Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. 2023/09/13 05:06:59 ignoring optional flag "sandboxArg"="0" 2023/09/13 05:06:59 parsed 1 programs 2023/09/13 05:07:01 executed programs: 0 [ 75.325939][ T5376] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.337189][ T5375] syz-execprog[5375]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.347000][ T5375] syz-execprog[5375]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.385419][ T5032] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.392778][ T5032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.400758][ T5032] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.408164][ T5032] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.415644][ T5032] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.423009][ T5032] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.509775][ T5385] chnl_net:caif_netlink_parms(): no params data found [ 75.552281][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.559502][ T5385] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.567051][ T5385] bridge_slave_0: entered allmulticast mode [ 75.573734][ T5385] bridge_slave_0: entered promiscuous mode [ 75.581337][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.588526][ T5385] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.596048][ T5385] bridge_slave_1: entered allmulticast mode [ 75.602901][ T5385] bridge_slave_1: entered promiscuous mode [ 75.623132][ T5385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.634137][ T5385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.656379][ T5385] team0: Port device team_slave_0 added [ 75.663741][ T5385] team0: Port device team_slave_1 added [ 75.683010][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.689967][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.716081][ T5385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.727900][ T5385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.734969][ T5385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.760906][ T5385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.789876][ T5385] hsr_slave_0: entered promiscuous mode [ 75.796069][ T5385] hsr_slave_1: entered promiscuous mode [ 76.334306][ T5385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.344473][ T5385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.356306][ T5385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.366796][ T5385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.392341][ T5385] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.399495][ T5385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.408973][ T5385] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.416160][ T5385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.484867][ T5385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.503386][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.512087][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.527441][ T5385] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.541998][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.549155][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.567185][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.574393][ T5031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.733535][ T5385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.777103][ T5385] veth0_vlan: entered promiscuous mode [ 76.791264][ T1136] cfg80211: failed to load regulatory.db [ 76.812994][ T5385] veth1_vlan: entered promiscuous mode [ 76.859696][ T5385] veth0_macvtap: entered promiscuous mode [ 76.889250][ T5385] veth1_macvtap: entered promiscuous mode [ 76.935013][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.956997][ T5385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.978418][ T5385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.988639][ T5385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.997798][ T5385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.008121][ T5385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.074249][ T4443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.086113][ T4443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.110884][ T4443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.118836][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.162877][ T5457] syz-executor.0[5457]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.387278][ T5457] loop0: detected capacity change from 0 to 32768 [ 77.399508][ T5457] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 77.440991][ T5457] XFS (loop0): Ending clean mount [ 77.447913][ T5457] XFS (loop0): Quotacheck needed: Please wait. [ 77.463882][ T5457] XFS (loop0): Quotacheck: Done. [ 77.475880][ T28] audit: type=1804 audit(1694581623.303:2): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir408101063/syzkaller.DAZwMx/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 77.514136][ T4433] Bluetooth: hci0: command 0x0409 tx timeout [ 77.531032][ T28] audit: type=1804 audit(1694581623.303:3): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir408101063/syzkaller.DAZwMx/0/file0/bus" dev="loop0" ino=9290 res=1 errno=0 [ 77.605267][ T5456] BUG: Bad page map in process syz-executor.0 pte:fffff9b3c4120 pmd:1ef3d067 [ 77.614430][ T5456] page:ffffea0001930ec0 refcount:9 mapcount:-1 mapping:ffff888068279b50 index:0x3 pfn:0x64c3b [ 77.624745][ T5456] head:ffffea0001930e00 order:2 entire_mapcount:0 nr_pages_mapped:8388607 pincount:0 [ 77.634611][ T5456] memcg:ffff88807adee000 [ 77.638865][ T5456] aops:xfs_address_space_operations ino:244a dentry name:"bus" [ 77.646913][ T5456] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.658403][ T5456] page_type: 0xffffffff() [ 77.662839][ T5456] raw: 00fff00000000000 ffffea0001930e01 dead000000000122 dead000000000400 [ 77.671831][ T5456] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 77.680605][ T5456] head: 00fff0000000816c ffffea0001c85748 ffff88807af4a030 ffff888068279b50 [ 77.689345][ T5456] head: 0000000000000000 ffff888018ff0380 00000009ffffffff ffff88807adee000 [ 77.698328][ T5456] page dumped because: bad pte [ 77.703146][ T5456] page_owner tracks the page as allocated [ 77.708878][ T5456] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5457, tgid 5456 (syz-executor.0), ts 77503381347, free_ts 14582469419 [ 77.732089][ T5456] post_alloc_hook+0x1e6/0x210 [ 77.736879][ T5456] get_page_from_freelist+0x31ec/0x3370 [ 77.742602][ T5456] __alloc_pages+0x255/0x670 [ 77.747307][ T5456] folio_alloc+0x1e/0x60 [ 77.751864][ T5456] filemap_alloc_folio+0xde/0x500 [ 77.756914][ T5456] page_cache_ra_order+0x423/0xcc0 [ 77.762091][ T5456] do_sync_mmap_readahead+0x444/0x850 [ 77.767527][ T5456] filemap_fault+0x7d3/0x1710 [ 77.772313][ T5456] __xfs_filemap_fault+0x286/0x960 [ 77.777450][ T5456] __do_fault+0x133/0x4e0 [ 77.781846][ T5456] handle_mm_fault+0x48d2/0x6200 [ 77.786807][ T5456] __get_user_pages+0x6bd/0x15e0 [ 77.791847][ T5456] get_dump_page+0x146/0x2b0 [ 77.796467][ T5456] dump_user_range+0x126/0x910 [ 77.801412][ T5456] elf_core_dump+0x3b75/0x4490 [ 77.806198][ T5456] do_coredump+0x1b73/0x2ab0 [ 77.810947][ T5456] page last free stack trace: [ 77.815623][ T5456] free_unref_page_prepare+0x8c3/0x9f0 [ 77.821320][ T5456] free_unref_page+0x37/0x3f0 [ 77.826020][ T5456] free_contig_range+0x9e/0x150 [ 77.831113][ T5456] destroy_args+0x95/0x7c0 [ 77.835557][ T5456] debug_vm_pgtable+0x4ac/0x540 [ 77.840467][ T5456] do_one_initcall+0x23d/0x7d0 [ 77.845261][ T5456] do_initcall_level+0x157/0x210 [ 77.850450][ T5456] do_initcalls+0x3f/0x80 [ 77.854802][ T5456] kernel_init_freeable+0x440/0x5d0 [ 77.860043][ T5456] kernel_init+0x1d/0x2a0 [ 77.864540][ T5456] ret_from_fork+0x48/0x80 [ 77.869264][ T5456] ret_from_fork_asm+0x11/0x20 [ 77.874211][ T5456] addr:0000000020006000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888068279b50 index:5 [ 77.885290][ T5456] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio [ 77.894767][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0 [ 77.905380][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 77.915445][ T5456] Call Trace: [ 77.918730][ T5456] [ 77.921654][ T5456] dump_stack_lvl+0x1e7/0x2d0 [ 77.926437][ T5456] ? nf_tcp_handle_invalid+0x650/0x650 [ 77.931901][ T5456] ? panic+0x770/0x770 [ 77.936114][ T5456] ? dump_page+0x9c2/0x1090 [ 77.940615][ T5456] ? xfs_dio_write_end_io+0x6f0/0x6f0 [ 77.945983][ T5456] ? xfs_file_write_iter+0x620/0x620 [ 77.951256][ T5456] print_bad_pte+0x581/0x5c0 [ 77.955842][ T5456] unmap_page_range+0x1a76/0x3300 [ 77.960872][ T5456] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 77.967365][ T5456] ? __might_sleep+0xc0/0xc0 [ 77.971949][ T5456] ? uprobe_munmap+0x183/0x410 [ 77.976814][ T5456] ? unmap_single_vma+0x1b9/0x2a0 [ 77.982112][ T5456] unmap_vmas+0x209/0x3a0 [ 77.986454][ T5456] ? unmap_page_range+0x3300/0x3300 [ 77.991668][ T5456] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 77.997122][ T5456] exit_mmap+0x297/0xc50 [ 78.001448][ T5456] ? vm_brk+0x30/0x30 [ 78.005423][ T5456] ? __asan_memset+0x23/0x40 [ 78.010013][ T5456] ? uprobe_clear_state+0x275/0x290 [ 78.015205][ T5456] ? mm_update_next_owner+0x4a3/0x520 [ 78.020746][ T5456] __mmput+0x115/0x3c0 [ 78.024806][ T5456] exit_mm+0x21f/0x300 [ 78.028957][ T5456] ? coredump_task_exit+0x460/0x460 [ 78.034148][ T5456] ? taskstats_exit+0x39d/0x920 [ 78.038989][ T5456] ? tty_audit_exit+0x154/0x1f0 [ 78.043831][ T5456] do_exit+0x612/0x2290 [ 78.047991][ T5456] ? lock_release+0xbf/0x9d0 [ 78.052577][ T5456] ? put_task_struct+0xc0/0xc0 [ 78.057523][ T5456] ? plist_del+0x3f1/0x410 [ 78.062199][ T5456] ? __lock_acquire+0x7f70/0x7f70 [ 78.067223][ T5456] ? print_irqtrace_events+0x220/0x220 [ 78.072675][ T5456] ? _raw_spin_lock_irq+0xdf/0x120 [ 78.077935][ T5456] do_group_exit+0x206/0x2c0 [ 78.082512][ T5456] get_signal+0x175d/0x1840 [ 78.087097][ T5456] ? ktime_get+0x83/0x270 [ 78.091412][ T5456] ? ptrace_notify+0x380/0x380 [ 78.096161][ T5456] ? do_futex+0x331/0x530 [ 78.100486][ T5456] arch_do_signal_or_restart+0x96/0x860 [ 78.106140][ T5456] ? get_sigframe_size+0x20/0x20 [ 78.111133][ T5456] ? ktime_get+0x246/0x270 [ 78.115576][ T5456] ? rcu_is_watching+0x15/0xb0 [ 78.120425][ T5456] exit_to_user_mode_loop+0x6a/0x100 [ 78.125791][ T5456] exit_to_user_mode_prepare+0xb1/0x140 [ 78.131327][ T5456] syscall_exit_to_user_mode+0x64/0x280 [ 78.136870][ T5456] do_syscall_64+0x4d/0xc0 [ 78.141277][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.147167][ T5456] RIP: 0033:0x7f49da47cae9 [ 78.151660][ T5456] Code: Unable to access opcode bytes at 0x7f49da47cabf. [ 78.158683][ T5456] RSP: 002b:00007ffe94b1ac68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.167091][ T5456] RAX: fffffffffffffdfc RBX: 0000000000012e89 RCX: 00007f49da47cae9 [ 78.175145][ T5456] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49da59bf8c [ 78.183197][ T5456] RBP: 0000000000000032 R08: 00007f49da59bf8c R09: 00007f49da59bf8c [ 78.191159][ T5456] R10: 00007ffe94b1ada0 R11: 0000000000000246 R12: 00007f49da59bf8c [ 78.199210][ T5456] R13: 0000000000012ebb R14: 00007ffe94b1adc0 R15: 00007ffe94b1ada0 [ 78.207262][ T5456] [ 78.234244][ T5456] BUG: Bad page map in process syz-executor.0 pte:fffff9b3c5120 pmd:1ef3d067 [ 78.243430][ T5456] page:ffffea0001930e80 refcount:9 mapcount:-1 mapping:ffff888068279b50 index:0x2 pfn:0x64c3a [ 78.254224][ T5456] head:ffffea0001930e00 order:2 entire_mapcount:0 nr_pages_mapped:8388606 pincount:0 [ 78.264388][ T5456] memcg:ffff88807adee000 [ 78.268653][ T5456] aops:xfs_address_space_operations ino:244a dentry name:"bus" [ 78.277886][ T5456] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff) [ 78.289508][ T5456] page_type: 0xffffffff() [ 78.294505][ T5456] raw: 00fff00000000000 ffffea0001930e01 ffffea0001930e90 ffffea0001930e90 [ 78.303885][ T5456] raw: 0000000000000001 0000000000000000 00000000fffffffe 0000000000000000 [ 78.313305][ T5456] head: 00fff0000000816c ffffea0001c85748 ffff88807af4a030 ffff888068279b50 [ 78.322375][ T5456] head: 0000000000000000 ffff888018ff0380 00000009ffffffff ffff88807adee000 [ 78.331226][ T5456] page dumped because: bad pte [ 78.336142][ T5456] page_owner tracks the page as allocated [ 78.342061][ T5456] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5457, tgid 5456 (syz-executor.0), ts 77503381347, free_ts 14582461936 [ 78.368263][ T5456] post_alloc_hook+0x1e6/0x210 [ 78.373095][ T5456] get_page_from_freelist+0x31ec/0x3370 [ 78.378784][ T5456] __alloc_pages+0x255/0x670 [ 78.383455][ T5456] folio_alloc+0x1e/0x60 [ 78.387745][ T5456] filemap_alloc_folio+0xde/0x500 [ 78.393023][ T5456] page_cache_ra_order+0x423/0xcc0 [ 78.398161][ T5456] do_sync_mmap_readahead+0x444/0x850 [ 78.403643][ T5456] filemap_fault+0x7d3/0x1710 [ 78.408360][ T5456] __xfs_filemap_fault+0x286/0x960 [ 78.413798][ T5456] __do_fault+0x133/0x4e0 [ 78.418150][ T5456] handle_mm_fault+0x48d2/0x6200 [ 78.423215][ T5456] __get_user_pages+0x6bd/0x15e0 [ 78.428189][ T5456] get_dump_page+0x146/0x2b0 [ 78.432864][ T5456] dump_user_range+0x126/0x910 [ 78.437830][ T5456] elf_core_dump+0x3b75/0x4490 [ 78.442856][ T5456] do_coredump+0x1b73/0x2ab0 [ 78.447474][ T5456] page last free stack trace: [ 78.452241][ T5456] free_unref_page_prepare+0x8c3/0x9f0 [ 78.457904][ T5456] free_unref_page+0x37/0x3f0 [ 78.462669][ T5456] free_contig_range+0x9e/0x150 [ 78.467537][ T5456] destroy_args+0x95/0x7c0 [ 78.472312][ T5456] debug_vm_pgtable+0x4ac/0x540 [ 78.477285][ T5456] do_one_initcall+0x23d/0x7d0 [ 78.482194][ T5456] do_initcall_level+0x157/0x210 [ 78.487156][ T5456] do_initcalls+0x3f/0x80 [ 78.491558][ T5456] kernel_init_freeable+0x440/0x5d0 [ 78.496813][ T5456] kernel_init+0x1d/0x2a0 [ 78.501304][ T5456] ret_from_fork+0x48/0x80 [ 78.505744][ T5456] ret_from_fork_asm+0x11/0x20 [ 78.510658][ T5456] addr:0000000020007000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888068279b50 index:6 [ 78.521574][ T5456] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio [ 78.530929][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0 [ 78.542919][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 78.552976][ T5456] Call Trace: [ 78.556248][ T5456] [ 78.559166][ T5456] dump_stack_lvl+0x1e7/0x2d0 [ 78.563849][ T5456] ? nf_tcp_handle_invalid+0x650/0x650 [ 78.569392][ T5456] ? panic+0x770/0x770 [ 78.573455][ T5456] ? dump_page+0x9c2/0x1090 [ 78.578050][ T5456] ? xfs_dio_write_end_io+0x6f0/0x6f0 [ 78.583415][ T5456] ? xfs_file_write_iter+0x620/0x620 [ 78.588688][ T5456] print_bad_pte+0x581/0x5c0 [ 78.593452][ T5456] unmap_page_range+0x1a76/0x3300 [ 78.598493][ T5456] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 78.605159][ T5456] ? __might_sleep+0xc0/0xc0 [ 78.610270][ T5456] ? uprobe_munmap+0x183/0x410 [ 78.615041][ T5456] ? unmap_single_vma+0x1b9/0x2a0 [ 78.620148][ T5456] unmap_vmas+0x209/0x3a0 [ 78.624578][ T5456] ? unmap_page_range+0x3300/0x3300 [ 78.629769][ T5456] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 78.635315][ T5456] exit_mmap+0x297/0xc50 [ 78.639575][ T5456] ? vm_brk+0x30/0x30 [ 78.643908][ T5456] ? __asan_memset+0x23/0x40 [ 78.648788][ T5456] ? uprobe_clear_state+0x275/0x290 [ 78.654842][ T5456] ? mm_update_next_owner+0x4a3/0x520 [ 78.660295][ T5456] __mmput+0x115/0x3c0 [ 78.664440][ T5456] exit_mm+0x21f/0x300 [ 78.668500][ T5456] ? coredump_task_exit+0x460/0x460 [ 78.673691][ T5456] ? taskstats_exit+0x39d/0x920 [ 78.678532][ T5456] ? tty_audit_exit+0x154/0x1f0 [ 78.683377][ T5456] do_exit+0x612/0x2290 [ 78.687525][ T5456] ? lock_release+0xbf/0x9d0 [ 78.692244][ T5456] ? put_task_struct+0xc0/0xc0 [ 78.697118][ T5456] ? plist_del+0x3f1/0x410 [ 78.701611][ T5456] ? __lock_acquire+0x7f70/0x7f70 [ 78.706713][ T5456] ? print_irqtrace_events+0x220/0x220 [ 78.712165][ T5456] ? _raw_spin_lock_irq+0xdf/0x120 [ 78.717358][ T5456] do_group_exit+0x206/0x2c0 [ 78.722021][ T5456] get_signal+0x175d/0x1840 [ 78.726609][ T5456] ? ktime_get+0x83/0x270 [ 78.730925][ T5456] ? ptrace_notify+0x380/0x380 [ 78.735677][ T5456] ? do_futex+0x331/0x530 [ 78.739997][ T5456] arch_do_signal_or_restart+0x96/0x860 [ 78.745536][ T5456] ? get_sigframe_size+0x20/0x20 [ 78.750549][ T5456] ? ktime_get+0x246/0x270 [ 78.754968][ T5456] ? rcu_is_watching+0x15/0xb0 [ 78.759818][ T5456] exit_to_user_mode_loop+0x6a/0x100 [ 78.765269][ T5456] exit_to_user_mode_prepare+0xb1/0x140 [ 78.770822][ T5456] syscall_exit_to_user_mode+0x64/0x280 [ 78.776369][ T5456] do_syscall_64+0x4d/0xc0 [ 78.780775][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 78.786658][ T5456] RIP: 0033:0x7f49da47cae9 [ 78.791062][ T5456] Code: Unable to access opcode bytes at 0x7f49da47cabf. [ 78.798065][ T5456] RSP: 002b:00007ffe94b1ac68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 78.806555][ T5456] RAX: fffffffffffffdfc RBX: 0000000000012e89 RCX: 00007f49da47cae9 [ 78.814689][ T5456] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49da59bf8c [ 78.822650][ T5456] RBP: 0000000000000032 R08: 00007f49da59bf8c R09: 00007f49da59bf8c [ 78.831062][ T5456] R10: 00007ffe94b1ada0 R11: 0000000000000246 R12: 00007f49da59bf8c [ 78.839120][ T5456] R13: 0000000000012ebb R14: 00007ffe94b1adc0 R15: 00007ffe94b1ada0 [ 78.847174][ T5456] [ 78.870540][ T5456] BUG: Bad page map in process syz-executor.0 pte:fffff9b3c6120 pmd:1ef3d067 [ 78.879433][ T5456] page:ffffea0001930e40 refcount:9 mapcount:-1 mapping:ffff888068279b50 index:0x1 pfn:0x64c39 [ 78.889899][ T5456] head:ffffea0001930e00 order:2 entire_mapcount:0 nr_pages_mapped:8388605 pincount:0 [ 78.899510][ T5456] memcg:ffff88807adee000 [ 78.903855][ T5456] aops:xfs_address_space_operations ino:244a dentry name:"bus" [ 78.911479][ T5456] flags: 0xfff0000000816c(referenced|uptodate|lru|active|private|head|node=0|zone=1|lastcpupid=0x7ff) [ 78.922475][ T5456] page_type: 0xffffffff() [ 78.926856][ T5456] raw: 00fff00000000202 ffffea0001930e01 dead000000000122 fffffffdffffffff [ 78.935550][ T5456] raw: 0000000400000000 0000000000000000 00000000fffffffe 0000000000000000 [ 78.944789][ T5456] head: 00fff0000000816c ffffea0001c85748 ffff88807af4a030 ffff888068279b50 [ 78.954119][ T5456] head: 0000000000000000 ffff888018ff0380 00000009ffffffff ffff88807adee000 [ 78.963842][ T5456] page dumped because: bad pte [ 78.968717][ T5456] page_owner tracks the page as allocated [ 78.975094][ T5456] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5457, tgid 5456 (syz-executor.0), ts 77503381347, free_ts 14582455909 [ 78.998106][ T5456] post_alloc_hook+0x1e6/0x210 [ 79.003047][ T5456] get_page_from_freelist+0x31ec/0x3370 [ 79.008619][ T5456] __alloc_pages+0x255/0x670 [ 79.013295][ T5456] folio_alloc+0x1e/0x60 [ 79.017560][ T5456] filemap_alloc_folio+0xde/0x500 [ 79.022653][ T5456] page_cache_ra_order+0x423/0xcc0 [ 79.027784][ T5456] do_sync_mmap_readahead+0x444/0x850 [ 79.033537][ T5456] filemap_fault+0x7d3/0x1710 [ 79.038233][ T5456] __xfs_filemap_fault+0x286/0x960 [ 79.043425][ T5456] __do_fault+0x133/0x4e0 [ 79.047774][ T5456] handle_mm_fault+0x48d2/0x6200 [ 79.053136][ T5456] __get_user_pages+0x6bd/0x15e0 [ 79.058114][ T5456] get_dump_page+0x146/0x2b0 [ 79.062783][ T5456] dump_user_range+0x126/0x910 [ 79.067564][ T5456] elf_core_dump+0x3b75/0x4490 [ 79.072521][ T5456] do_coredump+0x1b73/0x2ab0 [ 79.077132][ T5456] page last free stack trace: [ 79.081873][ T5456] free_unref_page_prepare+0x8c3/0x9f0 [ 79.087404][ T5456] free_unref_page+0x37/0x3f0 [ 79.092203][ T5456] free_contig_range+0x9e/0x150 [ 79.097128][ T5456] destroy_args+0x95/0x7c0 [ 79.101603][ T5456] debug_vm_pgtable+0x4ac/0x540 [ 79.106494][ T5456] do_one_initcall+0x23d/0x7d0 [ 79.111608][ T5456] do_initcall_level+0x157/0x210 [ 79.116593][ T5456] do_initcalls+0x3f/0x80 [ 79.121207][ T5456] kernel_init_freeable+0x440/0x5d0 [ 79.126426][ T5456] kernel_init+0x1d/0x2a0 [ 79.130923][ T5456] ret_from_fork+0x48/0x80 [ 79.135445][ T5456] ret_from_fork_asm+0x11/0x20 [ 79.140536][ T5456] addr:0000000020008000 vm_flags:080000d0 anon_vma:0000000000000000 mapping:ffff888068279b50 index:7 [ 79.151451][ T5456] file:bus fault:xfs_filemap_fault mmap:xfs_file_mmap read_folio:xfs_vm_read_folio [ 79.160908][ T5456] CPU: 0 PID: 5456 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0 [ 79.173243][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 79.183321][ T5456] Call Trace: [ 79.186702][ T5456] [ 79.189742][ T5456] dump_stack_lvl+0x1e7/0x2d0 [ 79.194637][ T5456] ? nf_tcp_handle_invalid+0x650/0x650 [ 79.200182][ T5456] ? panic+0x770/0x770 [ 79.204279][ T5456] ? dump_page+0x9c2/0x1090 [ 79.208894][ T5456] ? xfs_dio_write_end_io+0x6f0/0x6f0 [ 79.214380][ T5456] ? xfs_file_write_iter+0x620/0x620 [ 79.219686][ T5456] print_bad_pte+0x581/0x5c0 [ 79.224328][ T5456] unmap_page_range+0x1a76/0x3300 [ 79.229370][ T5456] ? mmu_notifier_invalidate_range_start+0xf0/0xf0 [ 79.235959][ T5456] ? __might_sleep+0xc0/0xc0 [ 79.240552][ T5456] ? uprobe_munmap+0x183/0x410 [ 79.245305][ T5456] ? unmap_single_vma+0x1b9/0x2a0 [ 79.250844][ T5456] unmap_vmas+0x209/0x3a0 [ 79.255173][ T5456] ? unmap_page_range+0x3300/0x3300 [ 79.260373][ T5456] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 79.265823][ T5456] exit_mmap+0x297/0xc50 [ 79.270056][ T5456] ? vm_brk+0x30/0x30 [ 79.274115][ T5456] ? __asan_memset+0x23/0x40 [ 79.278960][ T5456] ? uprobe_clear_state+0x275/0x290 [ 79.284145][ T5456] ? mm_update_next_owner+0x4a3/0x520 [ 79.289518][ T5456] __mmput+0x115/0x3c0 [ 79.293920][ T5456] exit_mm+0x21f/0x300 [ 79.298070][ T5456] ? coredump_task_exit+0x460/0x460 [ 79.303272][ T5456] ? taskstats_exit+0x39d/0x920 [ 79.308289][ T5456] ? tty_audit_exit+0x154/0x1f0 [ 79.313498][ T5456] do_exit+0x612/0x2290 [ 79.317654][ T5456] ? lock_release+0xbf/0x9d0 [ 79.322496][ T5456] ? put_task_struct+0xc0/0xc0 [ 79.327423][ T5456] ? plist_del+0x3f1/0x410 [ 79.331916][ T5456] ? __lock_acquire+0x7f70/0x7f70 [ 79.336928][ T5456] ? print_irqtrace_events+0x220/0x220 [ 79.342373][ T5456] ? _raw_spin_lock_irq+0xdf/0x120 [ 79.347471][ T5456] do_group_exit+0x206/0x2c0 [ 79.352050][ T5456] get_signal+0x175d/0x1840 [ 79.356542][ T5456] ? ktime_get+0x83/0x270 [ 79.360891][ T5456] ? ptrace_notify+0x380/0x380 [ 79.365644][ T5456] ? do_futex+0x331/0x530 [ 79.370159][ T5456] arch_do_signal_or_restart+0x96/0x860 [ 79.375799][ T5456] ? get_sigframe_size+0x20/0x20 [ 79.380816][ T5456] ? ktime_get+0x246/0x270 [ 79.385318][ T5456] ? rcu_is_watching+0x15/0xb0 [ 79.390079][ T5456] exit_to_user_mode_loop+0x6a/0x100 [ 79.395442][ T5456] exit_to_user_mode_prepare+0xb1/0x140 [ 79.400974][ T5456] syscall_exit_to_user_mode+0x64/0x280 [ 79.406513][ T5456] do_syscall_64+0x4d/0xc0 [ 79.411007][ T5456] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 79.416975][ T5456] RIP: 0033:0x7f49da47cae9 [ 79.421724][ T5456] Code: Unable to access opcode bytes at 0x7f49da47cabf. [ 79.428822][ T5456] RSP: 002b:00007ffe94b1ac68 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.437398][ T5456] RAX: fffffffffffffdfc RBX: 0000000000012e89 RCX: 00007f49da47cae9 [ 79.445355][ T5456] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f49da59bf8c [ 79.453401][ T5456] RBP: 0000000000000032 R08: 00007f49da59bf8c R09: 00007f49da59bf8c [ 79.461383][ T5456] R10: 00007ffe94b1ada0 R11: 0000000000000246 R12: 00007f49da59bf8c [ 79.469427][ T5456] R13: 0000000000012ebb R14: 00007ffe94b1adc0 R15: 00007ffe94b1ada0 [ 79.477391][ T5456] [ 79.498983][ T5385] page:ffffea0001930f00 refcount:7 mapcount:0 mapping:ffff888068279b50 index:0x4 pfn:0x64c3c [ 79.509269][ T5385] head:ffffea0001930f00 order:2 entire_mapcount:0 nr_pages_mapped:2 pincount:0 [ 79.518309][ T5385] memcg:ffff88807adee000 [ 79.522623][ T5385] aops:xfs_address_space_operations ino:244a [ 79.528621][ T5385] flags: 0xfff00000000169(locked|uptodate|lru|active|head|node=0|zone=1|lastcpupid=0x7ff) [ 79.538530][ T5385] page_type: 0xffffffff() [ 79.543046][ T5385] raw: 00fff00000000169 ffffea0001930e08 ffff88807af4a030 ffff888068279b50 [ 79.551651][ T5385] raw: 0000000000000004 0000000000000000 00000007ffffffff ffff88807adee000 [ 79.560342][ T5385] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 79.567633][ T5385] page_owner tracks the page as allocated [ 79.573356][ T5385] page last allocated via order 2, migratetype Movable, gfp_mask 0x152c4a(GFP_NOFS|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 5457, tgid 5456 (syz-executor.0), ts 77503434225, free_ts 14582475959 [ 79.596552][ T5385] post_alloc_hook+0x1e6/0x210 [ 79.601429][ T5385] get_page_from_freelist+0x31ec/0x3370 [ 79.607253][ T5385] __alloc_pages+0x255/0x670 [ 79.612030][ T5385] folio_alloc+0x1e/0x60 [ 79.616300][ T5385] filemap_alloc_folio+0xde/0x500 [ 79.621336][ T5385] page_cache_ra_order+0x423/0xcc0 [ 79.626461][ T5385] do_sync_mmap_readahead+0x444/0x850 [ 79.631939][ T5385] filemap_fault+0x7d3/0x1710 [ 79.636717][ T5385] __xfs_filemap_fault+0x286/0x960 [ 79.641844][ T5385] __do_fault+0x133/0x4e0 [ 79.646198][ T5385] handle_mm_fault+0x48d2/0x6200 [ 79.651162][ T5385] __get_user_pages+0x6bd/0x15e0 [ 79.656122][ T5385] get_dump_page+0x146/0x2b0 [ 79.660772][ T5385] dump_user_range+0x126/0x910 [ 79.665556][ T5385] elf_core_dump+0x3b75/0x4490 [ 79.670339][ T5385] do_coredump+0x1b73/0x2ab0 [ 79.674952][ T5385] page last free stack trace: [ 79.679629][ T5385] free_unref_page_prepare+0x8c3/0x9f0 [ 79.686265][ T5385] free_unref_page+0x37/0x3f0 [ 79.690964][ T5385] free_contig_range+0x9e/0x150 [ 79.695827][ T5385] destroy_args+0x95/0x7c0 [ 79.700259][ T5385] debug_vm_pgtable+0x4ac/0x540 [ 79.705125][ T5385] do_one_initcall+0x23d/0x7d0 [ 79.709991][ T5385] do_initcall_level+0x157/0x210 [ 79.714963][ T5385] do_initcalls+0x3f/0x80 [ 79.719389][ T5385] kernel_init_freeable+0x440/0x5d0 [ 79.724601][ T5385] kernel_init+0x1d/0x2a0 [ 79.729040][ T5385] ret_from_fork+0x48/0x80 [ 79.733561][ T5385] ret_from_fork_asm+0x11/0x20 [ 79.738520][ T5385] ------------[ cut here ]------------ [ 79.743980][ T5385] kernel BUG at mm/filemap.c:158! [ 79.749019][ T5385] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 79.755102][ T5385] CPU: 1 PID: 5385 Comm: syz-executor.0 Tainted: G B 6.5.0-syzkaller-11704-g3f86ed6ec0b3-dirty #0 [ 79.767217][ T5385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 79.777300][ T5385] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 79.783660][ T5385] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 62 a4 10 00 [ 79.803543][ T5385] RSP: 0018:ffffc90004daf778 EFLAGS: 00010046 [ 79.809632][ T5385] RAX: c257af676f409e00 RBX: 0000000000000000 RCX: ffffffff816d1d70 [ 79.817711][ T5385] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440 [ 79.825699][ T5385] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735 [ 79.833689][ T5385] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc90004daf9c0 [ 79.841685][ T5385] R13: ffffea0001930f00 R14: 1ffffd40003261e0 R15: ffffea0001930f08 [ 79.849871][ T5385] FS: 0000555555c96480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 79.858818][ T5385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.865430][ T5385] CR2: 0000555555c9f938 CR3: 0000000075283000 CR4: 00000000003506e0 [ 79.873508][ T5385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.881496][ T5385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.889571][ T5385] Call Trace: [ 79.892954][ T5385] [ 79.895913][ T5385] ? __die_body+0x8b/0xe0 [ 79.900363][ T5385] ? die+0xa1/0xd0 [ 79.904281][ T5385] ? do_trap+0x153/0x380 [ 79.908625][ T5385] ? __wake_up_klogd+0xcc/0x100 [ 79.913503][ T5385] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.919242][ T5385] ? do_error_trap+0x1dc/0x2c0 [ 79.924038][ T5385] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.929762][ T5385] ? __lock_acquire+0x7f70/0x7f70 [ 79.934823][ T5385] ? do_int3+0x50/0x50 [ 79.938922][ T5385] ? report_bug+0x3cd/0x500 [ 79.943720][ T5385] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.949379][ T5385] ? handle_invalid_op+0x34/0x40 [ 79.954689][ T5385] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.960340][ T5385] ? exc_invalid_op+0x33/0x50 [ 79.965037][ T5385] ? asm_exc_invalid_op+0x1a/0x20 [ 79.970085][ T5385] ? lock_release+0xb0/0x9d0 [ 79.974850][ T5385] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.980589][ T5385] ? filemap_unaccount_folio+0x6c8/0xc20 [ 79.986340][ T5385] delete_from_page_cache_batch+0x173/0xc90 [ 79.992350][ T5385] ? filemap_remove_folio+0x2e0/0x2e0 [ 79.997746][ T5385] ? __kmem_cache_free+0x25f/0x3b0 [ 80.002979][ T5385] ? truncate_cleanup_folio+0x1e0/0x5c0 [ 80.008546][ T5385] ? ifs_free+0x710/0x710 [ 80.013020][ T5385] ? truncate_cleanup_folio+0x2cd/0x5c0 [ 80.018587][ T5385] truncate_inode_pages_range+0x346/0x11a0 [ 80.024598][ T5385] ? lock_acquire+0xe3/0x520 [ 80.029209][ T5385] ? __lock_acquire+0x7f70/0x7f70 [ 80.034342][ T5385] ? mapping_evict_folio+0x530/0x530 [ 80.039837][ T5385] ? __rwlock_init+0x150/0x150 [ 80.044629][ T5385] evict+0x2b7/0x620 [ 80.048547][ T5385] evict_inodes+0x5f8/0x690 [ 80.053083][ T5385] ? clear_inode+0x150/0x150 [ 80.057697][ T5385] ? xfs_fs_sync_fs+0x1c0/0x360 [ 80.062571][ T5385] generic_shutdown_super+0x9d/0x2c0 [ 80.067908][ T5385] kill_block_super+0x41/0x70 [ 80.072611][ T5385] xfs_kill_sb+0x15/0x50 [ 80.076972][ T5385] deactivate_locked_super+0xa4/0x110 [ 80.082371][ T5385] cleanup_mnt+0x426/0x4c0 [ 80.086829][ T5385] task_work_run+0x24a/0x300 [ 80.091443][ T5385] ? task_work_cancel+0x2b0/0x2b0 [ 80.096497][ T5385] ? rcu_is_watching+0x15/0xb0 [ 80.101285][ T5385] exit_to_user_mode_loop+0xd9/0x100 [ 80.106852][ T5385] exit_to_user_mode_prepare+0xb1/0x140 [ 80.113222][ T5385] syscall_exit_to_user_mode+0x64/0x280 [ 80.118799][ T5385] do_syscall_64+0x4d/0xc0 [ 80.123294][ T5385] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 80.129228][ T5385] RIP: 0033:0x7f49da47de17 [ 80.133658][ T5385] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 80.153800][ T5385] RSP: 002b:00007ffe94b19da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 80.162412][ T5385] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f49da47de17 [ 80.172572][ T5385] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe94b19e60 [ 80.180560][ T5385] RBP: 00007ffe94b19e60 R08: 0000000000000000 R09: 0000000000000000 [ 80.188547][ T5385] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe94b1af20 [ 80.196547][ T5385] R13: 00007f49da4c73b9 R14: 0000000000012d31 R15: 0000000000000007 [ 80.204546][ T5385] [ 80.207580][ T5385] Modules linked in: [ 80.211491][ T5385] ---[ end trace 0000000000000000 ]--- [ 80.217383][ T5385] RIP: 0010:filemap_unaccount_folio+0x6c8/0xc20 [ 80.223911][ T5385] Code: 48 25 ff 0f 00 00 0f 84 ec 00 00 00 e8 c1 26 cf ff e9 b3 f9 ff ff e8 b7 26 cf ff 4c 89 ef 48 c7 c6 e0 0a 13 8b e8 78 a4 10 00 <0f> 0b e8 a1 26 cf ff 4c 89 ef 48 c7 c6 60 10 13 8b e8 62 a4 10 00 [ 80.244161][ T5385] RSP: 0018:ffffc90004daf778 EFLAGS: 00010046 [ 80.250249][ T5385] RAX: c257af676f409e00 RBX: 0000000000000000 RCX: ffffffff816d1d70 [ 80.258501][ T5385] RDX: 0000000000000000 RSI: ffffffff8b597480 RDI: ffffffff8b597440 [ 80.266492][ T5385] RBP: 0000000000000040 R08: ffffffff8e9a39af R09: 1ffffffff1d34735 [ 80.274482][ T5385] R10: dffffc0000000000 R11: fffffbfff1d34736 R12: ffffc90004daf9c0 [ 80.282734][ T5385] R13: ffffea0001930f00 R14: 1ffffd40003261e0 R15: ffffea0001930f08 [ 80.290811][ T5385] FS: 0000555555c96480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 80.299844][ T5385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.306452][ T5385] CR2: 0000555555c9f938 CR3: 0000000075283000 CR4: 00000000003506e0 [ 80.314444][ T5385] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.322436][ T5385] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.330521][ T5385] Kernel panic - not syncing: Fatal exception [ 80.336865][ T5385] Kernel Offset: disabled [ 80.341178][ T5385] Rebooting in 86400 seconds..