Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts.
2023/09/10 12:36:22 ignoring optional flag "sandboxArg"="0"
[ 76.782569][ T23] cfg80211: failed to load regulatory.db
2023/09/10 12:36:22 parsed 1 programs
2023/09/10 12:36:24 executed programs: 0
[ 78.313192][ T5378] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 78.357435][ T5034] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 78.365283][ T5034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 78.373124][ T5034] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 78.380561][ T5034] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 78.387884][ T5034] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.475457][ T5384] chnl_net:caif_netlink_parms(): no params data found
[ 78.518407][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.525661][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.533330][ T5384] bridge_slave_0: entered allmulticast mode
[ 78.540163][ T5384] bridge_slave_0: entered promiscuous mode
[ 78.547558][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.555094][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.562508][ T5384] bridge_slave_1: entered allmulticast mode
[ 78.569080][ T5384] bridge_slave_1: entered promiscuous mode
[ 78.589050][ T5384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.600376][ T5384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.623087][ T5384] team0: Port device team_slave_0 added
[ 78.630694][ T5384] team0: Port device team_slave_1 added
[ 78.649500][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.656900][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.683669][ T5384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 78.695451][ T5384] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 78.702574][ T5384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.729726][ T5384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 78.761088][ T5384] hsr_slave_0: entered promiscuous mode
[ 78.767674][ T5384] hsr_slave_1: entered promiscuous mode
[ 79.351272][ T5384] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.366179][ T5384] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.377315][ T5384] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.388248][ T5384] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.414505][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.422750][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.430526][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.437849][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.501264][ T5384] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.512100][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.520486][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.547156][ T5384] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.559320][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.567063][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.582998][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.590379][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.749394][ T5384] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.790968][ T5384] veth0_vlan: entered promiscuous mode
[ 79.804993][ T5384] veth1_vlan: entered promiscuous mode
[ 79.838045][ T5384] veth0_macvtap: entered promiscuous mode
[ 79.849133][ T5384] veth1_macvtap: entered promiscuous mode
[ 79.870139][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.888374][ T5384] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.901178][ T5384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.911605][ T5384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.923179][ T5384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.932853][ T5384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.991736][ T5046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.004839][ T5046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.027958][ T5046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 80.038059][ T5046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 80.281761][ T5455] loop0: detected capacity change from 0 to 32768
[ 80.295634][ T5455] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 80.334612][ T5455] XFS (loop0): Ending clean mount
[ 80.341300][ T5455] XFS (loop0): Quotacheck needed: Please wait.
[ 80.361391][ T5455] XFS (loop0): Quotacheck: Done.
[ 80.375421][ T28] audit: type=1804 audit(1694349386.186:2): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2317613890/syzkaller.c1I1ng/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 80.426324][ T28] audit: type=1804 audit(1694349386.216:3): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2317613890/syzkaller.c1I1ng/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0
[ 80.462521][ T4436] Bluetooth: hci0: command 0x0409 tx timeout
[ 80.498818][ T5455] BUG: Bad page map in process syz-executor.0 pte:fffff9a4fc120 pmd:27564067
[ 80.508069][ T5455] page:ffffea000196c0c0 refcount:9 mapcount:-1 mapping:ffff888076fc0410 index:0x3 pfn:0x65b03
[ 80.518601][ T5455] head:ffffea000196c000 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0
[ 80.529031][ T5455] memcg:ffff888021424000
[ 80.533390][ T5455] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 80.540960][ T5455] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 80.552156][ T5455] page_type: 0xffffffff()
[ 80.556682][ T5455] raw: 00fff00000000000 ffffea000196c001 dead000000000122 dead000000000400
[ 80.565598][ T5455] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 80.574237][ T5455] head: 00fff0000000816c ffffea0001a0bbc8 ffff88802087a030 ffff888076fc0410
[ 80.583201][ T5455] head: 0000000000000000 ffff88801c0ae900 00000009ffffffff ffff888021424000
[ 80.592012][ T5455] page dumped because: bad pte
[ 80.596964][ T5455] page_owner tracks the page as allocated
[ 80.602835][ T5455] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 80410050199, free_ts 55464708323
[ 80.626825][ T5455] post_alloc_hook+0x1e6/0x210
[ 80.631623][ T5455] get_page_from_freelist+0x31db/0x3360
[ 80.637687][ T5455] __alloc_pages+0x255/0x670
[ 80.642612][ T5455] folio_alloc+0x1e/0x60
[ 80.646973][ T5455] filemap_alloc_folio+0xde/0x500
[ 80.652066][ T5455] page_cache_ra_order+0x423/0xcc0
[ 80.657199][ T5455] do_sync_mmap_readahead+0x444/0x850
[ 80.663197][ T5455] filemap_fault+0x7d3/0x1710
[ 80.667986][ T5455] __xfs_filemap_fault+0x286/0x960
[ 80.673250][ T5455] __do_fault+0x133/0x4e0
[ 80.677716][ T5455] handle_mm_fault+0x48d2/0x6200
[ 80.682728][ T5455] __get_user_pages+0x6bd/0x15e0
[ 80.687686][ T5455] get_dump_page+0x146/0x2b0
[ 80.692450][ T5455] dump_user_range+0x126/0x910
[ 80.697250][ T5455] elf_core_dump+0x3b75/0x4490
[ 80.702340][ T5455] do_coredump+0x1b73/0x2ab0
[ 80.706952][ T5455] page last free stack trace:
[ 80.712094][ T5455] free_unref_page_prepare+0x8c3/0x9f0
[ 80.717584][ T5455] free_unref_page+0x37/0x3f0
[ 80.722480][ T5455] release_pages+0x642/0x23f0
[ 80.727281][ T5455] tlb_flush_mmu+0x34c/0x4e0
[ 80.732370][ T5455] tlb_finish_mmu+0xd4/0x1f0
[ 80.737451][ T5455] zap_page_range_single+0x451/0x510
[ 80.743170][ T5455] do_madvise+0x23f0/0x45d0
[ 80.748413][ T5455] __x64_sys_madvise+0xa5/0xb0
[ 80.753405][ T5455] do_syscall_64+0x41/0xc0
[ 80.758226][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 80.764351][ T5455] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888076fc0410 index:5
[ 80.775665][ T5455] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 80.786309][ T5455] CPU: 1 PID: 5455 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 80.797318][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 80.808262][ T5455] Call Trace:
[ 80.811681][ T5455]
[ 80.814806][ T5455] dump_stack_lvl+0x1e7/0x2d0
[ 80.819700][ T5455] ? nf_tcp_handle_invalid+0x650/0x650
[ 80.825331][ T5455] ? panic+0x770/0x770
[ 80.829784][ T5455] ? dump_page+0x9c2/0x1090
[ 80.834326][ T5455] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 80.839853][ T5455] ? xfs_file_write_iter+0x620/0x620
[ 80.845433][ T5455] print_bad_pte+0x581/0x5c0
[ 80.850317][ T5455] unmap_page_range+0x1a76/0x3300
[ 80.855739][ T5455] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 80.862532][ T5455] ? __might_sleep+0xc0/0xc0
[ 80.867360][ T5455] ? uprobe_munmap+0x183/0x410
[ 80.873023][ T5455] ? unmap_single_vma+0x1b9/0x2a0
[ 80.878173][ T5455] unmap_vmas+0x209/0x3a0
[ 80.882543][ T5455] ? unmap_page_range+0x3300/0x3300
[ 80.887843][ T5455] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 80.893328][ T5455] exit_mmap+0x297/0xc50
[ 80.897582][ T5455] ? vm_brk+0x30/0x30
[ 80.901909][ T5455] ? __asan_memset+0x23/0x40
[ 80.906601][ T5455] ? uprobe_clear_state+0x275/0x290
[ 80.912136][ T5455] ? mm_update_next_owner+0x4a3/0x520
[ 80.917601][ T5455] __mmput+0x115/0x3c0
[ 80.921661][ T5455] exit_mm+0x21f/0x300
[ 80.925812][ T5455] ? coredump_task_exit+0x460/0x460
[ 80.931029][ T5455] ? taskstats_exit+0x39d/0x920
[ 80.936854][ T5455] ? tty_audit_exit+0x154/0x1f0
[ 80.941885][ T5455] do_exit+0x612/0x2290
[ 80.946062][ T5455] ? put_task_struct+0xc0/0xc0
[ 80.950854][ T5455] do_group_exit+0x206/0x2c0
[ 80.955539][ T5455] get_signal+0x175d/0x1840
[ 80.960218][ T5455] ? ptrace_notify+0x380/0x380
[ 80.965328][ T5455] ? do_pwritev+0x2b9/0x360
[ 80.969826][ T5455] arch_do_signal_or_restart+0x96/0x860
[ 80.975458][ T5455] ? get_sigframe_size+0x20/0x20
[ 80.980566][ T5455] ? rcu_is_watching+0x15/0xb0
[ 80.985409][ T5455] exit_to_user_mode_loop+0x6a/0x100
[ 80.990685][ T5455] exit_to_user_mode_prepare+0xb1/0x140
[ 80.996500][ T5455] syscall_exit_to_user_mode+0x64/0x280
[ 81.002348][ T5455] do_syscall_64+0x4d/0xc0
[ 81.007627][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.013608][ T5455] RIP: 0033:0x7f6cb8c7cae9
[ 81.018189][ T5455] Code: Unable to access opcode bytes at 0x7f6cb8c7cabf.
[ 81.025560][ T5455] RSP: 002b:00007f6cb9a470c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 81.034309][ T5455] RAX: ffffffffffffffe5 RBX: 00007f6cb8d9bf80 RCX: 00007f6cb8c7cae9
[ 81.042792][ T5455] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 81.051582][ T5455] RBP: 00007f6cb8cc847a R08: 0000000000000000 R09: 0000000000000000
[ 81.059996][ T5455] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 81.068315][ T5455] R13: 000000000000000b R14: 00007f6cb8d9bf80 R15: 00007ffdc7779988
[ 81.077175][ T5455]
[ 81.090652][ T5455] BUG: Bad page map in process syz-executor.0 pte:fffff9a4fd120 pmd:27564067
[ 81.100228][ T5455] page:ffffea000196c080 refcount:9 mapcount:-1 mapping:ffff888076fc0410 index:0x2 pfn:0x65b02
[ 81.111532][ T5455] head:ffffea000196c000 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0
[ 81.121818][ T5455] memcg:ffff888021424000
[ 81.126332][ T5455] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 81.134527][ T5455] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 81.146031][ T5455] page_type: 0xffffffff()
[ 81.150470][ T5455] raw: 00fff00000000000 ffffea000196c001 ffffea000196c090 ffffea000196c090
[ 81.159631][ T5455] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000
[ 81.168724][ T5455] head: 00fff0000000816c ffffea0001a0bbc8 ffff88802087a030 ffff888076fc0410
[ 81.177804][ T5455] head: 0000000000000000 ffff88801c0ae900 00000009ffffffff ffff888021424000
[ 81.187140][ T5455] page dumped because: bad pte
[ 81.191931][ T5455] page_owner tracks the page as allocated
[ 81.198024][ T5455] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 80410050199, free_ts 55464708323
[ 81.222043][ T5455] post_alloc_hook+0x1e6/0x210
[ 81.227099][ T5455] get_page_from_freelist+0x31db/0x3360
[ 81.233062][ T5455] __alloc_pages+0x255/0x670
[ 81.237690][ T5455] folio_alloc+0x1e/0x60
[ 81.242414][ T5455] filemap_alloc_folio+0xde/0x500
[ 81.247476][ T5455] page_cache_ra_order+0x423/0xcc0
[ 81.252934][ T5455] do_sync_mmap_readahead+0x444/0x850
[ 81.258426][ T5455] filemap_fault+0x7d3/0x1710
[ 81.263593][ T5455] __xfs_filemap_fault+0x286/0x960
[ 81.268745][ T5455] __do_fault+0x133/0x4e0
[ 81.273760][ T5455] handle_mm_fault+0x48d2/0x6200
[ 81.278734][ T5455] __get_user_pages+0x6bd/0x15e0
[ 81.284440][ T5455] get_dump_page+0x146/0x2b0
[ 81.289234][ T5455] dump_user_range+0x126/0x910
[ 81.294369][ T5455] elf_core_dump+0x3b75/0x4490
[ 81.299426][ T5455] do_coredump+0x1b73/0x2ab0
[ 81.304447][ T5455] page last free stack trace:
[ 81.309763][ T5455] free_unref_page_prepare+0x8c3/0x9f0
[ 81.315552][ T5455] free_unref_page+0x37/0x3f0
[ 81.320348][ T5455] release_pages+0x642/0x23f0
[ 81.325554][ T5455] tlb_flush_mmu+0x34c/0x4e0
[ 81.330180][ T5455] tlb_finish_mmu+0xd4/0x1f0
[ 81.335104][ T5455] zap_page_range_single+0x451/0x510
[ 81.340724][ T5455] do_madvise+0x23f0/0x45d0
[ 81.345829][ T5455] __x64_sys_madvise+0xa5/0xb0
[ 81.350793][ T5455] do_syscall_64+0x41/0xc0
[ 81.355771][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.361794][ T5455] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888076fc0410 index:6
[ 81.373709][ T5455] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 81.383306][ T5455] CPU: 0 PID: 5455 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 81.395301][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 81.405385][ T5455] Call Trace:
[ 81.408687][ T5455]
[ 81.411638][ T5455] dump_stack_lvl+0x1e7/0x2d0
[ 81.416345][ T5455] ? nf_tcp_handle_invalid+0x650/0x650
[ 81.421914][ T5455] ? panic+0x770/0x770
[ 81.426003][ T5455] ? dump_page+0x9c2/0x1090
[ 81.430537][ T5455] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 81.435937][ T5455] ? xfs_file_write_iter+0x620/0x620
[ 81.441420][ T5455] print_bad_pte+0x581/0x5c0
[ 81.446033][ T5455] unmap_page_range+0x1a76/0x3300
[ 81.451069][ T5455] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 81.457659][ T5455] ? __might_sleep+0xc0/0xc0
[ 81.462420][ T5455] ? uprobe_munmap+0x183/0x410
[ 81.467178][ T5455] ? unmap_single_vma+0x1b9/0x2a0
[ 81.472197][ T5455] unmap_vmas+0x209/0x3a0
[ 81.476794][ T5455] ? unmap_page_range+0x3300/0x3300
[ 81.482365][ T5455] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 81.487813][ T5455] exit_mmap+0x297/0xc50
[ 81.492050][ T5455] ? vm_brk+0x30/0x30
[ 81.496024][ T5455] ? __asan_memset+0x23/0x40
[ 81.500984][ T5455] ? uprobe_clear_state+0x275/0x290
[ 81.506190][ T5455] ? mm_update_next_owner+0x4a3/0x520
[ 81.511572][ T5455] __mmput+0x115/0x3c0
[ 81.515718][ T5455] exit_mm+0x21f/0x300
[ 81.519796][ T5455] ? coredump_task_exit+0x460/0x460
[ 81.524997][ T5455] ? taskstats_exit+0x39d/0x920
[ 81.529970][ T5455] ? tty_audit_exit+0x154/0x1f0
[ 81.534991][ T5455] do_exit+0x612/0x2290
[ 81.539411][ T5455] ? put_task_struct+0xc0/0xc0
[ 81.544262][ T5455] do_group_exit+0x206/0x2c0
[ 81.548855][ T5455] get_signal+0x175d/0x1840
[ 81.553353][ T5455] ? ptrace_notify+0x380/0x380
[ 81.558269][ T5455] ? do_pwritev+0x2b9/0x360
[ 81.562792][ T5455] arch_do_signal_or_restart+0x96/0x860
[ 81.568507][ T5455] ? get_sigframe_size+0x20/0x20
[ 81.573536][ T5455] ? rcu_is_watching+0x15/0xb0
[ 81.578547][ T5455] exit_to_user_mode_loop+0x6a/0x100
[ 81.584000][ T5455] exit_to_user_mode_prepare+0xb1/0x140
[ 81.589534][ T5455] syscall_exit_to_user_mode+0x64/0x280
[ 81.595185][ T5455] do_syscall_64+0x4d/0xc0
[ 81.599607][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.605741][ T5455] RIP: 0033:0x7f6cb8c7cae9
[ 81.610263][ T5455] Code: Unable to access opcode bytes at 0x7f6cb8c7cabf.
[ 81.617277][ T5455] RSP: 002b:00007f6cb9a470c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 81.625678][ T5455] RAX: ffffffffffffffe5 RBX: 00007f6cb8d9bf80 RCX: 00007f6cb8c7cae9
[ 81.633734][ T5455] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 81.642046][ T5455] RBP: 00007f6cb8cc847a R08: 0000000000000000 R09: 0000000000000000
[ 81.650275][ T5455] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 81.658929][ T5455] R13: 000000000000000b R14: 00007f6cb8d9bf80 R15: 00007ffdc7779988
[ 81.666910][ T5455]
[ 81.671779][ T5455] BUG: Bad page map in process syz-executor.0 pte:fffff9a4fe120 pmd:27564067
[ 81.681178][ T5455] page:ffffea000196c040 refcount:9 mapcount:-1 mapping:ffff888076fc0410 index:0x1 pfn:0x65b01
[ 81.691908][ T5455] head:ffffea000196c000 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0
[ 81.701855][ T5455] memcg:ffff888021424000
[ 81.706520][ T5455] aops:xfs_address_space_operations ino:244a dentry name:"bus"
[ 81.714648][ T5455] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff)
[ 81.725921][ T5455] page_type: 0xffffffff()
[ 81.730447][ T5455] raw: 00fff00000000202 ffffea000196c001 dead000000000122 fffffffdffffffff
[ 81.739463][ T5455] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000
[ 81.748451][ T5455] head: 00fff0000000816c ffffea0001a0bbc8 ffff88802087a030 ffff888076fc0410
[ 81.758135][ T5455] head: 0000000000000000 ffff88801c0ae900 00000009ffffffff ffff888021424000
[ 81.767443][ T5455] page dumped because: bad pte
[ 81.772704][ T5455] page_owner tracks the page as allocated
[ 81.778818][ T5455] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 80410050199, free_ts 55464708323
[ 81.802662][ T5455] post_alloc_hook+0x1e6/0x210
[ 81.807555][ T5455] get_page_from_freelist+0x31db/0x3360
[ 81.813473][ T5455] __alloc_pages+0x255/0x670
[ 81.818096][ T5455] folio_alloc+0x1e/0x60
[ 81.823697][ T5455] filemap_alloc_folio+0xde/0x500
[ 81.829446][ T5455] page_cache_ra_order+0x423/0xcc0
[ 81.835113][ T5455] do_sync_mmap_readahead+0x444/0x850
[ 81.840691][ T5455] filemap_fault+0x7d3/0x1710
[ 81.845920][ T5455] __xfs_filemap_fault+0x286/0x960
[ 81.851248][ T5455] __do_fault+0x133/0x4e0
[ 81.856667][ T5455] handle_mm_fault+0x48d2/0x6200
[ 81.861817][ T5455] __get_user_pages+0x6bd/0x15e0
[ 81.867195][ T5455] get_dump_page+0x146/0x2b0
[ 81.871905][ T5455] dump_user_range+0x126/0x910
[ 81.877132][ T5455] elf_core_dump+0x3b75/0x4490
[ 81.882358][ T5455] do_coredump+0x1b73/0x2ab0
[ 81.886977][ T5455] page last free stack trace:
[ 81.891660][ T5455] free_unref_page_prepare+0x8c3/0x9f0
[ 81.897597][ T5455] free_unref_page+0x37/0x3f0
[ 81.902613][ T5455] release_pages+0x642/0x23f0
[ 81.907850][ T5455] tlb_flush_mmu+0x34c/0x4e0
[ 81.912893][ T5455] tlb_finish_mmu+0xd4/0x1f0
[ 81.917514][ T5455] zap_page_range_single+0x451/0x510
[ 81.923155][ T5455] do_madvise+0x23f0/0x45d0
[ 81.927703][ T5455] __x64_sys_madvise+0xa5/0xb0
[ 81.932881][ T5455] do_syscall_64+0x41/0xc0
[ 81.937649][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 81.944105][ T5455] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888076fc0410 index:7
[ 81.955387][ T5455] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio
[ 81.965597][ T5455] CPU: 1 PID: 5455 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 81.978011][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 81.988256][ T5455] Call Trace:
[ 81.991624][ T5455]
[ 81.994659][ T5455] dump_stack_lvl+0x1e7/0x2d0
[ 82.000935][ T5455] ? nf_tcp_handle_invalid+0x650/0x650
[ 82.006681][ T5455] ? panic+0x770/0x770
[ 82.010945][ T5455] ? dump_page+0x9c2/0x1090
[ 82.015650][ T5455] ? xfs_dio_write_end_io+0x6f0/0x6f0
[ 82.021148][ T5455] ? xfs_file_write_iter+0x620/0x620
[ 82.026713][ T5455] print_bad_pte+0x581/0x5c0
[ 82.031480][ T5455] unmap_page_range+0x1a76/0x3300
[ 82.036646][ T5455] ? mmu_notifier_invalidate_range_start+0xf0/0xf0
[ 82.043177][ T5455] ? __might_sleep+0xc0/0xc0
[ 82.047860][ T5455] ? uprobe_munmap+0x183/0x410
[ 82.052714][ T5455] ? unmap_single_vma+0x1b9/0x2a0
[ 82.057823][ T5455] unmap_vmas+0x209/0x3a0
[ 82.062183][ T5455] ? unmap_page_range+0x3300/0x3300
[ 82.067557][ T5455] ? tlb_gather_mmu_fullmm+0x160/0x210
[ 82.073271][ T5455] exit_mmap+0x297/0xc50
[ 82.077723][ T5455] ? vm_brk+0x30/0x30
[ 82.081695][ T5455] ? __asan_memset+0x23/0x40
[ 82.086805][ T5455] ? uprobe_clear_state+0x275/0x290
[ 82.092174][ T5455] ? mm_update_next_owner+0x4a3/0x520
[ 82.097714][ T5455] __mmput+0x115/0x3c0
[ 82.101862][ T5455] exit_mm+0x21f/0x300
[ 82.106222][ T5455] ? coredump_task_exit+0x460/0x460
[ 82.111679][ T5455] ? taskstats_exit+0x39d/0x920
[ 82.116697][ T5455] ? tty_audit_exit+0x154/0x1f0
[ 82.121569][ T5455] do_exit+0x612/0x2290
[ 82.125835][ T5455] ? put_task_struct+0xc0/0xc0
[ 82.130771][ T5455] do_group_exit+0x206/0x2c0
[ 82.135465][ T5455] get_signal+0x175d/0x1840
[ 82.140137][ T5455] ? ptrace_notify+0x380/0x380
[ 82.145786][ T5455] ? do_pwritev+0x2b9/0x360
[ 82.150374][ T5455] arch_do_signal_or_restart+0x96/0x860
[ 82.155919][ T5455] ? get_sigframe_size+0x20/0x20
[ 82.160873][ T5455] ? rcu_is_watching+0x15/0xb0
[ 82.165806][ T5455] exit_to_user_mode_loop+0x6a/0x100
[ 82.171083][ T5455] exit_to_user_mode_prepare+0xb1/0x140
[ 82.176724][ T5455] syscall_exit_to_user_mode+0x64/0x280
[ 82.182442][ T5455] do_syscall_64+0x4d/0xc0
[ 82.187024][ T5455] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 82.193056][ T5455] RIP: 0033:0x7f6cb8c7cae9
[ 82.197564][ T5455] Code: Unable to access opcode bytes at 0x7f6cb8c7cabf.
[ 82.204946][ T5455] RSP: 002b:00007f6cb9a470c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 82.213354][ T5455] RAX: ffffffffffffffe5 RBX: 00007f6cb8d9bf80 RCX: 00007f6cb8c7cae9
[ 82.221319][ T5455] RDX: 0000000000000002 RSI: 0000000020000300 RDI: 0000000000000007
[ 82.229551][ T5455] RBP: 00007f6cb8cc847a R08: 0000000000000000 R09: 0000000000000000
[ 82.237599][ T5455] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000
[ 82.245821][ T5455] R13: 000000000000000b R14: 00007f6cb8d9bf80 R15: 00007ffdc7779988
[ 82.253992][ T5455]
[ 82.297841][ T5384] page:ffffea000196c100 refcount:7 mapcount:0 mapping:ffff888076fc0410 index:0x4 pfn:0x65b04
[ 82.309275][ T5384] head:ffffea000196c100 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0
[ 82.319196][ T5384] memcg:ffff888021424000
[ 82.323717][ T5384] aops:xfs_address_space_operations ino:244a
[ 82.329727][ T5384] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff)
[ 82.340329][ T5384] page_type: 0xffffffff()
[ 82.344687][ T5384] raw: 00fff00000000169 ffffea000196c008 ffff88802087a030 ffff888076fc0410
[ 82.353293][ T5384] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff888021424000
[ 82.362070][ T5384] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[ 82.369489][ T5384] page_owner tracks the page as allocated
[ 82.375220][ T5384] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5455, tgid 5454 (syz-executor.0), ts 80410105736, free_ts 55464708323
[ 82.398683][ T5384] post_alloc_hook+0x1e6/0x210
[ 82.403494][ T5384] get_page_from_freelist+0x31db/0x3360
[ 82.409167][ T5384] __alloc_pages+0x255/0x670
[ 82.413864][ T5384] folio_alloc+0x1e/0x60
[ 82.418452][ T5384] filemap_alloc_folio+0xde/0x500
[ 82.423495][ T5384] page_cache_ra_order+0x423/0xcc0
[ 82.428733][ T5384] do_sync_mmap_readahead+0x444/0x850
[ 82.434215][ T5384] filemap_fault+0x7d3/0x1710
[ 82.438910][ T5384] __xfs_filemap_fault+0x286/0x960
[ 82.444045][ T5384] __do_fault+0x133/0x4e0
[ 82.448389][ T5384] handle_mm_fault+0x48d2/0x6200
[ 82.453350][ T5384] __get_user_pages+0x6bd/0x15e0
[ 82.458545][ T5384] get_dump_page+0x146/0x2b0
[ 82.463174][ T5384] dump_user_range+0x126/0x910
[ 82.468052][ T5384] elf_core_dump+0x3b75/0x4490
[ 82.472925][ T5384] do_coredump+0x1b73/0x2ab0
[ 82.477708][ T5384] page last free stack trace:
[ 82.482473][ T5384] free_unref_page_prepare+0x8c3/0x9f0
[ 82.488041][ T5384] free_unref_page+0x37/0x3f0
[ 82.492920][ T5384] release_pages+0x642/0x23f0
[ 82.497724][ T5384] tlb_flush_mmu+0x34c/0x4e0
[ 82.502424][ T5384] tlb_finish_mmu+0xd4/0x1f0
[ 82.507035][ T5384] zap_page_range_single+0x451/0x510
[ 82.512342][ T5384] do_madvise+0x23f0/0x45d0
[ 82.516871][ T5384] __x64_sys_madvise+0xa5/0xb0
[ 82.521673][ T5384] do_syscall_64+0x41/0xc0
[ 82.526122][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 82.532237][ T5384] ------------[ cut here ]------------
[ 82.537725][ T5384] kernel BUG at mm/filemap.c:155!
[ 82.542938][ T5384] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 82.549019][ T5384] CPU: 0 PID: 5384 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-13150-g535a265d7f0d-dirty #0
[ 82.552060][ T4436] Bluetooth: hci0: command 0x041b tx timeout
[ 82.561157][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 82.577409][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 82.583766][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 98 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 82 a4 10 00
[ 82.603654][ T5384] RSP: 0018:ffffc90005057778 EFLAGS: 00010046
[ 82.609746][ T5384] RAX: 1408410e746a4d00 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 82.617825][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5996c0 RDI: ffffffff8b599680
[ 82.626171][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a68af R09: 1ffffffff1d34d15
[ 82.634279][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34d16 R12: ffffc900050579c0
[ 82.642456][ T5384] R13: ffffea000196c100 R14: 1ffffd400032d820 R15: ffffea000196c108
[ 82.650539][ T5384] FS: 0000555556c88480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 82.659508][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 82.666285][ T5384] CR2: 0000555556c91938 CR3: 000000002108d000 CR4: 00000000003506f0
[ 82.674457][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 82.682803][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 82.691082][ T5384] Call Trace:
[ 82.694594][ T5384]
[ 82.697737][ T5384] ? __die_body+0x8b/0xe0
[ 82.702445][ T5384] ? die+0xa1/0xd0
[ 82.707150][ T5384] ? do_trap+0x153/0x380
[ 82.712030][ T5384] ? __wake_up_klogd+0xcc/0x100
[ 82.717425][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 82.723610][ T5384] ? do_error_trap+0x1dc/0x2c0
[ 82.728418][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 82.734084][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 82.739402][ T5384] ? do_int3+0x50/0x50
[ 82.743496][ T5384] ? report_bug+0x3cd/0x500
[ 82.748025][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 82.753949][ T5384] ? handle_invalid_op+0x34/0x40
[ 82.759160][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 82.764826][ T5384] ? exc_invalid_op+0x33/0x50
[ 82.769613][ T5384] ? asm_exc_invalid_op+0x1a/0x20
[ 82.774685][ T5384] ? lock_release+0xb0/0x9d0
[ 82.779300][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 82.785221][ T5384] ? filemap_unaccount_folio+0x6c8/0xc20
[ 82.790884][ T5384] delete_from_page_cache_batch+0x173/0xc90
[ 82.796979][ T5384] ? filemap_remove_folio+0x2e0/0x2e0
[ 82.802664][ T5384] ? __kmem_cache_free+0x25f/0x3b0
[ 82.808087][ T5384] ? truncate_cleanup_folio+0x1e0/0x5c0
[ 82.813747][ T5384] ? ifs_free+0x710/0x710
[ 82.818287][ T5384] ? truncate_cleanup_folio+0x2cd/0x5c0
[ 82.824465][ T5384] truncate_inode_pages_range+0x346/0x11a0
[ 82.830303][ T5384] ? lock_acquire+0xe3/0x520
[ 82.834927][ T5384] ? __lock_acquire+0x7f70/0x7f70
[ 82.840193][ T5384] ? mapping_evict_folio+0x530/0x530
[ 82.845509][ T5384] ? __rwlock_init+0x150/0x150
[ 82.850311][ T5384] evict+0x2b7/0x620
[ 82.854242][ T5384] evict_inodes+0x5f8/0x690
[ 82.859293][ T5384] ? clear_inode+0x150/0x150
[ 82.863909][ T5384] ? xfs_fs_sync_fs+0x1c0/0x360
[ 82.868962][ T5384] generic_shutdown_super+0x9d/0x2c0
[ 82.874271][ T5384] kill_block_super+0x41/0x70
[ 82.878977][ T5384] xfs_kill_sb+0x15/0x50
[ 82.883326][ T5384] deactivate_locked_super+0xa4/0x110
[ 82.889072][ T5384] cleanup_mnt+0x426/0x4c0
[ 82.893769][ T5384] task_work_run+0x24a/0x300
[ 82.898472][ T5384] ? task_work_cancel+0x2b0/0x2b0
[ 82.903531][ T5384] ? rcu_is_watching+0x15/0xb0
[ 82.908401][ T5384] exit_to_user_mode_loop+0xd9/0x100
[ 82.913709][ T5384] exit_to_user_mode_prepare+0xb1/0x140
[ 82.919365][ T5384] syscall_exit_to_user_mode+0x64/0x280
[ 82.925106][ T5384] do_syscall_64+0x4d/0xc0
[ 82.929542][ T5384] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 82.935457][ T5384] RIP: 0033:0x7f6cb8c7de17
[ 82.940061][ T5384] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 82.960382][ T5384] RSP: 002b:00007ffdc7778ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 82.968913][ T5384] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6cb8c7de17
[ 82.977076][ T5384] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdc7778c60
[ 82.985333][ T5384] RBP: 00007ffdc7778c60 R08: 0000000000000000 R09: 0000000000000000
[ 82.993539][ T5384] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc7779d20
[ 83.001812][ T5384] R13: 00007f6cb8cc73b9 R14: 000000000001389b R15: 0000000000000007
[ 83.010384][ T5384]
[ 83.013414][ T5384] Modules linked in:
[ 83.018026][ T5384] ---[ end trace 0000000000000000 ]---
[ 83.023725][ T5384] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20
[ 83.030191][ T5384] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 11 26 cf ff e9 b3 f9 ff ff e8 07 26 cf ff 4c 89 ef 48 c7 c6 a0 09 13 8b e8 98 a4 10 00 <0f> 0b e8 f1 25 cf ff 4c 89 ef 48 c7 c6 20 0f 13 8b e8 82 a4 10 00
[ 83.050684][ T5384] RSP: 0018:ffffc90005057778 EFLAGS: 00010046
[ 83.056945][ T5384] RAX: 1408410e746a4d00 RBX: 0000000000000000 RCX: ffffffff816d2b30
[ 83.064932][ T5384] RDX: 0000000000000000 RSI: ffffffff8b5996c0 RDI: ffffffff8b599680
[ 83.073011][ T5384] RBP: 0000000000000040 R08: ffffffff8e9a68af R09: 1ffffffff1d34d15
[ 83.081440][ T5384] R10: dffffc0000000000 R11: fffffbfff1d34d16 R12: ffffc900050579c0
[ 83.089786][ T5384] R13: ffffea000196c100 R14: 1ffffd400032d820 R15: ffffea000196c108
[ 83.097814][ T5384] FS: 0000555556c88480(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 83.106771][ T5384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 83.113368][ T5384] CR2: 0000555556c91938 CR3: 000000002108d000 CR4: 00000000003506f0
[ 83.121636][ T5384] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 83.129711][ T5384] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 83.137788][ T5384] Kernel panic - not syncing: Fatal exception
[ 83.144202][ T5384] Kernel Offset: disabled
[ 83.148706][ T5384] Rebooting in 86400 seconds..