dc0 RSI: ffffffff81e68179 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: ffffffff81cffbd8 R12: ffff888017105000 R13: 0000000000000009 R14: ffff888017105044 R15: dffffc0000000000 FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4bc9578038 CR3: 000000003c0c7000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400