raw: 007ff00000001000 ffffc9000da4f6c0 ffffc9000da4f6c0 0000000000000000
raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: VM_BUG_ON_PAGE(page_ref_count(page) == 0)
page_owner info is not present (never set?)
------------[ cut here ]------------
kernel BUG at include/linux/mm.h:737!
invalid opcode: 0000 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 21132 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:put_page_testzero include/linux/mm.h:737 [inline]
RIP: 0010:put_page_testzero include/linux/mm.h:735 [inline]
RIP: 0010:release_pages+0x854/0x1480 mm/swap.c:947
Code: 00 00 00 e9 4d fb ff ff e8 49 cd d6 ff 4c 8d 75 ff e9 e2 f8 ff ff e8 3b cd d6 ff 48 c7 c6 c0 86 95 89 4c 89 f7 e8 5c fa 09 00 <0f> 0b e8 25 cd d6 ff 48 c7 c6 c0 86 95 89 4c 89 f7 e8 46 fa 09 00
RSP: 0018:ffffc9000da4f630 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888000110b20 RCX: 0000000000000000
RDX: ffff8880a33aba00 RSI: ffffffff81a0f944 RDI: fffff52001b49ea0
RBP: ffffea0000000000 R08: 000000000000002b R09: 0000000000000000
R10: ffffffff815ed79e R11: 0000000000000000 R12: ffffea0000000034
R13: 0000000000000162 R14: ffffea0000000000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f6fb55dc CR3: 000000007019b000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000006fd1 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 tlb_batch_pages_flush mm/mmu_gather.c:49 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:242 [inline]
 tlb_flush_mmu+0xe9/0x6b0 mm/mmu_gather.c:249
 zap_pte_range mm/memory.c:1418 [inline]
 zap_pmd_range mm/memory.c:1467 [inline]
 zap_pud_range mm/memory.c:1496 [inline]
 zap_p4d_range mm/memory.c:1517 [inline]
 unmap_page_range+0x1cac/0x29f0 mm/memory.c:1538
 unmap_single_vma+0x198/0x310 mm/memory.c:1583
 unmap_vmas+0x16b/0x2f0 mm/memory.c:1615
 exit_mmap+0x1d0/0x630 mm/mmap.c:3170
 __mmput+0x122/0x4b0 kernel/fork.c:1113
 mmput+0x56/0x60 kernel/fork.c:1134
 exit_mm kernel/exit.c:507 [inline]
 do_exit+0xb27/0x2b40 kernel/exit.c:819
 do_group_exit+0x125/0x310 kernel/exit.c:929
 get_signal+0x47d/0x2220 kernel/signal.c:2830
 arch_do_signal_or_restart+0x2a9/0x1c40 arch/x86/kernel/signal.c:868
 handle_signal_work kernel/entry/common.c:148 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:172 [inline]
 exit_to_user_mode_prepare+0x17d/0x290 kernel/entry/common.c:207
 __syscall_exit_to_user_mode_work kernel/entry/common.c:289 [inline]
 syscall_exit_to_user_mode+0x19/0x60 kernel/entry/common.c:300
 __do_fast_syscall_32+0x72/0xf0 arch/x86/entry/common.c:181
 do_fast_syscall_32+0x2f/0x70 arch/x86/entry/common.c:203
 entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
RIP: 0023:0xf6f3c549
Code: Unable to access opcode bytes at RIP 0xf6f3c51f.
RSP: 002b:00000000f453667c EFLAGS: 00000296 ORIG_RAX: 00000000000000f0
RAX: fffffffffffffe00 RBX: 00000000f7098fa8 RCX: 0000000000000080
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f7098fac
RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>
Modules linked in:
---[ end trace 8c8bfd891fc81a02 ]---
RIP: 0010:put_page_testzero include/linux/mm.h:737 [inline]
RIP: 0010:put_page_testzero include/linux/mm.h:735 [inline]
RIP: 0010:release_pages+0x854/0x1480 mm/swap.c:947
Code: 00 00 00 e9 4d fb ff ff e8 49 cd d6 ff 4c 8d 75 ff e9 e2 f8 ff ff e8 3b cd d6 ff 48 c7 c6 c0 86 95 89 4c 89 f7 e8 5c fa 09 00 <0f> 0b e8 25 cd d6 ff 48 c7 c6 c0 86 95 89 4c 89 f7 e8 46 fa 09 00
RSP: 0018:ffffc9000da4f630 EFLAGS: 00010293
RAX: 0000000000000000 RBX: ffff888000110b20 RCX: 0000000000000000
RDX: ffff8880a33aba00 RSI: ffffffff81a0f944 RDI: fffff52001b49ea0
RBP: ffffea0000000000 R08: 000000000000002b R09: 0000000000000000
R10: ffffffff815ed79e R11: 0000000000000000 R12: ffffea0000000034
R13: 0000000000000162 R14: ffffea0000000000 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000f6fb55dc CR3: 000000007019b000 CR4: 00000000003526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000006fd1 DR6: 00000000ffff0ff0 DR7: 0000000000000400