0*8kB 0*16kB 0 pages HighMem/MovableOnly 1*32kB (U) 101371 pages reserved 2*64kB (U) BUG: unable to handle kernel paging request at ffffecd000003c08 1*128kB PGD 0 P4D 0 Oops: 0000 [#1] SMP PTI CPU: 0 PID: 29673 Comm: syz-executor2 Not tainted 4.18.0-rc8+ #34 (U) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__read_once_size include/linux/compiler.h:197 [inline] RIP: 0010:compound_head include/linux/page-flags.h:142 [inline] RIP: 0010:virt_to_head_page include/linux/mm.h:659 [inline] RIP: 0010:kfree+0x368/0x29d0 mm/slub.c:3932 Code: 1*256kB c1 e0 05 48 b9 00 00 (U) 00 00 00 ea ff ff 48 0*512kB 8d 14 08 48 89 55 88 4c 1*1024kB 8d 34 08 49 83 c6 08 4d (U) 85 e4 45 0f 44 e8 0f 1*2048kB 85 6c 01 00 00 <4d> (M) 8b 3e 4c 89 f7 e8 bd 3*4096kB 9d 02 00 48 8b 18 44 (M) 8b 0a 89 d9 83 e1 01 = 15904kB RSP: 0000:ffff880178f6f358 EFLAGS: 00010246 RAX: 000002d000003c00 RBX: 0000000000000000 RCX: ffffea0000000000 RDX: ffffecd000003c00 RSI: 0000000000000000 RDI: 00000007800000a0 Node 0 RBP: ffff880178f6f4b0 R08: 0000000000000000 R09: 000077ff80000000 R10: 0000000000000000 R11: ffffffff85031d70 R12: 0000000000000000 R13: 0000000000000000 R14: ffffecd000003c08 R15: 00000000000a0008 FS: 00007faca85d7700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 DMA32: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffecd000003c08 CR3: 000000017954e000 CR4: 00000000001406f0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 410*4kB DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 Call Trace: (UM) 485*8kB (M) kmsan_vmap+0x156/0x1e0 mm/kmsan/kmsan_hooks.c:200 vmap+0x3b2/0x540 mm/vmalloc.c:1648 219*16kB relay_alloc_buf kernel/relay.c:141 [inline] relay_create_buf kernel/relay.c:177 [inline] relay_open_buf+0x742/0x1730 kernel/relay.c:450 relay_open+0x9ee/0x1260 kernel/relay.c:597 (MH) do_blk_trace_setup+0x945/0x1360 kernel/trace/blktrace.c:544 __blk_trace_setup+0x1c8/0x320 kernel/trace/blktrace.c:589 91*32kB blk_trace_ioctl+0x267/0x950 kernel/trace/blktrace.c:728 (MH) 44*64kB blkdev_ioctl+0x1d40/0x55c0 block/ioctl.c:587 (MH) block_ioctl+0x16f/0x1d0 fs/block_dev.c:1881 17*128kB vfs_ioctl fs/ioctl.c:46 [inline] do_vfs_ioctl+0xc77/0x2670 fs/ioctl.c:686 (UMH) 25*256kB ksys_ioctl fs/ioctl.c:701 [inline] __do_sys_ioctl fs/ioctl.c:708 [inline] __se_sys_ioctl fs/ioctl.c:706 [inline] __x64_sys_ioctl+0x280/0x320 fs/ioctl.c:706 (MH) do_syscall_64+0x15b/0x220 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x63/0xe7 RIP: 0033:0x457089 17*512kB Code: Bad RIP value. RSP: 002b:00007faca85d6c78 EFLAGS: 00000246 (UMH) ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007faca85d76d4 RCX: 0000000000457089 RDX: 0000000020000580 RSI: 00000000c0481273 RDI: 0000000000000004 RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 1*1024kB R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff R13: 00000000004cd5c0 R14: 00000000004c3ff9 R15: 0000000000000001 Modules linked in: (H) Dumping ftrace buffer: (ftrace buffer empty) CR2: ffffecd000003c08 0*2048kB ---[ end trace 7b922e456098f899 ]--- RIP: 0010:__read_once_size include/linux/compiler.h:197 [inline] RIP: 0010:compound_head include/linux/page-flags.h:142 [inline] RIP: 0010:virt_to_head_page include/linux/mm.h:659 [inline] RIP: 0010:kfree+0x368/0x29d0 mm/slub.c:3932 Code: 0*4096kB c1 e0 05 48 b9 00 00 = 33056kB 00 00 00 ea ff ff 48 8d Node 0 14 08 48 89 55 88 4c Normal: 8d 34 08 49 83 c6 08 191*4kB 4d 85 e4 45 0f 44 e8 0f 85 6c (UMEH) 01 00 00 <4d> 8b 3e 4c 861*8kB 89 f7 e8 bd 9d 02 00 (UME) 48 8b 18 44 8b 0a 89 189*16kB d9 83 e1 01 RSP: 0000:ffff880178f6f358 EFLAGS: 00010246 (MEH) RAX: 000002d000003c00 RBX: 0000000000000000 RCX: ffffea0000000000 RDX: ffffecd000003c00 RSI: 0000000000000000 RDI: 00000007800000a0 RBP: ffff880178f6f4b0 R08: 0000000000000000 R09: 000077ff80000000 R10: 0000000000000000 R11: ffffffff85031d70 R12: 0000000000000000 74*32kB R13: 0000000000000000 R14: ffffecd000003c08 R15: 00000000000a0008 FS: 00007faca85d7700(0000) GS:ffff88021fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 (MEH) CR2: 000000000045705f CR3: 000000017954e000 CR4: 00000000001406f0 DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600